Posted: Wed May 29, 2013 9:40 am
Oh, I didn't realize a match is what makes it go through SbieSvc... even if the destination is still in the sandbox. So, what's happening with $:explorer.exe, what matches that? I've never fully understood the $: convention! Is that opening any windows created/owned by Explorer, thus more matches...? Since like the EMET Template with $:EMET_notifier.exe doesn't make any difference.
Still, something weird must be going on here, since shouldn't global Open=* and Open=iexplore.exe,* give the same results for iexplore.exe?? Which is of course what you got...
It's just a bit frustrating trying/wanting to figure this out. I just used my XP install disc->files->ISO with most updates integrated from Feb. (last time I updated it) to install fresh into VirtualBox. Everything is slower overall there (expected), but still same differences!
Forced IE 6 with one already running ("active" sandbox):
1.68 - Default settings
2.4 - Open=$:explorer.exe
2.9 - Open=iexplore.exe,*
1.28 - Open=*
0.45 - UNsandboxed
1.05 - SBIE 3.76 (or 0.98 with global Open=*, so it's not the same with prefix...)
Anyway, just more info -- I'd think you'd have reproducible results with "same" VirtualBox system...? I can upload any of my files if you want them for any reason.
Still, something weird must be going on here, since shouldn't global Open=* and Open=iexplore.exe,* give the same results for iexplore.exe?? Which is of course what you got...
It's just a bit frustrating trying/wanting to figure this out. I just used my XP install disc->files->ISO with most updates integrated from Feb. (last time I updated it) to install fresh into VirtualBox. Everything is slower overall there (expected), but still same differences!
Forced IE 6 with one already running ("active" sandbox):
1.68 - Default settings
2.4 - Open=$:explorer.exe
2.9 - Open=iexplore.exe,*
1.28 - Open=*
0.45 - UNsandboxed
1.05 - SBIE 3.76 (or 0.98 with global Open=*, so it's not the same with prefix...)
Anyway, just more info -- I'd think you'd have reproducible results with "same" VirtualBox system...? I can upload any of my files if you want them for any reason.