Search found 1147 matches

by wraithdu
Wed Jun 02, 2010 9:55 am
Forum: Contributed Utilities & Templates
Topic: Block Process Access
Replies: 211
Views: 213680

Doesn't Sandboxie block at least some of those? No sense duplicating functionality.
by wraithdu
Wed Jun 02, 2010 8:53 am
Forum: Contributed Utilities & Templates
Topic: Block Process Access
Replies: 211
Views: 213680

If you can be more specific about what APIs you would be interested in having the DLL block, I can look into it. I am not a researcher though and have no interest in studying keyloggers to figure out what needs to be done.
by wraithdu
Thu May 27, 2010 3:51 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

If that's really the hook execution order, then that user should be able to load my DLL first before Buster's so it can initialize properly, then load Buster's DLL, and his logging hooks should execute before my blocking hooks.
by wraithdu
Thu May 27, 2010 2:50 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

I understand. I was manually creating the error before in testing. I'm not actually trying to do anything like that. I just wanted to verify that if I hook a function, and Buster hooks a function, then both hooks are processed in some form of chain. So if //Buster's Dll SbieDll_Hook(SomeApi,BustersF...
by wraithdu
Thu May 27, 2010 1:59 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

I assume you mean SBIE2303 with reason (4) ? That is a relatively recent addition, although it was already there in version 3.44. SbieDll_Hook does a simple check, if you wish to hook some function X, and have it go to your own function Y, SbieDll_Hook checks if there is already redirection at X go...
by wraithdu
Fri May 21, 2010 1:30 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Right, I was wondering how you get the list of Sandboxie's processes. I'm curious if you do it the same way I do.
by wraithdu
Fri May 21, 2010 1:20 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Well, all I can say is I make an explicit call to GetModuleFileNameW with the handle provided to the InjectDllMain function, and it fails. I checked that the handle value is correct. So... you tell me... Out of curiosity, how are you identifying Sandboxie's processes to avoid injecting your DLL into...
by wraithdu
Fri May 21, 2010 12:00 pm
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Well, clearly your DLL has to load first. I call GetModuleFileNameW three times to get the paths of my own DLL (to locate my INI file), SbieDll (to get the Sandboxie install path), and the current process. Assuming only the call for SbieDll is blocked, then I need a way to find the Sandboxie install...
by wraithdu
Fri May 21, 2010 11:37 am
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Hmm, now that I'm looking at this again, maybe there isn't a problem. When I tested the original scenario, I tried hooking the same function twice from my own code. I got a popup error message and the test failed. However if I load my DLL first, then yours, I don't get any error popups. So maybe thi...
by wraithdu
Fri May 21, 2010 11:31 am
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Yes it does, however your hooked functions should fail (per the above problem). But even once that is fixed, mine is a blocking DLL. If I block a function, you won't receive the call to accomplish your logging.
by wraithdu
Fri May 21, 2010 11:02 am
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Since you're here, there is a problem in LOG_API.dll that is blocking my call to GetModuleFileNameW. This is causing the conflicts that gjf user is reporting between our DLLs. Once that is fixed and the problem I reported above, sbiextra should start working again along side LOG_API.dll.
by wraithdu
Fri May 21, 2010 10:39 am
Forum: Problem Reports
Topic: Questions about SbieDll_Hook
Replies: 20
Views: 8731

Questions about SbieDll_Hook

/edit

No problems. Questions below.
by wraithdu
Fri May 21, 2010 9:17 am
Forum: Contributed Utilities & Templates
Topic: SandboxiePortable **NEW THREAD**
Replies: 204
Views: 382326

Thanks. I've written my fair share of AutoIt apps and have tons of stuff on the forum. Maybe (?) the most widely known is EraserDrop from PortableApps, not to mention a decent handful of stuff on here. It was just that SBP was written before I started learning AutoIt and I never got around to migrat...
by wraithdu
Thu May 20, 2010 11:25 pm
Forum: Contributed Utilities & Templates
Topic: SandboxiePortable **NEW THREAD**
Replies: 204
Views: 382326

Thanks. The first two don't look like I should touch them. The last one can be handled. What OS are you running if you don't mind me asking?

BTW, I think I'm going to rewrite SBP in AutoIt eventually. It's much my preferred language compared to NSIS.
by wraithdu
Fri May 14, 2010 7:03 pm
Forum: Contributed Utilities & Templates
Topic: Block Process Access
Replies: 211
Views: 213680

Sorry, but I do not understand what you are trying to say. The DLL seems to be loaded... but what test is failed exactly? Are you running the test correctly? If you can provide a step by step process to reproduce your 'failure' results and information on what OS you are running, that would be helpfu...