Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Template scanning is not working properly #4401

Open
offhub opened this issue Nov 28, 2024 · 0 comments
Open

Template scanning is not working properly #4401

offhub opened this issue Nov 28, 2024 · 0 comments
Labels
Confirmation Pending Further confirmation is requested Feature: Templates Template related issues other than Templates.ini Type: Bug Something isn't working Type: Enhancement Requested enhancement of existing feature

Comments

@offhub
Copy link
Collaborator

offhub commented Nov 28, 2024

Describe what you noticed and did

  1. Tmpl.ScanProduct: User (HKCU) uninstall keys are not being scanned.

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall
    HKEY_CURRENT_USER\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
    
  2. Tmpl.ScanKey: Does not work with SandMan while working with SbieCtrl. (Also doesn't scan USER locations)

    Agent/Path \REGISTRY... HKEY_...
    SandMan fail success
    SbieCtrl success fail

sbie4401tmpltsscn01


Templates.ini:

[Template_Test_ScanProduct_HKCU]
Tmpl.Title=Test ScanProduct HKCU
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanProduct=SandboxieTestScanProductHKCU

[Template_Test_ScanProduct_HKLM]
Tmpl.Title=Test ScanProduct HKLM
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanProduct=SandboxieTestScanProductHKLM

[Template_Test_ScanKey_HKCU]
Tmpl.Title=Test ScanKey HKCU
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanKey=HKEY_CURRENT_USER\SOFTWARE\SandboxieTestScanKeyHKCU

[Template_Test_ScanKey_HKLM]
Tmpl.Title=Test ScanKey HKLM
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanKey=HKEY_LOCAL_MACHINE\SOFTWARE\SandboxieTestScanKeyHKLM

[Template_Test_ScanKey_REGISTRY_USER]
Tmpl.Title=Test ScanKey REGISTRY USER
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanKey=\REGISTRY\USER\SOFTWARE\SandboxieTestScanKeyHKCU

[Template_Test_ScanKey_REGISTRY_MACHINE]
Tmpl.Title=Test ScanKey REGISTRY MACHINE
Tmpl.Class=Misc
Tmpl.Scan=s
Tmpl.ScanKey=\REGISTRY\MACHINE\SOFTWARE\SandboxieTestScanKeyHKLM

Reg install:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SandboxieTestScanProductHKCU]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SandboxieTestScanProductHKLM]

[HKEY_CURRENT_USER\SOFTWARE\SandboxieTestScanKeyHKCU]

[HKEY_LOCAL_MACHINE\SOFTWARE\SandboxieTestScanKeyHKLM]

Reg uninstall:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SandboxieTestScanProductHKCU]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SandboxieTestScanProductHKLM]

[-HKEY_CURRENT_USER\SOFTWARE\SandboxieTestScanKeyHKCU]

[-HKEY_LOCAL_MACHINE\SOFTWARE\SandboxieTestScanKeyHKLM]

How often did you encounter it so far?

Every time

Expected behavior

  1. It should also scan USER locations.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall
HKEY_CURRENT_USER\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall
  1. It should also work with SandMan.

Affected program

Not relevant

Download link

Not relevant

Where is the program located?

Not relevant to my request.

Did the program or any related process close unexpectedly?

No, not at all.

Crash dump

No response

What version of Sandboxie are you running now?

Sandboxie-Plus 1.15.2 64-bit

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression from previous versions?

No response

In which sandbox type you have this problem?

Not relevant to my request.

Can you reproduce this problem on a new empty sandbox?

Not relevant to my request.

What is your Windows edition and version?

Windows 10 Pro 22H2 64-bit (19045.5131) and Windows 11 Pro 24H2 64-bit (22631.2314)

In which Windows account you have this problem?

Not relevant to my request.

Please mention any installed security software

Microsoft Windows Defender

Did you previously enable some security policy settings outside Sandboxie?

No response

Trace log

No response

Sandboxie.ini configuration

No response

@offhub offhub added Type: Bug Something isn't working Confirmation Pending Further confirmation is requested Type: Enhancement Requested enhancement of existing feature Feature: Templates Template related issues other than Templates.ini labels Nov 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Confirmation Pending Further confirmation is requested Feature: Templates Template related issues other than Templates.ini Type: Bug Something isn't working Type: Enhancement Requested enhancement of existing feature
Projects
None yet
Development

No branches or pull requests

1 participant