Sandboxie Support

Sandboxie is not made for malware analysis and never was. Sandboxie is for safe use of programs that are often attacked by malware. If malware detects that it is in sandboxie and thatswhy not runs - who cares? You stay safe. Beside the good technical analysis of the paper - it's a known fact that sa...

Wish you all the best! I hope you will have more free time now. Enjoy real-life without permanent bug hunting

Have you changed anything Tzuk?
Since 4.07.5 i wasn't able to reproduce the issue, ressources stay the same two, but printing works fine until now.

Name changes, handle stays the same. Before restart of spooler http://abload.de/img/1dss59.jpg After restart http://abload.de/img/38js78.jpg At this restart time printing still works. If it helps, I find out some other point: The OLE ressource for restartet spoolsrv starts exactly at the time I open...

I want to clarify: When you restart your computer, your spoolsv.exe starts and has both an LRPC and an OLE resource? Right, just after reboot of pc both handles are there. Before I start something in a sandbox. If you restart spoolsv.exe and it comes up with just the LRPC resource, can you identify...

tzuk wrote:Tell me please, when you restart the spooler service, do you still see an OLE resource in spoolsv.exe ?

No after restart of spooler service RPC CONTROL\OLE is gone. But only until i reboot machine...

Printing still doesn't work on Win 8.1. x64. Sandboxie 4.07.04. (Message: no printer installed)
If I stop and restart spooler service it works - but then ONLY for sandboxed programs and only for the current session.

Version 4.03.01. fixes the problem for all programs with which I had it before! Great and THX!!

Can confirm version 4.03.01 fixes the problems with EMET4 for me.
great work - as usual.

Short update. I played a while and find out the following:
(1) In EMET change system wide DEP settings - for exmple to Application opt in.
(2) Reboot.
(3) Choose DEP settings that you want again.

Since I've done that I wasn't able to reproduce the issue. Can anyome recheck?

Can confirm the same behaviour (even after diabling all mitigations) for all other programs (firefox, sandboxie, mediemonkey) running sandboxed and under EMET v4 protection. Seems to happen only on Win8x64 (couldn' reproduce it with Win7x86) and happens only with EMETv4 final (with EMETv4 Preview it...

Have the same problems on Win8x64 with current Sandboxie Beta ( 4.0.13)
Tried exclusion * in Sandbox Settings > Resource Access > Window Access but it not helped.

If you need an example Tzuk, you can try with that program: IRT Student Edition
http://www.ssicentral.com/irt/student.html