SBIE2326 cannot prepare registry: [11 / C0000022] SBIE2321 Cannot manage device map: [C0000022 / 77] Not pdf/dopus issue

[Tanaka Lee]

Using win 7 64bit(might still happen for 32bit too)

Hi just wanted to inform you about serious in combination with sandboxie(was using this beta since chrome issue didnt load inside was fix here 5.23.5 or higher) and chrome(63, 64, 65 higher test
them all) browser(or any browser for that matter) and annoying issue about combination example malwarebytes 3.1.2 premium. Now installing all of those and everything is in default settings. Nothing is been installed inside sandboxie and you dont even need to use any AV just malwarebytes as defense+testings.

To reproduce this problem now open example google chrome(default browser) inside sandboxie then browse just normal surf
anysite. Or you can just open the browser inside sandboxie and leave it there. Leave chrome inside sandboxie few min like
30min-1hour or more.

If you do that you suddenly get this message pop up.Nothing particular and you can ignore or close it. But you still wonder
what happens inside why message appear. Very strange indeed!
SBIE2326 cannot prepare registry: [11 / C0000022]
SBIE2321 Cannot manage device map: [C0000022 / 77]

And sometimes after closing message and closing browser to delete stuff inside sandbox you can get error that cannot be deleted
because it used by another program. What program?
There nothing else used besides chrome+sandboxie and there is no combination with open office as well unlike i seen issue
similair to this here in forum but NO actuall solution. So seems to be something between your chrome+sandboxie+ malwarebytes
(this default no issue other program but only when start to use chrome+sandboxie).
If worse case you need RESTART PC then you can delete stuff inside by right click at sandboxie ask to delete contens inside.

This has been going on at current month/weeks now.
Hopefully this can improve your product preformence fix issues! GO AHEAD test it for yourself.

[Barb@Invincea]

UPDATE ---> Chrome + MWB+ Sbie have been running for hours, no sbie messages appeared.
Please provide more information regarding how are you reproducing this issue, as well as the info requested below.

-------------- X ----------------

Hello Tanaka Lee,

And sometimes after closing message and closing browser to delete stuff inside sandbox you can get error that cannot be deleted
because it used by another program. What program?

This is a known issue related to an AV that is blocking the process. Restarting your machine, or trying again after a while should allow you to clear the contents. There are several threads about this for different AV software / programs:
search.php?keywords=unable+delete+contents

The latest supported/tested version of MWB is MalwareBytes Anti-malware [v2.1.8.1057]
See: viewtopic.php?f=11&t=21539#p111707

Does the issue happen in a new Sandbox with default settings?
Does Chrome work fine outside Sandboxie? Are you receiving any alerts from MWB?
Are you using drop rights?

Please post your Sandboxie configuration file:
Configure --> Edit configuration
Copy/pate the output, highlight it and click on the "</>" button to format it in the forums.

I have a VM running with Win 7 x64 + sbie 5.23 + MWB Trial 3.4.4 Premium, I will let you know if I can repro the issue. I'll update this response later with the results.

Regards,
Barb.-

[Tanaka Lee]

First of all the thing is when we installed malwarebytes as premium(even though you can upgrade and use same key for it as buyer) it was 3.1.2 and doesnt update the software only definitions even other people still use same version as well run into same. So maybe you right about upgrading malwarebytes but if tested and same thing accur will posting replay hopefully there is no issue.
It might be contection to MWB as contact them just be sure w see.

Also there is no other AV other than MWB as for testing purpose. Nor have w installed anything inside sandboxie before. Just installed browser chrome malwarebytes and then sandboxie all in default settings. Then running browser chrome inside sandboxie ofcourse when you start to surf the web and all after few hours those message pop ups. Even if its there MWB connection there. We like to know what triggers those pop anyways? In simple or laymen terms matter...
Most of time after closing browser we can delete items inside so there no issue. But sometimes it might say that program is still in use and even tho everything is closed. Then you need to restart pc to clear stuff inside.

So here is my important question as w family member uses same pc and we trust sandboxie to protect us no matter what or site we visit once we close browser all stuff is deleted:
-But If those pop up keeps happening. Is it dangerous to just close and just ignore it? Or does it pose any risk and vulnerability to the sandboxie that something might change in the Sandboxie program you using daily protection. let us know thank you.

Thanks for replay we see how it looks this week

[Barb@Invincea]

Hello Tanaka Lee,

I was not able to repro the issue. I left it running for hours and nothing happened.

I cannot review your settings unless you provide the information I requested above.

Other than that, if no functionality is affected, you can click on "Hide" so that the message does not appear anymore.

Regards,
Barb.-

[Tanaka Lee]

Here you go.

[Chrome]

Enabled=y
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
AutoDelete=y
NeverDelete=n
ForceFolder=C:\Program Files (x86)\Google\Chrome\Application

Also are using win 7 64bit or win 7 pro 64bit? It seems happen more there on other pc pro we use all should up to date.

When you right click on chrome at desktop icon then open it on sandbox(default sandbox) go to youtube check video at 1080 or 720 60fps. And pause the video...now leave it there for few hours and it usually pop up that message.

Again we only using MWB and IT IS the 3.4.4 version latest as well. Seems like same thing happens.

We asked if there be any security issue if chose to just hide the message if this happens or persist...with same pop up?
Anyway we trust you since and already even contacted our security team expert that works on our family firm.
This also just in case been posted on global AV through like kaspersky, norton, hitmanpro, MWB etc forums just to be sure that sandboxie if safe program to use as overall web defense.

Thank you.

[bo.elam]

Tanaka, I dont know if it will make any difference for you but for Chrome, you should Force chrome.exe with Forced programs not the Chrome folder with Forced folders. But regardless, if you hide the message, and Chrome works fine, then its OK to hide the message.

Bo

[Tanaka Lee]

I will try that forced exe for now. Also i need update this. Just to be sure that it doesnt have to do with for example malwarebytes. We did same procedure but this time we closed malwarebytes program. and opened chrome inside sandboxie went youtube just surf abit here and there...then stopped and let chrome be inside sandboxie even whole 12-24hour different device pc sometimes take few min to pop up sometimes after 30min-1h+...it still happens pop same message even without MWBytes on same time. Anyway w see how it works after weekends. Thank you