SBIE2101 Error Dialog - NirmAuctionHouse.exe [CLOSED]

[Stardance]

After installing a program and configuring a sandbox in which to launch and run it, Sandboxie displayed a dialog that has the following lines:

SBIE2224 Sandboxed program has crashed: NirnAuctionHouse.exe [NAH_box]
SBIE2101 Object name not found: \Device\Afd, error OpenFile (C0000022) access=0016019F initialized=1
SBIE2101 Object name not found: \Device\Afd, error OpenFile (C0000022) access=0016019F initialized=1
SBIE2101 Object name not found: \Device\Afd, error OpenFile (C0000022) access=0016019F initialized=1
SBIE2101 Object name not found: \Device\Afd, error OpenFile (C0000022) access=0016019F initialized=1
SBIE2101 Object name not found: \Device\Afd, error OpenFile (C0000022) access=0016019F initialized=1

I cannot find any documentation about SBIE2101 other than it was changed in a past version of Sandboxie.

Any information and advice that you can offer about this error and, perhaps, how to resolve it, will be very much appreciated.

[henryg]

These "Object name not found" errors are totally useless to us humans

[Barb@Invincea]

Hello Stardance,

I have moved your post to the problem reports section.
Please provide the required info so that we can better assist you:
viewtopic.php?f=11&t=19746

Regards,
Barb.-

[Stardance]

FYI: I did not post my original message in the Problem Reports section because I did not think this is likely to be a problem with Sandboxie. Then again, it hasn't been established yet as to why the program crashes when it is launched in the sandbox that Sandboxie creates. I have not attempted to run the program outside of a sandbox because of the risks that are implicit in connections via the Internet -- risks which are, in my humble estimation, increased substantially by the context in which the program is used. If it cannot run in a sandbox, then I won't use it.

(1) The Windows version: 64-bit Windows 7 Professional SP1 (updated with all known applicable updates as of this writing). The system loads and runs the current version of Microsoft Essentials for anti-malware detection, and the signature file is updated at least once each day (scheduled).

(2) Sandboxie version: 5.20 (64-bit)

(3) The program that I want to sandbox is referred to by the first line of the error message dialog displayed by Sandboxie (see the OP): NirnAuctionHouse.exe 0.0.18 (beta).

It is installed as a part of the "Nirn Auction House" add-on for "The Elder Scrolls Online" (TESO, an MMORPG). The program connects via the Internet to a server and sends/receives data to/from the server, which it reads from and stores in files that are created by the add-on per se, as the add-on is executed by the TESO game client. (The game client contains a Lua interpreter for the executable source-code files of the add-on. Add-ons are loaded by the game client after the game client begins running.)

However, continuous communication between an add-on running in the game client's memory space and any other executing software is not permitted by the game client. The game client itself does not interact with NirnAuctionHouse.exe. While play is in progress, the game client does not allow other programs to access files created by any add-on as it executes. The add-on itself only writes data that it creates and/or collects to, and/or reads data from, files that it creates on the player's computer in a specific folder used by all other add-ons, too. The folder is created, when the game is installed, with the path: C:/Users/UserAccountName/My Documents/The Elder Scrolls/Live/SavedVariables

The independent program also reads and writes data from/to the add-on's files in the /SavedVariables folder (but cannot do that while the player plays the game). To allow access, the player must either reload the game client UI, log-out of the character which they are playing, or quit the game. It says a lot about TESO features for buying and selling items in-game that players are actually willing to repeatedly reload the game UI, so that the independent program can read data saved by the add-on before the UI reload occurs, and can write data which the add-on can read after the UI is reloaded.

Notes:

• (a) Since it communicates via the Internet to the game host, I run the game client in a Sandboxie sandbox.
• (b) Presumably, the independent NirnAuctionHouse.exe is a 32-bit executable running in compatibility mode on my 64-bit computer, insofar as there is no evident inclusion of a 64-bit executable in the add-on package.
• (c) Also, I run the independent program for another add-on, "Tamriel Trade Centre," in a different Sandboxie sandbox. It operates with the same restrictions as I have described above. There were a few initial problems configuring the sandbox for it, but those were readily resolved.

--------------------------------------- MERGED POST ---------------------------------------
Following is the global configuration for Sandboxie.ini followed by the specific configuration for the NirnAuctionHouse.exe (NAH_box) and the User Settings written by Sandboxie:

Code: Select all

[GlobalSettings]

ActivationPrompt=n
Template=nVidia_Stereoscopic3D
Template=Logitech_G15_Keyboard
Template=OfficeLicensing
Template=Microsoft_Security_Essentials
Template=Microsoft_MSMQ
Template=LastPass
TemplateReject=WindowsLive
TemplateReject=KeyScrambler
ForceDisableSeconds=10

[TemplateSettings]

Template=LastPass

[Template_Local_Secure_Directories]

Tmpl.Title=Local Secure Directories
Tmpl.Class=WebBrowser
ClosedFilePath=!firefox.exe,%Local AppData%\Mozilla\Firefox
ClosedFilePath=!firefox.exe,%AppData%\Mozilla\Firefox
ClosedFilePath=!iexplore.exe,%Favorites%
ClosedFilePath=!iexplore.exe,%Cookies%
ClosedFilePath=!chrome.exe,googleupdate.exe,%Local AppData%\Google\Chrome
ClosedFilePath=!chrome.exe,googleupdate.exe,%AppData%\Google\Chrome
ClosedFilePath=!wmplayer.exe,C:\Program Files\Windows Media Player\

[Template_Local_AutoIgnore_Directories]

Tmpl.Title=Local AutoIgnore Directories
Tmpl.Class=WebBrowser
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Roaming\Microsoft\Windows\Recent
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Roaming\Microsoft\Windows\Temporary Internet Files
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Local\Temp
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Roaming\Adobe\FlashPlayer
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Roaming\Adobe\Macromedia
AutoRecoverIgnore=C:\Users\SYSOP\AppData\Roaming\Macromedia

 ....

[NAH_box]

Enabled=y
ConfigLevel=7
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=Local_Secure_Directories
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
Template=Local_AutoIgnore_Directories
BorderColor=#00FFFF,ttl
LingerProcess=NirnAuctionHouse.exe
LeaderProcess=NirnAuctionHouse.exe
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
ProcessGroup=<InternetAccess>,NirnAuctionHouse.exe,dllhost.exe,WerFault.exe
ProcessGroup=<StartRunAccess>,NirnAuctionHouse.exe,dllhost.exe,notepad.exe,WerFault.exe
CopyLimitKb=98304
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedFilePath=NirnAuctionHouse.exe,D:\
ClosedFilePath=NirnAuctionHouse.exe,E:\
ClosedFilePath=NirnAuctionHouse.exe,F:\
OpenFilePath=NirnAuctionHouse.exe,C:\Users\SYSOP\My Documents\Elder Scrolls Online\live\AddOns\NirnAuctionHouse\
OpenFilePath=NirnAuctionHouse.exe,C:\Users\SYSOP\My Documents\Elder Scrolls Online\live\SavedVariables\
ReadFilePath=NirnAuctionHouse.exe,C:\Windows\
ClosedIpcPath=!<StartRunAccess>,*

[UserSettings_0D9E023F]

SbieCtrl_UserName=sysop
SbieCtrl_ShowWelcome=N
SbieCtrl_ReSyncContextMenu=N
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_HideWindowNotify=N
SbieCtrl_Hidden=Y
SbieCtrl_ActiveView=40022
SbieCtrl_RecoverTarget=E:\SCRAPBOOK\backup
SbieCtrl_RecoverTarget=E:\TEMP
SbieCtrl_RecoverTarget=E:\Living\Finances\Online Bill Payments
SbieCtrl_RecoverTarget=E:\COMPUTER - SECURITY\HOSTS\Unpack
SbieCtrl_RecoverTarget=E:\BETHESDA ES5 SKYRIM
SbieCtrl_SaveRecoverTargets=y
SbieCtrl_AutoApplySettings=y
SbieCtrl_EnableLogonStart=Y
SbieCtrl_EnableAutoStart=Y
SbieCtrl_AddDesktopIcon=N
SbieCtrl_AddQuickLaunchIcon=N
SbieCtrl_AddContextMenu=Y
SbieCtrl_AddSendToMenu=Y
SbieCtrl_ReloadConfNotify=N
SbieCtrl_EditConfNotify=n
SbieCtrl_WindowCoords=46,1,801,484
SbieCtrl_HideMessage=2205,CloseClipboard C0000058
SbieCtrl_HideMessage=2211,wuauserv
SbieCtrl_ProcessViewColumnWidths=250,70,310
SbieCtrl_BoxExpandedView=Advisor,Chromebox,DefaultBox,Discordbox,Firebox,MSIEbox,TESO,Ventbox

[UserSettings_11040256]

SbieCtrl_UserName=wow_se
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=865285408764
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_WindowLeft=211
SbieCtrl_WindowTop=161
SbieCtrl_WindowWidth=638
SbieCtrl_WindowHeight=434
SbieCtrl_ActiveView=40021
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310
SbieCtrl_BoxExpandedView_Beachbox=y
SbieCtrl_BoxExpandedView_DefaultBox=y
SbieCtrl_BoxExpandedView_MediaBox=y

[UserSettings_0C1E020D]

SbieCtrl_UserName=gamer
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=1420256969
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_WindowCoords=200,150,928,529
SbieCtrl_ActiveView=40021

....

[Barb@Invincea]

Hello Stardance,

It looks like I need the Elder Scrolls online to test this, and there doesn't seem to be a free demo (free to play week was some months ago). Do you know if they offer a free demo anywhere?
I did download the Auction House and tried launching it on its own and received the same error you did. It also crashes outside Sandboxie, so it may not even work, I cannot tell for sure without the game, but it crashed as soon as I tried launching it.

Try testing it in a new Sandbox with default settings, see if that makes a difference.
While testing in the new Sandbox, try disabling your Antivirus and running the program Sandbox to see if that makes a difference.

I am not sure if your game would run Sandboxed at all, but you may need to run both applications in the same environment, isolating one may not allow proper communication. (You can see if you can launch the game inside Sandboxie, no guarantees it will work).

At that point, if it still fails, try launching the Auction House on your host to ensure the application at least opens outside Sandboxie (no need for you to do anything in it, just see if you get an error message right away like I did). If it does work, then let's try this:
Please clear the contents of the new Sandbox and re-test it to provide the output of your Resource Access Monitor (please use the "</>" button to format it).
https://www.sandboxie.com/ResourceAccessMonitor

Regards,
Barb.-

[Stardance]

@Barb
As far as I can determine, there is no free demonstration software, or even a standing offer for a trial period, for "The Elder Scrolls Online". (Don't get me started about Zenimax Online Services and its policies, practices, and product.)

(1) As I stated in the first "Note" at the end of my second post, I run "The Elder Scrolls Online" game client in a sandbox without any problems. As stated in the third note, I also run the "Tamriel Trade Centre" add-on's independent client in a sandbox after resolving some initial problems.

Since interaction between TESO game client per se, and any add-on's independent executable is never permitted, there is no reason to run them in the same sandbox. It would be an exploit of a security vulnerability in the game client if unauthorized communication with any other program were to occur.

(2) Reluctantly, I decided to run NirnAuctionHouse.exe un-sandboxed just to see whether it would run. It did, and it displays a dialog "Server Link" which has two tabs labeled "Normal Usage" and "Debugging", respectively. The Debugging tab has six buttons that the player can use to test the program's features, but nothing that appears useful to debugging any failure to launch (after all, we don't have access to the Debugging tab unless the software at least runs ).

(3) Then, I examined the content of the "NAH_box" sandbox in which I had attempted to run NirnAuctionHouse.exe. On the face of it, the program reads, and/or create a file(s) in C:\Windows\System32\catroot2\ and modifies the two respective catdb files in the two existing subfolders. I have verified that the program did that when it launched un-sandboxed.

Reluctantly, I have decided to grant access to them, if only to see whether the program will launch successfully in the sandbox, i.e., assuming that Sandboxie and/or MSE do not intervene:

OpenFilePath=NirnAuctionHouse.exe,C:\Windows\System32\catroot2\

Whether this might introduce a security vulnerability which could be exploited, I have no idea.

Quote from your most recent reply: "Please clear the contents of the new Sandbox and re-test it to provide the output of your Resource Access Monitor (please use the '</>' button to format it).
https://www.sandboxie.com/ResourceAccessMonitor"

I have deleted the contents of NAH_box, and I will attempt to run NirnAuctionHouse.exe with the modified configuration, and capture the data output by the ResourceAccessMonitor.

[Stardance]

As stated previously, I have attempted to launch NirnAuctionHouse.exe in the modified sandbox configuration, and captured the output of the Resource Access Monitor. The program crashed after Sandboxie launched it, as it has before.

When I attempted to attach the file which contains the output by Resource Access Monitor, the forum software responded that the .txt file extension is "invalid". Go figure that one out. Following is the Resource Access Monitor output with the date added at the top and "end of file" after its end:

Code: Select all

2017-08-25

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume4
(Drive)     \Device\HarddiskVolume5
Clsid       -------------------------------
File/Key    -------------------------------
File/Key X  \Device\HarddiskVolume2\Users\*****\Favorites
Image       -------------------------------
Image       *:\program files\sandboxie\sandboxiecrypto.exe
Image       *:\program files\sandboxie\sandboxiedcomlaunch.exe
Image       *:\program files\sandboxie\sandboxierpcss.exe
Image       *:\program files\sandboxie\start.exe
Image       *:\users\sysop\documents\elder scrolls online\live\addons\nirnauctionhouse\nirnauctionhouse.exe
Image       *:\windows\syswow64\werfault.exe
Image       c:\program files (x86)\bonjour\mdnsnsp.dll
Image       c:\program files\sandboxie\32\sbiedll.dll
Image       c:\program files\sandboxie\sbiedll.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\f12799647dc4f4abd2f0f17790337f04\mscorlib.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\0010be521b87651bd6ccb5659564e1c7\system.configuration.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\06de9139a8a97995d2a25727ff269b4e\system.core.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\fdeeac66a35420dcf71ec0f41c75c376\system.drawing.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.web.28b9ef5a#\bddab8977799f342cfb066201d286fca\system.web.extensions.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.web\8373f76f018abf8803f40761f0046c87\system.web.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.windows.forms\ed4a876b5e22073fae7ce945090f759d\system.windows.forms.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\78f1d5fac13efe1e51ffba39670219c2\system.xml.ni.dll
Image       c:\windows\assembly\nativeimages_v4.0.30319_32\system\12bcd8827cc05a2d3e2cbcbf351c5ba2\system.ni.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\diasymreader.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\mscordacwks.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
Image       c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
Image       c:\windows\system32\advapi32.dll
Image       c:\windows\system32\apphelp.dll
Image       c:\windows\system32\atl.dll
Image       c:\windows\system32\bcrypt.dll
Image       c:\windows\system32\certcli.dll
Image       c:\windows\system32\cfgmgr32.dll
Image       c:\windows\system32\clbcatq.dll
Image       c:\windows\system32\comdlg32.dll
Image       c:\windows\system32\credssp.dll
Image       c:\windows\system32\crypt32.dll
Image       c:\windows\system32\cryptbase.dll
Image       c:\windows\system32\cryptnet.dll
Image       c:\windows\system32\cryptsp.dll
Image       c:\windows\system32\cryptsvc.dll
Image       c:\windows\system32\devobj.dll
Image       c:\windows\system32\dhcpcsvc.dll
Image       c:\windows\system32\dhcpcsvc6.dll
Image       c:\windows\system32\dnsapi.dll
Image       c:\windows\system32\dsrole.dll
Image       c:\windows\system32\dwmapi.dll
Image       c:\windows\system32\esent.dll
Image       c:\windows\system32\fwpuclnt.dll
Image       c:\windows\system32\gdi32.dll
Image       c:\windows\system32\imm32.dll
Image       c:\windows\system32\iphlpapi.dll
Image       c:\windows\system32\kernel32.dll
Image       c:\windows\system32\kernelbase.dll
Image       c:\windows\system32\lpk.dll
Image       c:\windows\system32\msasn1.dll
Image       c:\windows\system32\mscoree.dll
Image       c:\windows\system32\msctf.dll
Image       c:\windows\system32\msvcr100.dll
Image       c:\windows\system32\msvcr120_clr0400.dll
Image       c:\windows\system32\msvcrt.dll
Image       c:\windows\system32\mswsock.dll
Image       c:\windows\system32\napinsp.dll
Image       c:\windows\system32\ncrypt.dll
Image       c:\windows\system32\netutils.dll
Image       c:\windows\system32\nlaapi.dll
Image       c:\windows\system32\nsi.dll
Image       c:\windows\system32\ntdll.dll
Image       c:\windows\system32\ntmarta.dll
Image       c:\windows\system32\ole32.dll
Image       c:\windows\system32\oleaut32.dll
Image       c:\windows\system32\pnrpnsp.dll
Image       c:\windows\system32\profapi.dll
Image       c:\windows\system32\propsys.dll
Image       c:\windows\system32\psapi.dll
Image       c:\windows\system32\rasadhlp.dll
Image       c:\windows\system32\rasapi32.dll
Image       c:\windows\system32\rasman.dll
Image       c:\windows\system32\rpcepmap.dll
Image       c:\windows\system32\rpcrt4.dll
Image       c:\windows\system32\rpcrtremote.dll
Image       c:\windows\system32\rpcss.dll
Image       c:\windows\system32\rsaenh.dll
Image       c:\windows\system32\rtutils.dll
Image       c:\windows\system32\samcli.dll
Image       c:\windows\system32\samlib.dll
Image       c:\windows\system32\sechost.dll
Image       c:\windows\system32\secur32.dll
Image       c:\windows\system32\sensapi.dll
Image       c:\windows\system32\setupapi.dll
Image       c:\windows\system32\shell32.dll
Image       c:\windows\system32\shlwapi.dll
Image       c:\windows\system32\sspicli.dll
Image       c:\windows\system32\sxs.dll
Image       c:\windows\system32\user32.dll
Image       c:\windows\system32\usp10.dll
Image       c:\windows\system32\uxtheme.dll
Image       c:\windows\system32\version.dll
Image       c:\windows\system32\vssapi.dll
Image       c:\windows\system32\vsstrace.dll
Image       c:\windows\system32\webio.dll
Image       c:\windows\system32\winhttp.dll
Image       c:\windows\system32\winnsi.dll
Image       c:\windows\system32\winrnr.dll
Image       c:\windows\system32\wldap32.dll
Image       c:\windows\system32\ws2_32.dll
Image       c:\windows\system32\wship6.dll
Image       c:\windows\system32\wshtcpip.dll
Image       c:\windows\syswow64\advapi32.dll
Image       c:\windows\syswow64\bcryptprimitives.dll
Image       c:\windows\syswow64\cfgmgr32.dll
Image       c:\windows\syswow64\credssp.dll
Image       c:\windows\syswow64\crypt32.dll
Image       c:\windows\syswow64\cryptbase.dll
Image       c:\windows\syswow64\cryptsp.dll
Image       c:\windows\syswow64\dbgeng.dll
Image       c:\windows\syswow64\dbghelp.dll
Image       c:\windows\syswow64\dhcpcsvc.dll
Image       c:\windows\syswow64\dhcpcsvc6.dll
Image       c:\windows\syswow64\dnsapi.dll
Image       c:\windows\syswow64\faultrep.dll
Image       c:\windows\syswow64\gdi32.dll
Image       c:\windows\syswow64\imm32.dll
Image       c:\windows\syswow64\iphlpapi.dll
Image       c:\windows\syswow64\kernel32.dll
Image       c:\windows\syswow64\kernelbase.dll
Image       c:\windows\syswow64\lpk.dll
Image       c:\windows\syswow64\msasn1.dll
Image       c:\windows\syswow64\msctf.dll
Image       c:\windows\syswow64\msvcrt.dll
Image       c:\windows\syswow64\nsi.dll
Image       c:\windows\syswow64\ntdll.dll
Image       c:\windows\syswow64\ole32.dll
Image       c:\windows\syswow64\oleaut32.dll
Image       c:\windows\syswow64\profapi.dll
Image       c:\windows\syswow64\psapi.dll
Image       c:\windows\syswow64\rasadhlp.dll
Image       c:\windows\syswow64\rpcrt4.dll
Image       c:\windows\syswow64\schannel.dll
Image       c:\windows\syswow64\sechost.dll
Image       c:\windows\syswow64\sensapi.dll
Image       c:\windows\syswow64\shell32.dll
Image       c:\windows\syswow64\shlwapi.dll
Image       c:\windows\syswow64\sspicli.dll
Image       c:\windows\syswow64\user32.dll
Image       c:\windows\syswow64\userenv.dll
Image       c:\windows\syswow64\usp10.dll
Image       c:\windows\syswow64\version.dll
Image       c:\windows\syswow64\webio.dll
Image       c:\windows\syswow64\wer.dll
Image       c:\windows\syswow64\winhttp.dll
Image       c:\windows\syswow64\winnsi.dll
Image       c:\windows\syswow64\wldap32.dll
Image       c:\windows\syswow64\ws2_32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_a4d981ff711297b6\comctl32.dll
Image       c:\windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757\comctl32.dll
Image       c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll
Image       c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
Image       c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_5c02a265a011fb02\gdiplus.dll
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000034.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\keysvc
Ipc         \RPC Control\keysvc2
Ipc         \RPC Control\OLE4F0CF1C69DC2403C8C924A55496C
Ipc         \RPC Control\OLEAC1CBC7D1E77432AA16221257640
Ipc         \RPC Control\plugplay
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\8fa41ffb-8a06-11e7-902b-1c6f653df3e8
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000034.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000176.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\Cor_Private_IPCBlock_v4_2672
Ipc         \Sessions\1\BaseNamedObjects\CPFATE_2672_v4.0.30319
Ipc         \Sessions\1\BaseNamedObjects\DbgEngEvent_00000D94
Ipc         \Sessions\1\BaseNamedObjects\GdiplusFontCacheFileV1
Ipc         \Sessions\1\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1336
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1956
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_1972
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2672
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3476
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_680
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcess2672
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \WindowsErrorReportingServicePort
Ipc      O  \...\Cor_SxSPublic_IPCBlock
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\CFGMGR32.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\LPK.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\MSCTF.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\NSI.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\USERENV.dll
Ipc      O  \KnownDlls32\USP10.dll
Ipc      O  \KnownDlls32\WLDAP32.dll
Ipc      O  \KnownDlls32\WS2_32.dll
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\senssvc
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\RasPbFile
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Pipe        -------------------------------
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\Ide\IdeDeviceP3T0L0-3
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\NamedPipe\keysvc
Pipe        \device\namedpipe\keysvc
Pipe        \Device\NamedPipe\keysvc
Pipe        \device\namedpipe\keysvc
Pipe        \device\namedpipe\lsarpc
Pipe        \device\namedpipe\samr
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP11
Pipe        \Device\NDMP12
Pipe        \Device\NDMP13
Pipe        \Device\NDMP14
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
Pipe     O  \Device\NetBT_Tcpip_{045CDF1E-C736-4EF6-9C9A-1EF30C7AAB55}
Pipe     O  \Device\NetBT_Tcpip_{68B066A4-287F-4D4B-AD3E-7F045FA27136}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd

------ END OF FILE -----

[Barb@Invincea]

Hello Stardance,

I have attempted to launch NirnAuctionHouse.exe in the modified sandbox configuration

Did you try a new Sandbox with default settings to see if that allows the program to launch?

Since interaction between TESO game client per se, and any add-on's independent executable is never permitted, there is no reason to run them in the same sandbox.

Understood. However, without having TESO installed, attempting to launch the Auction House (outside Sbie) caused it to crash immediately. So maybe they do need to run in the same environment.

Did opening the path to the location work?
You can try using WriteFilePath instead of OpenFilePath, see if that works:
https://www.sandboxie.com/WriteFilePath

Regards,
Barb.-

[Stardance]

During the first test of the sandbox NAH_test, Sandboxie displayed:

SBIE1307 Program cannot access the Internet due to restrictions - NirnAuctionHouse.exe [NAH_test]
SBIE2221 To add the program to Internet Access Restrictions, please double-click on this message line

After I double-clicked on the SBIE2221 line, Sandboxie closed the dialog, then reported:

SBIE2224 Sandboxed program has crashed: NirnAuctionHouse.exe [NAH_test]

So, I deleted the string that Sandboxie added to the sandbox configuration (see configuration that follows), and ran it again to copy the contents to the clipboard before double-clicking the first SBIE2221 line. The outcome was as follows:

SBIE1307 Program cannot access the Internet due to restrictions - NirnAuctionHouse.exe [NAH_test]
SBIE2221 To add the program to Internet Access Restrictions, please double-click on this message line
SBIE2224 Sandboxed program has crashed: NirnAuctionHouse.exe [NAH_test]
SBIE1307 Program cannot access the Internet due to restrictions - WerFault.exe [NAH_test]
SBIE2221 To add the program to Internet Access Restrictions, please double-click on this message line

Sandboxie displayed the SBIE2224 line (i.e.,the program crashed) after I double-clicked the first SBIE2221. But it did not close the dialog, and added the second pair of lines instead. So I copied all of the above lines to the Windows clipboard. (I didn't double-click the second SBIE2221 line.)

Following is the resulting configuration for the sandbox NAH_test after I double-clicked the first SBIE2221 line:

Code: Select all

[NAH_test]

Enabled=y
BoxNameTitle=y
BorderColor=#00FFFF,ttl
ConfigLevel=7
NotifyInternetAccessDenied=y
DropAdminRights=y
Template=Local_Secure_Directories
Template=Local_AutoIgnore_Directories
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
AutoRecover=y
NeverDelete=n
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedFilePath=NirnAuctionHouse.exe,D:\
ClosedFilePath=NirnAuctionHouse.exe,F:\
ClosedFilePath=*\Device\RawIp6
ClosedFilePath=*\Device\Udp6
ClosedFilePath=*\Device\Tcp6
ClosedFilePath=*\Device\Ip6
ClosedFilePath=*\Device\RawIp
ClosedFilePath=*\Device\Udp
ClosedFilePath=*\Device\Tcp
ClosedFilePath=*\Device\Ip
ClosedFilePath=*\Device\Afd*
ClosedFilePath=*\GEARAspiWDMDevice*
ClosedFilePath=D:\
ClosedFilePath=E:\
ClosedFilePath=F:\
OpenFilePath=NirnAuctionHouse.exe,C:\Users\SYSOP\My Documents\Elder Scrolls Online\live\AddOns\NirnAuctionHouse\
OpenFilePath=NirnAuctionHouse.exe,C:\Users\SYSOP\My Documents\Elder Scrolls Online\live\SavedVariables\
OpenFilePath=NirnAuctionHouse.exe,C:\Windows\System32\catroot2\
OpenFilePath=WerFault.exe,C:\Users\SYSOP\AppData\Local\
ReadFilePath=C:\Program Files
ReadFilePath=C:\Program Files (x86)
ReadFilePath=C:\WINDOWS
ReadFilePath=G:\
ProcessGroup=<InternetAccess>,NirnAuctionHouse.exe,dllhost.exe,wermgr.exe,WerFault.exe,NirnAuctionHouse.exe
ProcessGroup=<StartRunAccess>,NirnAuctionHouse.exe,dllhost.exe,wermgr.exe,WerFault.exe

Why did Sandboxie ignore the first entry for the program? In all of the years that I've been running Sandboxie, I cannot recall ever seeing anything like this happen.

NirnAuctionHouse.exe still crashes when I use the above configuration for the sandbox(!!):

SBIE1307 Program cannot access the Internet due to restrictions - NirnAuctionHouse.exe [NAH_test]
SBIE2221 To add the program to Internet Access Restrictions, please double-click on this message line

SBIE2224 Sandboxed program has crashed: NirnAuctionHouse.exe [NAH_test]

SBIE1307 Program cannot access the Internet due to restrictions - WerFault.exe [NAH_test]
SBIE2221 To add the program to Internet Access Restrictions, please double-click on this message line


On the face of it, the reason for the crash is that Sandboxie does not grant access to the Internet regardless of the content of Sandboxie.ini.

NOTES:

• On my computer system, NirnAuctionHouse.exe does launch, run, and successfully connects to a server via the Internet when it is not sandboxed.
• The current installation of NirnAuctionHouse.exe is the most recent release, updated 2017-08-27.

[Stardance]

Hello, Barb:

I used the Sandboxie UI to create a sandbox named NAH_def with the default settings, excepting for the last three lines, which I added because I couldn't find a way to grant access to the files with the sandbox creation UI:

Code: Select all

[NAH_def]

Enabled=y,SYSOP
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=F:\INSTALL
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
LeaderProcess=nirnauctionhouse.exe
CopyLimitKb=128000
OpenFilePath=nirnauctionhouse.exe,%Personal%\Elder Scrolls Online\live\AddOns\NirnAuctionHouse\
OpenFilePath=nirnauctionhouse.exe,%Personal%\Elder Scrolls Online\live\SavedVariables\
OpenFilePath=NirnAuctionHouse.exe,C:\Windows\System32\catroot2\

NirnAuctionHouse.exe still crashes.

If I recall correctly, the program does not run unsandboxed on your computer (without "The Elder Scrolls Online" installed), but it does run unsandboxed on my computer (on which TESO is installed).

• When I install the "Nirn Auction House" add-on, NirnAuctionHouse.exe is installed with all of its other files in the Add-Ons folder in the TESO file tree. That is the reason for the first OpenFilePath statement in the configuration above, and it is launched from that location by using a desktop shortcut, for example:
  • "C:\Program Files\Sandboxie\Start.exe" /box:NAH_box "C:\Users\SYSOP\Documents\Elder Scrolls Online\live\AddOns\NirnAuctionHouse\NirnAuctionHouse.exe"
• The program cannot not run from any other location without access to the folder in the second OpenFilePath statement in the configuration above -- of course, the folder and one or more files that it contains must exist.

In my observation, the program also must have access to the Windows folder in the third OpenFilePath statement, where it will write two new files, and modify the file in each of two respective subfolders. (It takes these actions when the program runs unsandboxed on my computer.)

For what it is worth: originally, I copied the sandbox for the "Tamriel Trade Centre" add-on that I've been running, (TTC_box) in Sandboxie.ini, to follow that one. Then I renamed it, and changed the appropriate lines for the "Nirn Auction House" add-on's NirnAuctionHouse.exe instead. I have run the TTC add-on's independent program without any problems, so I didn't expect any with the NAH add-on's independent program.

In the same vein, I suppose that I could copy the sandbox for "The Elder Scrolls Online" per se, then modify the copy as appropriate for NirnAuctionHouse.exe. But I don't expect that the program will run when Sandboxie launches it, regardless. Please see the other thread I've begun: viewtopic.php?f=11&t=24809.

As noted above, unsandboxed, the program modifies two files in their respective subfolders, and writes two other files, in the following folder:

OpenFilePath=NirnAuctionHouse.exe,C:\Windows\System32\catroot2\

With regard to using WriteFilePath instead, the documentation states:

" This setting is not applicable to files. If the path specified in the setting matches a file, the file will be treated as if it matches a ClosedFilePath setting.

Note: WriteFilePath is implemented internally as an enhanced form of ClosedFilePath. "

So using WriteFilePath would allow NirnAuctionHouse.exe to create the two new ones. Apparently, WriteFilePath would not allow modifying any files, only creating new ones in the two respective subfolders. Since Windows allows the unsandboxed program to change the two existing files in their respective subfolders, I don't see any reason to prevent it from doing that in the sandbox.

NOTE: it is worth bearing in mind that NirnAuctionHouse.exe is still a "beta" program. It might have a flaw in its procedures for accessing the Internet which become evident only while running it in a sandbox. However, I think that the problem is with access to the "named pipe" to which the error messages following the announcement that the program crashed refer (see the OP).

[bo.elam]

Stardance, I would try adding NirnAuctionHouse.exe to programs allowed internet access in Sandbox settings (Not by clicking the SBIE message). Or create a new sandbox, leave default settings in place and run NirnAuctionHouse.exe in it.

Bo

[Syrinx]

I hope you are trolling

Code: Select all

ClosedFilePath=*\Device\RawIp6
ClosedFilePath=*\Device\Udp6
ClosedFilePath=*\Device\Tcp6
ClosedFilePath=*\Device\Ip6
ClosedFilePath=*\Device\RawIp
ClosedFilePath=*\Device\Udp
ClosedFilePath=*\Device\Tcp
ClosedFilePath=*\Device\Ip
ClosedFilePath=*\Device\Afd*

You forgot BlockPort=* :roll:

[Barb@Invincea]

Hello Stardance,

If you want to test opening pipes, you can follow these steps:
https://www.sandboxie.com/OpenPipePath

I am not sure why did you start a second thread, I have combined them.
Please do not create multiple threads for the same issue.

If the program does not run in a default sandbox (with default settings), in the same environment as your game, it just may not be compatible with Sandboxie.

Regards,
Barb.-

[Stardance]

I hope you are trolling

Code: Select all

ClosedFilePath=*\Device\RawIp6
ClosedFilePath=*\Device\Udp6
ClosedFilePath=*\Device\Tcp6
ClosedFilePath=*\Device\Ip6
ClosedFilePath=*\Device\RawIp
ClosedFilePath=*\Device\Udp
ClosedFilePath=*\Device\Tcp
ClosedFilePath=*\Device\Ip
ClosedFilePath=*\Device\Afd*

You forgot BlockPort=*

No, I am not "trolling", just that it has been quite a while since I have encountered a problem, while configuring a sandbox to enable a program to run, which I haven't been able to solve. For what it is worth, I have never understood why the lines that you have quoted above are in the sandbox configurations. And, yes, I have not recently looked-up the BlockPorts template in the separate template file to refresh my memory. ....

That said, comparing the messages which I copied from the Windows clipboard in the OP to your list, thank-you for the reminder(!). The following lines from the Resource Monitor output also appear relevant, such as the ones referring to devices, i.e., Pipe:

Code: Select all

....
Ipc      O  \...\Cor_SxSPublic_IPCBlock
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\CFGMGR32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\DEVOBJ.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\LPK.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\Setupapi.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\USP10.dll
Ipc      O  \KnownDlls\WLDAP32.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\CFGMGR32.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\LPK.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\MSCTF.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\NSI.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\USERENV.dll
Ipc      O  \KnownDlls32\USP10.dll
Ipc      O  \KnownDlls32\WLDAP32.dll
Ipc      O  \KnownDlls32\WS2_32.dll
Ipc      O  \RPC Control\dhcpcsvc
Ipc      O  \RPC Control\dhcpcsvc6
Ipc      O  \RPC Control\DNSResolver
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \RPC Control\senssvc
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc      O  \Sessions\1\BaseNamedObjects\RasPbFile
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \ThemeApiPort
Pipe        -------------------------------
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\Ide\IdeDeviceP3T0L0-3
Pipe        \Device\KsecDD
Pipe        \Device\MountPointManager
Pipe        \Device\NamedPipe\keysvc
Pipe        \device\namedpipe\keysvc
Pipe        \Device\NamedPipe\keysvc
Pipe        \device\namedpipe\keysvc
Pipe        \device\namedpipe\lsarpc
Pipe        \device\namedpipe\samr
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP11
Pipe        \Device\NDMP12
Pipe        \Device\NDMP13
Pipe        \Device\NDMP14
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Afd
Pipe     O  \Device\NetBT_Tcpip_{045CDF1E-C736-4EF6-9C9A-1EF30C7AAB55}
Pipe     O  \Device\NetBT_Tcpip_{68B066A4-287F-4D4B-AD3E-7F045FA27136}
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd

It seems that lines which include an "o" are flagged by the Resource Monitor. As you quoted:

Code: Select all

ClosedFilePath=*\Device\Afd*

As I most recently remarked, I think that the problem is that NirnAuctionHouse.exe attempts to use pipes which Sandboxie does not -- ordinarily -- allow a sandboxed program to use. But I had overlooked the lines in the configuration which you have quoted, and it never occurred to me that BlockPorts template had any bearing on it.

Thank-you for your reply. If you know what "Ipc" and "WinCls" refer to, then please share, or point me to some explanations for them.

[Stardance]

Hello Stardance,

If you want to test opening pipes, you can follow these steps:
https://www.sandboxie.com/OpenPipePath

Thank-you for the reference. I will be taking a look at it, and seeking any other information in the Sandboxie documentation that appears relevant.

I am not sure why did you start a second thread, I have combined them.
Please do not create multiple threads for the same issue.

Unfortunately, the OP for the second thread was omitted while combining them. In it, I reported that, although NirnAuctionHouse.exe was already explicitly included in the <Internet Access> group, Sandboxie displayed SBIE2221 to allow me to "add" the program to the group. I double-clicked on the message. As shown in the sandbox configuration which I quoted in the OP for the second thread, NirnAuctionHouse.exe was added to the end of the existing line which already had that program at the start of the list.

That behavior is probably the result of a malfunction, of a flaw, in Sandboxie per se -- a separate issue entirely. As I asked in the OP, why would Sandboxie do that?

Thus, the second thread. In my humble opinion, that question should be investigated.

If the program does not run in a default sandbox (with default settings), in the same environment as your game, it just may not be compatible with Sandboxie.

Regards,
Barb.-

That is one way to look at it, yes. Frankly, I've had reservations about the "Nirn Auction House" add-on from the outset. In the past, I have given some thought as to how an "auction house" add-on could be created, and concluded that it likely would not be player-friendly without adding features to the API which would introduce security issues. This add-on is one possible way to do it without such changes, but, as I've described before, it is a kludge to use, regardless.

As to "Nirn Auction House" security issues per se, for example, the "server" to which NirnAuctionHouse.exe connects is not identified. I would have to use a utility such as GlassWire to find out the IP address to which the program connects. Who is operating it? Is it secure? .... Regardless, I reckon that I must run the program in a sandbox to prevent it from introducing, whether functioning as, malware. If I cannot do that, then I won't use it.

Thank-you for your time and attention to this matter.