search

sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.78k stars 1.53k forks source link

Sandboxed Web Browser gives SBIE2101 Object name not found: Unnamed object #845

Open drkvogel opened 3 years ago

drkvogel commented 3 years ago

Describe the bug

I downloaded and installed Sandboxie 5.49.7 (Windows 64-bit). ran the Getting Started Tutorial, ran the the Sandboxed Web Browser from the desktop, and got: SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1

To Reproduce

Install Sandboxie 5.49.7 (Windows 64-bit). run the Getting Started Tutorial, open the the Sandboxed Web Browser shortcut on the desktop

  1. See error: SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1

Expected behavior

Sandboxed Web Browser should run

System details and installed software (please provide the following information):

Sandboxie configuration Default configuration

DavidXanatos commented 3 years ago

try the 5.49.8 build, is it fixed

ft1-1 commented 3 years ago

Experiencing the same issue on the 5.49.8 build. Error given is SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1

This is using Chrome Version 91.0.4472.77.

I tried Sandboxie Classic 5.49.0 and browser would not open (no error given). Issue also occurs with Sandboxie Plus 0.7.5.

DavidXanatos commented 3 years ago

is ther any version that worked for you? also what browser is your default web browser?

NewKidOnTheBlock commented 3 years ago

Just tested with SB 5.49.8 + Chrome Portable 91. Works. Zwischenablage-1

What is your config?

[Default]

Enabled=y ConfigLevel=9 BlockNetworkFiles=y Template=OpenSmartCard Template=OpenBluetooth Template=SkipHook Template=FileCopy Template=qWave Template=BlockPorts Template=LingerPrograms Template=Chrome_Phishing_DirectAccess Template=Firefox_Phishing_DirectAccess Template=AutoRecoverIgnore RecoverFolder=%Desktop% RecoverFolder=%Personal% RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}% BorderColor=#00FFFF,ttl,6

This is the bog-standard config for a new box. I've bolded the two new lines that have come with 5.49.8 Do you have them?

ft1-1 commented 3 years ago

is ther any version that worked for you? also what browser is your default web browser?

Default browser is Chrome. I was previously using 5.43.6 which worked great. There was an issue in October 2020 where I think Chrome launch commands had to be modified but I don't recall exactly.

It's on a new Windows machine where I recently installed Sandboxie where I'm having this issue. I tried downloading Chrome 90 and get the same error.

What is your config?

[Default]

Enabled=y ConfigLevel=9 BlockNetworkFiles=y Template=OpenSmartCard Template=OpenBluetooth Template=SkipHook Template=FileCopy Template=qWave Template=BlockPorts Template=LingerPrograms Template=Chrome_Phishing_DirectAccess Template=Firefox_Phishing_DirectAccess Template=AutoRecoverIgnore RecoverFolder=%Desktop% RecoverFolder=%Personal% RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}% BorderColor=#00FFFF,ttl,6

This is the bog-standard config for a new box. I've bolded the two new lines that have come with 5.49.8 Do you have them?

[DefaultBox]

ConfigLevel=9 BlockNetworkFiles=y Template=OpenSmartCard Template=OpenBluetooth Template=SkipHook Template=FileCopy Template=qWave Template=BlockPorts Template=LingerPrograms Template=Chrome_Phishing_DirectAccess Template=Firefox_Phishing_DirectAccess Template=AutoRecoverIgnore RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}% RecoverFolder=%Personal% RecoverFolder=%Desktop% BorderColor=#00FFFF,ttl,6 Enabled=y

ft1-1 commented 3 years ago

Some additional info, if I switch default browser to Edge (Version 91.0.864.4), the browser opens with no issue. Switching back to Chrome results in error.

eimiar commented 3 years ago

Posting here because it's probably the same error? Freshly installed Firefox 92.0 x64 on Win10 x64. (had Firefox ESR and SB Classic before, and everything worked fine) When running firefox on sandboxie the tab is blocked. This happened both on Classic (5.51.3) and Plus (0.9.6). On the left side is firefox executed normally, on the right side is firefox executed in troubleshooting mode, it's interesting to notice that the rendering is all messed up. scrinsciot

On Plus (didn't happen on Classic) I get this error message: WerFault.exe (15840): SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1

Adding these lines to the ini doesn't make any difference.

SpecialImage=firefox
Template=OpenSmartCard
Template=OpenBluetooth

UPDATE This appears to be an error introduced by Firefox, happens on versions 92.0, 91.1.0-esr, 91.0.1-esr, 89.0. On Firefox 88.0 no errors.

eimiar commented 2 years ago

Any news on this issue? Lately my system has been upgraded and I can't downgrade Firefox anymore (current Firefox version 95.0.2 x64), nothing works.

Describe the bug

I downloaded and installed sandboxie-plus 1.0.7 x64. Ran the Sandboxed Web Browser and got: WerFault.exe (3184): SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1

System details and installed software What is your Windows edition and version?

Edizione    Windows 10 Pro
Versione    20H2
Data installazione: ‎2022-‎01-‎04
Build sistema operativo 19042.1415
Esperienza  Windows Feature Experience Pack 120.2212.3920.0

What is your current Sandboxie edition and version? Sandboxie-Plus-x64-v1.0.7 Security software running in the background: Sophos Endpoint Agent (can't disable) and Windows Defender

Attaching trace.log.

eimiar commented 2 years ago

If I mark Disable Security Isolation (experimental) on the current sandbox (Sandbox Options -> Advanced Options -> Isolation), this error doesn't happen anymore.

isaak654 commented 2 years ago

Did you enable some security policy setting? For example: Windows Defender Security Center -> App and browser control -> Exploit protection settings or in gpedit.msc / secpol.msc ?

Other suggestions: 1) Disable any security extension in the sandboxed browser only 2) Disable the Hitman Pro Alert template that is automatically applied in Sandboxie 3) Put an exclusion to the Sandboxie folder on Sophos Endpoint or uninstall it (as last resort)

eimiar commented 2 years ago

Disabling exploit protection settings doesn't seem to make any difference. gpedit.msc and secpol.msc don't show any security policy, so no changes there. The sandbox is fresh new, before starting the browser I tried to create a new profile by running on sandbox firefox.exe -P, but even in that case I get an error, I could try with a fresh install of Firefox, I'll let you know once I do. Disabling Hitman Pro Alert template doesn't seem to make any difference. I can't disable, modify or uninstall Sophos Endpoint.

After restoring the exploit protection settings to default values, and enabling back Hitman Pro Alert, I tried running other installed programs in the same sandbox, some work and some don't. At this point I'm not even sure if this problem is related only to Firefox or is something that involves many.

What works: Most windows' apps (tried Paint, Notepad, Wordpad, Regedit, CMD, Powershell, Windows Fax and Scan) SumatraPDF LibreOffice 7-Zip File Manager Notepad++ Telegram idafree 7.0 LTSpice Faststone Image Viewer x96dbg, x32dbg, x64dbg Autodesk AutoCAD 2022, Revit 2022, DWG Trueview 2022

What doesn't work, part 1 (sandboxie reports error WerFault.exe: SBIE2101 Object name not found: Unnamed object, error OpenProcess (C0000022) access=001FFFFF initialized=1) Windows Media Player Microsoft Office 2013 apps (tried Word, Excel and Powerpoint) Firefox Google Chrome Acrobat Reader DC Foxit PDF Reader

What doesn't work, part 2 (a dialogbox shows up reporting error 0xC00000005) Internet explorer Skype

isaak654 commented 2 years ago

The programs that you reported as not working are running fine for me on W10 21H1, so it must be something about non-default Windows settings or a conflict with another application (including, but not limited to Sophos).

Please add the following lines to the ini file (in your sandbox) and take another trace log with Sandboxie Plus to share here:

IpcTrace=*
ClsidTrace=*

Make sure to not create a huge log with 10000 lines or more. It could also be useful to indicate the exact time intervals where you received those errors.

I could try with a fresh install of Firefox, I'll let you know once I do.

I remember some odd cases when someone had to do a clean install of Mozilla Thunderbird in the outside system in order to make it work sandboxed.

eimiar commented 2 years ago

I followed your instructions enabling IpcTrace and ClsidTrace. I only enabled the trace log during the execution of the program, and stopped it after sandboxie showed the error, sadly the output is above 1000 lines of log, but I guess you can figure out when the error occurs (as soon as Werfault.exe is executed, which is at line 106). Here is the trace log for firefox: firefox.log Also windows media player.log if it's any interest or they happen to be related.

isaak654 commented 2 years ago

As far I can tell from the logs, I can only suggest to add Template=RpcPortBindingsExt or RpcMgmtSetComTimeout=n and see if one of these lines helps with your issue.

Just in case, you could do again the same logs with TraceBufferPages=2560 in order to attempt to clear out the log entries that were tagged as Unknown.

eimiar commented 2 years ago

I'm afraid your suggestions haven't made any difference :( First try: Template=RpcPortBindingsExt firefox-1.log Second try: RpcMgmtSetComTimeout=n firefox-2.log Third try: both settings firefox-1+2.log

isaak654 commented 2 years ago

Do you notice any difference with hardware acceleration disabled? Or you could wait the next v1.0.8 that will contain a ton of fixes, including this one.

Unfortunately it's difficult to locate an issue that it cannot be reproduced in person... are you sure there is no previous Sandboxie version (at this time) that is working for you? If so, it may also be related to your system.

Further suggestion: if needed, you could try the MiniDump features introduced on 1.0.5 / 5.55.5.

eimiar commented 2 years ago

Sorry, I gave up. Tried 1.0.8 and nothing changed. I believe it's Sophos Endpoint Security's fault and there's nothing I can do about it.