[4.02-4.03.02] Adobe Reader XI on 32-bit systems

Listing issues addressed in beta version 4.05
Guest_ARXI

[4.02-4.03.02] Adobe Reader XI on 32-bit systems

Post by Guest_ARXI » Sat Jun 29, 2013 7:31 am

I have added "Adobe Reader XI" to the forced programs. The program itself works fine with Sandboxie. But if you click on a PDF file in the "Windows Explorer", Sandboxie starts with two "AcroRd32.exe" processes and blocks the PDF file from being deleted for about one Minute. After this minute Sandboxie automatically stops and closes the two "AcroRd32.exe" processes. This occurs only on my systems with Windows 7 32-bit (and Windows XP 32-Bit). On systems with Windows 7 64-bit Sandboxie doesn't show this behavior. Any ideas? Thanks!

Peter2150
Posts: 879
Joined: Tue Mar 27, 2007 9:46 pm
Location: Washington DC

Re: [4.02-4.03.02] Adobe Reader XI on 32-bit systems

Post by Peter2150 » Sat Jun 29, 2013 9:48 am

Guest_ARXI wrote:I have added "Adobe Reader XI" to the forced programs. The program itself works fine with Sandboxie. But if you click on a PDF file in the "Windows Explorer", Sandboxie starts with two "AcroRd32.exe" processes and blocks the PDF file from being deleted for about one Minute. After this minute Sandboxie automatically stops and closes the two "AcroRd32.exe" processes. This occurs only on my systems with Windows 7 32-bit (and Windows XP 32-Bit). On systems with Windows 7 64-bit Sandboxie doesn't show this behavior. Any ideas? Thanks!
Adobe is a funny beast. I would suggest you don't force the reader, but just right click on the pdf file and run it sandboxed, when you need it. This has never given me a problem on XP.

Pete

Guest_ARXI

Post by Guest_ARXI » Sat Jun 29, 2013 11:34 am

Thank you for your reply. But this would be just a workaround and not a solution for the described problem. I'm not the only person using the PC, so I don't want to delete the forced program entry. I hope Tzuk will check a forced Adobe Reader XI on a 32-bit Windows 7.

Peter2150
Posts: 879
Joined: Tue Mar 27, 2007 9:46 pm
Location: Washington DC

Post by Peter2150 » Sat Jun 29, 2013 12:16 pm

Guest_ARXI wrote:Thank you for your reply. But this would be just a workaround and not a solution for the described problem. I'm not the only person using the PC, so I don't want to delete the forced program entry. I hope Tzuk will check a forced Adobe Reader XI on a 32-bit Windows 7.
Fair enough. So I tested. I don't use the Reader, because I have Adobe Acrobat Pro XI. I built a separate Sandbox, and I forced Acrobat.exe. I also had to force 4 other associated programs that run. Once set up, I was able to click on the Acrobat Icon and it would open sandboxed. Also was able to double click a pdf and it opened Sandboxed. Finally using Windows Explorer I double clicked a PDF and it also was fine.

So, go back and look at everything that runs when you invoke the reader. Make sure all those exe's are Sandboxed. Then see if it works.

Oh, I am using XP Pro SP3, not fully updated.

Pete

bo.elam
Sandboxie Guru
Sandboxie Guru
Posts: 2868
Joined: Wed Apr 22, 2009 9:17 pm

Post by bo.elam » Sat Jun 29, 2013 1:00 pm

Peter2150 wrote: So, go back and look at everything that runs when you invoke the reader. Make sure all those exe's are Sandboxed. Then see if it works.
Hi Pete, allowing extra programs to run is not his solution. He is probably seeing message SBIE 2314 (SBIE2314 Canceling process program.exe). I saw a couple of those in my Firefox sandbox (W7 32 bits) after upgrading to Firefox 22. In my case, I haven't seen the message again after upgrading SBIE to 4.03.02.

Bo

Guest_ARXI

Post by Guest_ARXI » Sun Jun 30, 2013 5:56 am

Thanks for the replies. As I wrote in my first post: "The program itself works fine with Sandboxie." I'm able to double-click and open PDF files without any issues. But if I want to delete a PDF file on my system with Windows 7 32-bit Sandboxie blocks this for about one minute, because it starts the forced "AcroRd32.exe" twice and closes them after the minute. There are no Sandboxie messages.

DR_LaRRY_PEpPeR
Posts: 291
Joined: Wed Jul 04, 2012 6:40 pm
Location: St. Louis area

Post by DR_LaRRY_PEpPeR » Sun Jun 30, 2013 6:35 am

It sounds like the Adobe Reader shell extension (32-bit) runs the actual .exe program, instead of it only happening (running) inside the Explorer process, etc. I don't know that anything can be done to fix that when it's forced... Can you disable its shell extension or Explorer previews, etc.?

Of course if it was like the OLD Adobe Reader I used (before switching to PDF X-Change), and it ran in Explorer, then a malicious PDF could still be a problem, if everything in the document is "run," like opening separately, when only generating a preview...

64-bit Windows runs 64-bit Explorer by default, right? If so, you'd probably see the same behavior there if you run 32-bit Explorer, assuming the 32-bit shell extension got installed.
XP Home-as-Pro SP3 (Admin) w/ continued updates (Embedded/POSReady 2009)
> Permissions + "2-level" SRP, latest Sandboxie (Pro/registered), EMET 4, no anti-anything (ever)
Did I make tzuk crazed... in his last days? :o

Guest_ARXI

Post by Guest_ARXI » Sun Jun 30, 2013 11:41 am

Thank you for your reply. If I remember correctly this behavior occurs the first time with "Adobe Reader 10". Tzuk made an update for better compatibility. The Sandboxie versions 3.x start the two "AcroRd32.exe" processes also, but close them after a few seconds. The new Sandboxie 4.x sadly needs a whole minute. Maybe Tzuk can optimize this? Otherwise I have to find out where to disable the shell extension / preview function in "Adobe Reader XI".

Guest_ARXI

Post by Guest_ARXI » Mon Jul 01, 2013 11:01 am

A small update: Blocking a "Windows Explorer" action (like "Delete") occurs only on a Windows 7 32-bit system. On a Windows XP 32-bit system Sandboxie starts the two "AcroRd32.exe" processes also, but doesn't block a "Windows Explorer" action!

Guest_ARXI

Post by Guest_ARXI » Thu Jul 04, 2013 7:42 am

Tzuk, do you think it is possible to fix this blocking behavior on a Windows 7 32-bit system? Thank you.

Another update: This happens with PDF files on a local HDD/SSD only, with PDF files on network shares the problem doesn't occur.

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Thu Jul 04, 2013 2:10 pm

I don't think I am seeing this error myself, the Acrobat process shuts down as soon as I close the window.

Please check version 4.03.04 which you can get here.

http://www.sandboxie.com/phpbb/viewtopic.php?t=15836

If it doesn't work then I will check on 32-bit Windows 7.
tzuk

Guest_ARXI

Post by Guest_ARXI » Fri Jul 05, 2013 12:20 pm

Thank you very much for your reply. The new version doesn't help.

The program "Adobe Reader XI" itself works fine with Sandboxie. The problem is following:

- Open the "Windows Explorer" and click on a PDF file on your local HDD.
> Sandboxie starts two processes of "AcroRd32.exe" now.
- Press the "DEL" key or select "Delete" from the right-click menu.
> Sandboxie prevents deleting the file until it closes the two processes.

This occurs on Windows 7 32-bit only.

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Sat Jul 06, 2013 2:39 pm

OK, I will check.
tzuk

tzuk
Sandboxie Founder
Sandboxie Founder
Posts: 16076
Joined: Tue Jun 22, 2004 12:57 pm

Post by tzuk » Mon Jul 08, 2013 2:23 am

I'm sorry but I don't see the problem. I see only one acrord32.exe process in the sandbox, just like on 64-bit Windows 7, and the process quits as soon as I close the Reader window.

You can try to set acrord32.exe as a lingering program, that might help make it quit faster. To do that, right click on acrord32.exe in Sandboxie Control, then check the box for "stop this program if it lingers in the sandbox after other programs...".
tzuk

Guest_ARXI

Post by Guest_ARXI » Mon Jul 08, 2013 5:14 am

Thanks for your reply.

But there is still a big misunderstanding! Again, the program itself works fine. There is no problem viewing PDF files or closing the "Adobe Reader".

Please read my posts of this thread and please proceed like this:

- Windows 7 32-bit, Sandboxie's DefaultBox has "AcroRd32.exe" as a forced program.
- Open the Windows 7 file manager "Windows Explorer".
- Click only once (no double click!) on a PDF file on your local HDD.
> Sandboxie starts two processes of "AcroRd32.exe" now.
- Press the "DEL" key or select "Delete" from the right-click menu.
> Sandboxie prevents deleting the file until it closes the two processes.
(Sandboxie needs about one minute for closing those two processes.)

This occurs on Windows 7 32-bit only. On Windows 7 64-bit Sandboxie never starts any "AcroRd32.exe" processes if you click only once (single click) on a PDF file!

I hope it is clear now.

Locked

Who is online

Users browsing this forum: No registered users and 1 guest