Sandboxie Support

Combined 32/64 installer:
http://www.sandboxie.com/SandboxieInstall-413-7.exe

Separate:
http://www.sandboxie.com/SandboxieInstall32-413-7.exe
http://www.sandboxie.com/SandboxieInstall64-413-7.exe

Fixes in 4.13.7

1) Flash standalone crashes in FFX.

2) Error messages:
SBIE2303 Could not hook SetSecurityInfo (1)
SBIE2318 DLL initialization failed for 'ntmarta.dll'


Fixes in 4.13.6

1) Chrome 37/38 crash error C0000008 (invalid handle).

2) Chrome 38-64 hang (web page unresponsive).

3) Chrome hangs when printing to PDF.

4) Browsers cannot access Internet when using McAfee SaaS

5) Silverlight crashing in Win 8.1 (http://forums.sandboxie.com/phpBB3/view ... hp?t=18513)

6) Excel sometimes crashes when copying large amounts of data.

7) Sandboxie now has language support for Farsi (Persian).


Fixes in 4.13.5

1) Several incompatibilities with Chrome 37 & 38 have been fixed.

2) The problem with multiple Sandboxie update dialogs introduced in 4.13.4 has been fixed.


Fixes in 4.13.4

1) The auto-update feature only checked the next update time (SbieCtrl_NextUpdateCheck) 1 time when SbieCtrl.exe was started. If SbieCtrl.exe was kept running, it would never check the update time again. This has been fixed.

2) Several large memory leaks (reported by Dr. Larry Pepper et al.) have been fixed. In particular: http://forums.sandboxie.com/phpBB3/view ... 11&t=18412

3) ASLR is now enabled for SbieDll.dll 32 bit (64 bit will come later).

4) OpenIpcPath=\BaseNamedObjects\FontCachePort is now in templates.ini as a default. Until now, this was a suggested work-around for some Chrome 37 problems.
NOTE: the default only applies to new installs. For existing installs, you need to go into Sandbox settings->Applications->Miscellaneous, and check the option "Allow direct access to Windows Font Cache"

5) NtQueryInformationProcess was not working correctly for 32 bit apps running in 64 bit Windows. The sandbox path was returned instead of the host path. This is mainly for Buster and BSA.

6) There is a new EULA (license.txt)

The Chrome 37/38 permissions problem with drop rights is still being worked.


Fixes in 4.13.3

1) Support for Chrome 37-64.

2) Added hook for GetProcessImageFileName/NtQueryInformationProcess so it now returns the faked, sandboxed path.

3) Improvements to the Dutch language text.


Fixes in 4.13.2

1) If SandboxieInstall.exe tries to download the VC Redistributables and fails, there is now a retry option.

2) The SbieSvc startup time has been increased from 5 seconds to 15 seconds. Hopefully, this will eliminate the following sequence of startup errors:
SBIE2335 Initialization failed for process %2
SBIE2336 Error in GUI server: %2
SBIE2337 Failed to start program: %2

3) Malware DarkComet is using a quirk in Windows to put up a MessageBox that does not have the sandboxed yellow window border. This poses no security risk, but to prevent user anxiety, this has been fixed (reported by a Sbie user).

4) Security has been tightened in other areas as well.

Fixes in 4.13.1

1) Special flag added to OpenWinClass to restore Buster Sandbox Analyzer (BSA) message logging. /IgnoreUIPI allows low integrity sandboxed processes to send WM_COPYDATA msgs to windows in higher integrity processes.
Example Sandboxie.ini entries (both lines required):

OpenWinClass=TFormBSA
OpenWinClass=TFormBSA/IgnoreUIPI

(This does not fix all the problems with BSA, but it is a start)

2) Sandboxed cmd.exe will crash if window title > 256 chars. (http://forums.sandboxie.com/phpBB3/view ... 11&t=19089)

3) Fixed rare BSOD http://forums.sandboxie.com/phpBB3/view ... 6&p=101687

4) Fixed kernel memory leak in SandboxieCrypto http://forums.sandboxie.com/phpBB3/view ... 11&t=15820

5) The combined installer SandboxieInstall.exe now checks for the VC Redistributables DLLs we require. If they are not up to date (10.0.40219.325), the installer will download and install the VC Redist. from sandboxie.com.
To clarify:
SandboxieInstall.exe does not contain MS VC DLLs. If they are already installed, we are good to go. If they are not installed or are not up to date, we download the VC Redist. installer package and execute it.
SandboxieInstall32.exe & SandboxieInstall64.exe contain the DLLs we require. If they are not installed or are not up to date, we just copy the ones we require into system32. The VC Redist. installer is never downloaded or executed.

Curt@invincea wrote:1) Special flag added to OpenWinClass to restore Buster Sandbox Analyzer (BSA) message logging. /IgnoreUIPI allows low integrity sandboxed processes to send WM_COPYDATA msgs to windows in higher integrity processes.
Example Sandboxie.ini entries (both lines required):

OpenWinClass=TFormBSA
OpenWinClass=TFormBSA/IgnoreUIPI

(This does not fix all the problems with BSA, but it is a start)

I confirm message logging works fine again with the "/IgnoreUIPI" setting. Thanks!

Actually the only noticeable problem I can see is when a dialog to open/save files is opened, like it does Notepad. Sometimes works, sometimes application crashes when you try to navigate folders or save to file i.e.

I ran FireFox in BSA and did not notice any problem.

@Curt

With this next update will the compatibility issue with MBAE be resolved?!

@curt
Is there a plan to fix sbie2235 as reported earlier http://forums.sandboxie.com/phpBB3/view ... ab#p100746? Still present in this beta, it's a stopper for me to move beyond 3.76. Would be much appreciated.

Norton Toolbar 2014
Please support in Version Version 4.13

Hi, the problem I reported about theming still exists with v4.13.1 beta. Problem also shows up on Windows 8, not just Windows 8.1.

Heya, I just tried v4.10 RC, and there seems to be a theming issue on the "Run Sandboxed" dialog.

This is on Windows 8.1 with Update 1 (x64).

Here are two screenshots, one with, and one without the issue.

Sandboxie v4.10 RC:

http://imgur.com/7vmsMsk

Sandboxie v4.9.4:

http://imgur.com/ZulElNA

Another user also reported the same problem here http://forums.sandboxie.com/phpBB3/view ... 11&t=19111

Chrome 64-bit v37.0.2054.3 Dev issues, Sandboxie 4.13.1 (Win8.1.1 Pro x64) https://i.imgur.com/lZZZcqe.jpg

nihil95 wrote:Chrome 64-bit v37.0.2054.3 Dev issues, Sandboxie 4.13.1 (Win8.1.1 Pro x64) https://i.imgur.com/lZZZcqe.jpg

+1 same issue here.

LOL... why did it require a restart That was a first...

Nix, after installing this beta, the installer asked for a reboot for me as well. This is the second time that I had that this happen. Both times its been in my W7 32 bits. I always reboot after upgrading SBIE so it doesn't really bother me.

Bo

Occasionally for me, Sbie will require a reboot after an upgrade. This is because the driver is sometimes unable to stop completely and restart itself. This is nothing new and has been that way at least since Sbie 4.X. It all depends on exactly what the driver is doing at the time of the upgrade. Often I will ignore the reboot request, and Sbie will still work just fine, because the driver has had time to fix itself.

nihil95 wrote:Chrome 64-bit v37.0.2054.3 Dev issues, Sandboxie 4.13.1 (Win8.1.1 Pro x64) https://i.imgur.com/lZZZcqe.jpg

Invincea QA tests with the Chrome Betas.

Curt@invincea wrote:Often I will ignore the reboot request, and Sbie will still work just fine, because the driver has had time to fix itself.

A few betas ago, when I saw a request for reboot for the first time ever, I was testing another beta under Shadow defender and didn't reboot. And as you say, all worked well. Next day, when I upgraded SBIE in my real system using the same installer, there was no request to reboot.

Bo

OK, as I said it was my first for SBIE asking for a reboot.

Are you going to add the new Iron browser settings?



http://forums.sandboxie.com/phpBB3/view ... =5&t=19093

http://forums.sandboxie.com/phpBB3/view ... 11&t=19071