Sandboxie Support

NoDelete for 32 and 64-bit platforms

2013-10-15T05:09:39-04:00

Thanks you MiRo

Statistics: Posted by baselsayeh — Tue Oct 15, 2013 5:09 am

NoDelete for 32 and 64-bit platforms

2013-10-07T11:05:30-04:00

Thanks for the utility, MiRo!

Statistics: Posted by Buster — Mon Oct 07, 2013 11:05 am

NoDelete for 32 and 64-bit platforms

2013-10-07T10:56:59-04:00

It prevents programs running under Sandboxie to delete files - useful for example during installation of a program or when some malware creates temporary files, do something with them and then deletes them to hide it's activity. With this plugin the programs think they were successful when deleting files although in reality the files are left in the sandbox.

Of course this could cause a different response from the program if it checks if the file is really deleted, but that's a trade-off.

Statistics: Posted by MiRo — Mon Oct 07, 2013 10:56 am

NoDelete for 32 and 64-bit platforms

2013-10-07T10:12:58-04:00

What exactly does this do?

Statistics: Posted by Domochevsky — Mon Oct 07, 2013 10:12 am

NoDelete for 32 and 64-bit platforms

2013-10-06T19:53:53-04:00

As there was no 64-bit version of Buster's Anti Delete DLL available, I've created a similar plugin called NoDelete, which is available for both 32 and 64-bit platforms. I've hooked API functions, which have the delete functionality that I know of:

- DeleteFile
- CreateFile
- NtDeleteFile
- NtSetInformationFile
- SHFileOperation

Usage is the same as for other plugins (see readme.txt). Full source of the plugin is included (released under MIT license).

Download from here: https://app.box.com/NoDelete-104-zip

Statistics: Posted by MiRo — Sun Oct 06, 2013 7:53 pm