1. A computer implemented method for maintaining security of a computing system, the computing system having a real file directory and a virtualized file directory, the method comprising restricting programs running in a virtual environment of the computing system to have limited or no access to trusted programs and data residing in the real file directory by directing a processor to perform the actions: defining a list of confidential objects; whenever a program executing within the virtualized environment attempts to read an object, preforming the operations: determining whether the read request is to an object within the virtual directory and, if so, allowing the read operation; when the read operation is to an object within the real file directory, determining whether the object is from the list of confidential object and, if so, denying the read operation; otherwise allowing the read operation.