Vista with latest Server 2008 updates break SB

[Ruan]

Vista HP x86.
SB v5.22.
No other security software installed.

Hi
Been keeping Vista updated with Server 2008 patches since last year, and everything's been running smooth, until this month. Specifically the 2 updates causing problems KB4089229 & KB4090450, that were released to address Meltdown/Spectre.

Updated to SB v5.24, but it's a non starter.

SBIE1222 Error with security token: [C00000BB / 35]
SBIE1222 Error with security token: [C00000BB / 36]
SBIE2314 Canceling process Start.exe

Regards,
Ruan.

[Barb@Invincea]

Hello Ruan,

We do not test nor support Windows Vista / Windows Sever.
https://www.sandboxie.com/FrequentlyAsk ... quirements

However, you probably want to try the latest version of Sbie, which has support for the vulnerability updates:
viewtopic.php?f=64&t=25114

Regards,
Barb.-

[Barb@Invincea]

Hello Ruan,

You should be able to use this version:
viewtopic.php?p=132700#p132700

Here's more information as to why you are receiving this:
viewtopic.php?p=132748#p132748

Please note in the MS article linked to that thread: "This update is not available for Windows Server 2003, Windows Vista, or Windows Server 2008."

Regards,
Barb.-

[Ruan]

Hi Barb,

Thank you for your assistance, and please forgive my late reply.

I tried both 5.23-5 and 5.24, and while both seemed to install okay, trying to run IE9 or FF52esr result in the same errors below.

SBIE1222 Error with security token: [C00000BB / 35]
SBIE1222 Error with security token: [C00000BB / 36]
SBIE2314 Canceling process Start.exe

I've uploaded a ProcMon report below, if it's of any help.
https://filehost.net/f398f34b39d8b2d9

Regards,
Ruan.

[Barb@Invincea]

Hello Ruan,

I created a VM with Win Server 2008 - SP2. It is up-to-date, and I manually added the 2 KBs you posted. I am experiencing no issues with Sbie 5.23.5/ 5.24 and IE9.

Do any other applications work inside Sandboxie? For example, notepad.
Right click on your Sandbox --> Run Sandboxed --> Run Any program
notepad.exe

Is there anything else about your environment that is not the default setup?
Antivirus, policies, restrictions... ?

Please upload a copy of your ntoskrnl file so that devs can have a look:
C:\Windows\System32 ---> ntoskrnl

Regards,
Barb.-

[Ruan]

Hi Barb,

Do any other applications work inside Sandboxie?

Nothing seems to run sandboxed. Tried Notepad, Explorer etc. All throw up the same security token errors I posted above.

Is there anything else about your environment that is not the default setup?
Antivirus, policies, restrictions... ?

No AV or any other security software installed. Disabled Windows Defender, Pagefile, and a handful of Services mostly related to Networking. Enabled DEP for all programs, and SEHOP. Windows Updates installed are mainly only security updates.

Please upload a copy of your ntoskrnl file so that devs can have a look:
C:\Windows\System32 ---> ntoskrnl

https://filehost.net/654e6cf02a2cfdd6

Thanks for your help, very appreciated.

Regards,
Ruan.