Consistent SBIE 2314 error with certain websites

[northch]

For last few months, consistently getting SBIE 2314 error with selected websites using Chrome 64-bit as browser, sandboxed in Sandboxie.

Windows 10 Pro 64-bit, up to date
Sandboxie 5.14 64-bit. Has happened with previous versions of Sandboxie, e.g. 5.12
AV: Webroot SecureAnywhere 9.0.12.53. SBIE 2314 happens with this on or off
Endpoint Application Control: Blue Ridge AppGuard 4.4.6.1 Personal. SBIE 2314 happens with this on or off
Chrome 53.0.2785.143 m (64-bit) currently. Has happened with previous Chrome versions
Running as Std User for security reasons. Have not yet attempted running as Admin

SBIE 2314 Cancelling process chrome.exe [8264 /7] for the Microsoft Store at www.microsoftstore.com. 6 total messages
SBIE 2313 Cancelling process chrome.exe [4328 /7] for for Investopedia.com. 6 total messages
as examples

Looked through forum but did not find obvious answer.

Is there a Sandboxie config setting that can prevent this? Thank you.

[chris@invincea]

@northch

Are you able to test as admin? What version of SBIE are you using? Are you able to update to SBIE 5.14 if you don't already have it installed?

[northch]

Sandboxie is 5.14 64-bit (that was in my original post).

Yes, just now, I logged in as Admin, and the problem occurs all the time with those two websites. If you go to the Microsoft Store, click to close the first message, and then the 2314 error happens. It (2314) happens with or with Antivirus, and with or without AppGuard. I know I've been to additional websites that cause the error, but right now I don't recall what they are. It is always a specific website. It is not a random error.

Seems like something is being called in the browser that causes Sandboxie to close with the 2314 error message. Is there a fix or a setting that can be used to prevent the closure?

Thanks,

[Curt@invincea]

Post all of the error msgs. The 1st is the most important.

[northch]

Sorry, my last post created some confusion.

There is only one Sandboxie error message each time Sandboxie closes spontaneously: "SBIE 2314 Cancelling process chrome.exe [xxxx /7]". The xxxx changes each time. I'm guessing that it is the process ID #. The SBIE 2314 message seems to display always six times.

When I said "If you go to the Microsoft Store, click to close the first message...." that message was a message from Microsoft's website. They always have some type of offer that I decline by clicking "x" to close the Microsoft store-generated browser offer dialog box. After I click the "x", Sandboxie closes spontaneously. The script (I'm guessing from Microsoft) that closes Sandboxie appears to run after I close the offer dialog box.

Investopedia does not create any dialog boxes through the browser (such as offers), and thus Sandboxie closes right away when that URL starts to load.

This problem is not on just one PC. We have 6 PCs (some paid, some free Sandboxie). It happens on all of them.

With the security I run, which includes Sandboxie, either Webroot or Norton (which works fine with Sandboxie for us) for a given PC, AppGuard or SRP whitelisting (Windows 10 Pro), and a Sophos UTM, it is very, very unlikely our PCs are infected. I do check about every month or two, beyond the AV.

The SBIE 2314 problem always happens only on specific websites, and when it happens, it happens 100% of the time for those specific URLs. It seems like it is starting to occur on more websites (become a little more prevalent), hence I finally decided to post.

Please advise if you can. Thank you.

[northch]

With more searching, I found the answer to this problem: http://forums.sandboxie.com/phpBB3/view ... ve#p120679

[Template_Local_Chrome_QWAVEdrv_DirectAccess]
Tmpl.Title=Google Chrome
Tmpl.Class=Local
ProcessGroup=<ChromePrograms>,chrome.exe,dragon.exe,iron.exe,opera.exe,maxthon.exe,vivaldi.exe
OpenPipePath=<ChromePrograms>,\Device\QWAVEdrv

Template=Local_Chrome_QWAVEdrv_DirectAccess

[bo.elam]

You can allow access to QWAVEdrv via Sandbox settings>Applications>Miscellaneous.

Bo