Windows 10 1803 SBIE1241 - Change Container Folder [Fixed in beta 5.25.1]

[RinCat]

Windows Version: Windows 10 x64 1803 Build 17133.1
Sandboxie Version: 5.24 (64-bit)

Error:
SBIE1241 Cannot mount registry hive: [C000003A / 22]
SBIE2314 Canceling process Start.exe

Cannot run anything.

[msxcms]

Same here
Version 17133.1

[Barb@Invincea]

Update:

Unable to repro.

Provide the required info: viewtopic.php?f=11&t=19746

--------------- X ---------------

All,

The latest supported Windows 10 Fast Ring version can be found here:
https://www.sandboxie.com/VersionChanges#v_5.24
"Fixed crash in Windows 10 FR Build 17035 and added support for FR up to 17101."

I'll let you know if I can repro once I finish updating to 17133.1.

Regards,
Barb.-

[superkryo]

Having the same problem:

Windows 10 x64 version 1803 build 17133.1

SBIE1241 Cannot mount registry hive: [C000003A / 22]
SBIE2314 Canceling process Start.exe

AV: windows defender

Steps: "Run any program" or "Run from Start Menu" from default box or a new box

Unable to repro.

That's interesting, assuming it's on a 64bit, Barb?

[Barb@Invincea]

superkryo ,

I have tested both x86 and x64 using Sbie 5.24. I can launch web browsers, as well as random apps such as notepad.

If you have any additional settings in place, or are using anything specific sbie settings , please let me know.

Regards,
Barb.-

[superkryo]

Hi Barb,

No, there are no special settings. Even tried a new .ini with nothing else other than the default:

Code: Select all

[GlobalSettings]

ByteOrderMark=yes
ForceDisableSeconds=10
FileRootPath=E:\Sandbox\%SANDBOX%
Template=WindowsRasMan
Template=WindowsLive
Template=OfficeLicensing
Template=OfficeClickToRun

[DefaultBox]

ConfigLevel=7
AutoRecover=y
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
LingerProcess=devldr32.exe
Enabled=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore

[UserSettings_Portable]

SbieCtrl_UserName=Portable
SbieCtrl_EnableLogonStart=N
SbieCtrl_EnableAutoStart=Y
SbieCtrl_Hidden=Y
SbieCtrl_NextUpdateCheck=1522942989
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_WindowCoords=200,150,1485,843
SbieCtrl_ActiveView=40021
SbieCtrl_ProcessViewColumnWidths=250,70,300

It's a portable installation using wraithdu's installer, shouldn't make any difference...

[test47]

Windows 10 Pro 1803 Version 10.0.17133.1 (64 bit)
Sandboxie version number 5.24 (64 bit)
No antivirus; No anti-malware

I have the same problem:
SBIE1241 Cannot mount registry hive: [C000003A / 22]
SBIE2314 Canceling process Start.exe

How to reproduce:
1. fresh install with DefaultBox on C:\Sandbox\Administrator\DefaultBox
2. create two new sandbox with any name e.g. "zzzz" and "yyyy"
3. edit the Sandboxie config and add "FileRootPath=D:\zzzz" for Box "zzzz" and "FileRootPath=D:\yyyy" for the "yyyy" Box
4. move the folder "zzzz" from C:\Sandbox\Administrator\ to D:\zzzz
move the folder "yyyy" from C:\Sandbox\Administrator\ to D:\yyyy
5. start any program from the zzzz Box or the yyyy Box
You will get SBIE1241

How to fix SBIE1241
1. Open cmd and change directory to C:\Sandbox\Administrator\
2. create a symlink for zzzz: type "mklink /D zzzz D:\zzzz"
and delete "FileRootPath=D:\zzzz" for Box "zzzz"
do not delete "FileRootPath=D:\yyyy"
3. start any program on the zzzz Box - should work now
4. don't close the program started on zzzz Box
5. start any program on yyyy Box - should work also
if you close the program from the zzzz Box then you cannot start a program from the yyyy Box
Once the Box with the symlink is started and running you can run any program from any box
You need only one symlink for one Box and a running program in that Box for a drive letter. All other Boxes on that drive letter will start after that.
Other Boxes on other drives will not start.

I do not have enough space on C: and moved all my Boxes on another drives.

Hope this help you to fix the bug

[superkryo]

test47: many thanks, it is a workaround!

Barb, can you try to reproduce by setting the container different from the default?

[Barb@Invincea]

All,

I can repro now that I have steps. It only seems to affect the Fast Ring version of Windows (I couldn't repro on stable Win 10 x64) .

The devs are aware and we'll update this thread if anything else comes up.

Regards,
Barb.-

[RinCat]

Hi, this issue affect Windows 10 RS4 which will be release and push to users in a few days.

[Umbra]

All,

I can repro now that I have steps. It only seems to affect the Fast Ring version of Windows (I couldn't repro on stable Win 10 x64) .

Basically, on Win10x64 1803 SCU, moving the Container from C to another partition generate the Registry Hive error.
This error doesn't occur in Win10x64 FCU.

[Barb@Invincea]

Fixed in beta 5.25. 1
viewtopic.php?f=65&t=25684

[Umbra]

Fixed in beta 5.25. 1
viewtopic.php?f=65&t=25684

confirmed

[sebadamus]

I noticed that after windows update to v1803 / 17134.1, my installed programs in E:\Sandbox\%SANDBOX% stopped working with a "registry hive could not found" message, so as I used to do... started first by uninstall sandboxie, reinstalled (same version), but same problem.

So came here and found about beta version 5.25.2, but problem continues.
Programs only seems to work with sandboxie folder on C drive, if I change the folder as I used to do and try to run from there my programs (E:\Sandbox\%SANDBOX%), each program gives "Application cant not start ...(0xc0000142)"

If I change back to default folder... programs starts, but my real data is on E:\Sandbox\%SANDBOX% so programs wont see it. And cant move everything to C because its an 120gb SSD and will fill up.

Also read about a Windows symlink trick, but prefer to wait for an update.

If you want me to try something, just tell...

Thanks

[Barb@Invincea]

Hello sebadamus ,

Did you delete the contents of your Sandboxes?
Otherwise, does the issue follow you to a new Sandbox with default settings?

Please provide all the required information so that we can better assist you:
viewtopic.php?f=11&t=19746

Regards,
Barb.-