Registry virtualization

gas_972 · April 7, 2011, 8:07am

Hi. Is there any way to see the reg entry of a sandboxed program?
Thanks

Citizen_K · April 7, 2011, 7:03pm

Check the contents of the VritualRoot folder. It is on your system disk/partition (typically c:).

gas_972 · April 8, 2011, 12:54am

I know that, but I was referring to reg entry.
Tks

captainsticks · April 8, 2011, 2:57pm

Hi Gas. Do you mean HKEY_LOCAL_MACHINE\VritualRoot? Kind regards.

gas_972 · April 8, 2011, 7:24pm

It was near:

HKEY_LOCAL_MACHINE\SYSTEM\VritualRoot

Thanks

captainsticks · April 8, 2011, 9:57pm

Thanks back, sorry my mistake. I had the right location here, I just miss typed it sorry about that. Glad you found what you was looking for. Kind regards.

Citizen_K · April 8, 2011, 10:12pm

Now I get your question…

captainsticks · April 9, 2011, 11:14am

I have noticed some items from previous sandboxed items still show up here in the registry, and seem to be impossible to remove even with Admin and regassasin. This registry location appears to keep a history of previous sandboxed items even when folder is empty.

Citizen_K · April 9, 2011, 11:49am

For persistent keys try the method described here. It uses PsExec to start Regedit.

captainsticks · April 9, 2011, 12:53pm

Hi Eric. The keys in question I decided to leave them alone, but thanks very much for this information which maybe useful in the future or if I get the urge to have a go. Kind regards.

MastAvalons · January 11, 2012, 6:32pm

I usually use boxedapp for regtry virtualization…

kail · January 11, 2012, 7:24pm

Old topic locked. Contact an on-line Moderator via PM if you need it re-opened.