Page 1 of 1

Vista with latest Server 2008 updates break SB

Posted: Thu Mar 15, 2018 6:52 pm
by Ruan
Vista HP x86.
SB v5.22.
No other security software installed.

Hi
Been keeping Vista updated with Server 2008 patches since last year, and everything's been running smooth, until this month. Specifically the 2 updates causing problems KB4089229 & KB4090450, that were released to address Meltdown/Spectre.

Updated to SB v5.24, but it's a non starter.
SBIE1222 Error with security token: [C00000BB / 35]
SBIE1222 Error with security token: [C00000BB / 36]
SBIE2314 Canceling process Start.exe
Regards,
Ruan.

Re: Vista with latest Server 2008 updates break SB

Posted: Fri Mar 16, 2018 9:44 am
by Barb@Invincea
Hello Ruan,

We do not test nor support Windows Vista / Windows Sever.
https://www.sandboxie.com/FrequentlyAsk ... quirements

However, you probably want to try the latest version of Sbie, which has support for the vulnerability updates:
viewtopic.php?f=64&t=25114

Regards,
Barb.-

Re: Vista with latest Server 2008 updates break SB

Posted: Mon Mar 19, 2018 10:07 am
by Barb@Invincea
Hello Ruan,

You should be able to use this version:
viewtopic.php?p=132700#p132700

Here's more information as to why you are receiving this:
viewtopic.php?p=132748#p132748

Please note in the MS article linked to that thread: "This update is not available for Windows Server 2003, Windows Vista, or Windows Server 2008."

Regards,
Barb.-

Re: Vista with latest Server 2008 updates break SB

Posted: Tue Mar 20, 2018 12:34 pm
by Ruan
Hi Barb,

Thank you for your assistance, and please forgive my late reply.

I tried both 5.23-5 and 5.24, and while both seemed to install okay, trying to run IE9 or FF52esr result in the same errors below.
SBIE1222 Error with security token: [C00000BB / 35]
SBIE1222 Error with security token: [C00000BB / 36]
SBIE2314 Canceling process Start.exe
I've uploaded a ProcMon report below, if it's of any help.
https://filehost.net/f398f34b39d8b2d9

Regards,
Ruan.

Re: Vista with latest Server 2008 updates break SB

Posted: Tue Mar 20, 2018 2:09 pm
by Barb@Invincea
Hello Ruan,

I created a VM with Win Server 2008 - SP2. It is up-to-date, and I manually added the 2 KBs you posted. I am experiencing no issues with Sbie 5.23.5/ 5.24 and IE9.

Do any other applications work inside Sandboxie? For example, notepad.
Right click on your Sandbox --> Run Sandboxed --> Run Any program
notepad.exe

Is there anything else about your environment that is not the default setup?
Antivirus, policies, restrictions... ?

Please upload a copy of your ntoskrnl file so that devs can have a look:
C:\Windows\System32 ---> ntoskrnl

Regards,
Barb.-

Re: Vista with latest Server 2008 updates break SB

Posted: Tue Mar 20, 2018 9:45 pm
by Ruan
Hi Barb,

Barb@Invincea wrote:
Tue Mar 20, 2018 2:09 pm
Do any other applications work inside Sandboxie?
Nothing seems to run sandboxed. Tried Notepad, Explorer etc. All throw up the same security token errors I posted above.

Barb@Invincea wrote:
Tue Mar 20, 2018 2:09 pm
Is there anything else about your environment that is not the default setup?
Antivirus, policies, restrictions... ?
No AV or any other security software installed. Disabled Windows Defender, Pagefile, and a handful of Services mostly related to Networking. Enabled DEP for all programs, and SEHOP. Windows Updates installed are mainly only security updates.

Barb@Invincea wrote:
Tue Mar 20, 2018 2:09 pm
Please upload a copy of your ntoskrnl file so that devs can have a look:
C:\Windows\System32 ---> ntoskrnl
https://filehost.net/654e6cf02a2cfdd6

Thanks for your help, very appreciated.

Regards,
Ruan.