QUESTION: Efficacy of Running Portable Apps on Internal Hard Drive ?

Howdy, Bo.

I appreciate much your time and effort to be well detailed and clear!

To effectively understand and digest your recommendations...
I annotated your notes for enhanced visual acuity (absorbsion)! LOL!


ab1kenobee said:

Now that I have deposited PORTABLE APPS in customized disk locationed FOLDERS... can I SANDBOXIE each one of these folders in a customized disk location as well... outside of C:\ Win 10?

Bo Elam said:

• You sure can.
• You can use Sandboxie to sandbox files and programs anywhere in C or outside C.

Examples of how to sandbox files:
With Sandboxies free version,

• you can right click files and
• select run sandbox,
• then you choose the sandbox where you want to run the file

OR

• you can open a sandboxed version of Windows explorer/File explorer and
• navigate to any file or program anywhere in the computer that you want to run sandboxed,
• click the file
• file runs sandboxed.

If I were using Sandboxies free version,

• I would use the sandboxed Windows explorer for
• navigating to my USB folders and download folder,
• that way anything you click or executes, runs under Sandboxies supervision.

So, in your case, you can:

• Use the sandboxed Explorer for navigating to DATA (F:\) and MEDIA (G:\)

OR

• Right click files on those drives to run them sandboxed.

With the registered version,
sandboxing files and programs become automatic by using features that get unlocked when you register your version of SBIE (Forced programs and Forced folders).
This features work like this, for example:

• If you set your PDF Reader as a Forced program, any PDF anywhere in the computer runs sandboxed automatically whenever a PDF file is executed.
• The other feature, Forced folders can be used to set folders like your Downloads folders, USB drives, CD/DVD drives or any drive as Forced folder.
• In a Forced folder, any file that's executed, runs sandboxed automatically.
• The perfect way for using Sandboxie is to combine using both features and the sandboxed File explorer.

About using SBIE in W10, it works great:

• I haven't had any issue using SBIE in W10.
• I use it the same way I used it in XP and W7.
• Its always best to use latest beta in W10 than the latest stable, [because it] is more up to date and in my opinion, more stable.

ab1kenobee said:

Is there any meaningful advantage to SANDBOXING (SBIE) portables vs. standard apps?

Bo Elam said:

I sandbox portable and non portable programs for same reasons.


I'll use Libre Office for this example.

• I use the portable version to make it easier to get rid from my system of the 1,000 files this program creates.
• If I want to get rid of Libre and its files, I just delete Libres folder.
• I sandbox Libre Office to avoid getting infected:

• Example: If I download an office file that someone sent me that has an exploit that can take advantage of a vulnerability in Libre, the infection is contained... it won't touch my system and is easy to get rid of it...
• I just delete contents of the sandbox and it's like nothing happened.
• If you are using an AV and the AV doesn't have a signature for the infection, Sandboxie protects you.
• Sandboxie doesn't require signatures to protect the system or the registry.

pyramid10 said:

I generally run the paf.exe file from my software download folder. The process allows me to specify the drive and folder to which the program will deposit itself.

I normally create a new folder with the version number to differentiatefrom the previous version. This way, should the new version have hiccups, I still have the previous version to run, and I delete the hiccuped version. The downside was thepersonal settingshad to bere-configured.

Bo Elam said:

I can test new versions of Libre or any program I have installed in my system by

• running the installer in a sandbox without affecting my real installation but
• This is a good idea what you do.

Example: I remember the problems Libre had last year. I use the Previous version of Libre, that kept me from experiencing issues.:)

Here is some overview info provided at Sandboxie.com:

Prevent Unwanted Changes
Sandboxie uses isolation technology to separate programs from your underlying operating system preventing unwanted changes from happening to your personal data, programs and applications that rest safely on your hard drive.


Web Browser Protection
Secure your favorite web browser and block malicious software, viruses, ransom-ware and zero day threats by isolating such attacks in the Sandbox; leaving your system protected.


Email Protection
Run your favorite email program in Sandboxie so you never have to worry about suspicious attachments or spear phishing attacks.


Data Protection
Sandboxie prevents internet websites and programs from modifying your personal data (i.e. My Documents), files & folders on your system.


Application Testing
Safely test and try new programs and applications within Sandboxie and prevent unauthorized changes to your underlying system that may occur.

While beginning to research Sandboxie... I found the following review (which I have annotated)... believe could well be of interest and value to TenForums Members:

Interesting use of Sandboxie - with Teamviewer


Post by majokey » Fri Dec 22, 2017 5:58 am
Hi everyone,

Are you a bit scared when you have to give control of your computer to someone?

I needed help establishing IPSEC VPN connection between some offices and ended up with telling the router support "here, you try it if you think it works".

So I started Teamviewer in a sandbox. And the browser in which they were to work in the same sandbox.

That way, they could work in that particular browser instance, but could not click outside the sandbox. Sure, they could *see* outside the sandbox, but not click. Plus, they needed to upload a config file - again, no worries because that too happened inside that sandbox.

That was a year ago, and I have since taught the company owners, both well into their 70s to ALWAYS start Teamviewer in Sandboxie.


And a few weeks ago, one of them got hit by a "support" scammer who installed ransomware on his home computer. You know, black screen that can't be closed, red notice about how many Bitcoins to pay.

Well, I just hit "Terminate all programs" in Sandboxie and it was gone. And yes, he told me to buy Sandboxie for his entire family.

Just thought I would share this. It's maybe an unexpected use case to use it with a remote-control program, but I find it very useful.

Q. Which features are available in the Sandboxie paid version?
https://www.sandboxie.com/FAQ_Licensing

Two features:

1. "Force" programs:
Automatically run programs under Sandboxie even when they are not started directly through Sandboxie. Programs can be "forced" by name or by containing folder.

2. Run programs in more than one sandbox at the same time:
This causes error SBIE1303 in the free version. The paid version also offers Office365 support, Office 2016 support and Office 2013 (Click2Run) Support and will also include any premium features in the future.

I hope this proves of value to other Members.

~ Alan