Trust No Program
Reply to topic
Sandboxie version 3.62 Has Unknown User Name in C:\Sandbox
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Running XP Home SP3, Sandboxie 3.62 set to default settings, Avast! Free version 6.0.1367, COMODO Firewall version 5.9.219863.2196, Windows Defender version 1.1.1593.0.

Noticed a limited user account is listed twice in C:\Sandbox. Original was Fast Eddie, new is Fast_Eddie.

Renamed Fast_Eddie as Fast Eddie. Deleted Fast_Eddie folder with Eraser, both on demand and restart, cannot delete folder. Eraser gives an error, and the folder is not deleted. When Eraser runs, the new folder produced is a random character name such as qt248xx2.

Note: This new folder naming is entirely random; it is not the exact name, and this result is because Eraser was denied in the deletion operation.

Am able to remove folder created on Eraser error by sending to recycle bin and deleting from there.

However, running Sandboxie in Fast Eddie account recreates the original folder, so now there are two Fast Eddie folders, even after I deleted it. One is the one I renamed as Fast Eddie, and the other, Fast_Eddie. It is Fast_Eddie that reappears, but only in the limited Fast Eddie account.

It does not appear, once removed, in the administrator account, which I am now running, even when I run Sandboxie here in admin.

Is there a way to post captured .jpg's in this thread?
View user's profileSend private message
Re: Fast_Eddie work folder came back UPDATE
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Tried uninstall and installed fresh copy of Sandboxie 3.62.

Same result as before. Running in limited user account Fast Eddie has Sandboxie loading FF in Fast_Eddie, not Fast Eddie work area.

Regedit shows several references to Fast_Eddie, all explorer.exe MRU's. Would deleting these remove this behavior?

Registry has not been changed.
View user's profileSend private message
Guest10


Joined: 27 Apr 2008
Posts: 4401
Location: Ohio, USA
Reply with quote
Each user will have their own [UserSettings_xxxxxxxx] section in the configuration file, based on their Windows logon name.

Sandboxie Control > Configure > Edit Configuration
An entry within each of those sections will list the Windows logon ID for the current user:
SbieCtrl_UserName=xxxxxx

When a user logs on to Windows, the "USERNAME" that Window reports should be what shows to the right of the = sign in that line.
Find out what Windows reports as USERNAME with:
Start > Run > cmd > OK
set
Enter
and look for USERNAME=xxxxxx
Find out which username is correct that way.

_________________
Paul
XP Pro SP3 (Admin rights), Zone Alarm Pro Firewall, Malwarebytes Pro, Firefox 21, Thunderbird 17
View user's profileSend private message
Re: Guest 10
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Thanks.

Easy enough to do.

A .jpg would be worth a thousand words.

Only unusual entry is this one (or two):

TEMP=C:\DOCUME~1\PASTED~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\PASTED~1\LOCALS~1\Temp

USERNAME=Fast Eddie
USER PROFILE=C:\Documents and Settings\Fast Eddie.

This indicates to me that the TEMP and TMP files are pointing to Temp and Temp locations and that this operand is buried deep within Windows.

As before, Fast_Eddie work area runs instead of Fast Eddie work area in Sandboxie.

Next?

Clearing all temp files rectify? Have CCleaner as a possible tool.
View user's profileSend private message
Guest10


Joined: 27 Apr 2008
Posts: 4401
Location: Ohio, USA
Reply with quote
I'm wondering if Sandboxie can't accept a logon name that has a <space> character in it, and is replacing the space character with an underscore?

Do any of your [UserSettings_xxxxxxxx] configuration file sections list:
SbieCtrl_UserName=Fast Eddie
with the space character in the line?
View user's profileSend private message
cmd>set
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Guest 10,

Default setup was for Fast Eddie as the work area used by Sandboxie>C:\Sandbox.

Fast Eddie was replaced by Fast_Eddie folder.

Renamed Fast_Eddie to Fast Eddie. Now two folders exist.

set command shows no Fast_Eddie as user. Typed exactly as shown above.

Any way to send .jpg of cmd window to you?

It looks as if Sandboxie did accept space character previously.

No SbieCtrl_UserName= is available unless I know where to look.
View user's profileSend private message
tzuk


Joined: 22 Jun 2004
Posts: 15159
Reply with quote
Guest10 wrote:
I'm wondering if Sandboxie can't accept a logon name that has a <space> character in it, and is replacing the space character with an underscore?


Yes that's correct, spaces and backslash characters in a username are changed to an underscore character.

mchain wrote:
It looks as if Sandboxie did accept space character previously.


I don't remember if the space->underscore change was always there, but in any case it has been there for years. A backslash would interfere with creating the proper directory structure. A space would interfere if the username appears in template settings in Sandboxie.ini where the username is part of the setting.

If you don't like this, set an explicit FileRootPath that does not rely on the %USER% variable (also %USERNAME%), for example
Code:
[DefaultBox]
FileRootPath=C:\SANDBOX\Fast Eddie\%SANDBOX%

_________________
tzuk
View user's profileSend private message
Sandbox.ini?
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Guest_10 and tzuk,

I thank you both for helping here.

@tzuk,

Have had this system running w/o reinstall/reformat for almost two years since install date of 2/17/2010. I have done this by noticing changes within the system and have corrected these changes when they occur. Have also used Norton Ghost images, version 14.0, when things got too hairy or too difficult to rectify.

The point of the post is to notify everyone that a change was made to Sandboxie work area, one that I did not cause or create.

Since this most recent iteration of Sandboxie is a fresh and clean install, then all settings are default, except for ticking off 'Delete contents on exit'. Please note that the "Fast_Eddie" work area box came back even though I took the step to have Sandboxie delete/remove the configuration settings on the most recent uninstall.

I now have two Fast Eddie work areas: Fast Eddie (original) and Fast_Eddie. Fast_Eddie is the work area that runs now when I run Sandboxie in the limited user account, Fast Eddie.

Also just noticed with the new install the setting for window border changed. The change was in Default Box>Appearance>Display window border around the window and >Display the border only when the mouse cursor is in the window title.

This was not set at first this way on the fresh install. It was somehow set yesterday, and by unticking it I set it back to default.

What you are saying is, that I can change/fix settings in the Sandboxie.ini file? Is that right?
View user's profileSend private message
Guest10


Joined: 27 Apr 2008
Posts: 4401
Location: Ohio, USA
Reply with quote
Here's what I would try, based on the idea that tzuk presented above:

1) Open the Sandboxie Control tray icon's menu and click on:
Configure > Edit Configuration
Look to see how many sections you have in the configuration, that look similar to this :
Code:
[UserSettings_xxxxxxxx]

SbieCtrl_UserName=xxxxxx
If you have more than one section that looks similar to the above, then uninstall Sandboxie and select to delete your current settings when it asks you, during the uninstall.
Delete the "C:\Sandbox" folder and all files and folders under it.
Then reinstall Sandboxie and continue with step 3).
----

2) If you have only one [UserSettings_xxxxxxxx] section in the file:
Delete the "C:\Sandbox" folder and all files and folders under it, if you haven't already done that.

3) Use the Sandboxie Control tray icon's menu:
Sandbox > Set Container Folder

Edit what is inside the box, from:
C:\Sandbox\%USER%\%SANDBOX%
to:
C:\Sandbox\Fast Eddie\%SANDBOX%
Save your work.

This will place all of your sandboxes underneath the folder:
C:\Sandbox\Fast Eddie\
even if the Sandboxie Configuration file still shows your Windows logon name as Fast_Eddie
--
Graphics that you want to include in your posts must be uploaded to a file hosting site, like:
http://www.postimage.org/
https://www.rapidshare.com/
http://imagefra.me/
then copy the "forum" link to your file, into your message here.
Use the Preview button here, to see if your graphic shows the way you want it to, in your message.
View user's profileSend private message
OK, working on it...
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Guest_10,

Your help is proving invaluable here.

Sandboxie shows only changes are to Fast Eddie as follows:

Sandboxie.ini Fast_Eddie below:

SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=y
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y


All other user.ini settings for admin and Guest are identical, as well as for Fast Eddie, except for the lines above. Admin and Guest do not contain these lines.

To clarify, this is the exact text of the .ini file for both admin and Guest below:

Fast Eddie has the same exact lines except for the additional six new lines above.

SbieCtrl_UserName=xxxxxx
SbieCtrl_ShowWelcome=n
SbieCtrl_NextUpdateCheck=865325453403
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_WindowLeft=200
SbieCtrl_WindowTop=150
SbieCtrl_WindowWidth=660
SbieCtrl_WindowHeight=450
SbieCtrl_ActiveView=40021
SbieCtrl_BoxExpandedView_DefaultBox=y

Sandboxie was reinstalled in admin only. What are these new lines and what do they refer to? What operands are being performed by these instructions?

Each user setting is linked to the username immediately below it.

[UserSettings_29BE03CA]

SbieCtrl_UserName=fast_eddie

[UserSettings_17D80300]

SbieCtrl_UserName=johnson (This is admin)

[UserSettings_0CCA0229]

SbieCtrl_UserName=guest

I knew there was a change, now I can see it. Notice I am not seeing the new folder I renamed as Fast Eddie here.

Will uninstall and clean system of remnants and try again. Configuration file will be removed. Surprised

Will get this done, expect a response tomorrow.

Hope this helps.
View user's profileSend private message
Re: OK, working on it...
Guest10


Joined: 27 Apr 2008
Posts: 4401
Location: Ohio, USA
Reply with quote
mchain wrote:
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=y
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
Once you start using Sandboxie you are asked a bunch of questions about some of the program's settings: like do you want Sandboxie Control to start when Windows starts; do you want a Sandboxed Web Browser shortcut on your Desktop; do you want a shortcut on the Quick Launch toolbar...
Those settings hold your answers to questions like that.
View user's profileSend private message
Re: OK, working on it...
Guest10


Joined: 27 Apr 2008
Posts: 4401
Location: Ohio, USA
Reply with quote
mchain wrote:
Hope this helps.
Well, I hope so too, but I have to admit that I didn't know you had so many user logons in UserSettings sections.
I was thinking only of "Fast Eddie" and "Fast_Eddie".

The "Set Container Folder" instruction I talked about above will likely set all of those user's sandboxes underneath C:\Sandbox\Fast Eddie, and I don't know what is going to result when your user "johnson" or "guest" are logged in, and the sandbox is underneath that folder Sad


Last edited by Guest10 on Wed Jan 04, 2012 1:28 pm; edited 1 time in total
View user's profileSend private message
Clean Install of Sandboxie
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Guest10,

Uninstalled via Add/Remove, cleaned remnants from C: root drive (Sandbox folder), removed instances of Sandboxie in All Users folders.

Encountered numerous errors using Eraser, some were access denied errors.

Ran CCleaner, Auslogics Registry Cleaner (I know what I am doing) and removed all instances of Sandboxie I could find. All .pf files referring to Sandboxie were deleted and removed, CCleaner deleted the Recycle Bin with these .pf files inside it when run.

Install of Sandboxie 3.62 went without a hitch and now back to three usernames as before. Fast_Eddie is still showing up, but the renamed Fast Eddie folder is not, in the C:\Sandbox work folder.

Ran sfc /scannow to repair protected system files after I ran Auslogics.

Sometime tomorrow I will post links to .jpg's created during this investigation process in another post to follow.

Sandboxie.ini folder now shows same lines for all three usernames. Noticed that changing useranme fast_eddie in this file to fast eddie made no difference in the actual folder displayed in C:\Sandbox, as it still is Fast_Eddie, not Fast Eddie.

What started all this was when running an adobe flash video at a NBC news site, the browser (FF) became unresponsive, and the video running stopped and then ran erratically. This was a change, and restarting and running FF under Sandboxie was little better than the first time. Any video I had run before had run perfectly before this happened. That is why I went and looked for changes. Just so you know.

I think now there is no need to change Fast_Eddie username at this point.

Option to lock ini.configuration file a good idea?
View user's profileSend private message
Guest10
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Guest10,

Don't worry, I did not set username folders under C:\Sandbox\Fast Eddie as you suggested.

Limited (and I mean limited) .jpg's attached below:

file:///C:/Documents%20and%20Settings/Fast%20Eddie/Desktop/S_andboxie/cmd.jpg

file:///C:/Documents%20and%20Settings/Fast%20Eddie/Desktop/S_andboxie/New%20Unknown%20Sandbox%20in%20Limited%20User%20Account.JPG

file:///C:/Documents%20and%20Settings/Fast%20Eddie/Desktop/S_andboxie/Windows%20Search%20For%20_Sandbox_%20terms.jpg

file:///C:/Documents%20and%20Settings/Fast%20Eddie/Desktop/S_andboxie/Attempt%20to%20Delete%20Fast_Eddie.JPG

This should be enough for now.
View user's profileSend private message
Sorry, try again
mchain


Joined: 14 Apr 2010
Posts: 27
Reply with quote
Link for jpg's







View user's profileSend private message
Sandboxie version 3.62 Has Unknown User Name in C:\Sandbox
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 2  

Use the RSS feed to watch this topic for replies
  
  
 Reply to topic  

Sandboxie is Copyright © 2004-2012 by Sandboxie Holdings LLC.  All rights reserved.
Sandboxie.com | Contact Author
This site has been viewed 213,162,055 times since June 2004