Adobe Acrobat Read DC Crashes in Sandboxie

[Loc364]

When I try to open a PDF file from the internet using Internet Explorer while in Sandboxie, I get the SBIE2203 error message. I've updated to the latest version of Sandboxie and Acrobat Reader. This does not happen outside the sandbox. What expection or setting do I need to tweak to get this conflict to go away?

Thanks!

[bo.elam]

What expection or setting do I need to tweak to get this conflict to go away?

Try disabling Protected mode in Adobe Reader.

Bo

[Loc364]

Tried that, but unfortunately that didn't resolve it. What's next?

[Barb@Invincea]

Hello Loc364,

Please go ahead and provide the required info so that I can test the scenario:
viewtopic.php?f=11&t=19746

Also, please make sure Protected Mode is disabled outside Sandboxie, then re-try using a new Sandbox with default settings.
Let us know the outcome.

Regards,
Barb.-

[Loc364]

Hi and thanks for the info. Sorry I didn't see that thread sooner or I would have included this info before.

Here is the rundown:

Windows 7 64-bit
Sandboxie 5.20 64-bit
Acrobat Reader DC 2017.012.20095
Kasperskey Internet Security 2018 (disabled)
"SBIE2203 Failed to communicate with Sandboxie Service: *GUIPROXY_00000001 - iexplore.exe [C0000024]"

[Barb@Invincea]

Hello Loc364,

I am unable to reproduce the issue. Can you please provide the repro steps that you are following?
I tried opening a test pdf from a website (first time, I had to open it outside Sandboxie and disable privileged locations as well as protected mode in Acrobat) and did not experience any issues.

Also, make sure the Adobe Acrobat Reader template is enabled. Right-click on your Sandbox --> Sandbox settings --> Applications --> PDF/Printing --> Adobe Acrobat Reader
If it was enabled, disable it for testing purposes.

Please test this in a new Sandbox with default settings.

Sometimes disabling the Antivirus is not enough, please try these settings (they were tested for Kaspersky 2017, but may be applicable):
search.php?keywords=kaspersky&t=21539&sf=msgonly
https://www.sandboxie.com/KnownConflicts.php#Antivirus


Regards,
Barb.-

[Loc364]

Thanks for following up and attempting to help. Before I turn my attention to the anti-virus portion, I need to clarify a few things with Acrobat Reader first. When you say to disable privileged locations as well, what exactly do you mean? In the "Security (Enhanced)" section, I have the "Enable protected mode at start up" box unchecked. Then below I have "Enable Enhanced Security" checked. At the bottom I see the "Privileged Locations" field, but the only thing checked there is the "Automatically trust sites from the Windows OS security zone." And nothing is listed in the box under that.

Also, in the Sandboxie settings, the Adobe Acrobat Reader profile has a -- instead of a + and I can't change it. Is that normal?

Thanks!

[Barb@Invincea]

Hello Loc364,

I un-checked the options under privileged locations, as well as turned off Protected mode outside Sandboxie, then I tested opening a .pdf file via Internet Explorer Sandboxed in a new Sandbox with default settings.
Can you please provide the steps that you are following to reproduce the issue? The exact website / pdf files would help.

To disable Software Compatibility templates go to Configure-->Software Compatibility.

Regards,
Barb.-

[bo.elam]

Also, in the Sandboxie settings, the Adobe Acrobat Reader profile has a -- instead of a + and I can't change it. Is that normal?

Yes, its normal. FYI, when you see a setting with the -- , it means its a global setting. It was set via Configure>Software compatibility. To disable it, you also do it in Configure>Software compatibility. On the other hand, settings with a + next to them only apply to individual sandboxes. They are set and disabled in Sandbox settings.

Bo

[Loc364]

I went back and cleared every check box in that menu and disabled everything humanly possibly, yet it's not having any effect. I still get the error. As for the PDF, I simply Googled something randomly. I found a manual for an HDTV from the Vizio website. Here is the URL:

https://cdn.vizio.com/documents/e32d1/um-e32d1.pdf

I should also note that I've tested this PDF in both Google and Firefox in the default box, and it loads fine. This is an IE exclusive issue. Also, since Bo said the -- was normal and a global setting for Acrobat, I assume you don't want me disabling that in the compatibility menu as you mentioned?

Is there anything else I can try at this point?

[bo.elam]

Also, since Bo said the -- was normal and a global setting for Acrobat, I assume you don't want me disabling that in the compatibility menu as you mentioned?

No, you should (as Barb said), disable it for testing purposes. The reason for testing the behaviour without the setting being enabled is because sometimes the compatibility setting becomes obsolote, its old, doesn't work anymore, and instead of helping compatibility, it breaks it. So, test with and without it.

Bo

[Loc364]

I really appreciate everyone here trying to help me trouble shoot this issue. Thanks again!

I just disabled it but unfortunately it simply didn't help. It definitely seems like there is something about how the program is interacting with Acrobat within Internet Explorer. Like I said, I can leave Kaspersky running and open the same PDF link above just fine in Firefox or Chrome.

The other weird thing about IE is that I can't minimize it by clicking on it in the taskbar. Normally when you click items there, it will maximize and minimize the window. This doesn't work for IE in the sandbox (but does work fine outside the sandbox, as I've tested it).

Any more thoughts on what might be going on here? I'm willing to troubleshoot Kaspersky if you think that's somehow the issue. Or is there something else we can try?

[bo.elam]

Any more thoughts on what might be going on here? I'm willing to troubleshoot Kaspersky if you think that's somehow the issue. Or is there something else we can try?

Yes, it could be the interaction with Kaspersky. Kaspersky and Sandboxie have a bad record working together. Click the links posted earlier by Barb.

Sometimes disabling the Antivirus is not enough, please try these settings (they were tested for Kaspersky 2017, but may be applicable):
search.php?keywords=kaspersky&t=21539&sf=msgonly
https://www.sandboxie.com/KnownConflicts.php#Antivirus

Bo

[dr_jon]

I've been somewhat redirected here from viewtopic.php?f=11&t=24843&p=130026#p130026 where I was reporting a similar issue:
SBIE2203 Failed to communicate with Sandboxie Service: *GUIPROXY_00000001 - AcroRd32.exe [C0000024]
I'm chipping in just to say I'm running NOD32 (plus Malwarebytes Premium) not Kaspersky. Also I get the errors (lots of them, they keep coming) just on opening Reader, not done anything else.

[Loc364]

I've tried doing what the second link above said by adding the Sandboxie folder in Program Files to the exclusions list in Kaspersky, but that had no effect. As for the other link, it's a search of the forum bringing up 29 results for Kaspersky but nothing seems directly related to the SBIE2203 issue. If I'm missing something, please point me in the right direction. However, I'm kinda banging my head against the desk at this point. Help