Waiting for the sandbox to terminate Firefox

Hi Bellzemos,

Do you have any antivirus running that may be holding on to the files?
Are there any Firefox extensions?
Does the issue follow you to a new Sandbox with default settings?
What do you see hanging in the Sandbox during that minute?
What are the exact repro steps, anything in specific that you are doing to trigger the problem? Or do you just launch FF and immediately close it and see the behavior?

Also, please post your config file (Configure---> Edit configuration. Copy paste the contents in your response).

Regards,

Hi Barb,

I'd first like to say a sincere thank you for being so professional and for providing great support in this difficoult situation that Sandboxie is in for the last couple of months. Now on to my problem.

Do you have any antivirus running that may be holding on to the files?
- No, that was happening on my other machine where I run ESET, but it got resolved by ESET update. On this machine I use Avast and it's not a problem.

Are there any Firefox extensions?
- Same as before: only Adblock Plus.

Does the issue follow you to a new Sandbox with default settings?
- Yes. But the issue only happens, let's say, half of the times when I close Firefox. It's possible that the issue started after I updated Firefox to version 69.0. But I also updated Sandboxie to the latest beta version and Windows to version 1903, all at about the same time.

What do you see hanging in the Sandbox during that minute?
- This:


What are the exact repro steps, anything in specific that you are doing to trigger the problem? Or do you just launch FF and immediately close it and see the behavior?
- Nothing specific, seems pretty random really. As sometimes it terminates immediatelly and sometimes it hangs for a minute...

Also, please post your config file (Configure---> Edit configuration. Copy paste the contents in your response).
- This is my config file:
[GlobalSettings]
Template=WindowsRasMan
Template=Avast_Antivirus
Template=WindowsLive
Template=OfficeLicensing
ActivationPrompt=n

[DefaultBox]
ConfigLevel=7
BlockNetworkFiles=y
Template=PaleMoon_Force
Template=Waterfox_Force
Template=Firefox_Force
Template=Neon_Force
Template=Vivaldi_Force
Template=Iron_Force
Template=Dragon_Force
Template=Chrome_Force
Template=Maxthon2_Force
Template=Opera_Force
Template=SeaMonkey_Force
Template=IExplore_Force
Template=qWave
Template=WindowsFontCache
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%Desktop%
BorderColor=#00FFFF,off
Enabled=y
BoxNameTitle=n
AutoDelete=y
NeverDelete=n
NotifyInternetAccessDenied=y
DropAdminRights=y

[UserSettings_0C880214]
SbieCtrl_UserName=bellzemos
SbieCtrl_NextUpdateCheck=-1
SbieCtrl_UpdateCheckNotify=y
SbieCtrl_ShowWelcome=n
SbieCtrl_HideWindowNotify=n
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=y
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=n
SbieCtrl_TerminateNotify=n
SbieCtrl_TerminateWarn=n
SbieCtrl_ExplorerNotify=n
SbieCtrl_ExplorerWarn=n
SbieCtrl_EditConfNotify=n
SbieCtrl_ReloadConfNotify=n
SbieCtrl_ProcSettingsNotify=n
SbieCtrl_SettingChangeNotify=n
SbieCtrl_ShortcutNotify=n
SbieCtrl_ShouldDeleteNotify=n
SbieCtrl_AutoApplySettings=n
SbieCtrl_WindowCoords=999,606,930,573
SbieCtrl_ActiveView=40021
SbieCtrl_BoxExpandedView=DefaultBox

Hi Bellzemos,

Thanks for your message.

I am not seeing anything "strange" with your configuration file, and since we don't have repro steps, I won't be able to test this scenario (I tested FF version 69 and no issues so far using a similar config to yours). 

Additional suggestions:

- The usual suspects: Do turn off your Antivirus / extensions for testing purposes and see if that changes the behavior. 

- Try adding Firefox as a leader program in a new Sandbox with default settings, and test it:
https://www.sandboxie.com/ProgramStopSettings#leader 

- For your lingering programs, add pingsender.exe (it is not on your list, but it appears for me for a few seconds when I close FF).

Regards,

Hi,

I tried disabling Avast but it's all the same. Also, the same is happening on my other PC which has the same version of Windows and Sandboxie but an other antivirus - ESET. The problem is the same: sand box wouldn't terminate for 30 seconds or a minute after I close Firefox. Usually that happens after a longer Firefox session but that's not a rule, it's pretty random.

What I see active in the sandbox before termination is RuntimeBroker.exe, as seen on the pic in my first post. Could that be the culprit?

If I add Firefox as a leader program, when I close it, other sandboxed programs from the sandbox will terminate with it, right? I don't want that.

Pingsender.exe only shows up if I turn on Telemetry in FF, but I have it disabled, so it's not active on my PC.

Anyone else maybe experiencing something similar after the latest Firefox update?

Thanks.

Hi,

I tried disabling Avast but it's all the same. Also, the same is happening on my other PC which has the same version of Windows and Sandboxie but an other antivirus - ESET. The problem is the same: sand box wouldn't terminate for 30 seconds or a minute after I close Firefox. Usually that happens after a longer Firefox session but that's not a rule, it's pretty random.

What I see active in the sandbox before termination is RuntimeBroker.exe, as seen on the pic in my first post. Could that be the culprit?

If I add Firefox as a leader program, when I close it, other sandboxed programs from the sandbox will terminate with it, right? I don't want that.

Pingsender.exe only shows up if I turn on Telemetry in FF, but I have it disabled, so it's not active on my PC.

Anyone else maybe experiencing something similar after the latest Firefox update?

Thanks.

Hi,

I solved the problem by adding RuntimeBroker.exe to the lingering programs, now the sandbox terminates instantly after closing Firefox.

Hope this helps someone else too.