Page 14 of 15
Fake data
Posted: Mon Jan 13, 2014 6:06 am
by XspeedPL
I really find this plugin useful.
But, would it be possible to return fake data instead of no data at all to programs?
Some programs just crash when the access is denied, but fake data (like empty process lists) would work.
Re: Block Process Access
Posted: Tue Feb 11, 2014 9:11 pm
by Domochevsky
So... what are the odds of this nifty little thing being updated to the current sandboxie version?
Re: CRT not initialized error.
Posted: Wed Feb 12, 2014 1:19 pm
by Curt@invincea
Javapraca wrote:I have encountered "CRT not initialized" error while trying to run sbiextra v1.0.0.17 on Sandboxie 4.06 (Windows XP SP3).
Wraithdu, could you please take a look on that.
This is the InjectDll crash and has been fixed. We're putting together a 4.8.1 release with several important fixes.
Re: Block Process Access
Posted: Thu Apr 17, 2014 6:13 pm
by Binky
I successfully tested sbiextra v1.0.0.17 on Sandboxie 4.09.3 with Windows 7 SP1 x64. Thank you Invincea!
Re: Block Process Access
Posted: Sun Jul 03, 2016 4:54 am
by Ziru
Working on Sandboxie 5.12 (64-bit)
Operating System: Windows 7 Professional 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.151019-1254)
Language: Spanish (Regional Setting: Spanish)
System Manufacturer: Gigabyte Technology Co., Ltd.
System Model: GA-990FXA-UD3
BIOS: Award Modular BIOS v6.00PG
Processor: AMD FX-8320E Eight-Core Processor (8 CPUs), ~3.2GHz
Re: Block Process Access
Posted: Fri Jan 20, 2017 6:22 am
by flibustier
how to inject this dll only to custom processes?
Re: Block Process Access
Posted: Fri Jan 20, 2017 10:44 am
by Barb@Invincea
Hello flibustier ,
Here's the link to the DLL injection entry, it applies to all programs in the Sandbox.
https://www.sandboxie.com/index.php?InjectDll
Regards,
Barb.-
Re: Block Process Access
Posted: Fri Jan 20, 2017 11:08 am
by Syrinx
flibustier wrote:how to inject this dll only to custom processes?
There might be more than one way to go about it but I would use something like this.
ProcessGroup=<SBIExtra>,ProcessName1.exe,ProcessName2.exe
InjectDll=<SBIExtra>,*InsertPathtoDllHere*
InjectDll64=<SBIExtra>,*InsertPathtoDllHere*
I actually use something like this, but in reverse, to !exclude specific files (like the new origin) that don't work well with it.
Re: Block Process Access
Posted: Tue Oct 17, 2017 2:19 pm
by Favawo
Can't run injtest.exe inside Sandboxie, nothing happens when I start it. But it works outside. Can't test
Re: Block Process Access
Posted: Tue Oct 17, 2017 2:54 pm
by Barb@Invincea
Hello Favawo,
Can you please provide more information about what are you trying to do, and how it relates to SBIExtra ?
What are the repro steps and setup to repro the issue?
Regards,
Barb.-
Re: Block Process Access
Posted: Tue Oct 17, 2017 4:00 pm
by Favawo
Hey Barb@Invincea,
I inserted
Code: Select all
InjectDll=c:\Program Files\Sandboxie\sbiextra.dll
InjectDll64=c:\Program Files\Sandboxie\sbiextra_x64.dll
in Sandboxie.ini in [DefaultBox] section. Copied sbiextra.ini sbiextra.dll sbiextra_x64.dll to c:\Program Files\Sandboxie\
And now I'm trying to test wheather it works or not. I'm trying to run injtest.exe in the sandbox but nothing happens when I click "Run in the Sandboxie". In the same time when I start inject.exe outside of Sandboxie, it starts. I can see the window with processes. So may be injtest.exe is
incompatible with the latest Sanboxie version? Or I'm doing something wrong. I have all Microsoft Visual C++ installed, 2008, 2010 etc till the latest one.
Re: Block Process Access
Posted: Tue Oct 17, 2017 5:45 pm
by Barb@Invincea
Hello Favawo,
I tested this on Win 7 x64 + Sbie latest beta and I was able to run injtest inside Sandboxie, following the instructions from the first page.
If you can provide more information regarding your environment, I'll set it up and test it. Here's what I need:
viewtopic.php?f=11&t=19746
Also, please post the output of your Sandboxie configuration file (Configure --> Edit configuration). Use the "</> " button to format it in the forum.
Regards,
Barb.-
Re: Block Process Access
Posted: Tue Oct 17, 2017 6:11 pm
by Favawo
Barb@Invincea, thx for participating.
Windows 10 LTSB x64
SBIE v.5.20
injtest.exe
Kaspersky Internet Security but it was fully disabled
Code: Select all
[GlobalSettings]
Template=7zipShellEx
Template=LogitechSetPoint
Template=WindowsLive
Template=Kaspersky
Template=OfficeLicensing
FileRootPath=J:\Sandbox\%USER%\%SANDBOX%
[DefaultBox]
ConfigLevel=7
AutoRecover=y
BlockNetworkFiles=y
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
InjectDll=c:\Program Files\Sandboxie\sbiextra.dll
InjectDll64=c:\Program Files\Sandboxie\sbiextra_x64.dll
BorderColor=#00FFFF,ttl
Enabled=y
CopyLimitKb=1025145000
BoxNameTitle=-
[UserSettings_028A00D4]
SbieCtrl_UserName=pc
SbieCtrl_NextUpdateCheck=1508340291
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_ShowWelcome=n
SbieCtrl_EnableLogonStart=n
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=y
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_WindowCoords=209,250,1237,632
SbieCtrl_ActiveView=40021
SbieCtrl_ProcessViewColumnWidths=250,70,300
SbieCtrl_BoxExpandedView=DefaultBox
SbieCtrl_AutoApplySettings=n
Re: Block Process Access
Posted: Wed Oct 18, 2017 10:05 am
by Barb@Invincea
Hello Favawo,
We do not test LTSB versions of Windows, but I am assuming it should work the same.
Do other applications work Sandboxed?
Please give the latest beta a try:
viewtopic.php?p=129389#p129389
Also, for Kaspersky, you may need to remove it, or see these posts for assistance. Disabling it may not work:
search.php?keywords=kaspersky&t=21539&sf=msgonly
Can you please create a new Sandbox with default settings, then add the dll entries and see if that works?
Regards,
Barb.-
Re: Block Process Access
Posted: Wed Oct 18, 2017 2:49 pm
by Favawo
Nothing helped, neither Kaspersky deletion, nor fresh Sandboxie installation. All other application works perfect inside Sandboxie. So to find out I made 3 new Virtual Machines, W7 x64, W10Pro x64 v.1703 (summer build) and W10LTSB x64 v.1607, installed all Microsoft Visual C++ Redistributable version 2005-2017, installed Sandboxie beta build.
I was able to launch injtest.exe
inside Sandboxie only in W7, neither in the W10Pro nor the W10LTSB. But I can launch it
outside Sandboxie in all windows versions. Strange things
I know it's just a test program and Block Process Access likely works but I have to be sure.