McAfee Firewall - Unable to launch IE and Windows Explorer[SOLVED]

Please post your problem description here

Moderator: Barb@Invincea

Post Reply
menosay
Posts: 4
Joined: Tue Aug 08, 2017 12:08 pm

McAfee Firewall - Unable to launch IE and Windows Explorer[SOLVED]

Post by menosay » Tue Aug 08, 2017 1:09 pm

Since at least yesterday (2017-08-07), IE 11 and Windows Explorer fail to start in Sandboxie on two different machines (the applications I use 99% of the time). No window, no error messages, the executables just die quietly and go away after a few minutes (as seen in the Control window). The Start.exe appears briefly, then, say, iexplore.exe or explorer.exe, then WerFault.exe. Browsing through the files and folders, there is a new crashdump created for each failed instance (in All Users/Microsoft/Windows/WER/ReportQueue).

Firefox and TOR work properly.

Never had a problem before, since I started using SB about 5 years ago. Disabling the McAfee Real-time scanning and Site Advisor have no effect.


Win 10 x64, v.1703, OS Build 15063.413 (Desktop)
Win 10 x64, v.1703, OS Build 15063.502 (Laptop)

Sandboxie v.5.20

McAfee Internet Security v.16.0.1

Browsers:
Internet Explorer 11.413.15063.0 (Update versions 11.0.43)
Firefox v.55.0
TOR Browser 7.0.2
Top
Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Applications not starting anymore

Post by Barb@Invincea » Tue Aug 08, 2017 2:09 pm

Hello menosay,

Have there been any updates to the computers lately? Any McAfee updates perhaps?
Are there any addons added in Internet Explorer ?
Does the issue occur in a new Sandbox with default settings?
Is there any other security software installed?

If the issue persists, please create a new Sandbox with default settings, and provide the results of the Resource Access Monitor:
https://www.sandboxie.com/index.php?Res ... essMonitor

Regards,
Barb.-
Top
bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Applications not starting anymore

Post by bo.elam » Tue Aug 08, 2017 5:44 pm

Hi menosay, what you describe sounds exactly like what happens when the AV messes with the sandbox. Sometimes disabling the AV wont help. I recommend you uninstall Site Advisor first, if you still have a problem afterward, then you should uninstall McAfee. Uninstalling this programs might be the only way to really figure if they are causing the issue. And very likely they are, IMO. I am using same system as you, IE11 and Windows explorer runs fine under SBIE. Its McAfee. Probably yesterdays update broke compatibility.

Bo
Top
menosay
Posts: 4
Joined: Tue Aug 08, 2017 12:08 pm

Re: Applications not starting anymore

Post by menosay » Thu Aug 10, 2017 2:58 am

The laptop finally got the Creator's update on the weekend, but the desktop has had it for a couple of months, so I don't think that's the problem. The AV is constantly updating. It checks every 4 hours for new signature files, and sometimes it gets application updates, but I don't keep track of what happens when. The Web Advisor plugin can be disabled, but it still seems to reload itself (mcsacore.exe) in and out the sandbox (did not try restarting the machine yet). McAfee has the frustrating trait of not being able to stop or reload its applications and services (other than program options, like real-time scanning). I suppose that's a good thing. If I could do it, so could some malware.

Okay, in the last 24 hours Firefox and TOR have been updated (they still work). Now another Windows update to install... I'll get back to this tomorrow.

Below is the Resource Access Monitor output for starting IE 11 on the laptop in a new sandbox with default settings.

Code: Select all

(Drive)     \Device\CdRom0
(Drive)     \Device\HarddiskVolume2
(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume4
(Drive)     \Device\Mup\;LanmanRedirector\;S:0000000000872d86\MYBOOKLIVE\Public
Clsid       -------------------------------
Clsid       {16D51579-A30B-4C8B-A276-0FF4DC41E755} JScript Language
Clsid       {5A90F5EE-16B8-4C2A-81B3-FD5329BA477C} McAfee SACore Component
Clsid       unknown
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{12B3D728-867B-410A-B6A2-0736470E6C25}
Ipc         \BaseNamedObjects\{5E5C36C0-5E7C-471f-84D7-110FDC1AFD0D}
Ipc         \BaseNamedObjects\{5FA6EB3D-8346-4A7C-A948-9768649D555E}
Ipc         \BaseNamedObjects\{6137F41E-523F-4396-AB07-762F39725B81}
Ipc         \BaseNamedObjects\{64C7DD73-FBD5-4B1B-8A82-B49950F36A97}
Ipc         \BaseNamedObjects\{74E09AD5-5226-46A8-A799-DCC13453B999}
Ipc         \BaseNamedObjects\{78E35191-725B-4AFB-BC3A-AF5741A8B025}
Ipc         \BaseNamedObjects\{890D88CD-7C6F-49F9-A00B-1271460AD0E7}
Ipc         \BaseNamedObjects\{8DB68CEC-1C6B-46B8-8808-90838C14CA3F}
Ipc         \BaseNamedObjects\{97893DAB-8483-42EF-84FA-D23FFD6E652D}
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A5C53213-B8A1-4BA7-8991-F40FC9F7719F}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\{AF1A8BA6-1552-4374-A3BA-F992A6EDBF8A}
Ipc         \BaseNamedObjects\{B2C34B5D-C059-49BC-B264-E658CD2FFE47}
Ipc         \BaseNamedObjects\{BD03027C-1667-4085-9F6F-0250DE4375E1}
Ipc         \BaseNamedObjects\{C7339089-517B-40E6-8D22-1897CDC2A9CD}
Ipc         \BaseNamedObjects\{F84F0E05-209D-427A-A977-A5AEAA90EEBA}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\wa_persistentsauishutdownevent
Ipc         \BaseNamedObjects\wa_persistentsauiupdateevent
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\keysvc
Ipc         \RPC Control\OLE7346847B9A565C62A4F330849F22
Ipc         \RPC Control\OLEE7CBC673AEF7DD6DE2D3A55EB95B
Ipc         \Sessions\2\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\2\BaseNamedObjects\{12B3D728-867B-410A-B6A2-0736470E6C25}
Ipc         \Sessions\2\BaseNamedObjects\{46BC1BDE-4934-48F8-A121-40D99020B5E2}Event
Ipc         \Sessions\2\BaseNamedObjects\{46BC1BDE-4934-48F8-A121-40D99020B5E2}MMFile
Ipc         \Sessions\2\BaseNamedObjects\{46BC1BDE-4934-48F8-A121-40D99020B5E2}Semaphore
Ipc         \Sessions\2\BaseNamedObjects\{5BF55CF2-64BC-481D-BFAB-C1438A1F0DB4}
Ipc         \Sessions\2\BaseNamedObjects\{5E5C36C0-5E7C-471f-84D7-110FDC1AFD0D}
Ipc         \Sessions\2\BaseNamedObjects\{5FA6EB3D-8346-4A7C-A948-9768649D555E}
Ipc         \Sessions\2\BaseNamedObjects\{6137F41E-523F-4396-AB07-762F39725B81}
Ipc         \Sessions\2\BaseNamedObjects\{64C7DD73-FBD5-4B1B-8A82-B49950F36A97}
Ipc         \Sessions\2\BaseNamedObjects\{74E09AD5-5226-46A8-A799-DCC13453B999}
Ipc         \Sessions\2\BaseNamedObjects\{78E35191-725B-4AFB-BC3A-AF5741A8B025}
Ipc         \Sessions\2\BaseNamedObjects\{890D88CD-7C6F-49F9-A00B-1271460AD0E7}
Ipc         \Sessions\2\BaseNamedObjects\{8DB68CEC-1C6B-46B8-8808-90838C14CA3F}
Ipc         \Sessions\2\BaseNamedObjects\{97893DAB-8483-42EF-84FA-D23FFD6E652D}
Ipc         \Sessions\2\BaseNamedObjects\{9FF38235-D5E3-4DD5-AD49-85290B3D682B}Event
Ipc         \Sessions\2\BaseNamedObjects\{9FF38235-D5E3-4DD5-AD49-85290B3D682B}MMFile
Ipc         \Sessions\2\BaseNamedObjects\{9FF38235-D5E3-4DD5-AD49-85290B3D682B}Semaphore
Ipc         \Sessions\2\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\2\BaseNamedObjects\{A5C53213-B8A1-4BA7-8991-F40FC9F7719F}
Ipc         \Sessions\2\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\2\BaseNamedObjects\{AF1A8BA6-1552-4374-A3BA-F992A6EDBF8A}
Ipc         \Sessions\2\BaseNamedObjects\{B2C34B5D-C059-49BC-B264-E658CD2FFE47}
Ipc         \Sessions\2\BaseNamedObjects\{BD03027C-1667-4085-9F6F-0250DE4375E1}
Ipc         \Sessions\2\BaseNamedObjects\{C7339089-517B-40E6-8D22-1897CDC2A9CD}
Ipc         \Sessions\2\BaseNamedObjects\{EE2DFCA0-8081-4029-8037-5D091277410E}
Ipc         \Sessions\2\BaseNamedObjects\{F84F0E05-209D-427A-A977-A5AEAA90EEBA}
Ipc         \Sessions\2\BaseNamedObjects\a57703bc-7235-4453-be6c-9627b38256a3
Ipc         \Sessions\2\BaseNamedObjects\AmiSharedMutex_18408
Ipc         \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db
Ipc         \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\2\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\2\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db
Ipc         \Sessions\2\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\2\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\2\BaseNamedObjects\ComTaskPool:1088
Ipc         \Sessions\2\BaseNamedObjects\D8DEF23B-E352-44df-A10F-DE6AB92FB20A
Ipc         \Sessions\2\BaseNamedObjects\DbgEngEvent_000047E8
Ipc         \Sessions\2\BaseNamedObjects\DPMAX_tracemutex_0440
Ipc         \Sessions\2\BaseNamedObjects\DPMAX_tracemutex_1F00
Ipc         \Sessions\2\BaseNamedObjects\DPMAX_tracemutex_4CA8
Ipc         \Sessions\2\BaseNamedObjects\RELOAD_SCRIPT_LOGIC
Ipc         \Sessions\2\BaseNamedObjects\RELOAD_SCRIPT_TELEMETRY
Ipc         \Sessions\2\BaseNamedObjects\RotHintTable
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_10280
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_1088
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_13240
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_18408
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_1888
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_19124
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_19624
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_3740
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_DummyEvent_7936
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceCrypto_Mutex1
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\2\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\2\BaseNamedObjects\SBIE_ServiceManager_Mutex
Ipc         \Sessions\2\BaseNamedObjects\SboxSession
Ipc         \Sessions\2\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\2\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\2\BaseNamedObjects\SessionImmersiveColorMutex
Ipc         \Sessions\2\BaseNamedObjects\SessionImmersiveColorPreference
Ipc         \Sessions\2\BaseNamedObjects\SM0:10280:120:WilError_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:10280:120:WilError_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:10280:120:WilError_01_p0h
Ipc         \Sessions\2\BaseNamedObjects\SM0:1088:120:WilError_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:1088:120:WilError_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:1088:120:WilError_01_p0h
Ipc         \Sessions\2\BaseNamedObjects\SM0:18408:120:WilError_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:18408:120:WilError_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:18408:120:WilError_01_p0h
Ipc         \Sessions\2\BaseNamedObjects\SM0:1888:128:WilStaging_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:1888:128:WilStaging_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:19624:120:WilError_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:19624:120:WilError_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:19624:120:WilError_01_p0h
Ipc         \Sessions\2\BaseNamedObjects\SM0:7936:120:WilError_01
Ipc         \Sessions\2\BaseNamedObjects\SM0:7936:120:WilError_01_p0
Ipc         \Sessions\2\BaseNamedObjects\SM0:7936:120:WilError_01_p0h
Ipc         \Sessions\2\BaseNamedObjects\SyncRootManager
Ipc         \Sessions\2\BaseNamedObjects\wa_persistentsauishutdownevent
Ipc         \Sessions\2\BaseNamedObjects\wa_persistentsauiupdateevent
Ipc         \Sessions\2\BaseNamedObjects\WERReportingForProcess19124
Ipc         \Sessions\2\BaseNamedObjects\WERReportingForProcessComplete19124
Ipc         \Sessions\2\BaseNamedObjects\windows_shell_global_counters
Ipc         \WindowsErrorReportingServicePort
Ipc      O  \KernelObjects\LowMemoryCondition
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\IMAGEHLP.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\NSI.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\WINTRUST.dll
Ipc      O  \KnownDlls\Wow64.dll
Ipc      O  \KnownDlls\Wow64cpu.dll
Ipc      O  \KnownDlls\Wow64win.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \KnownDlls32\advapi32.dll
Ipc      O  \KnownDlls32\bcryptPrimitives.dll
Ipc      O  \KnownDlls32\cfgmgr32.dll
Ipc      O  \KnownDlls32\combase.dll
Ipc      O  \KnownDlls32\CRYPT32.dll
Ipc      O  \KnownDlls32\CRYPTBASE.dll
Ipc      O  \KnownDlls32\gdi32.dll
Ipc      O  \KnownDlls32\gdi32full.dll
Ipc      O  \KnownDlls32\IMM32.dll
Ipc      O  \KnownDlls32\kernel.appcore.dll
Ipc      O  \KnownDlls32\kernel32.dll
Ipc      O  \KnownDlls32\kernelbase.dll
Ipc      O  \KnownDlls32\MSASN1.dll
Ipc      O  \KnownDlls32\msvcp_win.dll
Ipc      O  \KnownDlls32\MSVCRT.dll
Ipc      O  \KnownDlls32\ole32.dll
Ipc      O  \KnownDlls32\OLEAUT32.dll
Ipc      O  \KnownDlls32\powrprof.dll
Ipc      O  \KnownDlls32\profapi.dll
Ipc      O  \KnownDlls32\PSAPI.DLL
Ipc      O  \KnownDlls32\rpcrt4.dll
Ipc      O  \KnownDlls32\sechost.dll
Ipc      O  \KnownDlls32\SHCORE.dll
Ipc      O  \KnownDlls32\SHELL32.dll
Ipc      O  \KnownDlls32\SHLWAPI.dll
Ipc      O  \KnownDlls32\SspiCli.dll
Ipc      O  \KnownDlls32\ucrtbase.dll
Ipc      O  \KnownDlls32\user32.dll
Ipc      O  \KnownDlls32\win32u.dll
Ipc      O  \KnownDlls32\windows.storage.dll
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\LSARPC_ENDPOINT
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\samss lpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\2\BaseNamedObjects\DP_OTS_LOOKUP_CACHE
Ipc      O  \Sessions\2\Windows\ApiPort
Ipc      O  \Sessions\2\Windows\SharedSection
Ipc      O  \Sessions\2\Windows\Theme1896285416
Ipc      O  \Sessions\2\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme3790679210
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\CNG
Pipe        \Device\Harddisk0\DR0
Pipe        \Device\HarddiskVolume1
Pipe        \Device\HarddiskVolume2
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\Ide\IAAStorageDevice-0
Pipe        \Device\KsecDD
Pipe        \Device\MBus2DCFA21D048C2D3360458933F82487C3522718C936C176042E58DA6BA3C41EFB
Pipe        \Device\mfehidk
Pipe        \Device\mfepsn
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP10
Pipe        \Device\NDMP11
Pipe        \Device\NDMP12
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP4
Pipe        \Device\NDMP5
Pipe        \Device\NDMP6
Pipe        \Device\NDMP7
Pipe        \Device\NDMP8
Pipe        \Device\NDMP9
Pipe     O  \Device\Nsi
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd
WinCls   X  Progman
Top
Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Applications not starting anymore

Post by Barb@Invincea » Fri Aug 11, 2017 11:58 am

Hello menosay ,

Please have a look at these:
search.php?keywords=mcafee+siteadvisor

Try removing SiteAdvisor from your computer (you can do so via Control Panel), to see if that alleviates the issue.

Regards,
Barb.-
Top
hangfire
Posts: 4
Joined: Fri Aug 18, 2017 10:13 pm

Re: Applications not starting anymore

Post by hangfire » Tue Aug 22, 2017 9:08 am

Hello: I am facing similar issue for IE. Have tried in-installing McAfee WebAdvisor, it does not help.

Additional details below -
1. The Windows version number - Windows 10 Pro x64;
2. Sandboxie version number SBIE v5.2 64 bit
3. Internet Explorer 11.540.15063.0; Update Version: 11.0.45 (KB4034733)
4. McAfee LiveSafe; Heimdal Pro; Zemana AntiLogger

Thank you
Top
Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Applications not starting anymore

Post by Barb@Invincea » Tue Aug 22, 2017 10:12 am

Hello hangfire,

Have there been any updates to your system lately?
Does the issue occur in a new Sandbox with default settings (after having uninstalled SiteAdvisor)?

Found the following thread regarding Zemana AL (did it ever work for you?)
viewtopic.php?f=17&t=21409

Do other web browsers / applications launch in the Sandbox? Are there any error messages?

Please post the output of the Resource Access Monitor (use the newly created Sandbox):
https://www.sandboxie.com/index.php?Res ... essMonitor
Use the "</>" button to format it.

Regards,
Barb.-
Top
hangfire
Posts: 4
Joined: Fri Aug 18, 2017 10:13 pm

Re: Applications not starting anymore

Post by hangfire » Tue Aug 22, 2017 11:15 am

Barb@Invincea wrote: ↑
Tue Aug 22, 2017 10:12 am
 Hello hangfire,

Have there been any updates to your system lately?
Does the issue occur in a new Sandbox with default settings (after having uninstalled SiteAdvisor)?

Found the following thread regarding Zemana AL (did it ever work for you?)
viewtopic.php?f=17&t=21409

Do other web browsers / applications launch in the Sandbox? Are there any error messages?

Please post the output of the Resource Access Monitor (use the newly created Sandbox):
https://www.sandboxie.com/index.php?Res ... essMonitor
Use the "</>" button to format it.

Regards,
Barb.-

Hello Barb:

1. Recent update was on 8-Aug; reference KB4034674, KB4034662
2. I will read the thread on ZAL
3. Please find below the output of Resource Access Monitor


Kind regards

-H

Code: Select all

(Drive)     \Device\HarddiskVolume3
(Drive)     \Device\HarddiskVolume5
Clsid       -------------------------------
File/Key    -------------------------------
Image       -------------------------------
Ipc         -------------------------------
Ipc         \BaseNamedObjects\__ComCatalogCache__
Ipc         \BaseNamedObjects\{83D4BCA7-9AB9-4052-A0D9-8629D40CD089}
Ipc         \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \BaseNamedObjects\{A98D0DED-1846-4871-ACE6-48303AD0331C}
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000042.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \BaseNamedObjects\RotHintTable
Ipc         \BaseNamedObjects\SC_AutoStartComplete
Ipc         \BaseNamedObjects\windows_shell_global_counters
Ipc         \RPC Control\actkernel
Ipc         \RPC Control\epmapper
Ipc         \RPC Control\OLE74D6968C3FA7CD018DCD99E264FB
Ipc         \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc         \Sessions\1\BaseNamedObjects\{5281AFC4-B47D-4449-AF07-B6E176C98903}
Ipc         \Sessions\1\BaseNamedObjects\{80F0FADF-46F2-4088-83DA-EC101401A49D}
Ipc         \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc         \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc         \Sessions\1\BaseNamedObjects\{B25A777D-DAFB-4820-81B5-EBC48A9550F5}
Ipc         \Sessions\1\BaseNamedObjects\{EAAC1155-2FE3-401F-B152-76879301144C}
Ipc         \Sessions\1\BaseNamedObjects\1DefaultTIPSharedMemory
Ipc         \Sessions\1\BaseNamedObjects\AmiSharedMutex_18952
Ipc         \Sessions\1\BaseNamedObjects\b14f5566-c12f-45b4-a6bb-794a090d102d
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000042.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
Ipc         \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000028.db
Ipc         \Sessions\1\BaseNamedObjects\C:*Users*******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc         \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc         \Sessions\1\BaseNamedObjects\ComTaskPool:3300
Ipc         \Sessions\1\BaseNamedObjects\DbgEngEvent_00004A08
Ipc         \Sessions\1\BaseNamedObjects\RotHintTable
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_10728
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_18952
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_19788
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_3300
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_6716
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_RPCSS_SXS_READY
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_Mutex1
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcEptMapper
Ipc         \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc         \Sessions\1\BaseNamedObjects\SBIE_ServiceManager_Mutex
Ipc         \Sessions\1\BaseNamedObjects\SboxSession
Ipc         \Sessions\1\BaseNamedObjects\SC_AutoStartComplete
Ipc         \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc         \Sessions\1\BaseNamedObjects\SM0:18952:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:18952:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:18952:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:3300:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:3300:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:3300:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SM0:6716:120:WilError_01
Ipc         \Sessions\1\BaseNamedObjects\SM0:6716:120:WilError_01_p0
Ipc         \Sessions\1\BaseNamedObjects\SM0:6716:120:WilError_01_p0h
Ipc         \Sessions\1\BaseNamedObjects\SyncRootManager
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcess19788
Ipc         \Sessions\1\BaseNamedObjects\WERReportingForProcessComplete19788
Ipc         \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc         \WindowsErrorReportingServicePort
Ipc      O  \KernelObjects\MaximumCommitCondition
Ipc      O  \KernelObjects\MemoryErrors
Ipc      O  \KernelObjects\SystemErrorPortReady
Ipc      O  \KnownDlls\advapi32.dll
Ipc      O  \KnownDlls\bcryptPrimitives.dll
Ipc      O  \KnownDlls\cfgmgr32.dll
Ipc      O  \KnownDlls\clbcatq.dll
Ipc      O  \KnownDlls\combase.dll
Ipc      O  \KnownDlls\COMDLG32.dll
Ipc      O  \KnownDlls\CRYPT32.dll
Ipc      O  \KnownDlls\gdi32.dll
Ipc      O  \KnownDlls\gdi32full.dll
Ipc      O  \KnownDlls\IMM32.dll
Ipc      O  \KnownDlls\kernel.appcore.dll
Ipc      O  \KnownDlls\kernel32.dll
Ipc      O  \KnownDlls\kernelbase.dll
Ipc      O  \KnownDlls\MSASN1.dll
Ipc      O  \KnownDlls\MSCTF.dll
Ipc      O  \KnownDlls\msvcp_win.dll
Ipc      O  \KnownDlls\MSVCRT.dll
Ipc      O  \KnownDlls\ole32.dll
Ipc      O  \KnownDlls\OLEAUT32.dll
Ipc      O  \KnownDlls\powrprof.dll
Ipc      O  \KnownDlls\profapi.dll
Ipc      O  \KnownDlls\PSAPI.DLL
Ipc      O  \KnownDlls\rpcrt4.dll
Ipc      O  \KnownDlls\sechost.dll
Ipc      O  \KnownDlls\SHCORE.dll
Ipc      O  \KnownDlls\SHELL32.dll
Ipc      O  \KnownDlls\SHLWAPI.dll
Ipc      O  \KnownDlls\ucrtbase.dll
Ipc      O  \KnownDlls\user32.dll
Ipc      O  \KnownDlls\win32u.dll
Ipc      O  \KnownDlls\windows.storage.dll
Ipc      O  \KnownDlls\WINTRUST.dll
Ipc      O  \KnownDlls\WS2_32.dll
Ipc      O  \RPC Control\lsapolicylookup
Ipc      O  \RPC Control\lsasspirpc
Ipc      O  \RPC Control\SbieSvcPort
Ipc      O  \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc      O  \Sessions\1\Windows\ApiPort
Ipc      O  \Sessions\1\Windows\SharedSection
Ipc      O  \Sessions\1\Windows\Theme185599887
Ipc      O  \Sessions\1\Windows\ThemeSection
Ipc      O  \ThemeApiPort
Ipc      O  \Windows\Theme309989081
Pipe        -------------------------------
Pipe        ?
Pipe        \Device\{C0E0FDB1-0951-41D2-A3D9-0103BA422699}
Pipe        \Device\CNG
Pipe        \Device\HarddiskVolume3
Pipe        \Device\HarddiskVolume4
Pipe        \Device\HarddiskVolume5
Pipe        \Device\KsecDD
Pipe        \Device\mfehidk
Pipe        \Device\MountPointManager
Pipe        \Device\Ndis
Pipe        \Device\NDMP2
Pipe        \Device\NDMP3
Pipe        \Device\NDMP5
WinCls      -------------------------------
WinCls   O  Shell_TrayWnd
WinCls   X  Progman
Top
bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Applications not starting anymore

Post by bo.elam » Tue Aug 22, 2017 3:06 pm

hangfire wrote: ↑
Tue Aug 22, 2017 11:15 am
 1. Recent update was on 8-Aug; reference KB4034674, KB4034662
2. I will read the thread on ZAL
3. Please find below the output of Resource Access Monitor
Those updates from Windows are fine, don't remove them. After reading your posts here and at Wilder's, my feeling is that your issue is being caused by an update by Site advisor or McAfee AV. I think you said here earlier that you tested uninstalling Site advisor and the issue continues. If that's the case, then test disabling or uninstalling McAfee AV.

Bo
Top
hangfire
Posts: 4
Joined: Fri Aug 18, 2017 10:13 pm

Re: Applications not starting anymore

Post by hangfire » Tue Aug 22, 2017 4:25 pm

bo.elam wrote: ↑
Tue Aug 22, 2017 3:06 pm
hangfire wrote: ↑
Tue Aug 22, 2017 11:15 am
 1. Recent update was on 8-Aug; reference KB4034674, KB4034662
2. I will read the thread on ZAL
3. Please find below the output of Resource Access Monitor
Those updates from Windows are fine, don't remove them. After reading your posts here and at Wilder's, my feeling is that your issue is being caused by an update by Site advisor or McAfee AV. I think you said here earlier that you tested uninstalling Site advisor and the issue continues. If that's the case, then test disabling or uninstalling McAfee AV.

Bo
Hello Bo:

Interesting observation -

1. McAfee Real-Time Scan - disabling does not make any difference
2. Disabling Firewall - once disabled, sandboxed IE opens and am able to use it normally. While IE is sandboxed and enabling firewall am unable to click on any link on the webpage that is open.

Kind regards

-H
Top
bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Applications not starting anymore

Post by bo.elam » Tue Aug 22, 2017 5:01 pm

hangfire wrote: ↑
Tue Aug 22, 2017 4:25 pm
 2. Disabling Firewall - once disabled, sandboxed IE opens and am able to use it normally. While IE is sandboxed and enabling firewall am unable to click on any link on the webpage that is open.
Alright, so probably what you need to do is allow Sandboxie in McAfee firewall.

Bo
Top
menosay
Posts: 4
Joined: Tue Aug 08, 2017 12:08 pm

Re: Applications not starting anymore

Post by menosay » Wed Aug 23, 2017 3:53 pm

Sorry for the delay. Updates, unprovoked desktop crashes... Waited for some stability. Okay, like hangfire, removing WebAdvisor made no difference, but disabling the firewall allowed IE and Windows Explorer to start normally. However, the firewall rules already allow (and always have) Sandboxie Control and Sandboxie COM Services. The only thing that can be changed is a choice of access:

1) use designated ports (recommended
2) open ports to Work and Home networks
3) open to all devices

I have never changed this setting. I didn't mention it before, but now Windows Defender comes on by default (I didn't use it before, but a few weeks ago it did start coming up, and no obvious way to turn it off), but it recognizes that McAfee is in control of the firewall and anti-virus. Maybe there is a second layer somewhere in there.
Top
bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2809
Joined: Wed Apr 22, 2009 9:17 pm

Re: Applications not starting anymore

Post by bo.elam » Wed Aug 23, 2017 11:55 pm

menosay wrote: ↑
Wed Aug 23, 2017 3:53 pm
 However, the firewall rules already allow (and always have) Sandboxie Control and Sandboxie COM Services. .......

........ I didn't mention it before, but now Windows Defender comes on by default (I didn't use it before, but a few weeks ago it did start coming up, and no obvious way to turn it off), but it recognizes that McAfee is in control of the firewall and anti-virus.
Perhaps you need to allow other Sandboxie exes. Allow the exes inside the Sandboxie folder in Programs files (like SbieSvc). I never used a firewall other than Windows, and never had to allow anything for Sandboxie, but try that.

WD. Supposedly you having McAfee AV, that should disable WD. If Windows is not doing it, you are probably better off turning it off yourself than leaving it on. Read the link below. If your W10 is pro, you can use Option 1 to turn off WD. If you are using W10 Home, use Option 2. I dont use an AV so I used Option 2, Step 3 to turn off WD completely.
https://www.tenforums.com/tutorials/591 ... ml#option1

Bo
Top
Barb@Invincea
Sandboxie Support
Sandboxie Support
Posts: 2337
Joined: Mon Nov 07, 2016 3:10 pm

Re: Applications not starting anymore

Post by Barb@Invincea » Thu Aug 24, 2017 12:28 pm

All,

I installed McAfee LiveSafe (which is the one hangfire was using) and I was able to launch IE and Windows Explorer Sandboxed without having to modify anything in the Firewall.
I tested adding Sandboxie to the firewall using the designated ports option, but no changes. The same happened when I switched it to "block"
Do you see any specific settings in your Firewall configuration? Also, if you don't mind, see if restoring defaults/rebooting helps.

Also, as Bo mentioned , WD did not get disabled,you should try to manually disable it and see if that helps.

Regards,
Barb.-
Top
hangfire
Posts: 4
Joined: Fri Aug 18, 2017 10:13 pm

Re: Applications not starting anymore

Post by hangfire » Fri Aug 25, 2017 6:05 am

Folks: After trying McAfee LiveSafe firewall configurations without success, decided to hit 'Restore Defaults', and it worked. After reviewing the config for Internet Connections for Programs found -

- rule for Internet Explorer was added; surprised as IE worked outside Sandboxie earlier.
- there is only one rule for Sandboxie COM Services, while there were three before I hit Restore Default, one for License, and other for Sandboxie control. I believe these will get added as Smart Advice is enabled.

It appears, to me, that rule for IE made the difference.

Keeping it under observation.

Kind regards

-H
------------------------ MERGED POST ------------------------
hangfire wrote: ↑
Fri Aug 25, 2017 6:05 am
 Folks: After trying McAfee LiveSafe firewall configurations without success, decided to hit 'Restore Defaults', and it worked. After reviewing the config for Internet Connections for Programs found -

- rule for Internet Explorer was added; surprised as IE worked outside Sandboxie earlier.
- there is only one rule for Sandboxie COM Services, while there were three before I hit Restore Default, one for License, and other for Sandboxie control. I believe these will get added as Smart Advice is enabled.

It appears, to me, that rule for IE made the difference.

Keeping it under observation.

Kind regards

-H
Addimng one observation -Found these two rules got added for IE

C:\\program files (x86)\internet explorer\iexplore.exe
Company Microsoft Corporation

C:\program files\internet explorer\iexplore.exe
Company Microsoft Corporation

Kind regards

-H
Top
Post Reply

Return to “Problem Reports”

Who is online

Users browsing this forum: No registered users and 1 guest