Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Couldn't update or uninstall Sandboxie #2140

Closed
0x391F opened this issue Aug 15, 2022 · 9 comments
Closed

Couldn't update or uninstall Sandboxie #2140

0x391F opened this issue Aug 15, 2022 · 9 comments
Labels
Can't reproduce The issue cannot be reproduced internally ESET SBIE issues in conjunction with ESET software

Comments

@0x391F
Copy link
Contributor

0x391F commented Aug 15, 2022

Describe what you noticed and did

Today I want to update Sandboxie/Sandboxie-Plus, but after I uninstall Sandboxie-Plus, Itry to update Sandboxie, it said:
pic
pic2

My computer have been reboot, but it doens't work.

How often did you encounter it so far?

No response

Affected program

N/A

Download link

N/A

Where is the program located?

Not relevant to my request.

Expected behavior

This bug shouldn't appear

What is your Windows edition and version?

Windows 10 Enterprise LTSC 2021 x64 (21H2)

In which Windows account you have this problem?

Not relevant to my request.

Please mention any installed security software

ESET Internet Security 15.2.11.0

What version of Sandboxie are you running?

Sandboxie 5.57.7/ Sandboxie-Plus 1.2.8b

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (to be specified).

Is it a regression?

Maybe Sandboxie 5.57.7/Sandboxie-Plus 1.2.8b

In which sandbox type you have this problem?

Not relevant to my request.

Can you reproduce this problem on an empty sandbox?

Not relevant to my request.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

@0x391F 0x391F added the Confirmation pending Further confirmation is requested label Aug 15, 2022
@0x391F
Copy link
Contributor Author

0x391F commented Aug 15, 2022

By the way ,I couldn't stop one KmdUtil.exe (access denied).

@isaak654 isaak654 added the ESET SBIE issues in conjunction with ESET software label Aug 15, 2022
@0x391F
Copy link
Contributor Author

0x391F commented Aug 15, 2022

I tried to use PyARK (ARK tools) to delete Sandboxie's install folder, and deleted register HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SbieDrv, it still couldn't install, and here're 3 remaining files, then I tried to add 3 files to PyARK's pending delete files (delete files after reboot), and reboot, all files deleted successfully, and Sandboxie/Sandboxie-Plus installed successfully, everything is alright.

@isaak654
Copy link
Collaborator

I tried to use PyARK (ARK tools)

Download link?

@0x391F
Copy link
Contributor Author

0x391F commented Aug 15, 2022

I tried to use PyARK (ARK tools)

Download link?

http://pysafe.cn/
https://github.com/antiwar3/py

Note:

  1. It seems only support win7 to win10 (20h1). In my physical PC (Windows 10 Enterprise LTSC 2021 x64 (21H2), it may BSoD, in my virtual machine (LTSC 2019 x64 (1809) ), it seems doens't have any problem).
  2. EIS said C:\Windows\System32\drivers\PYArkSafe.sys, which is createed by PyARK., is Win32/GenCBL.BHZ Trojan's variation, but I not sure if it's false-positive or not.

@0x391F
Copy link
Contributor Author

0x391F commented Aug 31, 2022

The same problem when I try to uninstall Sandboxie 5.58.1/Sandboxie-Plus 1.3.1.

@0x391F
Copy link
Contributor Author

0x391F commented Sep 21, 2022

The same problem when I try to uninstall Sandboxie 5.58.2/Sandboxie-Plus 1.3.2 and Sandboxie 5.58.3/Sandboxie-Plus 1.3.3.

@0x391F
Copy link
Contributor Author

0x391F commented Oct 9, 2022

The same problem when I try to uninstall Sandboxie 5.58.4/Sandboxie-Plus 1.3.4 and Sandboxie 5.58.5/Sandboxie-Plus 1.3.5.

@DavidXanatos
Copy link
Member

this is strange, other users dont have this issue, try uninstalling fresh after a rebot befor anything hat the chance to run in the sandbox

@isaak654 isaak654 added the answered? Feedback request label Nov 18, 2022
@0x391F
Copy link
Contributor Author

0x391F commented Jan 17, 2023

This bug seems doesn't reproduced in recent versions.

@0x391F 0x391F closed this as completed Jan 17, 2023
@isaak654 isaak654 added Can't reproduce The issue cannot be reproduced internally and removed Confirmation pending Further confirmation is requested answered? Feedback request labels Jan 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Can't reproduce The issue cannot be reproduced internally ESET SBIE issues in conjunction with ESET software
Projects
None yet
Development

No branches or pull requests

3 participants