Block Process Access

Guest · Post by **Guest** » Sat Oct 17, 2009 7:56 pm

okay i am mistaken in the name, but i meant the tool discussed in THIS very thread.........is it a security measure or extra privacy measure?? please clarify

Buster · Post by **Buster** » Sat Oct 17, 2009 8:23 pm

In my opinion is both a security and privacy measure.

Guest · Post by **Guest** » Mon Oct 19, 2009 3:03 pm

Thanks alot Wraithdu for doing this. Im wondering if you and Tzuk could please collaborate to include sbieinj.dll (Block Process Access), or at least something like it, in future releases - along with something in the GUI to allow the user to incorporate it in their Sandbox Settings. That would be great, thanks again for all your efforts.

Max100 · Post by **Max100** » Fri Oct 23, 2009 7:00 pm

It can be used to prevent alert messages of suspicious files by antivirus?

Buster · Post by **Buster** » Fri Oct 23, 2009 8:09 pm

Max100 wrote:It can be used to prevent alert messages of suspicious files by antivirus?

No, it can not. Antivirus are running outside the sandbox and use their own drivers.

I think only tzuk could prevent alert messages raised by antiviruses that perform analysis in the sandbox folder.

tzuk · Post by **tzuk** » Sat Oct 24, 2009 10:06 am

I wouldn't go messing with anti-virus processes, but I'm considering making the SANDBOX folder optionally inaccessible to programs outside the sandbox, so that might prevent the anti-virus from looking into the sandbox altogether.

wraithdu · Post by **wraithdu** » Tue Nov 03, 2009 4:36 pm

The DLL has been updated:

- changed name to 'sbiextra.dll'
- added hooking the BlockInput() function
- fixed bug removing flags from CreateToolhelp32Snapshot
- NEW!! configuration options via INI

See first post or the Readme.txt for details.

wraithdu · Post by **wraithdu** » Fri Nov 06, 2009 11:07 am

Some minor code changes, debug output changes. Download in first post.

wraithdu · Post by **wraithdu** » Thu Nov 19, 2009 9:42 pm

Uploaded a version for Sandboxie 3.41.09 and higher which uses the new InjectDllMain() procedure.

Guest · Post by **Guest** » Thu Nov 19, 2009 10:40 pm

Tzuk, can you please include Block Process within your neext Sandboxie release? instead of an addon.

wraithdu · Post by **wraithdu** » Fri Nov 20, 2009 12:38 am

That's been asked and answered many times before...and the answer is still no. It has the potential to cause too many problems.

wraithdu · Post by **wraithdu** » Sun Dec 06, 2009 1:58 am

Updated to block GetWindowTextA/W and SendMessageA/W with WM_GETTEXT. See first post for details.

Ruhe · Post by **Ruhe** » Sun Dec 06, 2009 5:40 am

Note: You'll need the Microsoft Visual C++ 2008 SP1 Runtimes for the DLL to work

For me your dll (v1.0.0.12) is working on Windows 7, even without installed runtime.
Are the libraries already included in 7?

wraithdu · Post by **wraithdu** » Sun Dec 06, 2009 12:07 pm

Might be...not sure really. You can search for msvcr90.dll, that's the VC++ 2008 runtime. Might not hurt to install the SP1 runtimes anyway (you can check version numbers).

Ruhe · Post by **Ruhe** » Sun Dec 06, 2009 12:54 pm

There are two files on my system

C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.21022.8_none_bcb86ed6ac711f91\msvcr90.dll
Version 9.0.21022.8

C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5a\msvcr90.dll
Version 9.0.30729.4926

Sandboxie Support

Block Process Access

Updated v1.0.0.12

Who is online