Windows 7 should have 2 kinds of shortcuts: One for the conventional launch and another for secure mode launch, so that the launched application can not write data to disk outside its folder, and if it does the write should instead happen inside its folder
in a subfolder to virtualize the written data.
↧