Buster Sandbox Analyzer

[Bellzemos]

Hello!

I noticed that I was unable to run Windows Explorer (it simply crashes) in a TestBox (the one I use with BSA), I updated BSA to the latest 1.88 version and the problem is still here. I use Sandboxie 3.76 in Windows 7 x64.

Can you help please?

[Buster]

Hello!

I noticed that I was unable to run Windows Explorer (it simply crashes) in a TestBox (the one I use with BSA), I updated BSA to the latest 1.88 version and the problem is still here. I use Sandboxie 3.76 in Windows 7 x64.

Can you help please?

Probably it is caused due a compatibility problem with other software. Stop other programs you may be running and try again.

[Bellzemos]

Hello!

I noticed that I was unable to run Windows Explorer (it simply crashes) in a TestBox (the one I use with BSA), I updated BSA to the latest 1.88 version and the problem is still here. I use Sandboxie 3.76 in Windows 7 x64.

Can you help please?

Probably it is caused due a compatibility problem with other software. Stop other programs you may be running and try again.

There are no other programs running at the time. I use the right-click, run sandboxed and it crashes. If I use it on a .TXT file it works, if I do it on the Windows Explorer shortcut it crashes. What could it be? Should I post my Sandboxie.ini for the TestBox I use with BSA?

[Buster]

Yes, post it.

[Bellzemos]

Here is my Sandboxie.ini, you can see the DefaultBox configuration - I am able to run Windows Explorer sandboxed in the DefaultBox. At the end of the file is the TestBox configuration - if I try to run Windows Explorer in the TestBox it crashes before it even opens. I have probably set something wrong? Please help.


[GlobalSettings]

Template=nVidia_Stereoscopic3D
Template=Avast_Antivirus
ActivationPrompt=n
ExperimentalProtection64Bit=y

[DefaultBox]

ConfigLevel=7
Template=PaleMoon_Force
Template=Waterfox_Force
Template=Maxthon2_Force
Template=Opera_Force
Template=SeaMonkey_Force
Template=Iron_Force
Template=Dragon_Force
Template=Chrome_Force
Template=Firefox_Force
Template=IExplore_Force
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=D:\Temp
RecoverFolder=%Desktop%
Enabled=y
AutoDelete=y
NeverDelete=n
ForceFolder=C:\Program Files (x86)\Skype
ForceFolder=C:\Program Files (x86)\VirusTotalUploader2
DropAdminRights=y


[UserSettings_0C880214]

SbieCtrl_UserName=bellzemos
SbieCtrl_NextUpdateCheck=1555555555
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_ActiveView=40021
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_TerminateNotify=n
SbieCtrl_AutoApplySettings=y
SbieCtrl_SettingChangeNotify=n
SbieCtrl_TerminateWarn=n
SbieCtrl_HideMessage=1304,wisptis.exe
SbieCtrl_ShouldDeleteNotify=n
SbieCtrl_ColWidthProcName=250
SbieCtrl_ColWidthProcId=70
SbieCtrl_ColWidthProcTitle=310
SbieCtrl_WindowCoords=1267,733,652,438
SbieCtrl_ShortcutNotify=n
SbieCtrl_BoxExpandedView=DefaultBox,DisabledInternet,GameBox,ProgramBox,TestBox

[TestBox]

ConfigLevel=7
Template=Maxthon2_Force
Template=Opera_Force
Template=SeaMonkey_Force
Template=Iron_Force
Template=Dragon_Force
Template=Chrome_Force
Template=Firefox_Force
Template=IExplore_Force
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
Enabled=y
InjectDll=C:\BSA\LOG_API\64\LOG_API32.DLL
InjectDll64=C:\BSA\LOG_API\64\LOG_API64.DLL
OpenWinClass=TFormBSA
NotifyDirectDiskAccess=y
NeverDelete=n
BoxNameTitle=y
BorderColor=#00FFFF,off
NotifyInternetAccessDenied=y
DropAdminRights=y

[Buster]

No idea what could be the problem, sorry.

[Bellzemos]

Here's the crash report, if it's any help:

Problem signature:
Problem Event Name: APPCRASH
Application Name: explorer.exe
Application Version: 6.1.7601.17567
Application Timestamp: 4d672ee4
Fault Module Name: USER32.dll
Fault Module Version: 6.1.7601.17514
Fault Module Timestamp: 4ce7c9f1
Exception Code: c000001d
Exception Offset: 0000000000005357
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1060
Additional Information 1: 6e02
Additional Information 2: 6e0208eaa474bcf8ecb1ba7bbf9d75b6
Additional Information 3: 4998
Additional Information 4: 49981cd8963576229a5f3a28ca3c8498

[Bellzemos]

Is it possible that there's some kind of incompatibility? I use Avast AV. It has to be something about the USER32.dll? Can you please suggest anything I could try? I would like to be able to use BSA for testing. Thank you.

[Buster]

Is it possible that there's some kind of incompatibility? I use Avast AV.

When I suggested a software incompatibility you replied

There are no other programs running at the time.

Now you say Avast is running.

[Bellzemos]

I tought you meant if there were any other programs running in the sandbox, sorry. My AV runs outside of the sandbox of course. Can you help please?

[Buster]

I give the same reply I gave before:

Stop other programs you may be running and try again.

[Bellzemos]

I never had to stop Avast to make BSA & Sandboxie work before. I don't want to disable my AV. My PC is idle when I try the TestBox.

[Buster]

I never had to stop Avast to make BSA & Sandboxie work before.

What did you change with respect to other times?

[Bellzemos]

Nothing that I can think of, could it be the update to Avast v8? So I have the latest stable/official versions of Avast and Sandboxie running on Windows 7 SP1 x64. The crash report is up there, I really don't know what could it be and why Windows Explorer is able to run sandboxed in the DefaultBox but crashes in the TestBox (the settings of both are up in the Sandboxie.ini).

[Buster]

In the DefaultBox you are not injecting LOG_API.

If you say the setup was working fine until you updated to Avast v8, then it is logic to think the problem is related to that.