sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.69k stars 1.52k forks source link

SBIE2308 Could not create object directory: [41/C0000024] <-- Sandboxie Classic v5.64.5 + Honeyview v5.50 #2974

Closed xvim64 closed 1 year ago

xvim64 commented 1 year ago

Describe what you noticed and did

In the real machine, when I start Honeyview v5.50 in Sandboxie Classic v5.64.5 x64, the "SBIE2308" message appears every time.

In Sandboxie v5.64.4 x64, the "SBIE2308" message does not appear.

os: Windows 11 x64 22H2 sandboxie: Sandboxie Classic v5.64.5 x64 affected program: Honeyview v5.50

// Honeyview v5.50 https://www.bandisoft.com/honeyview/dl.php?web-kr

001

I also tested with a fresh install of Sandbox Classic v5.64.5 + Honeyview v5.50 on Windows 10/11 in the VM. However, the "SBIE2308" message did not appear in the VM.

How often did you encounter it so far?

at every Honeyview startup

Affected program

Not relevant

Download link

https://www.bandisoft.com/honeyview/dl.php?web-kr

Where is the program located?

The program is installed only outside the sandbox.

Expected behavior

No Message at Honeyview startup.

What is your Windows edition and version?

Windows 11 x64 22H2

In which Windows account you have this problem?

A Microsoft account (Standard user).

Please mention any installed security software

Microsoft Defender Antivirus

What version of Sandboxie are you running?

Sandboxie Classic v5.64.5 x64

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (explicitly mentioned in this issue).

Is it a regression?

Since v5.64.5 x64

In which sandbox type you have this problem?

I only reproduced it with Sandboxie Classic.

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

#
# Sandboxie configuration file
#

[GlobalSettings]

[UserSettings_0C360207]

SbieCtrl_UserName=xvim64
SbieCtrl_BoxExpandedView=DefaultBox,HoneyviewBox

[DefaultBox]

ConfigLevel=10
BlockNetworkFiles=y
Template=OpenSmartCard
Template=OpenBluetooth
Template=FileCopy
Template=SkipHook
Template=BlockPorts
Template=LingerPrograms
BorderColor=#00FFFF,off
Enabled=y
BoxNameTitle=y
NotifyInternetAccessDenied=n

[HoneyviewBox]

ConfigLevel=10
BlockNetworkFiles=y
Template=OpenSmartCard
Template=OpenBluetooth
Template=FileCopy
Template=SkipHook
Template=BlockPorts
Template=LingerPrograms
BorderColor=#00FFFF,off
Enabled=y
BoxNameTitle=y
NotifyInternetAccessDenied=n
ForceProcess=Honeyview.exe
wilders-soccerfan commented 1 year ago

I tried honeyview 5.5.portable in v1.9.5 (portable) yellow box (on Win7,x64) and no SBIE messages. Honeyview2

xvim64 commented 1 year ago

I tried honeyview 5.5.portable in v1.9.5 (portable) yellow box (on Win7,x64) and no SBIE messages.

The message has disappeared.

There were 3 changes.

I downgraded to v5.64.4 and re-updated to v5.64.5. There was a Windows preview update. I executed HoneyView outside of Sandboxie. ---(A)

I don't know what fixed it. However, I suspect that (A) fixed the problem. I'm guessing that HoneyView created the "object folder" outside of Sandboxie and it's not causing the problem inside of Sandboxie.