Powerpoint 2016 C2R unable to launch [SOLVED]

Please post your problem description here

Moderator: Barb@Invincea

Post Reply
cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Powerpoint 2016 C2R unable to launch [SOLVED]

Post by cj716 » Fri Apr 14, 2017 12:19 pm

Having a problem with MS Powerpoint 2016 C2R version on 5.18 and Win 10 Pro x 64 CU. Any attempt to open a pptx. either by forced programme, forced folder, send to or navigating to it via Powerpoint itself results in an error 'Sorry, Powerpoint can't read file location/name.

This happens in a default Sandbox with no other security apps installed and protected view disabled..

Any assistance would be appreciated.

Thanks
Chris

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Fri Apr 14, 2017 12:49 pm

Hello cj716,

I am not able to reproduce the problem using the same setup. Does it affect every .pptx file that you try to open?
Do other Office products work Sandboxed?
Can you try creating a new Sandbox and see if the problem follows you there?

Regards,
Barb.-

cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Re: Powerpoint 2016 C2R issue

Post by cj716 » Fri Apr 14, 2017 1:30 pm

Barb@Invincea wrote:Hello cj716,

I am not able to reproduce the problem using the same setup. Does it affect every .pptx file that you try to open?
Do other Office products work Sandboxed?
Can you try creating a new Sandbox and see if the problem follows you there?

Regards,
Barb.-
Hi Barb,

Thanks for looking at this. Yes, problem exists with every .pptx every file and in a newly created Sandbox. Other Office apps work fine.

Will try reinstall of 5.18 and Office.

Regards
Chris

cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Re: Powerpoint 2016 C2R issue

Post by cj716 » Fri Apr 14, 2017 6:18 pm

By way of update clean install of Win 10 x 64 CU, Office & SBIE has not resolved this.

Unfortunately I've got Excel DDE issue and now Powerpoint not working. Office really isn't viable with SBIE for me now. Oh well. Happy to help troubleshoot if required but appreciate there might be bigger fish to particularly if I'm the only one experiencing this.

Cheers
Chris

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Mon Apr 17, 2017 11:56 am

Hello cj716,

What's the DDE issue that you are receiving? Does it happen on your host as well?

Any chance that you have changed the installation path for Sandboxie (meaning, other than the default) ?
Please have a look at this:
viewtopic.php?f=2&t=23015&hilit=something+went+wrong&start=15#p122288

Did you try creating a New Sandbox to see if that helped?

Can you post the results of your Res. Acc. Monitor, see if we can find any clues there?:
https://www.sandboxie.com/index.php?Res ... essMonitor
Please use the "Code" button in the forum in order to format the output.

Regards,
Barb.-

cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Re: Powerpoint 2016 C2R issue

Post by cj716 » Mon Apr 17, 2017 12:33 pm

Thanks Barb, yes tried new Sandbox with default config and only Powerpoint forced. Installation path unchanged.

DDE issue is with Excel in that I cannot directly open sheets by double clicking on them but need to go through opening Excel and navigating to the file I want to open. The same issue syrinx provided DDE registry changes to fix for non-C2R versions. I think they might work for C2R as well but ideally would like Invincea to set (and repair) registry as part of the install/uninstall process if needed to make Excel work rather than a 'home made' fix from an, albeit very knowledgeable, user for a different Office product. Works fine when not sandboxed.

RAM logs attached for Powerpoint issue.

To confirm I've tried this on 3 separate machines now with the same results. I've also added HMP Alert to the set-up to protect Office apps while SBIE doesn't work but same results without HMP Alert.

Regards

Opening existing pptx.

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume4
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
Clsid       -------------------------------
Clsid       {00000323-0000-0000-C000-000000000046} ?
Clsid       {00021401-0000-0000-C000-000000000046} Shortcut
Clsid       {275C23E2-3747-11D0-9FEA-00AA003F8646} Multi Language Support
Clsid       {71DCE5D6-4B57-496B-AC21-CD5B54EB93FD} SyncEngineFileInfoProvider Class
Clsid       {88D96A0F-F192-11D4-A65F-0040963251E5} MXXMLWriter 6.0
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid       unknown
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\[CoreUI]-PID(4576)-TID(4684) 21f9424f-2fe0-4c35-ae2d-f44c95197b69
Ipc         \BaseNamedObjects\[CoreUI]-PID(5168)-TID(2616) 5134e487-fd8b-4ad6-bec8-d9b76e46e1cb
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\keysvc
Ipc         \RPC Control\LRPC-56888dbd965c3666bf
Ipc         \RPC Control\LRPC-a1b378adf5955b79e1
Ipc         \RPC Control\OLE7513B59AD431EA8A2E2CE03D4A55
Ipc         \RPC Control\OLEBFC210D84041AED91A374FCCB1B9
Ipc         \RPC Control\OLED185990BE0D5C97287DB460473B5
Ipc         \RPC Control\protected_storage
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}16.0
Ipc         \Sessions\1\BaseNamedObjects\{FF7EC554-78CC-4CC2-8E9A-8B9A21C159E8}
Ipc         \Sessions\1\BaseNamedObjects\10ACB_GETTING_DATA10_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACB_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACBBD_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACB10_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACBPIDS_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\A1D62C73-3712-4bf7-A524-ACE967A8C7D7_Office16
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::5168
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\ComTaskPool:5168
Ipc         \Sessions\1\BaseNamedObjects\F99C425F-9135-43ed-BD7D-396DE488DC53_Office16
Ipc         \Sessions\1\BaseNamedObjects\HWNDInterface:30642
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_ATMX:{00005173-0666-0667-56FC-FADD00000000}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16Csi_CentralTableDatabaseInitialization
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{16284F64-D1CB-4015-ACFA-9E3944D6B6DD}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{48DEC616-56E4-4F30-8030-C51111C102A9}:RID_{06CA7BDA-2D88-4700-95B3-B4DFB24BEBD4}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{48DEC616-56E4-4F30-8030-C51111C102A9}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{4A6D6FD4-6B5E-4B91-B650-BF1EC9669D4C}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{5585BD79-2A2B-4359-8F93-404ED6147369}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{7A3B9BC8-95AF-498B-A58A-AB578703D72A}:RID_{B608953C-B7F3-428F-91DD-BD5C74FE48EF}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{7A3B9BC8-95AF-498B-A58A-AB578703D72A}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_CT_NOTIFY:PID_5168:TID_{BFCEF68A-3F40-481B-B237-FD551CEC6C8A}:RID_GUID_NULL
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16Csi_FileCacheMigrationLock
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_NCE_Dbchange:{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_NCE_NCE:{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_OMTX:{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_RTS:{00005173-0666-0667-56FC-FADD00000000}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_SPM:{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16Csi_SyncScheduler_Trigger{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_WDW:{00005173-0666-0667-56FC-FADD00000000}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_WDW:{B951DD63-D184-4121-85C3-CE61811305EC}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_WDW:{E6B6903E-8AA2-46A4-A30A-5571CB773C6A}
Ipc         \Sessions\1\BaseNamedObjects\Microsoft_Office_16Csi-FaultManagement
Ipc         \Sessions\1\BaseNamedObjects\Office.16.916BB0BF-2D21-4499-83C7-555DB4C3F8E8
Ipc         \Sessions\1\BaseNamedObjects\Office16.B1E641B5-F92B-4B82-83B7-10DC868435E8
Ipc         \Sessions\1\BaseNamedObjects\OleDfRoot36274755287E6E66
Ipc         \Sessions\1\BaseNamedObjects\OleDfRootBA2C8FB662CBCA1D
Ipc         \Sessions\1\BaseNamedObjects\OleDfRootC7494AAA059D8770
Ipc         \Sessions\1\BaseNamedObjects\OleDfRootD09EE5D6A8A786B4
Ipc         \Sessions\1\BaseNamedObjects\PP16Running_S-1-5-21-3959966219-1940094108-758271764-1001
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1688
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2228
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3872
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4192
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_4860
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5168
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorMutex
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorPreference
Ipc         \Sessions\1\BaseNamedObjects\SM0:1688:128:WilStaging_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:1688:128:WilStaging_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:1688:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:1688:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:3872:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:3872:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:4192:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:4192:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:4192:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:5168:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:5168:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SyncRootManager
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_****
Ipc         \Sessions\1\BaseNamedObjects\WatsonDataAccess
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc      O  \BaseNamedObjects\CoreMessagingRegistrar
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\msctf.serverDefault1
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMCTL32.dll
Ipc      O  \KnownDlls\coml2.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\gdiplus.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NORMALIZ.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\wow64.dll
Ipc      O  \KnownDlls\wow64cpu.dll
Ipc      O  \KnownDlls\wow64win.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\bcryptPrimitives.dll
Ipc      O  \KnownDlls32\cfgmgr32.dll
Ipc      O  \KnownDlls32\clbcatq.dll
Ipc      O  \KnownDlls32\combase.dll
Ipc      O  \KnownDlls32\coml2.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\gdi32full.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel.appcore.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\MSCTF.dll
Ipc      O  \KnownDlls32\msvcp_win.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\NORMALIZ.dll
Ipc      O  \KnownDlls32\NSI.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\powrprof.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\sechost.dll
Ipc      O  \KnownDlls32\SHCORE.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\ucrtbase.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\win32u.dll
Ipc      O  \KnownDlls32\windows.storage.dll
Ipc      O  \KnownDlls32\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5AppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-jitv_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5SFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5SFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5vfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System16
Ipc      O  \RPC Control\ClickToRun_Pipeline16
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\LRPC-a1b378adf5955b79e1
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\samss lpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\DwmApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \Sessions\1\Windows\Theme4206332059
Ipc      O  \Sessions\1\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme1088777642
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\00000036
Pipe        \Device\CNG
Pipe        \Device\Harddisk0\DR0
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \device\namedpipe\srvsvc
Pipe        \device\namedpipe\wkssvc
Pipe        \Device\Ndis
Pipe        \Device\NDMP3
Pipe        \Device\NDMP4
Pipe        \Device\NDMP5
Pipe     O  \Device\Afd
Pipe     O  \Device\NamedPipe\hmpalert
Pipe     O  \device\namedpipe\hmpalert
Pipe     O  \Device\NamedPipe\hmpalert
Pipe     O  \device\namedpipe\hmpalert
Pipe     O  \Device\NetBT_Tcpip_{20500399-7102-4945-989A-FEC02AFAF9A1}
Pipe     O  \Device\NetBT_Tcpip_{25B53051-3F5A-4F60-BF25-5B78401613DB}
Pipe     O  \Device\NetBT_Tcpip_{48A845DB-ACF2-49D6-A4E9-2B49842FDD53}
Pipe     O  \Device\NetBT_Tcpip_{9CFEF7D5-E8F6-4DB1-BE26-A57D1DED2DB2}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  Ole****ThreadWndClass
WinCls   O  Shell_TrayWnd
WinCls   X  ApplicationManager_DesktopShellWindow
WinCls   X  Progman

Trying to create new pptx,

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume4
(Drive)     \Device\HarddiskVolume6
(Drive)     \Device\HarddiskVolume7
Clsid       -------------------------------
Clsid       {275C23E2-3747-11D0-9FEA-00AA003F8646} Multi Language Support
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid       unknown
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\[CoreUI]-PID(1140)-TID(1348) 8d442328-09b8-40aa-8d0b-2d5c207a2c64
Ipc         \BaseNamedObjects\[CoreUI]-PID(4576)-TID(4684) 21f9424f-2fe0-4c35-ae2d-f44c95197b69
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_1280.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_16.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_1920.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_256.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_2560.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_32.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_48.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_768.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_96.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_custom_stream.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_exif.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!IconCacheInit
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterEvent
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterMutex
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_sr.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide.db!df****tainer
Ipc         \BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide_alternate.db!df****tainer
Ipc         \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\keysvc
Ipc         \RPC Control\LRPC-56888dbd965c3666bf
Ipc         \RPC Control\LRPC-a1b378adf5955b79e1
Ipc         \RPC Control\OLE112C151719B9CF6BE8FE2BDD35F9
Ipc         \RPC Control\protected_storage
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}16.0
Ipc         \Sessions\1\BaseNamedObjects\10ACB_GETTING_DATA10_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACB_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACBBD_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACB10_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACBPIDS_S-1-5-5-0-251888
Ipc         \Sessions\1\BaseNamedObjects\3c227ce2-0131-4d11-8a2f-52fe04fd611c
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\5CAC3FAB-87F0-4750-984D-D50144543427Office-VER16
Ipc         \Sessions\1\BaseNamedObjects\69545831-0931-4328-8676-335423887A86-Office1607830_S-1-5-21-3959966219-1940094108-758271764-1001
Ipc         \Sessions\1\BaseNamedObjects\A1D62C73-3712-4bf7-A524-ACE967A8C7D7_Office16
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::1140
Ipc         \Sessions\1\BaseNamedObjects\AmiSharedMutex_2428
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000b.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_1280.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_16.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_1920.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_256.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_2560.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_32.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_48.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_768.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_96.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_custom_stream.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_exif.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!12f1b98
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!IconCacheInit
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwReaderRefs
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterEvent
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_idx.db!rwWriterMutex
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_sr.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\C::Users:****:AppData:Local:Microsoft:Windows:Explorer:iconcache_wide_alternate.db!df****tainer
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\EF46F207-682E-44D0-B511-33F2BD9D52DB-VER16
Ipc         \Sessions\1\BaseNamedObjects\F0A8F9DC-1F5E-4ED1-A20B-C6265E95C6ED-VER16
Ipc         \Sessions\1\BaseNamedObjects\F99C425F-9135-43ed-BD7D-396DE488DC53_Office16
Ipc         \Sessions\1\BaseNamedObjects\HWNDInterface:c0652
Ipc         \Sessions\1\BaseNamedObjects\Office16.B1E641B5-F92B-4B82-83B7-10DC868435E8
Ipc         \Sessions\1\BaseNamedObjects\PP16Running_S-1-5-21-3959966219-1940094108-758271764-1001
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1140
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2428
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3740
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_5896
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6100
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_676
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorMutex
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorPreference
Ipc         \Sessions\1\BaseNamedObjects\SM0:1140:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:1140:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:2428:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:2428:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:6100:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:6100:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:6100:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_****
Ipc         \Sessions\1\BaseNamedObjects\WatsonDataAccess
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcess1140
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcessComplete1140
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc         \WindowsErrorReportingServicePort
Ipc      O  \BaseNamedObjects\CoreMessagingRegistrar
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\msctf.serverDefault1
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMCTL32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\gdiplus.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NORMALIZ.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\wow64.dll
Ipc      O  \KnownDlls\wow64cpu.dll
Ipc      O  \KnownDlls\wow64win.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\bcryptPrimitives.dll
Ipc      O  \KnownDlls32\cfgmgr32.dll
Ipc      O  \KnownDlls32\clbcatq.dll
Ipc      O  \KnownDlls32\combase.dll
Ipc      O  \KnownDlls32\COMDLG32.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\gdi32full.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel.appcore.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\MSCTF.dll
Ipc      O  \KnownDlls32\msvcp_win.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\NORMALIZ.dll
Ipc      O  \KnownDlls32\NSI.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\powrprof.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\sechost.dll
Ipc      O  \KnownDlls32\SHCORE.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\ucrtbase.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\win32u.dll
Ipc      O  \KnownDlls32\windows.storage.dll
Ipc      O  \KnownDlls32\WINTRUST.dll
Ipc      O  \KnownDlls32\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5AppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-jitv_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5APPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5SFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5SFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-a9613e64-b4a1-4269-abb2-d7162dad56e5vfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System16
Ipc      O  \RPC Control\ClickToRun_Pipeline16
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\LRPC-a1b378adf5955b79e1
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\samss lpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\DwmApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \Sessions\1\Windows\Theme4206332059
Ipc      O  \Sessions\1\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme1088777642
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\00000036
Pipe        \Device\CNG
Pipe        \Device\Harddisk0\DR0
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \device\namedpipe\wkssvc
Pipe        \Device\Ndis
Pipe        \Device\NDMP3
Pipe        \Device\NDMP4
Pipe        \Device\NDMP5
Pipe     O  \Device\Afd
Pipe     O  \device\namedpipe\hmpalert
Pipe     O  \Device\NamedPipe\hmpalert
Pipe     O  \device\namedpipe\hmpalert
Pipe     O  \Device\NetBT_Tcpip_{20500399-7102-4945-989A-FEC02AFAF9A1}
Pipe     O  \Device\NetBT_Tcpip_{25B53051-3F5A-4F60-BF25-5B78401613DB}
Pipe     O  \Device\NetBT_Tcpip_{48A845DB-ACF2-49D6-A4E9-2B49842FDD53}
Pipe     O  \Device\NetBT_Tcpip_{9CFEF7D5-E8F6-4DB1-BE26-A57D1DED2DB2}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  Ole****ThreadWndClass
WinCls   O  Shell_TrayWnd
WinCls   X  ApplicationManager_DesktopShellWindow
WinCls   X  Progman
Chris

downloaderfan
Posts: 10
Joined: Wed Mar 08, 2017 7:15 pm

Re: Powerpoint 2016 C2R issue

Post by downloaderfan » Thu Apr 27, 2017 10:31 am

DDE issue is with Excel in that I cannot directly open sheets by double clicking on them but need to go through opening Excel and navigating to the file I want to open. The same issue syrinx provided DDE registry changes to fix for non-C2R versions. I think they might work for C2R as well but ideally would like Invincea to set (and repair) registry as part of the install/uninstall process if needed to make Excel work rather than a 'home made' fix from an, albeit very knowledgeable, user for a different Office product. Works fine when not sandboxed.
I'm facing these exact issues in sandboxie right now.(Windows 10 Creator's update installed) Excel files need to be dragged and dropped into Excel for it to open. Powerpoint just refuses to open the file saying Sorry, Powerpoint can't read "File name.pptx"

Funny thing is I tested sandboxie inside a virtual machine (Windows 10 in VMware, anniversary update installed) and this problem didn't occur. Neither is my antivirus causing this because this error appears even if I completely disable my anti-virus. Also, this problem didn't occur before creator's update on my host machine. Pretty sure something in Creator's update is causing this.

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Thu Apr 27, 2017 10:39 am

Hello downloaderfan,

We are still unable to reproduce this issue.
What's your antivirus?

Can you please post your output of the Resource Access Monitor, as explained in my previous post?
We might find something there after comparing both of your results.

Regards,
Barb.-

downloaderfan
Posts: 10
Joined: Wed Mar 08, 2017 7:15 pm

Re: Powerpoint 2016 C2R issue

Post by downloaderfan » Thu Apr 27, 2017 10:50 am

Alright, I started Resource Access Monitor, tried to open an existing pptx file, the powerpoint error displayed and this is what came up.

Code: Select all

(Drive)     \Device\0000005f
(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume5
(Drive)     \Device\HarddiskVolume7
Clsid       -------------------------------
Clsid       {00021401-0000-0000-C000-000000000046} Shortcut
Clsid       {0002E005-0000-0000-C000-000000000046} Component Categories Manager
Clsid       {275C23E2-3747-11D0-9FEA-00AA003F8646} Multi Language Support
Clsid       {88D96A0C-F192-11D4-A65F-0040963251E5} SAX XML Reader 6.0
Clsid       {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
Clsid       unknown
Clsid    O  {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\[CoreUI]-PID(15588)-TID(9628) efe4938c-8657-437f-b6ec-d2061b496c9c
Ipc         \BaseNamedObjects\[CoreUI]-PID(4184)-TID(3604) f547dbb6-19fd-4f67-af01-b3fb6326e43a
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000003.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\keysvc
Ipc         \RPC Control\LRPC-ebe2c0c1675c688fb8
Ipc         \RPC Control\LRPC-eec8b8354ce55230ee
Ipc         \RPC Control\OLEBEAB5FD55FDAEC1AE5C8D374A27F
Ipc         \RPC Control\OLECC364EF8D8C48BA612117ABC4EFE
Ipc         \RPC Control\protected_storage
Ipc         \RPC Control\PRRNameService:15588
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{D2E68709-534D-4786-A9B7-D2364CACDA8F}16.0
Ipc         \Sessions\1\BaseNamedObjects\04950461-8c5b-48c5-867a-ede07f13d4b2
Ipc         \Sessions\1\BaseNamedObjects\10ACB_GETTING_DATA10_S-1-5-5-0-376865
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACB_S-1-5-5-0-376865
Ipc         \Sessions\1\BaseNamedObjects\10FM_ACBBD_S-1-5-5-0-376865
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACB10_S-1-5-5-0-376865
Ipc         \Sessions\1\BaseNamedObjects\10MU_ACBPIDS_S-1-5-5-0-376865
Ipc         \Sessions\1\BaseNamedObjects\1DefaultTIPSharedMemory
Ipc         \Sessions\1\BaseNamedObjects\2BF388D5-6F8C-40A0-A7EE-996D005C4E14_Office16
Ipc         \Sessions\1\BaseNamedObjects\36C874D4-37D6-45CF-B35F-78D0BF51EF48.Office16_MruPlaceRequest_ad5611fe0df67200_LiveId_PowerPoint_en-US
Ipc         \Sessions\1\BaseNamedObjects\552FFA80-3393-423d-8671-7BA046BB5906
Ipc         \Sessions\1\BaseNamedObjects\A1D62C73-3712-4bf7-A524-ACE967A8C7D7_Office16
Ipc         \Sessions\1\BaseNamedObjects\A78D6334-3EB4-4EA6-917C-4F5F51CFAF21.Office16_MruCache_ad5611fe0df67200_LiveId_PowerPoint
Ipc         \Sessions\1\BaseNamedObjects\AirDrop::15588
Ipc         \Sessions\1\BaseNamedObjects\AmiSharedMutex_560
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000003.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users************AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users************AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\C0F1D59C-BBA6-4354-81BD-8666FB4489AC.Office16_MruDocumentRequest_ad5611fe0df67200_LiveId_PowerPoint_en-US
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\ComTaskPool:14008
Ipc         \Sessions\1\BaseNamedObjects\ComTaskPool:15588
Ipc         \Sessions\1\BaseNamedObjects\F99C425F-9135-43ed-BD7D-396DE488DC53_Office16
Ipc         \Sessions\1\BaseNamedObjects\HWNDInterface:180a4e
Ipc         \Sessions\1\BaseNamedObjects\Office16.B1E641B5-F92B-4B82-83B7-10DC868435E8
Ipc         \Sessions\1\BaseNamedObjects\OleDfRootAEF70D8609605D36
Ipc         \Sessions\1\BaseNamedObjects\OleDfRootF4E3AD647483EDE9
Ipc         \Sessions\1\BaseNamedObjects\PP16Running_S-1-5-21-2969942475-422442484-3385974503-1002
Ipc         \Sessions\1\BaseNamedObjects\ProcmonExternalLoggerEnabled
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13024
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_13292
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14008
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_14200
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_15588
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2724
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_560
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_844
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ProtectedStorage_Section
Ipc         \Sessions\1\BaseNamedObjects\SBIE_WindowsInstallerInUse
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorMutex
Ipc         \Sessions\1\BaseNamedObjects\SessionImmersiveColorPreference
Ipc         \Sessions\1\BaseNamedObjects\SM0:14008:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:14008:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:14008:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:14200:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:14200:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:14200:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:15588:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:15588:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:560:64:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:560:64:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SyncRootManager
Ipc         \Sessions\1\BaseNamedObjects\UrlZonesSM_**********
Ipc         \Sessions\1\BaseNamedObjects\WatsonDataAccess
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcess15588
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcessComplete15588
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc         \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc         \WindowsErrorReportingServicePort
Ipc      O  \BaseNamedObjects\CoreMessagingRegistrar
Ipc      O  \BaseNamedObjects\FontCachePort
Ipc      O  \BaseNamedObjects\msctf.serverDefault1
Ipc      O  \BaseNamedObjects\PREvent15588#4dcf1dda
Ipc      O  \KernelObjects\HighMemoryCondition
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\Wow64.dll
Ipc      O  \KnownDlls\Wow64cpu.dll
Ipc      O  \KnownDlls\Wow64win.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\bcryptPrimitives.dll
Ipc      O  \KnownDlls32\cfgmgr32.dll
Ipc      O  \KnownDlls32\clbcatq.dll
Ipc      O  \KnownDlls32\combase.dll
Ipc      O  \KnownDlls32\COMDLG32.dll
Ipc      O  \KnownDlls32\coml2.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\gdi32full.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel.appcore.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\MSCTF.dll
Ipc      O  \KnownDlls32\msvcp_win.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\NORMALIZ.dll
Ipc      O  \KnownDlls32\NSI.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\powrprof.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\sechost.dll
Ipc      O  \KnownDlls32\SHCORE.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\ucrtbase.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\win32u.dll
Ipc      O  \KnownDlls32\windows.storage.dll
Ipc      O  \KnownDlls32\WINTRUST.dll
Ipc      O  \KnownDlls32\WS2_32.dll
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dAppvEnterprise_vcom_subsystem
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dAPPV-jitv_server
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dAPPV-RSOD_SERVER
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dAPPV-VIRTMAN-NOTIFICATIONS
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dAPPV-VREG_SERVER
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dSFT-venv_server
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dSFT-vobjects_server
Ipc      O  \RPC Control\AppV-ISV-ce169452-44de-4ad4-b272-5230c18a269dvfs_subsystem
Ipc      O  \RPC Control\C2RClientAPI_Server_System16
Ipc      O  \RPC Control\ClickToRun_Pipeline16
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\LRPC-ebe2c0c1675c688fb8
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\PRRemote:15588
Ipc      O  \RPC Control\samss lpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc      O  \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefault1
Ipc      O  \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \Sessions\1\Windows\Theme4200592202
Ipc      O  \Sessions\1\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme3803866950
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\00000037
Pipe        \Device\0000005f
Pipe        \Device\CNG
Pipe        \Device\Harddisk0\DR0
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume5
Pipe        \Device\HarddiskVolume6
Pipe        \Device\HarddiskVolume7
Pipe        \Device\HarddiskVolume8
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \device\namedpipe\srvsvc
Pipe        \device\namedpipe\wkssvc
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe        \Device\NvAdminDevice
Pipe     O  \Device\Afd
Pipe     O  \Device\NetBT_Tcpip_{075B2BF7-2D9D-471D-9192-2EB06FACE411}
Pipe     O  \Device\NetBT_Tcpip_{34D61B89-97A4-407C-B416-843DED0831DD}
Pipe     O  \Device\NetBT_Tcpip_{8CB81693-3A59-45DB-BE36-1ADA720D0729}
Pipe     O  \Device\NetBT_Tcpip_{A817489A-092B-4CCD-B0BD-AC048C722D99}
Pipe     O  \Device\NetBT_Tcpip_{CAC10716-C8E8-40F9-B8C8-628DCA48A7D3}
Pipe     O  \Device\NetBT_Tcpip_{E0CD99A0-F1CE-440F-9187-EB49AB6F47DE}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls      NetUICtrlNotifySink
WinCls   O  OleMainThreadWndClass
WinCls   O  REListbox20W
WinCls   O  Shell_TrayWnd
WinCls   X  ApplicationManager_DesktopShellWindow
WinCls   X  MsoCommandBarPopup
WinCls   X  OfficeTooltip
WinCls   X  Progman
Antivirus is Kaspersky Internet Security 16.0.0.614(i)

cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Re: Powerpoint 2016 C2R issue

Post by cj716 » Fri Apr 28, 2017 6:58 pm

downloaderfan wrote:I'm facing these exact issues in sandboxie right now.(Windows 10 Creator's update installed) Excel files need to be dragged and dropped into Excel for it to open. Powerpoint just refuses to open the file saying Sorry, Powerpoint can't read "File name.pptx"

Funny thing is I tested sandboxie inside a virtual machine (Windows 10 in VMware, anniversary update installed) and this problem didn't occur. Neither is my antivirus causing this because this error appears even if I completely disable my anti-virus. Also, this problem didn't occur before creator's update on my host machine. Pretty sure something in Creator's update is causing this.
Good to hear I'm not alone. Hopefully they'll find a cause but agree the Powerpoint issue may well be a CU related. I also had no issues before. The DDE issue goes back to Win 8 though on several versions of C2R and standard install versions Office from 2010 up for me. I can confirm Syrinx reg fix for non-C2R also works for C2R, for me at any rate, but I've undone it as I don't think individual users should have to hack the registry to get a security product to work regardless of how badly MS have messed up with DDE.

Rgards
Chris

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Tue May 30, 2017 11:06 am

All,

The devs are still looking into this one (still cannot reproduce it).
Can somebody please post a PML for them to review?:

https://technet.microsoft.com/en-us/sys ... nitor.aspx
Launch procmon, reproduce the issue in SBIE, stop procmon (hit the magnifying glass) .
Go to File-->Save and upload the log (you may need to use a free file hosting site as the logs tend to be big).

Regards,
Barb.-

cj716
Posts: 102
Joined: Tue Apr 06, 2010 8:21 am

Re: Powerpoint 2016 C2R issue

Post by cj716 » Fri Jun 02, 2017 6:19 pm

Sorry Barb missed this, Have pm'd location for log fie.

Thanks
Chris

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Fri Jun 02, 2017 6:48 pm

cj716,

Thank you very much.
I will send it to the devs.

Regards,
Barb.-

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R issue

Post by Barb@Invincea » Mon Jun 05, 2017 10:39 am

All,

The devs found a solution for this issue (thanks cj716 for additional tests), please try the following:

Right- click on a Sandbox --> Sandbox settings
Resource Access --> Window Access
Click Add and paste--> mdiclass
Hit Apply, hit Ok
Go to Configure --> Reload Configuration
Test opening a pps file inside that sandbox.

Regards,
Barb.-

Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Powerpoint 2016 C2R unable to launch

Post by Barb@Invincea » Wed Jul 26, 2017 5:28 pm

Fixed in Beta 5.21.2
viewtopic.php?f=62&t=24690

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest