Which is better Sandboxie free or Returnil personal edition

Discussion in 'sandboxing & virtualization' started by cheater87, Jun 7, 2008.

Thread Status:
Not open for further replies.
  1. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,125
    Location:
    Pennsylvania.
    Which is better Sandboxie free or Returnil personal editiono_O




    This post and some of the following responses were removed from this thread as they were better suited for a thread of their own instead of taking the Question about Sandboxie! thread further off topic....Bubba~
     
    Last edited by a moderator: Jun 8, 2008
  2. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Re: Question about Sandboxie!

    There are horses for different courses and both Returnil and Sandboxie excel in their intended purpose.

    I use both. :D
     
  3. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,125
    Location:
    Pennsylvania.
    Re: Question about Sandboxie!

    How are they differento_O
     
  4. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Re: Question about Sandboxie!

    I believe the main difference in simplest terms is that Sandboxie protects internet-facing apps and Returnil protects the entire drive/system. I use both also, although I'm not sure whether to empty out the sandbox or not seeing as how I reboot and put my system right back where I found it after a Returnil session, lol.
     
  5. Kevin523

    Kevin523 Registered Member

    Joined:
    May 1, 2008
    Posts:
    72
    Re: Question about Sandboxie!

    As mentioned earlier, Sandboxie can be configured not only so that it can configure, say only your browser to run in the sandbox, it can be configured so it's the only program that runs in the sandbox. You can also have sandboxie block access to certain folders and files by programs running in the sandbox (useful so sensitive information or files can't be accessed and say mailed out through your browser). I have it set to do all of this, as well as delete contents on browser exit, so everything gets erased.

    Sandboxie is virtualization for a specific program, isolating it from the rest of the system.

    Returnil is system virtualization, meaning it protects your system partition against changes. Meaning you enable it and then you can make any changes, install programs, etc, and when you reboot they're all gone. Returning your PC back to the state it was before.
     
  6. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,125
    Location:
    Pennsylvania.
    Re: Question about Sandboxie!

    So whats the diff betweeen Return premium and free editiono_O
     
  7. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,125
    Location:
    Pennsylvania.
    Re: Question about Sandboxie!

    Ok I installed Returnil. I have Z chosen as my virtual partition. If I go to use my Virtual Partition how can I go back to my C driveo_O
     
  8. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,047
    Re: Question about Sandboxie!

    Cheater

    You need to read the documentation. Every question you've asked has already been answered on the forums, and in the documentation.
     
  9. subset

    subset Registered Member

    Joined:
    Nov 17, 2007
    Posts:
    825
    Location:
    Austria
    Both... it's better to use Sandboxie and it's better to use Returnil.

    Cheers
     
  10. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Returnil fit better for system wide protection (against user errors,yeah ultimately anything causing problems is triggered by user :D ).
    Returnil is useless if only used, against the phoning home thingy.
    With Sandboxie you have control(in/out) to a degree of your understanding to configure it optimal.
    But then first priority is a malware clean system,if otherwise Returnil and Sandboxie are useless.
     
  11. subset

    subset Registered Member

    Joined:
    Nov 17, 2007
    Posts:
    825
    Location:
    Austria
    Hi,

    you know every category of security software has to start with Anti. :rolleyes:
    Therefore I would say Sandboxie and Returnil are both from the Anti-Alteration category.

    Both are able to protect your system from constant and systemwide alteration, but of course with different techniques and intended purpose.

    Cheers
     
  12. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    With SBIE,just try to delete(user error) system 32 folder or a bunch of dll's in there,i guess you know what happen.
    With returnil on try the same thing,no problem just a reboot and your back. ;)
     
  13. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,047
    Did you try with a Sandboxed copy of explorer??
     
  14. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    Returnil is an Immediate System Recovery software to restore your system partition [C:] completely by using virtualization.
    To put it very extreme and theoretical : if you don't care about malware at all, you only need Returnil without any security software to restore your system and get rid of any threat, including the damage it caused.
    An extreme test would be a honeypot, full of malware and you only have to reboot to get your healthy system back. I'm surprised that nobody tested this already, they rather prefer traditional Miss AntiVirus contests than using their imagination and do something else for a change.
    Such a test would also prove how good Returnil really is and make it stronger in case of failure.
    However, if Returnil wouldn't fail, it would be a good advertising stunt, even more sensational than removing one single malware Rustock.C.

    Of course, no user is going to use Returnil only, because
    1. he doesn't want to reboot all the time due to damages caused by malware in his system.
    2. he has DATA on his computer that needs to be protected : no infections, no destruction, no stealing, ...
    This means that users need security softwares to protect their system and data IMMEDIATELY.

    Sandboxie can be one of these security softwares.
    Sandboxie doesn't recognize malware, but the user can put "any" (not all of course) installed application in a sandbox. In other words he creates a wall around the application and everything what happens inside that application is ISOLATED from the rest of the system.
    Of course it's upto the user to decide in the sandbox, what to keep and what not to keep (to be or not to be) and that is THE main problem in Sandboxie : the human factor, but that is common for all security softwares.
    If the user wouldn't exist, Sandboxie would be perfect. ;)
     
    Last edited: Jun 9, 2008
  15. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Yes should survive,no doubt.But i mean just as Erik abundently explains to recover from possible malware with Returnil,its also a neat protection against user initiated system corruption. And here Sandboxie is limited to what is Sandboxed and was never meant to protect system wide included user error.

    As a side note,If Returnil is meant to be used by the masses,the current build should sufficient. Save changes at reboot looks nice then but is also dangerous and for a great part defeat the purpose of ISR's in general.
     
  16. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    Yes, once you freeze the devil inside your system, you are infected forever, until a scanner finds it or you restore a clean image.

    On the other hand this is common for ALL security and recovery solutions : in the end the USER is the weakest link.
    If you backup and restore an infected system, you also have a problem.
    NEW objects on your system will ALWAYS be a RISK. I'm thinking about that too to minimize that risk to the absolute minimum.
     
    Last edited: Jun 9, 2008
  17. subset

    subset Registered Member

    Joined:
    Nov 17, 2007
    Posts:
    825
    Location:
    Austria
    You know, that's why I said intended purpose.
    If you use SBIE for your browser, you can protect your system from constant and systemwide alteration very well.
    No drive-by download to your real system32 directory etc.

    But of course, you can do similar things with Returnil and your locked partition.
    I use both and both are hugely useful in my opinion.

    Cheers
     
  18. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    You can do similar things with Returnil indeed, but it's not the same protection.
    1. Sandboxie isolates the malware and makes it harmless immediately (= security).
    2. Returnil without Sandboxie let the malware install itself and do its evil job. Returnil will remove the malware indeed during reboot, but way too late.
    In other words Returnil without Sandboxie = no protection, just good removal (= recovery, not security).
     
    Last edited: Jun 9, 2008
  19. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Will you read again my previous post please,i will advise you to learn more about the differences and intended purposes of these app.

    I you willfully destroy Windows by screwing it up,can't boot,BSOD,how will SBIE save you ? :)
     
Loading...
Thread Status:
Not open for further replies.