Problems with KIS2015 and Sandboxie 4.14

[VivaDalifa]

I deleted the contents of the default sandbox manually 2-3 times. Same problem again. I checked Kasperskie, the changes in settings are there. I checked the non sandboxed firefox. There is no messages and no problem there. I uninstalled sandboxie from control panel, without keeping my sandboxie settings. I rebooted the computer as I was prompted by the sandboxie uninstaller. I reinstalled sandboxie and-once again- I had the same problem. Anyway, thanks for the replies, it is really a pity, I did not have problems with sandboxie for years

[bo.elam]

Hi Dalifa, your issue seems to be the old conflict between Kaspersky addons and Sandboxie. A solution, maybe, uninstall Kaspersky and get another AV.

By the way, no red dots means no program is running in the sandbox. The red X means contents are getting deleted. Good luck.

Bo

[Mr.X]

I deleted the contents of the default sandbox manually 2-3 times. Same problem again. I checked Kasperskie, the changes in settings are there. I checked the non sandboxed firefox. There is no messages and no problem there. I uninstalled sandboxie from control panel, without keeping my sandboxie settings. I rebooted the computer as I was prompted by the sandboxie uninstaller. I reinstalled sandboxie and-once again- I had the same problem. Anyway, thanks for the replies, it is really a pity, I did not have problems with sandboxie for years

At the arrival of Win8/8.1 there's been a lot of issues lately, about compatibility. But Invincea is working on those issues constantly in those beta releases.
Please try the latest beta available to see if it works:
http://forums.sandboxie.com/phpBB3/view ... 49&t=19837

[VivaDalifa]

Actually, it is my old asus laptop, running win7 professional that has the problem. My wife’s new laptop, a Dell with win 8.1, does not exhibit any issues between sandboxie and Kasperskie. I installed the latest sandboxie beta version, with a clean install. The same problem again. So, I uninstalled the latest Sandboxie beta version and firefox, I rebooted the computer, I run the CCleaner’s registry cleaner, I reinstalled firefox, deleted the default firefox profile, created a new one, reinstalled my firefox add-ons, reinstalled one last time sandboxie 4.14 and I still have the same problem. Everything works well outside sandboxie, and not in the sandboxed browser. Run out of options, I guess I will have to put up with the annoying messages. Thanks for the replies.

Dalifa

[VivaDalifa]

Hello Everybody,

I have Sandboxie 4.14 64bit installed under Win7 and I recently upgraded from Kaspersky Internet Security 2014 to KIS 2015. From that day on I have problems with Firefox 31 (and 33) running sandboxed.
KIS 2015 complains "Cannot guarantee authenticity of the domain to which encrypted connection is established", "Reason: Unknown SSL error". See also the attached screenshot.
If I run FF outside Sandboxie everything is fine. I also disabled the the Kaspersky "Dangerous Website Blocker" extension inside Firefox, but I still get the same error. The screenshot is for http://www.google.com but the error also appears for other sites.

Any idea what's going on ?

Many thanks,
Axel

Hello Axie,
(I am not native in English idiom)

I had exactly the same problem as described by you.
And the problem occurs when Web Anti Virus feature is enabled. You can check it by deactivating that in Kaspersky and try run Chrome inside Sandboxie.

But how to fix that? You should be asking yourself.

I solved this by putting a clause inside Web Antivirus feature, telling it not to check the address http://www.google.com.br (in my case is br, since I am from Brazil). To do that follow these steps:

1. Open Kaspersky Panel
2. Click over Settings (bottom left of the main window)
3. Click over Protection Tab
4. Find and click over Web Anti-Virus
5. A new Windows will open. Make sure to enable this feature sliding the green key at the right top of the windows
6. Click on Advanced Settings
7. Now you have to put the google address inside two links: The link Configure Exclusions and the link Configure Trusted Web Pages. But pay attention: here is a trick: you must remove http:// ou https:// from the address in order it can work. I suffered to find out that. Kaspersky seems to ignore the adress when you put the protocols before the address


I hope it can solve your issue the same way it solved to me.



Elias

Hi, just for future reference, what Elias suggested actually works

Dalifa

[2centsworth]

Ive had same exact problem on a handful of machines using IE11. I have more than 2 dozen running sandboxie and KIS2015 and first encountered the problem months back upgrading machines from 2014 to 2015 KIS. Long story short the fix for me is the version of KIS installed and you need newest sandboxie (4.16 coming soon). I found using version kis15.0.0.463en_6024 so far has solved the problem. I have more machines to "fix" tomorrow and ill post back success rates.

Uninstall KIS using the uninstaller or the removal tool in safe mode if needed. Reboot.

Install the build kis15.0.0.463en_6024. Start the program and manually update it, will be a large update. This upgrades you to 463(b). Reboot again.

Now see if you still have the problem.


kis15.0.0.463en_6024 SHA-1:586C2F92E12048A5826266A0AC01F7D86C04BA61
MD5:9054FAA83B918EDB1387FECE2D2E781A

[2centsworth]

Follow up, indeed the solution above has worked on 3 different machines in a row now. I have several more and will report back but believe this is the solution for my situation and hopefully yours too.

I have uninstalled current Kaspersky, leave license behind, reboot.
Install the build kis15.0.0.463en_6024 , update (it will be a large update) and then reboot.
You should now have version 463(b) and the problem should be gone.

[frank_harmann]

The problem still persists with KIS 15.0.2.361 (even with beta patch A).

Chrome with KIS works fine without Sandboxie. As soon as Chrome runs sandboxed the Kaspersky SSL warning turn ups.

Of course i can disable certain KIS SSL features, but the problem seems Sandboxie related.

As far as i can see a non-sandbox Chrome launches a cmd.exe subprocess like this:
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\plugin-nm-server.exe" --parent-window=0 chrome-extension://dbhjdbfgekjfcfkkfjjmlmojhbllhbho/ < \\.\pipe\chrome.nativeMessaging.in.9d48d043ec364a2a > \\.\pipe\chrome.nativeMessaging.out.9d48d043ec364a2a

The pipe numbers are changing with every start. This process seems to handle Extension to KIS-Core messaging.

A sandboxed Chrome does not (or not sucessfully) launch this subprocess.

Defining a OpenPipe=*chrome.nativeMessaging* does allow the pipes to be accessed from Sandboxie (if i understand the ResourceMonitor correctly). But for some reason the subprocess will still not start up.
Any idea?

[2centsworth]

The build I posted above indeed cured the issue with IE and XP and win7 for me. No other build I have tested of 2015 KIS is free of the error with sandboxie. Hope that helps.

[frank_harmann]

@2centsworth: Yes. That's kind of a good workaround for anyone who is willing to use that special version of KIS.
There is another workaround working with all versions: Add Chrome.exe to trusted programms and disable "scanning encrypted connections" for this program.

But both are workarounds and i would prefer if the sandboxie team would analyze and fix the problem. Probably just the Kaspersky template has to be fixed (f.e. adding the pipes mentioned and some other thing i yet not figured out)??

[frank_harmann]

Small Update:
The correct Extension to Core communication can be enabled by this rules:
OpenPipePath=*chrome.nativeMessaging.*
OpenIpcPath=\RPC Control\epmapper

Can be easily checked with DbgView ,-) Extension working fine now.

But this will not fix the SSL warning issue which seems to be a different problem. This does not seem a problem related to Pipes or IPC/RPC as even * exclusion do not help. Will try to enable Kaspersky trace-logging for some more info....
(See post aboves for workarounds for the SSL-bug. My workaround is Kaspersky->Setting->Advanced->Trusted Applications->Add "Chrome.exe" and set "do not scan encrypted traffic".)