Update To SBIE-Plus 1.12.1 Triggers Windows Defender Block

Discussion in 'Sandboxie (SBIE Open Source) Plus & Classic' started by TheoPaulis, Nov 24, 2023.

  1. TheoPaulis

    TheoPaulis Registered Member

    Joined:
    Oct 13, 2013
    Posts:
    9
    Location:
    USA
    All...

    Because of the Firefox 120 issues, I downloaded the new version of Sandboxie-Plus...it seemed to have gotten rid of the pop-up, but now I can't get Windows Defender to stop trying to block access to SBIE.

    FF is running in the sandbox, but I keep getting these Defender blocks and yes, they are considered "low", but it keeps happening.

    SBIE is on the list of allowed applications and is exempt from scanning, always has been; here has not been an issue with SBIE and Defender until today's update.

    I had the same issues with Kaspersky (among other more dangerous behavior) which is why I went back to Defender.

    Any ideas on how to stop this behavior from Defender?

    Thank you, in advance...
     
  2. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,524
    Location:
    Viena
    I would recommend using something else then defender, no one should tolerate a patronizing antivirus which ignores user preferences.
    You can wait for a fully signed sandboxie build.
    Or may be your exclusions for defender are not complete?
     
  3. TheoPaulis

    TheoPaulis Registered Member

    Joined:
    Oct 13, 2013
    Posts:
    9
    Location:
    USA
    David, I appreciate all your hard work, but no, it's SBIE triggering these issues - I have SBIE excluded from from controlled folder access and from scanning - they have been excluded for years and nothing has happened before today's update to fix the FF issues.

    Now I'm getting the warning that has been mentioned today on the support forum, SBIE not implemented for FF (or however it reads).

    As soon as I get that warning, Defender pops up and says SBIE has been blocked - neither condition is true, FF is sandboxed and it will run fine.

    Over the past couple hours, the Defender alert is that the administrator is blocking SandMan.exe, so I changed permissions - I am the admin of my own PC.

    When will we likely see a new version - I did update to 1.12.1 earlier today, as I mentioned.
     
  4. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    6,294
    maybe you should focus more on the issue than this.
    so what is the message exactly? whats in the defender protection logs?
    sandboxie copies a lot of files into the box, maybe one of those.
    try also to get the latest security update (definition) for defender, may a false positive.
     
  5. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,524
    Location:
    Viena
    I tried the latest build in window 11 with the latest defender updates and did not experience any issues, no exclusions needed.
     
  6. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,172
    Location:
    UK
    Did you try 1.12.1 Classic on Win 10?
     
  7. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,524
    Location:
    Viena
    now I did, also no issues observed
     
  8. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    27,172
    Location:
    UK
    Confirmed.
    Defender now allows it :)

    By the way, on Win 11 aqnd Win 10 Plus I got your Cyber Monday popup.
    No popup on Classic.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice