Sandboxie Support

r_fan, you probably had to have the PunkBuster service components outside the sandbox. Installing the game outside the sandbox did that. I'm trying to make this game work with PB. I have the service components installed outside the sandbox and a "*" for all programs in Window Access but it's not wo...

Not KSecDD.sys ? It looks to me like KSecDD.sys just generates the new key, but I presume you're right. I digress, Process Monitor is confusing to a novice like myself. edit: I understand all of this a little more now. Changes made to the Sandboxie registry are located as HKU\SANDBOX_USER_DEFAULTBO...

I get it, so it depends which module in the Stack initiated the RegSetValue? Which in this case is ntkrnlpa.exe. 0 ntkrnlpa.exe KiFastCallEntry + 0xfc 0x8054162c C:\WINDOWS\system32\ntkrnlpa.exe 1 ntkrnlpa.exe ZwSetValueKey + 0x11 0x80501099 C:\WINDOWS\system32\ntkrnlpa.exe 2 KSecDD.sys GatherRandom...

Hi, thanks for this, very helpful.

I also get a regdump.exe crash, but like you said the changes are still visible in Comp-Reg.REG.txt.

Hi. After running iw3sp.exe sandboxed I see: 10:05:47.5204650 PM iw3sp.exe 3532 RegSetValue HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed SUCCESS Type: REG_BINARY, Length: 80, Data: 03 31 78 4E CB 07 76 73 C6 F0 8D 1D 2D C4 AB 49 and I'm wondering if HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed ref...

Great, thanks for replies.

Is there any way to monitor the registry and file changes made by each program?

Wow, it's running every program I throw at it! This program changes everything, removes all consequences. I can't believe the amount of programs I can sandbox. Really amazing. I just installed a game into the sandbox and it actually works, with no errors, I can't believe it. So much thanks to the cr...