Error 1010g + Avast 18.x.x

[windows2045]

SBIE2224 Sandboxed program has crashed: SandboxieRpcSs.exe [DefaultBox]
SBIE2101 Object name not found: , error ConnectPort (C0000022) access=001F0000 initialized=1
SBIE2101 Object name not found: , error ConnectPort (C0000022) access=001F0000 initialized=1
SBIE2101 Object name not found: , error ConnectPort (C0000022) access=001F0000 initialized=1


Hey guys been getting this error 1010g

https://imgur.com/tNZwfol

This is on windows 10 HE, latest version of sandboxie.

Doesnt matter what application i try and open it with they all respond the same.

Disabling firewall/defender and antivirus did not work.

[Barb@Invincea]

Hello windows2045,

What are your antivirus, firewall and Sandboxie versions?
Do your browsers work outside Sandboxie?

Are you using Bit Defender?:
viewtopic.php?p=128855#p128855

Regards,
Barb.-

[windows2045]

Verison 5.22

and avast antivirus.

[Barb@Invincea]

Hello windows2045,

We need you to provide more information in order to test this scenario and assist you, please don't skip any questions:

Is there any other security software installed on the machine?
Do the browsers work outside sandboxie?
What are the browsers involved, and their versions?
Any browser extensions involved?
What is the Avast version that you are running?
Do other applications (not web browsers) launch Sandboxed?
Is there any indication in Avast that it may have blocked Sandboxie? Can you add an exclusion?

Also, please try the latest beta and test using a new Sandbox with default settings (Sandboxie Control --> Sandbox--> Create new Sandbox)
viewtopic.php?p=131159#p131159

Regards,
Barb.-

[windows2045]

Is there any other security software installed on the machine? Nope just avast. and whatever default comes with windows 10 home edition which is windows defender.
Do the browsers work outside sandboxie? yes they do
What are the browsers involved, and their versions? firefox and google chrome
Any browser extensions involved? no
What is the Avast version that you are running? avast version 18.1.2326
Do other applications (not web browsers) launch Sandboxed? no applications will load through sandboxie.
Is there any indication in Avast that it may have blocked Sandboxie? Can you add an exclusion? I have tried an exclusion still gets the same error message.

[Barb@Invincea]

Hello windows2045,

I installed AVAST 18.2.2328 (this is the current version) on Win 10 x64 + Sbie 5.23.6 and tried to launch an app in the Sandbox, it immediately started scanning it (took several seconds), after it stated that nothing wrong was found, it started yet another scan and so on..It delayed all the processes in the Sandbox until they crashed. I did not receive the message you received, however.

I added an exclusion and I was able to start launching apps without issues:
Avast --> Settings ---> Exclusions
File Paths --> Browse
Find your Sandboxie installation path (for example C:\Program Files\Sandboxie) and click on the check box next to it.
Hit OK
Hit ADD
Hit OK (green button)

Re-try launching apps in Sandboxie (if needed, delete the contents of your Sandbox or create a new one).

Do you have any customized settings in Avast? Any proxies, anything like that?
Did you try the latest beta / using a new Sandbox with default settings?
Is the Avast template active ? (Configure --> Software compatibility ---> "avast! Antivirus" should be listed and checked.

If all of the above listed fails, try fully removing Avast, then downloading the latest version and re-try using it along with the latest version of sbie.
viewtopic.php?p=131159#p131159

Regards,
Barb.-

[windows2045]

SBIE2203 Failed to communicate with Sandboxie Service: RPCSS_SXS - Start.exe [00000102]

now just says this

[Barb@Invincea]

Hello windows2045 ,

What were the results of testing what I posted above ?
What did you try? I am still unable to repro this issue, so I need more info from you.

Regards,
Barb.-

[windows2045]

Oh, I re added the exculsions as i had done them before and still no change. completely uninstalled Avast and the error that shows up now is

SBIE2203 Failed to communicate with Sandboxie Service: RPCSS_SXS - Start.exe [00000102]


------------------ X --------------------------------------------
Nevermind, after uninstalling and reinstalling sandboxie with the latest version its back to the original message and problem.

Error 1010g please contact support! with special error message: open: An attempt was made to access a scoket in a way forbidden by its access permissions

SBIE2224 Sandboxed program has crashed: SandboxieRpcSs.exe [DefaultBox]

[Barb@Invincea]

Hello windows2045,

Did you try all the suggestions I provided? Did you check if the Avast template was enabled?
Did you test a new Sandbox with default settings? (Uninstalling/reinstalling Sandboxie does not delete the contents of your Sandboxes).

Go ahead and post your configuration file so that I can have a look:

Go to Configure --> Edit configuration
Copy/paste the contents in your response
Highlight the contents and click on the "</>" to format them in the forums.

Regards,
Barb.-

[windows2045]

Yes, Ive done everything suggested.

Now I completely removed Avast and still get the same message.

this is my config file.

Code: Select all

[GlobalSettings]

Template=WindowsRasMan
Template=WindowsLive
Template=OfficeLicensing

[DefaultBox]

ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Enabled=y

[UserSettings_0C1C0207]

SbieCtrl_UserName=chime
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_NextUpdateCheck=1520829216
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n

[Barb@Invincea]

Hello windows2045 ,

I am not seeing anything specific, let's go for a Resource Access Monitor output:
https://www.sandboxie.com/ResourceAccessMonitor
Repro the issue, paste the output.
Highlight your pasted output and hit the "</>" button to format it please.

Regards,
Barb.-

[windows2045]

Code: Select all

(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume6
Clsid       -------------------------------
Clsid       {BCDE0395-E52F-467C-8E3D-C4579291692E} MMDeviceEnumerator class
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\OLE33511680A230AD92D51DC6C48F3D
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000002a.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\ComTaskPool:7320
Ipc         \Sessions\1\BaseNamedObjects\MAINPROXYSHARED
Ipc         \Sessions\1\BaseNamedObjects\MAINPROXYSHARED_RULES
Ipc         \Sessions\1\BaseNamedObjects\proxy_loaden_pid_1928
Ipc         \Sessions\1\BaseNamedObjects\proxy_loaden_pid_7320
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1928
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_7320
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_8340
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:304:WilStaging_02
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:304:WilStaging_02_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:1928:304:WilStaging_02_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:304:WilStaging_02
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:304:WilStaging_02_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:7320:304:WilStaging_02_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:8340:304:WilStaging_02
Ipc         \Sessions\1\BaseNamedObjects\SM0:8340:304:WilStaging_02_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:8340:304:WilStaging_02_p0h
Ipc         \Sessions\1\BaseNamedObjects\SyncRootManager
Ipc         \Sessions\1\BaseNamedObjects\us
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\IMAGEHLP.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\Audiosrv
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \Sessions\1\Windows\Theme1393750546
Ipc      O  \Sessions\1\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme1393011456
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\CNG
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume6
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP11
Pipe        \Device\NDMP12
Pipe        \Device\NDMP13
Pipe        \Device\NDMP3
Pipe        \Device\NDMP4
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd

[Barb@Invincea]

Hello windows2045 ,

Did you delete the contents of your Sandbox / created a new one without copying settings after removing Avast?

Are you using any network restrictions or proxies?

Does Notepad launch in the Sandbox? Or any other applications that are not web browsers?
How about Internet Explorer?

Is that error coming from Sandboxie or something else. The image you posted (gif) at first, does not show the Sandboxed frame or "#" symbol. We need to better understand where is this error originating.

Regards,
Barb.-