Sandboxie(英譯”沙盤”)允許你在”沙盤環境”中運行瀏覽器或其他程序。這個”沙盤”,個人感覺就是跟”影子系統”一樣的概念罷了。因此,在沙盤中運行的程序所產生的變化可以隨時刪除。可用來保護瀏覽網頁時真實系統的安全,也可以用來清除上網、運行程序的痕跡,還可以用來測試軟件,測試病毒等用途。即使在沙盤進程中下載的文件,也可以隨著沙盤的清空而刪除。
如果大家對”影子”/”沙盤”這兩個概念還不清楚的話,這裡引用官方的一段話:電腦就像一張紙,程序的運行與改動,就像將字寫在紙上。而Sandboxie就相當於在紙上放了塊玻璃,程序的運行與改動就像寫在了那塊玻璃上,除去玻璃,紙上還是一點改變都沒有的。軟件支持 Windows 7 / Windows 10 32&64位系統。
如果還需要再解釋一下的話,Sandboxie就是相當於在你要運行的程序與系統之間建立一個隔離層,當我們運行程序的時候,就會將程序直接調入該隔層中,此後,程序對系統所做的修改,都會被限制在這個隔離層中,而不會真正地去觸及系統。這樣的話,就算電腦感染了病毒和木馬,也不會對系統造成真正的傷害。
是不是跟影子系統很像?呵呵,王軍恆老師認為其實它們之間還有一個很大的區別,就是影子系統是對整個系統進行保護,而 Sandboxie是對電腦的局部進行保護。Sandboxie一般是設置某個程序在”沙盤”中運行,而不是將整個Windows都置於”影子”模式下。也就是可以很靈活地設置一個或幾個覺得”危險”的程序運行在”沙盤”,而其他一切則正常運行。因此,對普通用戶來說,Sandboxie的局部保護功能可能會更加方便。而且,用戶還可以設置讓Sandboxie像影子系統一樣對整個系統進行保護的哦。
上網無憂,在沙盤中運行瀏覽器
我們打開SandBoxie後,在右下角的圖標中右鍵選擇”運行沙盤→IE瀏覽器”,這時候會自動彈出標題欄中有兩個”[#]”符號的IE瀏覽器,這就說明IE已經處於保護狀態。去掉保護之後,歷史記錄連同IE之間安裝過的流氓插件、下載的文件都會隨之消失。
提醒:Sandboxie本身只能對第一個IE瀏覽器進程進行保護,不過用桌面上 Sandboxie的保護IE的快捷方式來上網,無論打開多少個IE瀏覽器,都在保護狀態下。
測試安裝危險程序
木馬和病毒總是比殺毒軟件搶先一步。所以我們在安裝程序的時候,即時殺毒軟件沒有報毒,也存在一定的風險。但使用Sandboxie後,就會將風險降低為零了。
選要安裝或解壓的不明程序,按鼠標右鍵,選擇”用沙盤運行”(圖3),就會以保護的形式來安裝或解壓該程序。同樣,在程序的安裝窗口中會發現標題欄上有兩個”[#]”符號代表受保護。筆者在安裝一個捆綁木馬的程序時做了保護措施。恢復系統之後,發現在這期間安裝的程序包括木馬都消失了,相當的安全。
保護整個電腦,充當半個”影子系統”
Sandboxie還提供整個電腦的保護,在 Sandboxie中選擇”功能”菜單,然後”選擇運行沙盤→Windows 資源管理器”,就會自動彈出有兩個”[#]”符號的”我的電腦”窗口。之後對整個電腦進行任意操作,包括格式化分區、刪除文件、拷貝文件等都很安全。恢復的方法很簡單。在Sandboxie主界面選擇”配置 →沙盤設置→設置自動清理選項”,將隔離層中的內容清除即可。
另外,從Sandboxie3.40開始,它提供了多用戶管理功能和多種獨立保護方案。
支持語言:英語,阿爾巴尼亞語,阿拉伯語,保加利亞語,中國(簡體和繁體),克羅地亞語,捷克語,丹麥語,荷蘭語,愛沙尼亞語,芬蘭語,法語,德語,希臘語,希伯來語,匈牙利語,印尼語,意大利語,日語,韓語,馬其頓語,波蘭語,葡萄牙語(巴西和葡萄牙),俄語,斯洛伐克語,西班牙語,瑞典語,土耳其語和烏克蘭語。
Sandboxie is a software uses isolation technology to separate programs from your underlying operating system preventing unwanted changes from happening to your personal data, programs and applications that rest safely on your hard drive.
With it, you can secure your favorite web browser and block malicious software, viruses, ransom-ware and zero day threats by isolating such attacks in the Sandbox; leaving your system protected. You can also run your favorite email program in Sandboxie so you never have to worry about suspicious attachments or spear phishing attacks.
It provides data protection as it restricts and blocks internet websites and programs from accessing your personal data (i.e. My Documents), files & folders on your system. With it, you can safely test and try new programs and applications within Sandboxie and prevent unauthorized changes to your underlying system that may occur.
Sandboxie runs on all the latest operating systems, supports all major web browsers and comes with small footprint on the hard drive space with simple installation.
The following languages can be selected during installation: English, Albanian, Arabic, Bulgarian, Chinese (Simplified and Traditional), Croatian, Czech, Danish, Dutch, Estonian, Finnish, French, German, Greek, Hebrew, Hungarian, Indonesian, Italian, Japanese, Korean, Macedonian, Polish, Portuguese (Brasil and Portugal), Russian, Slovak, Spanish, Swedish, Turkish, and Ukrainian.
5.20 更新記錄:
Fixed several Chrome crashes in Win 10.
Fixed auto-recovery dialog failure to popup in Win 10-CU.
Firefox H264 video decoder now works.
Creation of IE embedded application objects are no longer blocked by default (which began in 5.18).
5.18 更新記錄:
Windows Creators Update is now supported.
Firefox multi-process (Electrolysis) is now supported in Win 7 and later.
Fixed problem with clicking Office hyperlinks failing to start forced IE.
TLS error when loading google sites in IE has been fixed.
Fixed crash when starting IE while using Microsoft User Experience Virtualization (UEV).
Added support for Opera Neon.
Fixed template for Roboform.
Fixed Chrome 56 lingering child process.
5.16 更新記錄:
Fixed Windows 10 build 14942 “SBIE2205 Service not implemented: SetWindowLong8”
Fixed Windows 10-64 build 14965 “SBIE1222 Error with security token: (C00000BB / 35)”
Fixed Windows 10-32 build 14971 “SBIE1222 Error with security token: (C0000058 / 62)”
Fixed incompatibility with latest Nvidia drivers & DirectX.
guard64.dll added to templates.ini for Comodo.
In Win 8.1-32, and 10-32, UAC was always checked and grayed in Run Any Program start.exe dialog box.
Added OpenWinClass=SWFlash_PlaceHolderX to fix Flash failure to start on some videos.
Fixed certificate revocation check error (http://forums.sandboxie.com/phpBB3/viewtopic.php?f=11&t=23207&p=122464)
Temporary files are no longer created with copy/paste (http://forums.sandboxie.com/phpBB3/viewtopic.php?f=17&t=22970)
SbieCtrl now gets Sandboxie updates via https.
ActivIdentity (and other manufacturers’) secure smart cards (CAC) are now supported (https://www.hidglobal.com/identity-management).
Fixed BSOD that can occur if your license has expired and you are using MS Office ClickToRun.
Added “Always on Top” option to SbieCtrl View menu. This will keep the SbieCtrl window as the top-most window.
Fixed elevated installer failure introduced in 5.14.
Added “Always on Top” option to SbieCtrl View menu. This will keep the SbieCtrl window as the top-most window.
Fixed elevated installer failure introduced in 5.14.
Version 5.14
Released on 26 September 2016.
Added new Sbie setting BlockNetworkFiles. It is available under Sandboxie Settings -> Restrictions.
When BlockNetworkFiles=y, sandboxed applications are blocked from reading network files or folders. Individual files/folders can be opened for reading/writing using the normal Resource Access settings.
This option is enabled by default for new sandboxes.
Fixed hang when starting MS Office applications.
Eliminated error SBIE2314 Cancelling process xxxx.exe (xxxx / 9)
Proxy Auto Config (PAC) files were not functioning in Win10 Anniversary.
Vivaldi is now supported.
Fixed the Microsoft Account Sign-in Assistant issues (hotmail.com, outlook.com, etc.)
Fixed clipboard copy/paste failure from sandbox to host.
Fixed Actual Window Manager.
|