Waiting for the sandbox to terminate Firefox

Hi!

 

As of lately, I have to wait a while, up to a minut or so, after closing sandboxed Firefox, for the sandbox to terminate and auto-delete it's contents.

 

Sounds familiar to anyone? How can I solve it?

 

My secs:

Windows 10 v1903 (64 bit)
Sandboxie 5.31.2 (64 bit)
Firefox v69.0 (64 bit)

 

Thanx!

  • Hi Bellzemos,

    Do you have any antivirus running that may be holding on to the files?
    Are there any Firefox extensions?
    Does the issue follow you to a new Sandbox with default settings?
    What do you see hanging in the Sandbox during that minute?
    What are the exact repro steps, anything in specific that you are doing to trigger the problem? Or do you just launch FF and immediately close it and see the behavior?

    Also, please post your config file (Configure---> Edit configuration. Copy paste the contents in your response).

    Regards,

  • In reply to Barb@Sophos:

    Hi Barb,

    I'd first like to say a sincere thank you for being so professional and for providing great support in this difficoult situation that Sandboxie is in for the last couple of months. Now on to my problem.

    Do you have any antivirus running that may be holding on to the files?
    - No, that was happening on my other machine where I run ESET, but it got resolved by ESET update. On this machine I use Avast and it's not a problem.

    Are there any Firefox extensions?
    - Same as before: only Adblock Plus.

    Does the issue follow you to a new Sandbox with default settings?
    - Yes. But the issue only happens, let's say, half of the times when I close Firefox. It's possible that the issue started after I updated Firefox to version 69.0. But I also updated Sandboxie to the latest beta version and Windows to version 1903, all at about the same time.

    What do you see hanging in the Sandbox during that minute?
    - This:


    What are the exact repro steps, anything in specific that you are doing to trigger the problem? Or do you just launch FF and immediately close it and see the behavior?
    - Nothing specific, seems pretty random really. As sometimes it terminates immediatelly and sometimes it hangs for a minute...

    Also, please post your config file (Configure---> Edit configuration. Copy paste the contents in your response).
    - This is my config file:
    [GlobalSettings]
    Template=WindowsRasMan
    Template=Avast_Antivirus
    Template=WindowsLive
    Template=OfficeLicensing
    ActivationPrompt=n

    [DefaultBox]
    ConfigLevel=7
    BlockNetworkFiles=y
    Template=PaleMoon_Force
    Template=Waterfox_Force
    Template=Firefox_Force
    Template=Neon_Force
    Template=Vivaldi_Force
    Template=Iron_Force
    Template=Dragon_Force
    Template=Chrome_Force
    Template=Maxthon2_Force
    Template=Opera_Force
    Template=SeaMonkey_Force
    Template=IExplore_Force
    Template=qWave
    Template=WindowsFontCache
    Template=BlockPorts
    Template=LingerPrograms
    Template=Chrome_Phishing_DirectAccess
    Template=Firefox_Phishing_DirectAccess
    Template=AutoRecoverIgnore
    RecoverFolder=%Desktop%
    BorderColor=#00FFFF,off
    Enabled=y
    BoxNameTitle=n
    AutoDelete=y
    NeverDelete=n
    NotifyInternetAccessDenied=y
    DropAdminRights=y

    [UserSettings_0C880214]
    SbieCtrl_UserName=bellzemos
    SbieCtrl_NextUpdateCheck=-1
    SbieCtrl_UpdateCheckNotify=y
    SbieCtrl_ShowWelcome=n
    SbieCtrl_HideWindowNotify=n
    SbieCtrl_EnableLogonStart=y
    SbieCtrl_EnableAutoStart=y
    SbieCtrl_AddDesktopIcon=n
    SbieCtrl_AddQuickLaunchIcon=y
    SbieCtrl_AddContextMenu=y
    SbieCtrl_AddSendToMenu=n
    SbieCtrl_TerminateNotify=n
    SbieCtrl_TerminateWarn=n
    SbieCtrl_ExplorerNotify=n
    SbieCtrl_ExplorerWarn=n
    SbieCtrl_EditConfNotify=n
    SbieCtrl_ReloadConfNotify=n
    SbieCtrl_ProcSettingsNotify=n
    SbieCtrl_SettingChangeNotify=n
    SbieCtrl_ShortcutNotify=n
    SbieCtrl_ShouldDeleteNotify=n
    SbieCtrl_AutoApplySettings=n
    SbieCtrl_WindowCoords=999,606,930,573
    SbieCtrl_ActiveView=40021
    SbieCtrl_BoxExpandedView=DefaultBox

  • In reply to Bellzemos:

    Hi Bellzemos,

    Thanks for your message.

    I am not seeing anything "strange" with your configuration file, and since we don't have repro steps, I won't be able to test this scenario (I tested FF version 69 and no issues so far using a similar config to yours). 

    Additional suggestions:

    - The usual suspects: Do turn off your Antivirus / extensions for testing purposes and see if that changes the behavior. 

    - Try adding Firefox as a leader program in a new Sandbox with default settings, and test it:
    https://www.sandboxie.com/ProgramStopSettings#leader 

    - For your lingering programs, add pingsender.exe (it is not on your list, but it appears for me for a few seconds when I close FF).

    Regards,

  • In reply to Barb@Sophos:

    Hi,

    I tried disabling Avast but it's all the same. Also, the same is happening on my other PC which has the same version of Windows and Sandboxie but an other antivirus - ESET. The problem is the same: sand box wouldn't terminate for 30 seconds or a minute after I close Firefox. Usually that happens after a longer Firefox session but that's not a rule, it's pretty random.

    What I see active in the sandbox before termination is RuntimeBroker.exe, as seen on the pic in my first post. Could that be the culprit?

    If I add Firefox as a leader program, when I close it, other sandboxed programs from the sandbox will terminate with it, right? I don't want that.

    Pingsender.exe only shows up if I turn on Telemetry in FF, but I have it disabled, so it's not active on my PC.

    Anyone else maybe experiencing something similar after the latest Firefox update?

    Thanks.