and yet another sandboxie question

Hi,
I'm still configuring sandboxie with the new settings, so it acts like an antiexecutable.

I created a sandbox for outlook. working fine except for one little detail:
EQS warned that SandboxieDcomLaunch.exe was trying to modify memory of msnmsgr.exe.
-click allow
same warning
-click allow
same warning
-click allow
SandboxieDcomLaunch.exe trying to create remote thread on target msnmsgr.exe
-click allow
no more EQS popups, but I get an error (0xc0000022) about msnmsgr.exe not being able to launch. (Sandboxie doing it's thing)

Messenger was already running btw.

So I decided to include messenger as executable in outlook's sandbox,
and then, no more EQS popups. Rebooted and none either.

Excluded messenger again and EQS jumped again.
Any clues?

 

You can't do that

IMO Explorer, Outlook and Messenger are first programs to change. They always want to use/modify/read/write each other.

Soon you can make HURST and Sandboxie thread

 

Thanks for the answer.

LOL, I hope not...I hope no more questions come to my mind... when I started, I didn't expected to have so many doubts

Anyways, it has been a great learning morning...sadly it wasn't very productive in other aspects...

 

Use Faronics Anti-Executable to stop more than 80 executable files, but trial it first as long as possible, because you might not like it.

 

Thanks for advises...
I trust in EQS for the anti-exec function... but I wanted to try this new (at least for me) approach with Sandboxie.
As I said before, I've learned a lot about sandboxie today.

 

Any help below?