Trust No Program
This topic is locked: you cannot edit posts or make replies.
a-squared is not able to see firefox in SB
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
Hallo,

I'm testing a-squared anti malware v4 beta at the moment.

It has a feature to block bad hosts or tracking cookies.

If I run Firefox sandboxed, a-squared is not able to block like it should.
If I run Firefox outside SB, it works fine.

How do I have to setup SB to solve this problem?

Thank in advance

_________________
mattblau
View user's profileSend private message
Ruhe


Joined: 03 Jul 2008
Posts: 803
Location: Germany
Reply with quote
Did you try the Resource Access Monitor?
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
This is a debugview log with things happening, when Fir0jox is running outside SB and a-aquared is checking and blocking hosts. That should work for Firefox in SB too.

Any idea?
00000373 7.06512785 [1684] a2guard: -> Entering to the CheckFileSHA1 function.
00000374 7.06515598 [1684] a2guard: Val: FileName = C:\PROGRAMME\MOZILLA FIREFOX\FIREFOX.EXE
00000375 7.06518173 [1684] a2guard: <- Exiting from the CheckFileSHA1 function.
00000376 7.06522655 [1684] -> Entering to the THosts.Allowed function.
00000377 7.06525373 [1684] Val: Host = www.freeserials.ws
00000378 7.07204008 [1684] Result = 0
00000379 7.07206774 [1684] <- Exiting from the THosts.Allowed function.
00000380 7.07249594 [1684] Mes: Entering to the critical section
00000381 7.09700489 [1684] -> Entering to the ForceForegroundWindow function.
00000382 7.11218786 [1684] Result = -1
00000383 7.11227417 [1684] <- Exiting from the ForceForegroundWindow function.
00000384 7.12439728 [1684] -> Entering to the Misc GetSpecialPath function.
00000385 7.12442541 [1684] Val: nFolder = 38
00000386 7.12450075 [1684] Result = C:\Programme\
00000387 7.12452650 [1684] <- Exiting from the Misc GetSpecialPath function.
00000388 7.12456417 [1684] -> Entering to the GetOperatingSystem function.
00000389 7.12459230 [1684] Val: Result = 6
00000390 7.12461996 [1684] <- Exiting from the GetOperatingSystem function.
00000391 7.13227749 [2148] -> Entering to the GetOperatingSystem function.
00000392 7.13230610 [2148] Val: Result = 6
00000393 7.13233042 [2148] <- Exiting from the GetOperatingSystem function.
00000394 7.13993502 [1684] -> Entering to the GetOperatingSystem function.
00000395 7.13996363 [1684] Val: Result = 6
00000396 7.13999462 [1684] <- Exiting from the GetOperatingSystem function.
00000397 7.14022350 [1684] -> Entering to the GetOperatingSystem function.
00000398 7.14025259 [1684] Val: Result = 6
00000399 7.14027834 [1684] <- Exiting from the GetOperatingSystem function.
00000400 7.14072371 [1684] -> Entering to the GetOperatingSystem function.
00000401 7.14075232 [1684] Val: Result = 6
00000402 7.14077711 [1684] <- Exiting from the GetOperatingSystem function.
00000403 7.14123106 [1684] -> Entering to the GetOperatingSystem function.
00000404 7.14125967 [1684] Val: Result = 6
00000405 7.14128494 [1684] <- Exiting from the GetOperatingSystem function.
00000406 7.14149570 [1684] -> Entering to the GetOperatingSystem function.
00000407 7.14152336 [1684] Val: Result = 6
00000408 7.14154911 [1684] <- Exiting from the GetOperatingSystem function.
00000409 7.14175844 [1684] -> Entering to the GetOperatingSystem function.
00000410 7.14178705 [1684] Val: Result = 6
00000411 7.14181232 [1684] <- Exiting from the GetOperatingSystem function.
00000412 7.14202690 [1684] -> Entering to the GetOperatingSystem function.
00000413 7.14205551 [1684] Val: Result = 6
00000414 7.14208126 [1684] <- Exiting from the GetOperatingSystem function.
00000415 7.14251566 [1684] -> Entering to the GetOperatingSystem function.
00000416 7.14254475 [1684] Val: Result = 6
00000417 7.14257002 [1684] <- Exiting from the GetOperatingSystem function.
00000418 7.14277935 [1684] -> Entering to the GetOperatingSystem function.
00000419 7.14280844 [1684] Val: Result = 6
00000420 7.14283371 [1684] <- Exiting from the GetOperatingSystem function.
00000421 7.14305019 [1684] -> Entering to the GetOperatingSystem function.
00000422 7.14307880 [1684] Val: Result = 6
00000423 7.14310503 [1684] <- Exiting from the GetOperatingSystem function.
00000424 7.14354181 [1684] -> Entering to the GetOperatingSystem function.
00000425 7.14357042 [1684] Val: Result = 6
00000426 7.14359617 [1684] <- Exiting from the GetOperatingSystem function.
00000427 7.14404440 [1684] -> Entering to the GetOperatingSystem function.
00000428 7.14407301 [1684] Val: Result = 6
00000429 7.14409828 [1684] <- Exiting from the GetOperatingSystem function.
00000430 7.14453316 [1684] -> Entering to the GetOperatingSystem function.
00000431 7.14456177 [1684] Val: Result = 6
00000432 7.14458752 [1684] <- Exiting from the GetOperatingSystem function.
00000433 7.14512920 [1684] -> Entering to the GetOperatingSystem function.
00000434 7.14516592 [1684] Val: Result = 6
00000435 7.14526463 [1684] <- Exiting from the GetOperatingSystem function.
00000436 7.14568043 [1684] -> Entering to the GetOperatingSystem function.
00000437 7.14571667 [1684] Val: Result = 6
00000438 7.14607620 [1684] <- Exiting from the GetOperatingSystem function.
00000439 7.14624262 [1684] -> Entering to the GetOperatingSystem function.
00000440 7.14627886 [1684] Val: Result = 6
00000441 7.14649391 [1684] <- Exiting from the GetOperatingSystem function.
00000442 7.14681339 [1684] -> Entering to the GetOperatingSystem function.
00000443 7.14694452 [1684] Val: Result = 6
00000444 7.14703417 [1684] <- Exiting from the GetOperatingSystem function.
00000445 7.14761496 [1684] -> Entering to the GetOperatingSystem function.
00000446 7.14765501 [1684] Val: Result = 6
00000447 7.14793444 [1684] <- Exiting from the GetOperatingSystem function.
00000448 7.14819765 [1684] -> Entering to the GetOperatingSystem function.
00000449 7.14823437 [1684] Val: Result = 6
00000450 7.14845037 [1684] <- Exiting from the GetOperatingSystem function.
00000451 7.14850998 [1684] -> Entering to the GetOperatingSystem function.
00000452 7.14854574 [1684] Val: Result = 6
00000453 7.14878559 [1684] <- Exiting from the GetOperatingSystem function.
00000454 7.14883232 [1684] -> Entering to the GetOperatingSystem function.
00000455 7.14886904 [1684] Val: Result = 6
00000456 7.14894199 [1684] <- Exiting from the GetOperatingSystem function.
00000457 7.14915085 [1684] -> Entering to the GetOperatingSystem function.
00000458 7.14918661 [1684] Val: Result = 6
00000459 7.14939547 [1684] <- Exiting from the GetOperatingSystem function.
00000460 7.14945316 [1684] -> Entering to the GetOperatingSystem function.
00000461 7.14948940 [1684] Val: Result = 6
00000462 7.14972591 [1684] <- Exiting from the GetOperatingSystem function.
00000463 7.14975548 [1684] -> Entering to the GetOperatingSystem function.
00000464 7.15151501 [1684] Val: Result = 6
00000465 7.15154314 [1684] <- Exiting from the GetOperatingSystem function.
00000466 7.15183163 [1684] -> Entering to the GetOperatingSystem function.
00000467 7.15185165 [1684] Val: Result = 6
00000468 7.15187836 [1684] <- Exiting from the GetOperatingSystem function.
00000469 7.15232563 [1684] -> Entering to the GetOperatingSystem function.
00000470 7.15235424 [1684] Val: Result = 6
00000471 7.15238047 [1684] <- Exiting from the GetOperatingSystem function.
00000472 7.15282106 [1684] -> Entering to the GetOperatingSystem function.
00000473 7.15285063 [1684] Val: Result = 6
00000474 7.15287590 [1684] <- Exiting from the GetOperatingSystem function.
00000475 7.15331221 [1684] -> Entering to the GetOperatingSystem function.
00000476 7.15334177 [1684] Val: Result = 6
00000477 7.15336704 [1684] <- Exiting from the GetOperatingSystem function.
00000478 7.15380621 [1684] -> Entering to the GetOperatingSystem function.
00000479 7.15383482 [1684] Val: Result = 6
00000480 7.15386105 [1684] <- Exiting from the GetOperatingSystem function.
00000481 7.15429640 [1684] -> Entering to the GetOperatingSystem function.
00000482 7.15432549 [1684] Val: Result = 6
00000483 7.15435076 [1684] <- Exiting from the GetOperatingSystem function.
00000484 7.15480757 [1684] -> Entering to the GetOperatingSystem function.
00000485 7.15483618 [1684] Val: Result = 6
00000486 7.15486193 [1684] <- Exiting from the GetOperatingSystem function.
00000487 7.15530396 [1684] -> Entering to the GetOperatingSystem function.
00000488 7.15533352 [1684] Val: Result = 6
00000489 7.15535927 [1684] <- Exiting from the GetOperatingSystem function.
00000490 7.15581465 [1684] -> Entering to the GetOperatingSystem function.
00000491 7.15584373 [1684] Val: Result = 6
00000492 7.15586901 [1684] <- Exiting from the GetOperatingSystem function.
00000493 7.15630722 [1684] -> Entering to the GetOperatingSystem function.
00000494 7.15633583 [1684] Val: Result = 6
00000495 7.15636158 [1684] <- Exiting from the GetOperatingSystem function.
00000496 7.15680122 [1684] -> Entering to the GetOperatingSystem function.
00000497 7.15683031 [1684] Val: Result = 6
00000498 7.15685558 [1684] <- Exiting from the GetOperatingSystem function.
00000499 7.15729380 [1684] -> Entering to the GetOperatingSystem function.
00000500 7.15732288 [1684] Val: Result = 6
00000501 7.15734863 [1684] <- Exiting from the GetOperatingSystem function.
00000502 7.15755939 [1684] -> Entering to the GetOperatingSystem function.
00000503 7.15759468 [1684] Val: Result = 6
00000504 7.15761995 [1684] <- Exiting from the GetOperatingSystem function.
00000505 7.15805817 [1684] -> Entering to the GetOperatingSystem function.
00000506 7.15808678 [1684] Val: Result = 6
00000507 7.15811253 [1684] <- Exiting from the GetOperatingSystem function.
00000508 7.15922689 [1684] -> Entering to the GetOperatingSystem function.
00000509 7.15925646 [1684] Val: Result = 6
00000510 7.15928268 [1684] <- Exiting from the GetOperatingSystem function.
00000511 7.15949631 [1684] -> Entering to the GetOperatingSystem function.
00000512 7.15953827 [1684] Val: Result = 6
00000513 7.15956450 [1684] <- Exiting from the GetOperatingSystem function.
00000514 7.16000223 [1684] -> Entering to the GetOperatingSystem function.
00000515 7.16003132 [1684] Val: Result = 6
00000516 7.16005659 [1684] <- Exiting from the GetOperatingSystem function.
00000517 7.16050100 [1684] -> Entering to the GetOperatingSystem function.
00000518 7.16052961 [1684] Val: Result = 6
00000519 7.16055536 [1684] <- Exiting from the GetOperatingSystem function.
00000520 7.16127014 [1684] -> Entering to the GetOperatingSystem function.
00000521 7.16129875 [1684] Val: Result = 6
00000522 7.16132450 [1684] <- Exiting from the GetOperatingSystem function.
00000523 7.16177034 [1684] -> Entering to the GetOperatingSystem function.
00000524 7.16179943 [1684] Val: Result = 6
00000525 7.16182470 [1684] <- Exiting from the GetOperatingSystem function.
00000526 7.16254234 [1684] -> Entering to the GetOperatingSystem function.
00000527 7.16257143 [1684] Val: Result = 6
00000528 7.16259670 [1684] <- Exiting from the GetOperatingSystem function.
00000529 7.16281080 [1684] -> Entering to the GetOperatingSystem function.
00000530 7.16283941 [1684] Val: Result = 6
00000531 7.16286516 [1684] <- Exiting from the GetOperatingSystem function.
00000532 7.16330051 [1684] -> Entering to the GetOperatingSystem function.
00000533 7.16333008 [1684] Val: Result = 6
00000534 7.16335535 [1684] <- Exiting from the GetOperatingSystem function.
00000535 7.16379881 [1684] -> Entering to the GetOperatingSystem function.
00000536 7.16382742 [1684] Val: Result = 6
00000537 7.16385269 [1684] <- Exiting from the GetOperatingSystem function.
00000538 7.16428804 [1684] -> Entering to the GetOperatingSystem function.
00000539 7.16431713 [1684] Val: Result = 6
00000540 7.16434240 [1684] <- Exiting from the GetOperatingSystem function.
00000541 7.16478682 [1684] -> Entering to the GetOperatingSystem function.
00000542 7.16481543 [1684] Val: Result = 6
00000543 7.16484118 [1684] <- Exiting from the GetOperatingSystem function.
00000544 7.16493225 [1684] -> Entering to the GetOperatingSystem function.
00000545 7.16496038 [1684] Val: Result = 6
00000546 7.16498566 [1684] <- Exiting from the GetOperatingSystem function.
00000547 7.16547298 [1684] -> Entering to the GetOperatingSystem function.
00000548 7.16548443 [1684] Val: Result = 6
00000549 7.16551256 [1684] <- Exiting from the GetOperatingSystem function.
00000550 7.16595507 [1684] -> Entering to the GetOperatingSystem function.
00000551 7.16598320 [1684] Val: Result = 6
00000552 7.16600895 [1684] <- Exiting from the GetOperatingSystem function.
00000553 7.16647053 [1684] -> Entering to the GetOperatingSystem function.
00000554 7.16649914 [1684] Val: Result = 6
00000555 7.16652489 [1684] <- Exiting from the GetOperatingSystem function.
00000556 7.16696358 [1684] -> Entering to the GetOperatingSystem function.
00000557 7.16699219 [1684] Val: Result = 6
00000558 7.16701794 [1684] <- Exiting from the GetOperatingSystem function.
00000559 7.16711426 [1684] -> Entering to the GetOperatingSystem function.
00000560 7.16714239 [1684] Val: Result = 6
00000561 7.16716719 [1684] <- Exiting from the GetOperatingSystem function.
00000562 7.16738129 [1684] -> Entering to the GetOperatingSystem function.
00000563 7.16740990 [1684] Val: Result = 6
00000564 7.16743517 [1684] <- Exiting from the GetOperatingSystem function.
00000565 7.16787386 [1684] -> Entering to the GetOperatingSystem function.
00000566 7.16790247 [1684] Val: Result = 6
00000567 7.16792822 [1684] <- Exiting from the GetOperatingSystem function.
00000568 7.16836929 [1684] -> Entering to the GetOperatingSystem function.
00000569 7.16839790 [1684] Val: Result = 6
00000570 7.16842318 [1684] <- Exiting from the GetOperatingSystem function.
00000571 7.16886330 [1684] -> Entering to the GetOperatingSystem function.
00000572 7.16889238 [1684] Val: Result = 6
00000573 7.16891861 [1684] <- Exiting from the GetOperatingSystem function.
00000574 7.16912842 [1684] -> Entering to the GetOperatingSystem function.
00000575 7.16915703 [1684] Val: Result = 6
00000576 7.16918278 [1684] <- Exiting from the GetOperatingSystem function.
00000577 7.16964436 [1684] -> Entering to the GetOperatingSystem function.
00000578 7.16967201 [1684] Val: Result = 6
00000579 7.16969728 [1684] <- Exiting from the GetOperatingSystem function.
00000580 7.17013454 [1684] -> Entering to the GetOperatingSystem function.
00000581 7.17016411 [1684] Val: Result = 6
00000582 7.17018986 [1684] <- Exiting from the GetOperatingSystem function.
00000583 7.17063570 [1684] -> Entering to the GetOperatingSystem function.
00000584 7.17066431 [1684] Val: Result = 6
00000585 7.17068958 [1684] <- Exiting from the GetOperatingSystem function.
00000586 7.17112684 [1684] -> Entering to the GetOperatingSystem function.
00000587 7.17115593 [1684] Val: Result = 6
00000588 7.17118120 [1684] <- Exiting from the GetOperatingSystem function.
00000589 7.17142725 [1684] -> Entering to the GetOperatingSystem function.
00000590 7.17145586 [1684] Val: Result = 6
00000591 7.17148161 [1684] <- Exiting from the GetOperatingSystem function.
00000592 7.17169857 [1684] -> Entering to the GetOperatingSystem function.
00000593 7.17172766 [1684] Val: Result = 6
00000594 7.17175388 [1684] <- Exiting from the GetOperatingSystem function.
00000595 7.17197990 [1684] -> Entering to the GetOperatingSystem function.
00000596 7.17200851 [1684] Val: Result = 6
00000597 7.17203426 [1684] <- Exiting from the GetOperatingSystem function.
00000598 7.17224741 [1684] -> Entering to the GetOperatingSystem function.
00000599 7.17227650 [1684] Val: Result = 6
00000600 7.17230225 [1684] <- Exiting from the GetOperatingSystem function.
00000601 7.17253256 [1684] -> Entering to the GetOperatingSystem function.
00000602 7.17256117 [1684] Val: Result = 6
00000603 7.17258692 [1684] <- Exiting from the GetOperatingSystem function.
00000604 7.17325878 [1684] -> Entering to the GetOperatingSystem function.
00000605 7.17328739 [1684] Val: Result = 6
00000606 7.17331314 [1684] <- Exiting from the GetOperatingSystem function.
00000607 7.17375708 [1684] -> Entering to the GetOperatingSystem function.
00000608 7.17378569 [1684] Val: Result = 6
00000609 7.17381144 [1684] <- Exiting from the GetOperatingSystem function.
00000610 7.17425013 [1684] -> Entering to the GetOperatingSystem function.
00000611 7.17427874 [1684] Val: Result = 6
00000612 7.17430449 [1684] <- Exiting from the GetOperatingSystem function.
00000613 7.17474222 [1684] -> Entering to the GetOperatingSystem function.
00000614 7.17477083 [1684] Val: Result = 6
00000615 7.17479658 [1684] <- Exiting from the GetOperatingSystem function.
00000616 7.17524767 [1684] -> Entering to the GetOperatingSystem function.
00000617 7.17527628 [1684] Val: Result = 6
00000618 7.17530155 [1684] <- Exiting from the GetOperatingSystem function.
00000619 7.17584753 [1684] -> Entering to the GetOperatingSystem function.
00000620 7.17587662 [1684] Val: Result = 6
00000621 7.17590237 [1684] <- Exiting from the GetOperatingSystem function.
00000622 7.17634153 [1684] -> Entering to the GetOperatingSystem function.
00000623 7.17637062 [1684] Val: Result = 6
00000624 7.17639589 [1684] <- Exiting from the GetOperatingSystem function.
00000625 7.17684746 [1684] -> Entering to the GetOperatingSystem function.
00000626 7.17687607 [1684] Val: Result = 6
00000627 7.17690229 [1684] <- Exiting from the GetOperatingSystem function.
00000628 7.17734718 [1684] -> Entering to the GetOperatingSystem function.
00000629 7.17737579 [1684] Val: Result = 6
00000630 7.17740154 [1684] <- Exiting from the GetOperatingSystem function.
00000631 7.17784595 [1684] -> Entering to the GetOperatingSystem function.
00000632 7.17787457 [1684] Val: Result = 6
00000633 7.17789936 [1684] <- Exiting from the GetOperatingSystem function.
00000634 7.17834568 [1684] -> Entering to the GetOperatingSystem function.
00000635 7.17837429 [1684] Val: Result = 6
00000636 7.17840052 [1684] <- Exiting from the GetOperatingSystem function.
00000637 10.55588913 [1684] a2guard: Result = 0
00000638 10.55591202 [1684] a2guard: <- Exiting from the IDS Callback function.
00000639 10.55614853 [2148] a2service: Val: Result = 0
00000640 10.55617714 [2148] a2service: <- Exiting from the OnIDSCallback function.
00000641 10.64417744 [2148] a2service: -> Entering to the OnIDSCallback function.
00000642 10.64424324 [2148] a2service: Val: ID = 247
00000643 10.64425659 [2148] a2service: Val: PID = 2276
00000644 10.64430618 [2148] a2service: -> Entering to the GetMonitor function.
00000645 10.64433670 [2148] a2service: Val: PID = 2276
00000646 10.64440441 [2148] a2service: Val: IDS = -1
00000647 10.64442635 [2148] a2service: -> Entering to the GetSessionMonitor function.
00000648 10.64447498 [2148] a2service: Val: PID = 2276
00000649 10.64449883 [2148] a2service: Val: IDS = -1
00000650 10.64451790 [2148] -> Entering to the GetOperatingSystem function.
00000651 10.64457226 [2148] Val: Result = 6
00000652 10.64458561 [2148] <- Exiting from the GetOperatingSystem function.
00000653 10.64475346 [2148] -> Entering to the GetOperatingSystem function.
00000654 10.64478779 [2148] Val: Result = 6
00000655 10.64483547 [2148] <- Exiting from the GetOperatingSystem function.
00000656 10.64488029 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000657 10.64491653 [2148] a2service: Val: IDS = -1
00000658 10.64495182 [2148] a2service: Val: SessionID = 0
00000659 10.64498615 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000660 10.64502621 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000661 10.64506054 [2148] a2service: Val: IDS = -1
00000662 10.64509583 [2148] a2service: Val: SessionID = 0
00000663 10.64512920 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000664 10.64516544 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000665 10.64520073 [2148] a2service: Val: IDS = -1
00000666 10.64523411 [2148] a2service: Val: SessionID = 0
00000667 10.64526844 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000668 10.64530373 [2148] -> Entering to the GetOperatingSystem function.
00000669 10.64533710 [2148] Val: Result = 6
00000670 10.64537239 [2148] <- Exiting from the GetOperatingSystem function.
00000671 10.64540577 [2148] a2service: Val: Result = -1
00000672 10.64544010 [2148] a2service: <- Exiting from the GetSessionMonitor function.
00000673 10.64556599 [2148] a2service: <- Exiting from the GetMonitor function.
00000674 10.64560223 [2148] -> Entering to the GetProcessFilename function.
00000675 10.64563560 [2148] Val: PID = 2276
00000676 10.64567852 [2148] -> Entering to the GetOperatingSystem function.
00000677 10.64571190 [2148] Val: Result = 6
00000678 10.64577293 [2148] <- Exiting from the GetOperatingSystem function.
00000679 10.64580727 [2148] Val: Result = C:\Programme\Mozilla Firefox\firefox.exe
00000680 10.64618874 [2148] <- Exiting from the GetProcessFilename function.
00000681 10.64622784 [2148] a2service: -> Entering to the GetMonitor function.
00000682 10.64626503 [2148] a2service: Val: PID = 2276
00000683 10.64629841 [2148] a2service: Val: IDS = -1
00000684 10.64633465 [2148] a2service: -> Entering to the GetSessionMonitor function.
00000685 10.64636993 [2148] a2service: Val: PID = 2276
00000686 10.64640808 [2148] a2service: Val: IDS = -1
00000687 10.64644432 [2148] -> Entering to the GetOperatingSystem function.
00000688 10.64647770 [2148] Val: Result = 6
00000689 10.64653206 [2148] <- Exiting from the GetOperatingSystem function.
00000690 10.64661121 [2148] -> Entering to the GetOperatingSystem function.
00000691 10.64666080 [2148] Val: Result = 6
00000692 10.64670563 [2148] <- Exiting from the GetOperatingSystem function.
00000693 10.64674091 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000694 10.64677620 [2148] a2service: Val: IDS = -1
00000695 10.64681053 [2148] a2service: Val: SessionID = 0
00000696 10.64684391 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000697 10.64687920 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000698 10.64691448 [2148] a2service: Val: IDS = -1
00000699 10.64694786 [2148] a2service: Val: SessionID = 0
00000700 10.64699078 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000701 10.64702702 [2148] a2service: -> Entering to the GetConnectedMonitor function.
00000702 10.64706326 [2148] a2service: Val: IDS = -1
00000703 10.64709759 [2148] a2service: Val: SessionID = 0
00000704 10.64713192 [2148] a2service: <- Exiting from the GetConnectedMonitor function.
00000705 10.64716911 [2148] -> Entering to the GetOperatingSystem function.
00000706 10.64720345 [2148] Val: Result = 6
00000707 10.64723873 [2148] <- Exiting from the GetOperatingSystem function.
00000708 10.64727211 [2148] a2service: Val: Result = -1
00000709 10.64730644 [2148] a2service: <- Exiting from the GetSessionMonitor function.
00000710 10.64739895 [2148] a2service: <- Exiting from the GetMonitor function.
00000711 10.64743900 [1684] a2guard: -> Entering to the IDS Callback function.
00000712 10.64769840 [1684] a2guard: Val: ID = 247, PID = 2276
00000713 10.64773464 [2148] -> Entering to the GetProcessFilename function.
00000714 10.64776039 [2148] Val: PID = 2276
00000715 10.64777088 [2148] -> Entering to the GetOperatingSystem function.
00000716 10.64782047 [2148] Val: Result = 6
00000717 10.64787769 [2148] <- Exiting from the GetOperatingSystem function.
00000718 10.64791203 [2148] Val: Result = C:\Programme\Mozilla Firefox\firefox.exe
00000719 10.65000916 [2148] <- Exiting from the GetProcessFilename function.
00000720 10.65804482 [1684] -> Entering to the TWhiteList.Allowed function.
00000721 10.65818882 [1684] Val: SHA1 = 19E365305CEABAD649ED67278587D2F80B94C78E
00000722 10.65822697 [1684] Result = -1
00000723 10.65871429 [1684] <- Exiting from the TWhiteList.Allowed function.
00000724 10.65875053 [1684] a2guard: -> Entering to the CheckFileSHA1 function.
00000725 10.65876865 [1684] a2guard: Val: FileName = C:\PROGRAMME\MOZILLA FIREFOX\FIREFOX.EXE
00000726 10.65879536 [1684] a2guard: <- Exiting from the CheckFileSHA1 function.
00000727 10.65884113 [1684] -> Entering to the THosts.Allowed function.
00000728 10.65886784 [1684] Val: Host = www.freeserials.ws
00000729 10.66590786 [1684] Result = 0
00000730 10.66593266 [1684] <- Exiting from the THosts.Allowed function.
00000731 10.66672516 [2148] a2service: Val: Result = 0
00000732 10.66675186 [2148] a2service: <- Exiting from the OnIDSCallback function.
View user's profileSend private message
Ruhe


Joined: 03 Jul 2008
Posts: 803
Location: Germany
Reply with quote
Sorry, thats not the requested output.
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
I know - but the problem is: a2 is not running in the sandbox - it is not seen by the Ressource acces monitor, right? Only firefox is logged.

But I tried to run a2 in the sandbox too and made what you told me:
(Drive) \Device\CdRom0
(Drive) \Device\CdRom1
(Drive) \Device\HarddiskVolume1
(Drive) \Device\HarddiskVolume10
(Drive) \Device\HarddiskVolume11
(Drive) \Device\HarddiskVolume2
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume4
(Drive) \Device\HarddiskVolume5
(Drive) \Device\HarddiskVolume6
(Drive) \Device\HarddiskVolume7
(Drive) \Device\HarddiskVolume8
(Drive) \Device\HarddiskVolume9
(Unk) 00000022 \Device\KeyScrambler
(Unk) 00000022 \Device\SandboxieDriverApi
(Unk) 00000022 \Device\WMIDataDevice
(Unk) 00000035 \Dfs
(Unk) 00000039 \Device\KsecDD
(Unk) 000000F1 \Device\RasAcd
Clsid -------------------------------
Clsid X {F9D7362A-4F6F-4168-BD4A-62B5489BEC5B} ?
Ipc -------------------------------
Ipc \BaseNamedObjects\_GD_Mozilla_Email_Operation
Ipc \BaseNamedObjects\_GD_Network_Event3
Ipc \BaseNamedObjects\_GD_Network_Event4
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock1712
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock17120227EE3A
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock396
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock3960226EE3A
Ipc \BaseNamedObjects\_GD_Status_Single
Ipc \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf21Event1
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf21Event2
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf21Map
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf22Event1
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf22Event2
Ipc \BaseNamedObjects\a2_86E168CFAnswerBuf22Map
Ipc \BaseNamedObjects\a2_86E168CFIpc2Map
Ipc \BaseNamedObjects\a2_86E168CFIpc2Mutex
Ipc \BaseNamedObjects\a2AntiMalware_service_activated
Ipc \BaseNamedObjects\asquared_a2guard_2052_update
Ipc \BaseNamedObjects\asquared_center
Ipc \BaseNamedObjects\asquared_files_monitor_abort_event
Ipc \BaseNamedObjects\asquared_files_monitor_reload_event
Ipc \BaseNamedObjects\asquared_guard
Ipc \BaseNamedObjects\asquared_guard_local
Ipc \BaseNamedObjects\asquared_ids
Ipc \BaseNamedObjects\AutoUnhookMap$0000030c$67800000
Ipc \BaseNamedObjects\ComPlusCOMRegTable
Ipc \BaseNamedObjects\crypt32LogoffEvent
Ipc \BaseNamedObjects\FirefoxStartupMutex
Ipc \BaseNamedObjects\GoogleDesktop.exeqc
Ipc \BaseNamedObjects\HookTThread$804
Ipc \BaseNamedObjects\KeyScrambler Yield Icon Event
Ipc \BaseNamedObjects\kPidExitProcDataNameId
Ipc \BaseNamedObjects\KSEncryptionEvent0
Ipc \BaseNamedObjects\KSEncryptionEvent1
Ipc \BaseNamedObjects\KSProcEvent18C
Ipc \BaseNamedObjects\madExceptSettingsBuf$30c
Ipc \BaseNamedObjects\madExceptSettingsBuf$804
Ipc \BaseNamedObjects\madExceptSettingsBuf$928
Ipc \BaseNamedObjects\madExceptSettingsBuf$a14
Ipc \BaseNamedObjects\madExceptSettingsMtx$30c
Ipc \BaseNamedObjects\madExceptSettingsMtx$804
Ipc \BaseNamedObjects\madExceptSettingsMtx$928
Ipc \BaseNamedObjects\madExceptSettingsMtx$a14
Ipc \BaseNamedObjects\madExceptThreadNameBuf$30c
Ipc \BaseNamedObjects\madExceptThreadNameBuf$804
Ipc \BaseNamedObjects\madExceptThreadNameBuf$928
Ipc \BaseNamedObjects\madExceptThreadNameBuf$a14
Ipc \BaseNamedObjects\madToolsMsgHandlerMutex$9f4$413b0c
Ipc \BaseNamedObjects\madToolsMsgHandlerMutex$ad0$413b0c
Ipc \BaseNamedObjects\madToolsMsgHandlerMutex$b34$413b0c
Ipc \BaseNamedObjects\madToolsMsgHandlerMutex$e6c$413b34
Ipc \BaseNamedObjects\mc2IInjT$248
Ipc \BaseNamedObjects\mc2IInjT$2e8
Ipc \BaseNamedObjects\mc2IInjT$2f4
Ipc \BaseNamedObjects\mc2IInjT$30c
Ipc \BaseNamedObjects\mc2IInjT$314
Ipc \BaseNamedObjects\mc2IInjT$358
Ipc \BaseNamedObjects\mc2IInjT$394
Ipc \BaseNamedObjects\mc2IInjT$3a8
Ipc \BaseNamedObjects\mc2IInjT$3b4
Ipc \BaseNamedObjects\mc2IInjT$3bc
Ipc \BaseNamedObjects\mc2IInjT$3f4
Ipc \BaseNamedObjects\mc2IInjT$43c
Ipc \BaseNamedObjects\mc2IInjT$470
Ipc \BaseNamedObjects\mc2IInjT$488
Ipc \BaseNamedObjects\mc2IInjT$48c
Ipc \BaseNamedObjects\mc2IInjT$580
Ipc \BaseNamedObjects\mc2IInjT$6ac
Ipc \BaseNamedObjects\mc2IInjT$718
Ipc \BaseNamedObjects\mc2IInjT$9bc
Ipc \BaseNamedObjects\mc2IInjT$bd8
Ipc \BaseNamedObjects\mc2IInjT$c08
Ipc \BaseNamedObjects\mc2IInjT$c48
Ipc \BaseNamedObjects\mc2IInjT$c8c
Ipc \BaseNamedObjects\mc2IInjT$cbc
Ipc \BaseNamedObjects\mc2IInjT$d04
Ipc \BaseNamedObjects\mc2IInjT$d4c
Ipc \BaseNamedObjects\mc2IInjT$dfc
Ipc \BaseNamedObjects\mc2IInjT$ea0
Ipc \BaseNamedObjects\mc2IInjT$eac
Ipc \BaseNamedObjects\mc2IInjT$ee8
Ipc \BaseNamedObjects\mc2IInjT$f14
Ipc \BaseNamedObjects\mc2SWDIJ1
Ipc \BaseNamedObjects\mc2SWDIJMutex
Ipc \BaseNamedObjects\mchInjDrvMap
Ipc \BaseNamedObjects\mchLLEW2$30c
Ipc \BaseNamedObjects\mchMixCache$30c
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $08420000
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $71a135ef
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $71a14a07
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $71a18cd3
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c802213
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e37f140
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e3b673f
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e3b6783
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000030c, API $7e6da52f
Ipc \BaseNamedObjects\MUTEXkPidExitProcDataNameId
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $08420000
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $71a135ef
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $71a14a07
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $71a18cd3
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $77e071e9
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $77e07381
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c802213
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c91d250
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c91d5e0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c91dc40
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c91ddb0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7c91df60
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e368ccb
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e37929a
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e37aafd
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e37f140
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e37f3c2
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e3b673f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e3b6783
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $0000030c, API $7e6da52f
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f1d0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f210000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f250000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f290000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f300000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f340000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f380000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f3c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f400000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f440000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $0000030c, API $5f480000
Ipc \BaseNamedObjects\RotHintTable
Ipc \BaseNamedObjects\SbieDllDummyEvent_1532
Ipc \BaseNamedObjects\SbieDllDummyEvent_1712
Ipc \BaseNamedObjects\SbieDllDummyEvent_1824
Ipc \BaseNamedObjects\SbieDllDummyEvent_2052
Ipc \BaseNamedObjects\SbieDllDummyEvent_2344
Ipc \BaseNamedObjects\SbieDllDummyEvent_2580
Ipc \BaseNamedObjects\SbieDllDummyEvent_2632
Ipc \BaseNamedObjects\SbieDllDummyEvent_3580
Ipc \BaseNamedObjects\SbieDllDummyEvent_3756
Ipc \BaseNamedObjects\SbieDllDummyEvent_396
Ipc \BaseNamedObjects\SbieDllDummyEvent_4064
Ipc \BaseNamedObjects\SbieDllDummyEvent_780
Ipc \BaseNamedObjects\SbieServiceInitComplete_DcomLaunch
Ipc \BaseNamedObjects\SbieServiceInitComplete_RpcSs
Ipc \BaseNamedObjects\ScmCreatedEvent
Ipc \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Ipc \BaseNamedObjects\shell.{7CB834F0-527B-11D2-9D1F-0000F805CA57}
Ipc \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Ipc \BaseNamedObjects\UrlZonesSM_Admin
Ipc \BaseNamedObjects\userenv: User Profile setup event
Ipc \BaseNamedObjects\ZoneAttributeCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCounterMutex
Ipc \BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc \RPC Control\actkernel
Ipc \RPC Control\epmapper
Ipc \RPC Control\OLE6B3F87FBA19D41B1BA91F21C3106
Ipc O \BaseNamedObjects\AVSDA_KERNELOBJECT_2007_0410_095423
Ipc O \BaseNamedObjects\AVSDA_KERNELOBJECT_2007_0410_095508
Ipc O \BaseNamedObjects\DBWinMutex
Ipc O \BaseNamedObjects\KeyScrambler Driver Mutex
Ipc O \BaseNamedObjects\KeyScrambler Tray Icon Mutex
Ipc O \BaseNamedObjects\mc2SWDIJ1
Ipc O \BaseNamedObjects\RTSSSharedMemoryV2
Ipc O \BaseNamedObjects\Sandboxie_DeviceIdList
Ipc O \BaseNamedObjects\Sandboxie_DeviceSetupClasses
Ipc O \BaseNamedObjects\ShimCacheMutex
Ipc O \BaseNamedObjects\ShimSharedMemory
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111149
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111153
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111154
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111157
Ipc O \KnownDlls\advapi32.dll
Ipc O \KnownDlls\appHelp.dll
Ipc O \KnownDlls\COMCTL32.dll
Ipc O \KnownDlls\comdlg32.dll
Ipc O \KnownDlls\CRYPT32.dll
Ipc O \KnownDlls\CRYPTUI.dll
Ipc O \KnownDlls\gdi32.dll
Ipc O \KnownDlls\iertutil.dll
Ipc O \KnownDlls\imagehlp.dll
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\MSASN1.dll
Ipc O \KnownDlls\msvcrt.dll
Ipc O \KnownDlls\NETAPI32.dll
Ipc O \KnownDlls\Normaliz.dll
Ipc O \KnownDlls\ole32.dll
Ipc O \KnownDlls\oleaut32.dll
Ipc O \KnownDlls\rpcrt4.dll
Ipc O \KnownDlls\Secur32.dll
Ipc O \KnownDlls\SHDOCVW.dll
Ipc O \KnownDlls\shell32.dll
Ipc O \KnownDlls\SHLWAPI.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\USERENV.dll
Ipc O \KnownDlls\version.dll
Ipc O \KnownDlls\wininet.dll
Ipc O \KnownDlls\WINTRUST.dll
Ipc O \KnownDlls\wldap32.dll
Ipc O \LsaAuthenticationPort
Ipc O \NLS\NlsSectionCType
Ipc O \NLS\NlsSectionLocale
Ipc O \NLS\NlsSectionSortkey
Ipc O \NLS\NlsSectionSortTbls
Ipc O \NLS\NlsSectionUnicode
Ipc O \RPC Control\DNSResolver
Ipc O \RPC Control\SbieSvcPort
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \Windows\ApiPort
Ipc X \BaseNamedObjects\a2antimalware_service
Ipc X \BaseNamedObjects\GoogleDesktop.exemn
Ipc X \BaseNamedObjects\mc2SWDIJMutex
Pipe -------------------------------
Pipe \Device\NamedPipe\A-SQUARED_ANTI-MALWARE_PIPE
Pipe \Device\NamedPipe\KSTIPipeAdmin
Pipe \Device\NamedPipe\Win32Pipes.0000030c.00000001
Pipe \Device\NamedPipe\Win32Pipes.00000804.00000001
Pipe \Device\NamedPipe\Win32Pipes.00000804.00000002
Pipe \Device\NamedPipe\Win32Pipes.00000928.00000001
Pipe \Device\NamedPipe\Win32Pipes.00000a14.00000001
Pipe O \Device\Afd
Pipe O \Device\Afd\AsyncConnectHlp
Pipe O \Device\Afd\Endpoint
Pipe O \Device\NamedPipe\
Pipe O \Device\NamedPipe\WBServer0
Pipe X \Device\NamedPipe\A-SQUARED_ANTI-MALWARE_PIPE
Pipe X \Device\NamedPipe\KSTIPipeAdmin
Pipe X \Device\NamedPipe\lsarpc
Pipe X \Device\NamedPipe\samr
Pipe X \Device\NamedPipe\srvsvc
Pipe X \Device\NamedPipe\wkssvc
WinCls -------------------------------
WinCls FirefoxMessageWindow
WinCls TGuardForm
WinCls O Shell_TrayWnd
WinCls X #0
WinCls X #32770
WinCls X _GD_Index
WinCls X DDEMLMom
WinCls X FirefoxMessageWindow
WinCls X Progman

Does this help?
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15024
Reply with quote
I see a lot of A-Squared resources so let's go one by one.
For the first resource, go to Sandbox Settings -> Resource Access -> File Access -> Full Acess,
click Edit and type:

Code:
\Device\NamedPipe\A-SQUARED_ANTI-MALWARE_PIPE


Then restart sandboxed Firefox and see if it makes a difference to A-Squared.

_________________
tzuk
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
Thanks for your reply tzuk,

but sorry, did't work - next step?
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15024
Reply with quote
Next step is Sandbox Settings -> Resource Access -> IPC Access -> Direct Access.
Click Add, enter a resource name, click OK, and redo again for all resources.
The resources are:
Code:

\BaseNamedObjects\a2_*AnswerBuf*
\BaseNamedObjects\a2AntiMalware_service*
\BaseNamedObjects\asquared_*


I hope this time it works.
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
Sorry, no succes - still not working.

Maybe I have to tell, that Firefox is not installed in SB, it is only started in the sandbox.

Any other step to go?
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15024
Reply with quote
In that case please run through Resource Access Monitor again and post the output here. I want to make sure that your entries had effect, before we move on to locate any other resources that may be necessary.
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
ok, I'll do but:
- Firefox sandboxed? I think yes.
- a2 sandboxed? I think yes too, because it wouldn't show up in the log, right?

If not, tell me the scenario.

Thanks!
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15024
Reply with quote
Don't run A2 sandboxed. The relevant resources will show up in the monitor because they are accessed by the sandboxed Firefox.
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
(Drive) \Device\CdRom0
(Drive) \Device\CdRom1
(Drive) \Device\HarddiskVolume1
(Drive) \Device\HarddiskVolume10
(Drive) \Device\HarddiskVolume11
(Drive) \Device\HarddiskVolume2
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume4
(Drive) \Device\HarddiskVolume5
(Drive) \Device\HarddiskVolume6
(Drive) \Device\HarddiskVolume7
(Drive) \Device\HarddiskVolume8
(Drive) \Device\HarddiskVolume9
(Unk) 00000022 \Device\KeyScrambler
(Unk) 00000022 \Device\SandboxieDriverApi
(Unk) 00000022 \Device\WMIDataDevice
(Unk) 00000035 \Dfs
(Unk) 00000039 \Device\KsecDD
(Unk) 000000F1 \Device\RasAcd
Clsid -------------------------------
Clsid X {F9D7362A-4F6F-4168-BD4A-62B5489BEC5B} ?
Ipc -------------------------------
Ipc \BaseNamedObjects\_GD_Mozilla_Email_Operation
Ipc \BaseNamedObjects\_GD_Network_Event3
Ipc \BaseNamedObjects\_GD_Network_Event4
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock2144
Ipc \BaseNamedObjects\_GD_Singleton_Creation_Lock214401C0EE3A
Ipc \BaseNamedObjects\_GD_Status_Single
Ipc \BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc \BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc \BaseNamedObjects\a2_86E168CFIpc2Mutex
Ipc \BaseNamedObjects\AutoUnhookMap$00000860$67800000
Ipc \BaseNamedObjects\AutoUnhookMap$00000af4$67800000
Ipc \BaseNamedObjects\AutoUnhookMap$00000e3c$67800000
Ipc \BaseNamedObjects\AutoUnhookMap$00000e94$67800000
Ipc \BaseNamedObjects\ComPlusCOMRegTable
Ipc \BaseNamedObjects\crypt32LogoffEvent
Ipc \BaseNamedObjects\FirefoxStartupMutex
Ipc \BaseNamedObjects\GoogleDesktop.exeqc
Ipc \BaseNamedObjects\KeyScrambler Yield Icon Event
Ipc \BaseNamedObjects\kPidExitProcDataNameId
Ipc \BaseNamedObjects\KSEncryptionEvent0
Ipc \BaseNamedObjects\KSEncryptionEvent1
Ipc \BaseNamedObjects\KSProcEvent860
Ipc \BaseNamedObjects\mchLLEW2$860
Ipc \BaseNamedObjects\mchLLEW2$af4
Ipc \BaseNamedObjects\mchLLEW2$e3c
Ipc \BaseNamedObjects\mchLLEW2$e94
Ipc \BaseNamedObjects\mchMixCache$860
Ipc \BaseNamedObjects\mchMixCache$87c
Ipc \BaseNamedObjects\mchMixCache$af4
Ipc \BaseNamedObjects\mchMixCache$e3c
Ipc \BaseNamedObjects\mchMixCache$e94
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $00f20000
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $71a135ef
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $71a14a07
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $71a18cd3
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c802213
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e37f140
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e3b673f
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e3b6783
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000860, API $7e6da52f
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $0000087c, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $00e80000
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c802213
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e37f140
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e3b673f
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e3b6783
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000af4, API $7e6da52f
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $00a20000
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $71a135ef
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $71a14a07
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $71a18cd3
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c802213
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e37f140
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e3b673f
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e3c, API $7e3b6783
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $00bc0000
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $71a135ef
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $71a14a07
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $71a18cd3
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $77e071e9
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $77e07381
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c802213
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c91d250
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c91d5e0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c91dc40
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c91ddb0
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7c91df60
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e368ccb
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e37929a
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e37aafd
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e37f140
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e37f3c2
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e3b673f
Ipc \BaseNamedObjects\Mutex, mAH, Process $00000e94, API $7e3b6783
Ipc \BaseNamedObjects\MUTEXkPidExitProcDataNameId
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $00f20000
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $71a135ef
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $71a14a07
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $71a18cd3
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $77e071e9
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $77e07381
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c802213
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c91d250
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c91d5e0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c91dc40
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c91ddb0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7c91df60
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e368ccb
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e37929a
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e37aafd
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e37f140
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e37f3c2
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e3b673f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e3b6783
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000860, API $7e6da52f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $00e80000
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $77e071e9
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $77e07381
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c802213
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c91d250
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c91d5e0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c91dc40
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c91ddb0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7c91df60
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e368ccb
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e37929a
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e37aafd
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e37f140
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e37f3c2
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e3b673f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e3b6783
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000af4, API $7e6da52f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $00a20000
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $71a135ef
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $71a14a07
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $71a18cd3
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $77e071e9
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $77e07381
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c802213
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c91d250
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c91d5e0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c91dc40
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c91ddb0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7c91df60
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e368ccb
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e37929a
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e37aafd
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e37f140
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e37f3c2
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e3b673f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e3c, API $7e3b6783
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $00bc0000
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $71a135ef
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $71a14a07
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $71a18cd3
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $77e071e9
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $77e07381
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c802213
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c91d250
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c91d5e0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c91dc40
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c91ddb0
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7c91df60
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e368ccb
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e37929a
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e37aafd
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e37f140
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e37f3c2
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e3b673f
Ipc \BaseNamedObjects\NamedBuffer, mAH, Process $00000e94, API $7e3b6783
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f1d0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f210000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f250000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f290000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f300000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f340000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f380000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f3c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f400000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f440000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000860, API $5f480000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f140000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f180000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f1c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f200000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f270000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f2b0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f2f0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f330000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f370000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f3b0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000af4, API $5f3f0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f140000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f180000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f1c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f200000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f240000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f280000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f2c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f300000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f340000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f380000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e3c, API $5f3c0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f1d0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f210000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f250000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f290000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f2d0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f310000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f350000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f390000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f3d0000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f410000
Ipc \BaseNamedObjects\NamedBuffer, mix, Process $00000e94, API $5f450000
Ipc \BaseNamedObjects\RotHintTable
Ipc \BaseNamedObjects\SbieDllDummyEvent_2144
Ipc \BaseNamedObjects\SbieDllDummyEvent_2172
Ipc \BaseNamedObjects\SbieDllDummyEvent_2804
Ipc \BaseNamedObjects\SbieDllDummyEvent_3644
Ipc \BaseNamedObjects\SbieDllDummyEvent_3732
Ipc \BaseNamedObjects\SbieServiceInitComplete_DcomLaunch
Ipc \BaseNamedObjects\SbieServiceInitComplete_RpcSs
Ipc \BaseNamedObjects\ScmCreatedEvent
Ipc \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Ipc \BaseNamedObjects\shell.{7CB834F0-527B-11D2-9D1F-0000F805CA57}
Ipc \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Ipc \BaseNamedObjects\ShellCopyEngineFinished
Ipc \BaseNamedObjects\ShellCopyEngineRunning
Ipc \BaseNamedObjects\UrlZonesSM_Admin
Ipc \BaseNamedObjects\userenv: User Profile setup event
Ipc \BaseNamedObjects\ZoneAttributeCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCacheCounterMutex
Ipc \BaseNamedObjects\ZonesCounterMutex
Ipc \BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc \RPC Control\actkernel
Ipc \RPC Control\epmapper
Ipc \RPC Control\OLEE5E681FCDBD04F798572E24A6CB8
Ipc O \BaseNamedObjects\AVSDA_KERNELOBJECT_2007_0410_095423
Ipc O \BaseNamedObjects\AVSDA_KERNELOBJECT_2007_0410_095508
Ipc O \BaseNamedObjects\KeyScrambler Driver Mutex
Ipc O \BaseNamedObjects\KeyScrambler Tray Icon Mutex
Ipc O \BaseNamedObjects\mc2SWDIJ1
Ipc O \BaseNamedObjects\RTSSSharedMemoryV2
Ipc O \BaseNamedObjects\Sandboxie_DeviceIdList
Ipc O \BaseNamedObjects\Sandboxie_DeviceSetupClasses
Ipc O \BaseNamedObjects\ShimCacheMutex
Ipc O \BaseNamedObjects\ShimSharedMemory
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111149
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111153
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111154
Ipc O \BaseNamedObjects\WEBGUARD_KERNEL_OBJECT_200705111157
Ipc O \KnownDlls\advapi32.dll
Ipc O \KnownDlls\appHelp.dll
Ipc O \KnownDlls\COMCTL32.dll
Ipc O \KnownDlls\comdlg32.dll
Ipc O \KnownDlls\CRYPT32.dll
Ipc O \KnownDlls\gdi32.dll
Ipc O \KnownDlls\iertutil.dll
Ipc O \KnownDlls\imagehlp.dll
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\MSASN1.dll
Ipc O \KnownDlls\msvcrt.dll
Ipc O \KnownDlls\NETAPI32.dll
Ipc O \KnownDlls\Normaliz.dll
Ipc O \KnownDlls\ole32.dll
Ipc O \KnownDlls\oleaut32.dll
Ipc O \KnownDlls\rpcrt4.dll
Ipc O \KnownDlls\Secur32.dll
Ipc O \KnownDlls\shell32.dll
Ipc O \KnownDlls\SHLWAPI.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\USERENV.dll
Ipc O \KnownDlls\version.dll
Ipc O \KnownDlls\wininet.dll
Ipc O \KnownDlls\WINTRUST.dll
Ipc O \KnownDlls\wldap32.dll
Ipc O \LsaAuthenticationPort
Ipc O \NLS\NlsSectionCType
Ipc O \NLS\NlsSectionLocale
Ipc O \NLS\NlsSectionSortkey
Ipc O \NLS\NlsSectionSortTbls
Ipc O \NLS\NlsSectionUnicode
Ipc O \RPC Control\DNSResolver
Ipc O \RPC Control\SbieSvcPort
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \Windows\ApiPort
Ipc X \BaseNamedObjects\a2_86E168CFIpc2Map
Ipc X \BaseNamedObjects\GoogleDesktop.exemn
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $77e071e9
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $77e07381
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7c91d250
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7c91d5e0
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7c91dc40
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7c91ddb0
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7c91df60
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7e368ccb
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7e37929a
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7e37aafd
Ipc X \BaseNamedObjects\NamedBuffer, mAH, Process $0000087c, API $7e37f3c2
Pipe -------------------------------
Pipe \Device\NamedPipe\KSTIPipeAdmin
Pipe O \Device\Afd
Pipe O \Device\Afd\AsyncConnectHlp
Pipe O \Device\Afd\Endpoint
Pipe O \Device\NamedPipe\
Pipe O \Device\NamedPipe\WBServer0
Pipe X \Device\NamedPipe\KSTIPipeAdmin
Pipe X \Device\NamedPipe\lsarpc
Pipe X \Device\NamedPipe\srvsvc
Pipe X \Device\NamedPipe\wkssvc
WinCls -------------------------------
WinCls O CicLoaderWndClass
WinCls O Shell_TrayWnd
WinCls X #0
WinCls X #32770
WinCls X _GD_Index
WinCls X DDEMLMom
WinCls X FirefoxMessageWindow
WinCls X Progman
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15024
Reply with quote
This time I see hardly any A2 resources at all in the output, must be because you're no longer running A2 sandboxed. Try to add the one resource that does show up this time:

Sandbox Settings -> Resource Access -> IPC Access -> Direct Access
Add:
Code:
\BaseNamedObjects\a2_*Ipc*
View user's profileSend private message
mattblau


Joined: 11 Jul 2008
Posts: 33
Reply with quote
Still not working Crying or Very sad

The funny thing is: Avira Antivir Premium Webguard is working, Webroot Spysweeper is working - a2 not...

If you have another idea, please let me know.
Until this issue is not solved, I run Firefox not in SB.
View user's profileSend private message
a-squared is not able to see firefox in SB
You cannot post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 4  

Use the RSS feed to watch this topic for replies
  
  
 This topic is locked: you cannot edit posts or make replies.  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 208,764,431 times since June 2004