Page 1 of 1

FCU Exploit Protection

Posted: Sun Nov 12, 2017 9:55 pm
by Nix
Hi admin,

Need some advice what I need to enabled/disable for FCU Exploit protection to work in SBIE, added Chrome in exploit protection ticked everything and now chrome doesn't work in SBIE. If possible also some setting for Firefox and Potplayer(installed in sandbox).

Thanks!

Re: FCU Exploit Protection

Posted: Mon Nov 13, 2017 10:43 am
by Barb@Invincea
Hello Nix,

I need more information in order to help you. Please provide all the required data from here:
viewtopic.php?f=11&t=19746

Regards,
Barb.-

Re: FCU Exploit Protection

Posted: Tue Nov 14, 2017 7:25 am
by Nix
Hi Barb,

Enable FCU exploit protection on chrome with all options ticked>on, after that chrome doesn't worked sandboxed. For now there are only a few that are enabled by default and SBIE is working just fine.

Re: FCU Exploit Protection

Posted: Tue Nov 14, 2017 10:26 am
by Barb@Invincea
Hello Nix,

I really need more information regarding what are you doing. What is this FCU protection that you are referring to?
What do you mean Chrome doesn't work? Are there any error messages? What's going on exactly?

Please, see my previous post and provide the required information so that I can set up the environment and test your issue.

Regards,
Barb.-

Re: FCU Exploit Protection

Posted: Tue Nov 14, 2017 7:40 pm
by Nix
Hi Barb,

Sorry was using my win7 desktop last time, a bit lazy to open my laptop. :mrgreen:

The Windows version number? (Win 10 x64, 1709)
Sandboxie version number (SBIE v5.22)
NAME & Version/build numbers of any applications involved? (Chrome v62)
Are you running antivirus/anti-malware software? (WD,Appguard, and Windows exploit protection)

Windows Defender Security Center > App & Browser Control > Exploit Protection
Currently Enabled(chrome works fine sandboxed):
  • Control Flow Guard, Data Execution Prevention, Bottom-up ASLR, SEHOP, and Validate Heap Integrity


Just enabled Arbitrary Code Guard (ACG) and this is what I get. "SBIE2101 Object name not found: , error OpenProcess (C0000022) access=001FFFFF initialized=1". Just want to know which setting should be enabled, not too familiar with setting up exploit protection.

Regards,

Re: FCU Exploit Protection

Posted: Wed Nov 15, 2017 2:47 pm
by Barb@Invincea
Hello Nix,

If I enable ACG under Exploit Protection ---> Program Settings
Then, I cannot launch Chrome at all outside Sandboxie. Does it work for you out of the Sandbox?

The default settings for Exploit Protection in Windows Defender do work fine with Sandboxie 5.22

Regards,
Barb.-

Re: FCU Exploit Protection

Posted: Wed Nov 15, 2017 7:18 pm
by Nix
Hi Barb,

Ah I see haven't tried it outside sandboxie, try it out later.

Regards,
Nix