www.sandboxie.com :: View topic - New Version Keyscrambler v 2.5 Not Working When Sandboxed

Posted: Fri Aug 14, 2009 5:15 pm

Thanks, I got it.
At first glance I don't see anything. There may be a file that needs to be updated, outside of the sandbox.
If worst comes to worst, I may have to uninstall my Pro version and try the Personal version with IE.

Posted: Fri Aug 14, 2009 6:47 pm

Well, I uninstalled the Pro version and installed the Personal version of KS.
I didn't allow KS to check if there were any updates available, during the install.
Re-booted.

Ran IE8 unsandboxed - KS worked fine.
Ran 2 different unsandboxed Firefox profiles, each with the KS add-on installed - KS worked fine.

I ran IE8 sandboxed using my DefaultBox - KS worked fine.
I created a new "Test3" sandbox, and used it for IE8 - KS worked fine.
Ran both Firefox profiles sandboxed, with KS's add-on, and both worked fine.

In each of the above cases, the KS icon appeared in the system tray after the browser started, and turned green indicating it's protection is ON.
I could see the scrambled keystrokes in the tray icon.

I never did get any message about seeing what's new in KeyScrambler.
In fact I can't even find a way to call up that message.
I'm at a loss to know why you are having a problem.
The Sandboxie exclusions developed by Ruhe, do work with the Personal version.
And, as I said, I had no problem - at least on XP, if that matters, since I see that you use Vista.
Going back to the Pro version (hopefully).

[Edit]Back on the Pro version. I'm not too sure about the Personal version of KS, in that twice: unsandboxed Firefox either didn't show a window, or briefly opened and then quickly closed. The scrambling feature of KS worked when the window stayed open, though.

Posted: Sat Aug 15, 2009 10:58 am

Many thanks for your efforts on my behalf. I have some more feedback.

1. I tried uninstalling and reinstalling KeyScrambler Personal (I had actually tried this before). It made no difference – message appeared for sandboxed IE8 but no message for non-sandboxed IE8. [I think that I might have got this message for the unsandboxed IE8 on the first occasion that IE8 was opened after the KeyScrambler upgrade. However, the message does not appear for subsequent usage of unsandboxed IE8.]

2. Tried upgrading to KeyScrambler v 2.5.0.0 on second Vista PC (O/S = Vista Home Premium) and the same problem occurred.

3. Uninstalled KeyScrambler v 2.5.0.0 and reinstalled v 2.4.1.1 and the problem did not happen.

Given that you had no problem with XP, there must be some specific interaction between KeyScrambler Personal and Sandboxie that manifests itself with Vista (but not with XP) and this interaction must be due to some change between KeyScrambler v 2.4.1.1 and v 2.5.0.0.

However, I have no idea what to do next??

Any ideas would be very much appreciated.

PS: Are you also using Internet Explorer 8??

Posted: Sat Aug 15, 2009 11:18 am

In the past I did some beta testing of KeyScrambler, when they were about to come out with their version 2.
They seemed very responsive to trouble reports, so I would go to their web site and find a link for support.

I tested with IE 8 and Firefox, when I was using the Personal version.

Posted: Sat Aug 15, 2009 4:47 pm

Guest10 wrote:

In the past I did some beta testing of KeyScrambler, when they were about to come out with their version 2.
They seemed very responsive to trouble reports, so I would go to their web site and find a link for support.

I tested with IE 8 and Firefox, when I was using the Personal version.

I will get in touch with KeyScrambler Support and let you know the outcome.

Thanks again for your help.

Posted: Sun Aug 16, 2009 9:39 am

dogdog, I see this resource in your log:

Code:

Ipc \Sessions\1\BaseNamedObjects\KSIEParentEventF70

Try adding this to IPC Access > Direct Access:

Code:

*\BaseNamedObjects*\KSIEParentEvent*

See if it makes any difference. If not, run another monitor and post the results, because this one resource, once permitted, might lead to more resources.

Posted: Sun Aug 16, 2009 10:08 am

tzuk wrote:

dogdog, I see this resource in your log:

Code:

Ipc \Sessions\1\BaseNamedObjects\KSIEParentEventF70

Try adding this to IPC Access > Direct Access:

Code:

*\BaseNamedObjects*\KSIEParentEvent*

See if it makes any difference. If not, run another monitor and post the results, because this one resource, once permitted, might lead to more resources.

I will try this and report back. However, I will wait to see what response I get from KeyScrambler Support before trying your suggestion.

Couple of queries:

1) What does the line in the log actually mean?? Does the "F70" in the log mean that this resource was blocked?? There are other "F70"'s in the log.
2) Presumably KSIE is KeyScrambler?? Can one tell??
3) Is your suggestion equivalent to adding "OpenIpcPath=*\BaseNamedObjects*\KSIEParentEvent" to the KeyScrambler Local Template as proposed by Guest10/Ruhe?

Many thanks for your help.

Posted: Sun Aug 16, 2009 10:12 am

dogdog wrote:

3) Is your suggestion equivalent to adding "OpenIpcPath=*\BaseNamedObjects*\KSIEParentEvent" to the KeyScrambler Local Template as proposed by Guest10/Ruhe?

Yes! I guess I missed those comments. Sorry about that.

By the way, version 3.39.06 has an updated template for KeyScrambler.

Posted: Sun Aug 16, 2009 10:17 am

tzuk wrote:

By the way, version 3.39.06 has an updated template for KeyScrambler.

Verified, the Templates.ini in 3.39.06 contains the new/adapted settings.

Posted: Sun Aug 16, 2009 11:01 am

tzuk wrote:

dogdog wrote:

3) Is your suggestion equivalent to adding "OpenIpcPath=*\BaseNamedObjects*\KSIEParentEvent" to the KeyScrambler Local Template as proposed by Guest10/Ruhe?

Yes! I guess I missed those comments. Sorry about that.

By the way, version 3.39.06 has an updated template for KeyScrambler.

Not sure what you mean.

KeyScrambler Local Template as proposed by Guest10 is:

[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local

Is your extra line "OpenIpcPath=*\BaseNamedObjects*\KSIEParentEvent" already included by using Local Template or is it something extra??

I do not want to install Sandboxie v 3.39.06. Could someone post KeyScrambler Template as included within v 3.39.06

Many thanks.

Posted: Sun Aug 16, 2009 11:06 am

dogdog wrote:

Could someone post KeyScrambler Template as included within v 3.39.06

I've posted all needed settings here
All these are included in 3.39.06

Posted: Sun Aug 16, 2009 11:44 am

dogdog wrote:

tzuk wrote:

Try adding this to IPC Access > Direct Access:

Code:

*\BaseNamedObjects*\KSIEParentEvent*

See if it makes any difference.

I will try this and report back. However, I will wait to see what response I get from KeyScrambler Support before trying your suggestion.
...
3) Is your suggestion equivalent to adding "OpenIpcPath=*\BaseNamedObjects*\KSIEParentEvent" to the KeyScrambler Local Template as proposed by Guest10/Ruhe?

KSIEParentEvent was never suggested to be included, in the local template - so tzuk did not "miss it".

If you want to try adding that line, to see if it makes a difference on your computer, add it to your Local Template using Configure > Edit Configuration
Add the line that I show in red, as below:

[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local
OpenIPcPath=*\BaseNamedObjects*\KSIEParentEvent*

Posted: Sun Aug 16, 2009 12:16 pm

Some more results to report:

1) I suddenly stopped getting the offending KeyScrambler message on my main PC.

2) However, my second PC is still producing the offending KeyScrambler message as before . I even tried adding both:
OpenIpcPath=*\BaseNamedObjects*\KeyScrambler*
OpenIPcPath=*\BaseNamedObjects*\KSIEParentEvent*

to the KeyScrambler Local Template on second PC. It made no difference – the offending KeyScrambler message still appeared.

Therefore went back to main PC. I created a brand new sandbox – “NewBox” . For NewBox I left everything as created (ie all Sandboxie defaults). I then opened IE8 in NewBox having activated the Resource Access Monitor. The offending KeyScrambler message did not appear. I then closed down IE8. The contents of the Resorce Monitor is posted below. I thought you might notice a difference to previous post of Resource Monitor contents which might explain what has changed to cause offending KeyScrambler message not to appear.

Let me know what you think??

(Drive) \Device\CdRom0
(Drive) \Device\CdRom1
(Drive) \Device\HarddiskVolume10
(Drive) \Device\HarddiskVolume2
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume4
(Drive) \Device\HarddiskVolume5
(Drive) \Device\HarddiskVolume6
(Drive) \Device\HarddiskVolume7
(Drive) \Device\HarddiskVolume8
(Drive) \Device\HarddiskVolume9
(Unk) 00000022 \Device\KeyScrambler
(Unk) 00000022 \Device\SandboxieDriverApi
(Unk) 00000039 \Device\KsecDD
(Unk) 000000F1 \Device\RasAcd
Clsid -------------------------------
Clsid {25336920-03F9-11CF-8FD0-00AA00686F13} HTML Document
Clsid {2933BF91-7B36-11D2-B20E-00C04F983E60} Free Threaded XML DOM Document
Clsid {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
Clsid {84798B8E-69F8-4846-9516-373C2996E2F7} ProtectorLib Class
Clsid {9BA05972-F6A8-11CF-A442-00A0C90A8F39} ShellWindows
Clsid {D27CDB6E-AE6D-11CF-96B8-444553540000} Shockwave Flash Object
Clsid {F5078F35-C551-11D3-89B9-0000F81FE221} XML HTTP 3.0
Clsid {F6D90F11-9C73-11D3-B32E-00C04F990BB4} XML DOM Document
Ipc -------------------------------
Ipc \RPC Control\actkernel
Ipc \RPC Control\epmapper
Ipc \RPC Control\keysvc
Ipc \RPC Control\keysvc2
Ipc \RPC Control\LRPC-407e4e5567e88b42f6
Ipc \RPC Control\LRPC-fbdc7f93d9d457f862
Ipc \RPC Control\OLE0B239AFCFCB74D0C8562A5A7854D
Ipc \RPC Control\OLE0DD06E587A864BE5B83B3BB75C8A
Ipc \RPC Control\OLED6E49782EFBF420099BA25EBB199
Ipc \Sessions\1\BaseNamedObjects\!BrowserEmulation!SharedMemory!Mutex
Ipc \Sessions\1\BaseNamedObjects\!IECompat!Mutex
Ipc \Sessions\1\BaseNamedObjects\!IETld!Mutex
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMem!Counter
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMem!Settings
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMemory!Mutex
Ipc \Sessions\1\BaseNamedObjects\_!MSFTHISTORY!_
Ipc \Sessions\1\BaseNamedObjects\_!SHMSFTHISTORY!_
Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc \Sessions\1\BaseNamedObjects\{1B655094-FE2A-433c-A877-FF9793445069}
Ipc \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc \Sessions\1\BaseNamedObjects\{A946A6A9-917E-4949-B9BC-6BADA8C7FD63}
Ipc \Sessions\1\BaseNamedObjects\{D911EF4B-00BE-47b0-A137-2A8E63FF6287}_a05ba
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-helper
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-pending
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-aolsearch
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-aolsearch-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ask
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ask-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-baidu
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-bing
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-clusty
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-delicious
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-digg
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dmoz
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dogpile
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dogpile-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-gmail
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-gmail-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-google
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-googleimages
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-googleimages-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-google-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-hotmail
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick-pre1
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-mahalo
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-msn
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-msn-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-reddit
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-searchcom
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-searchcom-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-seznam
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-seznam-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-webde
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-wikipedia
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo-pre1
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yandex
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-shared
Ipc \Sessions\1\BaseNamedObjects\92c_752b
Ipc \Sessions\1\BaseNamedObjects\A522BF01-A1EE-440e-8851-5F36E269A79120090414-E62FEA13-B2A8-4fb4-86A1-822A38B1D2FA-S-1-5-21-3776523042-2144172045-2165215158-1005-1
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!feeds cache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!mshist012009081620090817!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!cookies!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!iecompatcache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!ietldcache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!privacie!
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Feeds Cache_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_MSHist012009081620090817_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_49152
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_65536
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_16384
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IECompatCache_index.dat_868352
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IETldCache_index.dat_245760
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_PrivacIE_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc \Sessions\1\BaseNamedObjects\ConnHashTable<456>_HashTable_Mutex
Ipc \Sessions\1\BaseNamedObjects\E62FEA13-B2A8-4fb4-86A1-822A38B1D2FA-S-1-5-21-3776523042-2144172045-2165215158-1005-1
Ipc \Sessions\1\BaseNamedObjects\IDCRL_STATECHANGE_EVENT_V1
Ipc \Sessions\1\BaseNamedObjects\IDCRL_STATECHANGE_FILE_V1
Ipc \Sessions\1\BaseNamedObjects\Identity CRL v1 File Access
Ipc \Sessions\1\BaseNamedObjects\IE_EarlyTabStart_0x10f4
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_ConnHashTable<456>
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_LogonHigh
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_LogonMedium
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_main_1c8
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateQuery!456
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateReply!456
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateSharedMem!456
Ipc \Sessions\1\BaseNamedObjects\IEFrame.EventCheckDefaultBrowser
Ipc \Sessions\1\BaseNamedObjects\Internet Explorer Immutable Application State (000001C8-0000-0000-0000-000000000000)
Ipc \Sessions\1\BaseNamedObjects\Isolation Process Registry (32DF78D6-8A5E-11DE-8D41-001AA0938247)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry (32DF78D6-8A5E-11DE-8D41-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry Event (32DF78D6-8A5E-11DE-8D41-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry Event (32DF78D7-8A5E-11DE-8D41-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\KeyScrambler DLL Shutdown Event
Ipc \Sessions\1\BaseNamedObjects\KeyScrambler Yield Icon Event
Ipc \Sessions\1\BaseNamedObjects\KSEncryptionEvent0
Ipc \Sessions\1\BaseNamedObjects\KSEncryptionEvent1
Ipc \Sessions\1\BaseNamedObjects\KSEncStatusEvent
Ipc \Sessions\1\BaseNamedObjects\KSIEParentEvent1C8
Ipc \Sessions\1\BaseNamedObjects\KSProcEvent92C
Ipc \Sessions\1\BaseNamedObjects\LgScrollData
Ipc \Sessions\1\BaseNamedObjects\MSIMGSIZECacheMap
Ipc \Sessions\1\BaseNamedObjects\MSIMGSIZECacheMutex
Ipc \Sessions\1\BaseNamedObjects\oleacc-msaa-loaded
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot450F0F8444B79D8D
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot5136CDDCA79D8312
Ipc \Sessions\1\BaseNamedObjects\OleDfRootA2D467610DD2E66F
Ipc \Sessions\1\BaseNamedObjects\OleDfRootBA9DCF871524D0E9
Ipc \Sessions\1\BaseNamedObjects\RotHintTable
Ipc \Sessions\1\BaseNamedObjects\SandboxieHelper_ProtectedStorage_Mutex
Ipc \Sessions\1\BaseNamedObjects\SandboxieHelper_ProtectedStorage_Section
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_2152
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_2348
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_456
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_5188
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_5628
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_5956
Ipc \Sessions\1\BaseNamedObjects\SbieServiceInitComplete_DcomLaunch
Ipc \Sessions\1\BaseNamedObjects\SbieServiceInitComplete_RpcSs
Ipc \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_ClientId_Mutex
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_UrsCache_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-1-5-21-3776523042-2144172045-2165215158-1005
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_UrsCacheMutex_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-1-5-21-3776523042-2144172045-2165215158-1005
Ipc \Sessions\1\BaseNamedObjects\UrlZonesSM_Dell PC
Ipc \Sessions\1\BaseNamedObjects\windows_ie_global_counters
Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc \Sessions\1\BaseNamedObjects\ZoneAttributeCacheCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc O \...\WerTargetListTable
Ipc O \BaseNamedObjects\mmGlobalPnpInfo
Ipc O \BaseNamedObjects\msctf.serverDefault1
Ipc O \BaseNamedObjects\Sandboxie_DeviceIdList
Ipc O \BaseNamedObjects\Sandboxie_DeviceSetupClasses
Ipc O \BaseNamedObjects\TabletHardwarePresent
Ipc O \KnownDlls\advapi32.dll
Ipc O \KnownDlls\clbcatq.dll
Ipc O \KnownDlls\COMDLG32.dll
Ipc O \KnownDlls\gdi32.dll
Ipc O \KnownDlls\IERTUTIL.dll
Ipc O \KnownDlls\IMAGEHLP.dll
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\LPK.dll
Ipc O \KnownDlls\MSCTF.dll
Ipc O \KnownDlls\MSVCRT.dll
Ipc O \KnownDlls\NORMALIZ.dll
Ipc O \KnownDlls\NSI.dll
Ipc O \KnownDlls\ole32.dll
Ipc O \KnownDlls\OLEAUT32.dll
Ipc O \KnownDlls\PSAPI.DLL
Ipc O \KnownDlls\rpcrt4.dll
Ipc O \KnownDlls\Setupapi.dll
Ipc O \KnownDlls\SHELL32.dll
Ipc O \KnownDlls\SHLWAPI.dll
Ipc O \KnownDlls\URLMON.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\USP10.dll
Ipc O \KnownDlls\WININET.dll
Ipc O \KnownDlls\WLDAP32.dll
Ipc O \KnownDlls\WS2_32.dll
Ipc O \LsaAuthenticationPort
Ipc O \RPC Control\AudioClientRpc
Ipc O \RPC Control\Audiosrv
Ipc O \RPC Control\DNSResolver
Ipc O \RPC Control\nlaapi
Ipc O \RPC Control\RasmanRpc
Ipc O \RPC Control\SbieSvcPort
Ipc O \RPC Control\senssvc
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \Sessions\1\BaseNamedObjects\__DDrawCheckExclMode__
Ipc O \Sessions\1\BaseNamedObjects\__DDrawExclMode__
Ipc O \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc O \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefaultS-1-5-21-3776523042-2144172045-2165215158-1005
Ipc O \Sessions\1\BaseNamedObjects\DDrawDriverObjectListMutex
Ipc O \Sessions\1\BaseNamedObjects\DDrawWindowListMutex
Ipc O \Sessions\1\BaseNamedObjects\DINPUTWINMM
Ipc O \Sessions\1\BaseNamedObjects\Dwm-1A2E-ApiPort-66EB
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler Driver Mutex
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler Tray Icon Mutex
Ipc O \Sessions\1\BaseNamedObjects\MidiMapper_modLongMessage_RefCnt
Ipc O \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefaultS-1-5-21-3776523042-2144172045-2165215158-1005
Ipc O \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc O \Sessions\1\BaseNamedObjects\RasPbFile
Ipc O \Sessions\1\BaseNamedObjects\WininetConnectionMutex
Ipc O \Sessions\1\BaseNamedObjects\WininetProxyRegistryMutex
Ipc O \Sessions\1\BaseNamedObjects\WininetStartupMutex
Ipc O \Sessions\1\Windows\ApiPort
Ipc O \Sessions\1\Windows\SharedSection
Ipc O \ThemeApiPort
Ipc O \UxSmsApiPort
Ipc X \BaseNamedObjects\windows_shell_global_counters
Ipc X \RPC Control\protected_storage
Ipc X \Sessions\1\BaseNamedObjects\!IETld!Mutex
Ipc X \Sessions\1\BaseNamedObjects\_!MSFTHISTORY!_
Ipc X \Sessions\1\BaseNamedObjects\_!SHMSFTHISTORY!_
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!mshist012009081620090817!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!cookies!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!ietldcache!
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_MSHist012009081620090817_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_16384
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IETldCache_index.dat_245760
Ipc X \Sessions\1\BaseNamedObjects\windows_ie_global_counters
Ipc X \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Pipe -------------------------------
Pipe \Device\NamedPipe\keysvc
Pipe \Device\NamedPipe\Winsock2\CatalogChangeListener-1444-0
Pipe O \Device\Afd
Pipe O \Device\Afd\AsyncConnectHlp
Pipe O \Device\Afd\Endpoint
Pipe O \Device\NamedPipe\KSTIPipeDell PC
Pipe X \Device\NamedPipe\keysvc
Pipe X \Device\NamedPipe\lsarpc
Pipe X \Device\NamedPipe\samr
Pipe X \Device\NamedPipe\srvsvc
Pipe X \Device\NamedPipe\wkssvc
WinCls -------------------------------
WinCls Static
WinCls O *:iexplore.exe
WinCls O MS_WebcheckMonitor
WinCls O MS_WebCheckMonitor
WinCls O Shell_TrayWnd
WinCls X (unknown)
WinCls X DDEMLMom
WinCls X LOGI_STROMBOLI_WND_CLASS
WinCls X MS_AutodialMonitor
WinCls X Progman

Posted: Sun Aug 16, 2009 12:31 pm

dogdog wrote:

I suddenly stopped getting the offending KeyScrambler message on my main PC.

Without doing anything? Did you restart Windows, or something like that?

dogdog wrote:

Let me know what you think??

I'm not sure that I can spot anything, but in the meantime I want to post a message about removing the Local Template.
After updating to v3.39.06, the Local Template will no longer be needed.

It seems that Removing the Local Template must be done in a specific order, as I will describe in my next post.

Posted: Sun Aug 16, 2009 12:36 pm

After updating to v 3.39.06: the Local Template for KeyScrambler is no longer needed.
It must be 'Removed' in this order:
----
First, use Sandboxie's Configure > Edit Configuration
Remove the line for the Local Template, under [GlobalSettings] (the line is shown below, in red):
(Be sure that the line you are removing has "Local_KeyScrambler" in it !)

[GlobalSettings]
...
Template=Local_KeyScrambler

Then use File > Save, to save the change.
Then File > Exit.
----
Second, pick any one of your sandboxes, and then use
Sandbox Settings > Applications > Local

Click on "KeyScrambler", in the large box under "Local"
Click on the "Remove" button.
Click OK.
When Sandboxie tells you:
"Local application configuration 'Local_KeyScrambler' is now removed in all sandboxes.
Would you like to completely delete this application configuration?"
Click on the "Yes" button.
----

Info:
It seems that if you try to Remove the Local Template, before you delete the line under [GlobalSettings], Sandboxie will tell you to use the Software Compatibility tool - since the Template is applied to ALL sandboxes.

However, the Software Compatibility window, at
Configure > Software Compatibility
does not list the Local_KeyScrambler template. It only lists templates that are applied to all sandboxes, from templates.ini.

So you can't remove the line that applies the Local_KeyScrambler template to all sandboxes (under [GlobalSettings]), that way.
Which means that you must delete the line under [GlobalSettings], manually.

That's why the steps that I listed above, should be followed, in that order.