www.sandboxie.com :: View topic - New Version Keyscrambler v 2.5 Not Working When Sandboxed

Posted: Sat Aug 08, 2009 8:21 pm

Hi All

Just downloaded new version KS 2.5. With Opera & Firefox wherever u type in a web page u get gibberish. The normally green KS bar is red with the words "received unencrypted keystrokes".

Works fine when not Sandboxed

Terry

Posted: Sat Aug 08, 2009 8:24 pm

See the additional exclusion list that Ruhe posted, near the end of this thread:
http://www.sandboxie.com/phpbb/viewtopic.php?t=5755

Personally, I created a Local Template with the additional exclusions, and then added the Local Template name under [GlobalSettings], until the exclusions in the templates.ini file can be revised by tzuk.

[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local

----
then under:
[GlobalSettings]
Template=Local_KeyScrambler
...

[Edit]Anyone using this please note: the above line under [GlobalSettings] was added in addition to the "Template=KeyScrambler" line that was already listed under [GlobalSettings].
The intent here, was just to add the additional resources that are needed (as identified by Ruhe) - not to eliminate the need for tzuk's template in 'templates.ini'.
There is at least one line in tzuk's template that I have not included in the above Local Template, and it is required. So both lines are needed, for this temporary fix:
[GlobalSettings]
Template=KeyScrambler
Template=Local_KeyScrambler

Once templates.ini is revised, the Local Template and the line "Template=Local_KeyScrambler" can be removed from the sandbox settings.[/Edit]

Posted: Tue Aug 11, 2009 9:53 am

Guest10 wrote:

See the additional exclusion list that Ruhe posted, near the end of this thread:
http://www.sandboxie.com/phpbb/viewtopic.php?t=5755

Personally, I created a Local Template with the additional exclusions, and then added the Local Template name under [GlobalSettings], until the exclusions in the templates.ini file can be revised by tzuk.

[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local

----
then under:
[GlobalSettings]
Template=Local_KeyScrambler
...

[Edit]Anyone using this please note: the above line under [GlobalSettings] was added in addition to the "Template=KeyScrambler" line that was already listed under [GlobalSettings].
The intent here, was just to add the additional resources that are needed (as identified by Ruhe) - not to eliminate the need for tzuk's template in 'templates.ini'.
There is at least one line in tzuk's template that I have not included in the above Local Template, and it is required. So both lines are needed, for this temporary fix:
[GlobalSettings]
Template=KeyScrambler
Template=Local_KeyScrambler

Once templates.ini is revised, the Local Template and the line "Template=Local_KeyScrambler" can be removed from the sandbox settings.[/Edit]

Two questions:

1) Do the settings for the "Local Template" get inserted into the Sandboxie ini file?? If so does it matter where it is inserted??

2) I do not understand the reference to "There is at least one line in tzuk's template that I have not included in the above Local Template, and it is required. So both lines are needed"?? Do I need to do something to include tzuk's line or is it included by having both the Local Template and tzuk's template (which is included automatically)??

Many thanks

Posted: Tue Aug 11, 2009 2:40 pm

dogdog wrote:

1) Do the settings for the "Local Template" get inserted into the Sandboxie ini file?? If so does it matter where it is inserted??
2) I do not understand the reference to "There is at least one line in tzuk's template that I have not included in the above Local Template, and it is required. So both lines are needed"?? Do I need to do something to include tzuk's line or is it included by having both the Local Template and tzuk's template (which is included automatically)??

If you are using the 3.39.xx version, you may want to wait to see if the next version includes an update to tzuk's KeyScrambler template.
If it does, then you won't have to do anything but update to that version. If not ...
---------------------
First, some general info:
My local template instructions didn't take into account that someone might be using the "Personal" version of KeyScrambler. That version may not be detected by Sandboxie's "Software Compatibility" routine, and you probably would not already have tzuk's KeyScrambler template set up for use in ALL sandboxes.

Since you use the "Personal" edition of KeyScrambler:
You have probably added tzuk's "KeyScrambler" template to the Sandbox Settings, for each of your sandboxes where you want to use it, on an individual basis.
(using Sandbox Settings > Applications > Security/Privacy > "KeyScrambler" > Add)

Each of the individual sandboxes, where you have added tzuks' "KeyScrambler" to the Sandbox Settings", will have the line
Template=KeyScrambler
if you look at the settings for each sandbox, using Configure > Edit Configuration.
If you wanted to do so, you could apply tzuk's KeyScrambler template to ALL sandboxes by putting that line under the [GlobalSettings] section, instead of having it listed in each sandbox's configuration, like this:
[GlobalSettings]
Template=KeyScrambler

In that case, you would not have the line in the settings for each individual sandbox. It would apply to all sandboxes, existing now or created in the future.
The latest version of KeyScrambler still needs some additional exclusions though, which is why I added my own local template as a temporary fix.
-------------------
In answer to your two questions, above:
Yes, the code is added to "sandboxie.ini". If added manually, put the Local Template lines at the end of the file, separated by one blank line, from the last line in the file.
Or, you can add the Local Template this way:
1) Choose any one of your sandboxes - it doesn't matter which one, since the resulting lines will wind up at the end of the sandboxie.ini file regardless of which sandbox you choose.
2) Sandbox Settings > Applications > Local > "Create New" button
3) Paste or type the following lines into the window:

Code:

[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local

4) Click OK, then close the Sandbox Settings window.
-------------
After adding the local template, you need to do one of the following:
1) (If you want to keep your KeyScrambler exclusions on a per-sandbox basis, as you are used to doing)
You can go to the Sandbox Settings, for each sandbox that already specifies "KeyScrambler"
(that would show under Sandbox Settings > Applications > Security/Privacy > "KeyScrambler" with a "+" sign next to it)
Then for each one of those sandboxes, you can add the local template by using
Sandbox Settings > Applications > Local > select the local template by selecting "KeyScrambler" from this list, and "Add" it.

After tzuks' template is revised to add the additional exclusions, the template called "[Template_Local_KeyScrambler]" will no longer be needed.
It can be selected under:
Sandbox Settings > Applications > Local > "KeyScrambler"
and then click on "Remove", for each sandbox where it was added.

Then the local template called "[Template_Local_KeyScrambler]"can also be "Removed", once it is no longer being used:
Sandbox Settings > Applications > Local
select the local template "KeyScrambler" and "Remove" it.
------
or,
2) You can just specify that all sandboxes can use the Local Template, as a temporary fix.
You don't have to add it individually to each sandbox, if you just add the local template's name under the [GlobalSettings] section.
Add the line, as shown, to any lines that are already listed under GlobalSettings:

[GlobalSettings]
Template=Local_KeyScrambler

(Please note that the above line has "Local_" in it. That differentiates it from tzuk's template)
After tzuks' template is revised to add the additional exclusions, the line "Template=Local_KeyScrambler" will no longer be needed in the [GlobalSettings] section, and can be deleted.
The local template "[Template_Local_KeyScrambler]" itself will no longer be needed, and can be "Removed":

Sandbox Settings > Applications > Local
select the local template "KeyScrambler" and "Remove" it.
------
or,
3) You can add the names of tzuk's KeyScrambler template and the Local_KeyScrambler template, under [GlobalSettings].
That way, they would apply globally to all sandboxes, now and in the future, and each sandbox would not need to have its own exclusion listed for KeyScrambler:

[GlobalSettings]
Template=KeyScrambler
Template=Local_KeyScrambler

Before adding the line "Template=KeyScrambler" as shown above (for tzuk's template), I would go to each individual sandbox and remove the setting for KeyScrambler from each sandbox where it is used:
Sandbox Settings > Applications > Security/Privacy
Select "KeyScrambler", and then click on Remove.

Then add the two lines under [GlobalSettings], using Configure > Edit Configuration:
[GlobalSettings]
Template=KeyScrambler
Template=Local_KeyScrambler

When tzuk's KeyScrambler template is revised, to add the additional exclusions, you would then delete the line for the Local Template:
Template=Local_KeyScrambler
from the [GlobalSettings] section, and "Remove" the template called "[Template_Local_KeyScrambler]" by using
Sandbox Settings > Applications > Local
select the local template "KeyScrambler" and "Remove" it.

Posted: Tue Aug 11, 2009 3:49 pm

Very many thanks for your help.

For information. Sandboxie's "software compatibility" routine did detect the Personal version of KeyScrambler, so the "Template=KeyScrambler " was automatically added under [GlobalSettings]. So I did not need to add to each sandbox.

Would you expect that the addition of KeyScrambler Local Template as you have described would solve my KeyScrambler annoyance as described in my post: http://sandboxie.com/phpbb/viewtopic.php?t=6061 ??

My understanding is that Sandboxie 3.39 will (when released) include the additional KeyScrambler lines in the KeyScrambler template. Can anyone comfirm this??

Again, thanks for your help.

Posted: Tue Aug 11, 2009 4:04 pm

dogdog wrote:

For information. Sandboxie's "software compatibility" routine did detect the Personal version of KeyScrambler, so the "Template=KeyScrambler " was automatically added under [GlobalSettings]. So I did not need to add to each sandbox.

Would you expect that the addition of KeyScrambler Local Template as you have described would solve my KeyScrambler annoyance as described in my post: http://sandboxie.com/phpbb/viewtopic.php?t=6061 ??

I tried to install the personal version of KeyScrambler, but it required me to first uninstall my Pro version, if I wanted to proceed.
I chose not to do that, so I can't say whether or not it would solve your problem.
You could easily pick one sandbox and add the extra exclusions to it, as a test.
Configure > Edit Configuration
and then paste the new exclusions into the sandbox's settings:

Code:

OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*

and save the configuration. Then test it with that sandbox.

dogdog wrote:

My understanding is that Sandboxie 3.39 will (when released) include the additional KeyScrambler lines in the KeyScrambler template. Can anyone confirm this?

3.39.05 might have the settings added when it's released, but I haven't seen any commitment from tzuk about it.

Posted: Tue Aug 11, 2009 4:53 pm

OK.

Last question.

If I do incorporate Local Template as described then tzuk includes settings in his KeyScrambler Template in v 3.39, will it do any harm to have the settings in two places??

Posted: Tue Aug 11, 2009 5:23 pm

dogdog wrote:

If I do incorporate Local Template as described then tzuk includes settings in his KeyScrambler Template in v 3.39, will it do any harm to have the settings in two places??

No, it just duplicates settings.
Whatever you add, as far as using the Local Template, should be removed just to simplify your configuration file. It won't interfere.

Posted: Wed Aug 12, 2009 6:40 am

I noticed one discrepancy (apparently) between comments by Ruhe and Guest10.

In the Sandboxie Template file, under KeyScrambler there is the line: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler * Mutex"

Ruhe seems to have modified this line to: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler*"
see http://sandboxie.com/phpbb/viewtopic.php?t=5755 - post on 8-8-2009

Earlier in the same thread Ruhe left the existing line in place but added: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler * Event"

Guest10 did not mention any of this in his posts therefore I presume that he has not modified this line in his Sandboxie Template settings for KeyScrambler.

I would be grateful for clarification on this matter.

Not sure of the effect of adding either "* Mutex" and/or "* Event" to the end of the basic line "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler". How do these operators affect the basic line??

Posted: Thu Aug 13, 2009 6:16 am

dogdog wrote:

I noticed one discrepancy (apparently) between comments by Ruhe and Guest10.

In the Sandboxie Template file, under KeyScrambler there is the line: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler * Mutex"

Ruhe seems to have modified this line to: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler*"
see http://sandboxie.com/phpbb/viewtopic.php?t=5755 - post on 8-8-2009

Earlier in the same thread Ruhe left the existing line in place but added: "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler * Event"

Guest10 did not mention any of this in his posts therefore I presume that he has not modified this line in his Sandboxie Template settings for KeyScrambler.

I would be grateful for clarification on this matter.

Not sure of the effect of adding either "* Mutex" and/or "* Event" to the end of the basic line "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler". How do these operators affect the basic line??

Any response to my last query??

Many thanks.

Posted: Thu Aug 13, 2009 11:42 am

How did your test of the added exclusions turn out?
Did they work, for you?

Posted: Thu Aug 13, 2009 2:55 pm

Guest10 wrote:

How did your test of the added exclusions turn out?
Did they work, for you?

I added the exclusions as per advice, ie:

Add the Local Template this way:
1) Choose any my sandbox "IEBox".
2) Sandbox Settings > Applications > Local > "Create New" button
3) Paste or type the following lines into the window:
Code:
[Template_Local_KeyScrambler]
Tmpl.Title=KeyScrambler
OpenIpcPath=*\BaseNamedObjects*\KSEncStatusEvent
OpenIpcPath=*\BaseNamedObjects*\KSProcEvent*
OpenIpcPath=*\BaseNamedObjects*\KSEncryptionEvent*
Tmpl.Class=Local

4) Click OK, then close the Sandbox Settings window.
-------------
After adding the local template, for the sandbox IEBox I added the local template by using
Sandbox Settings > Applications > Local > select the local template by selecting "KeyScrambler" from this list, and "Add" it.

But I still got the message “See what’s new in KeyScrambler 2.5.0.0” – yes/no as described in my thread "KeyScrambler Annoyance in Sandboxie" http://sandboxie.com/phpbb/viewtopic.php?t=6061

I checked and when I open IE8 unsandboxed no problem (ie no message as described above).

The sandboxed IE8 cannot detect that this message has already been shown; whereas the unsandboxed IE recognises that the message has been displayed before and does not show it a second time.

Still not got the right settings for KeyScrambler Personal. Please help.

Many thanks.

PS: I had a further thought and added "OpenIpcPath=*\BaseNamedObjects*\KeyScrambler*" to the KeyScrambler Local Template just in case it was needed (presumably broader than the same line in Sandboxie KeyScrambler Template with * Mutex at the end. However, it made no difference and the problem remains.

PPS: Are there others using KeyScrambler Peronal that are experiencing the same problem??

Posted: Fri Aug 14, 2009 11:14 am

Any further thoughts/suggestions??

Posted: Fri Aug 14, 2009 2:33 pm

I just ran across your latest posts. For some reason, I don't always get an indication that new messages have been added to the forum.
It looks like you did everything right, although you didn't mention whether or not you started with an empty sandbox. Judging from your results, that may not make a difference.

At this point I would be interested in seeing if anything shows up in Sandboxie's Resource Access Monitor's report.
Start the Resource Access Monitor; start a sandboxed IE; and after your normal start page is complete, then close IE and copy the Resource Access Monitor's report into a message here.

Posted: Fri Aug 14, 2009 3:52 pm

Reporting Back.

Just to be sure I created a brand new sandbox – “NewBox” . For NewBox I left everything as created (ie all Sandboxie defaults) but added the KeyScrambler Local Template and activated this KeyScrambler Local Template for NewBox (local template as in previous post). I checked Sandboxie ini file and everything was in order.

I then opened IE8 in NewBox having activated the Resource Access Monitor. KeyScrambler message appeared as previously described. I then said yes to “See what’s new in KeyScrambler 2.5.0.0) – a new IE8 tab then opened at http://www.qfxsoftware.com/KeyScrambler/whats_new.htm. I then closed down IE8.

When IE8 is open KeyScrambler appears to be working fine – KeyScrambler icon in system tray is green and the encrypted keystrokes show in KeyScrambler’s overlay window.

Contents of Resource Access Monitor is posted below:

(Drive) \Device\CdRom0
(Drive) \Device\CdRom1
(Drive) \Device\HarddiskVolume10
(Drive) \Device\HarddiskVolume2
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume4
(Drive) \Device\HarddiskVolume5
(Drive) \Device\HarddiskVolume6
(Drive) \Device\HarddiskVolume7
(Drive) \Device\HarddiskVolume8
(Drive) \Device\HarddiskVolume9
(Unk) 00000022 \Device\KeyScrambler
(Unk) 00000022 \Device\SandboxieDriverApi
(Unk) 00000039 \Device\KsecDD
(Unk) 000000F1 \Device\RasAcd
Clsid -------------------------------
Clsid {25336920-03F9-11CF-8FD0-00AA00686F13} HTML Document
Clsid {2933BF91-7B36-11D2-B20E-00C04F983E60} Free Threaded XML DOM Document
Clsid {7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} Security Manager
Clsid {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Windows Search Manager
Clsid {84798B8E-69F8-4846-9516-373C2996E2F7} ProtectorLib Class
Clsid {9BA05972-F6A8-11CF-A442-00A0C90A8F39} ShellWindows
Clsid {D27CDB6E-AE6D-11CF-96B8-444553540000} Shockwave Flash Object
Clsid {F5078F35-C551-11D3-89B9-0000F81FE221} XML HTTP 3.0
Clsid {F6D90F11-9C73-11D3-B32E-00C04F990BB4} XML DOM Document
Ipc -------------------------------
Ipc \RPC Control\actkernel
Ipc \RPC Control\epmapper
Ipc \RPC Control\keysvc
Ipc \RPC Control\keysvc2
Ipc \RPC Control\LRPC-384b6915288c4129b0
Ipc \RPC Control\LRPC-76deaff1f66b6f3c0e
Ipc \RPC Control\LRPC-a41df3344c6f6a5e58
Ipc \RPC Control\OLE17FE5A67A7D4479FA4A0BF02F27E
Ipc \RPC Control\OLE3BD3CAD308E24F7EAEC011AE0D04
Ipc \RPC Control\OLE713D4A7A6DAA4EC38675938F0977
Ipc \RPC Control\OLEBF71D995DAE9410BBB43E31942D2
Ipc \Sessions\1\BaseNamedObjects\!BrowserEmulation!SharedMemory!Mutex
Ipc \Sessions\1\BaseNamedObjects\!IECompat!Mutex
Ipc \Sessions\1\BaseNamedObjects\!IETld!Mutex
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMem!Counter
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMem!Settings
Ipc \Sessions\1\BaseNamedObjects\!PrivacIE!SharedMemory!Mutex
Ipc \Sessions\1\BaseNamedObjects\_!MSFTHISTORY!_
Ipc \Sessions\1\BaseNamedObjects\_!SHMSFTHISTORY!_
Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc \Sessions\1\BaseNamedObjects\{1B655094-FE2A-433c-A877-FF9793445069}
Ipc \Sessions\1\BaseNamedObjects\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}
Ipc \Sessions\1\BaseNamedObjects\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}
Ipc \Sessions\1\BaseNamedObjects\{A946A6A9-917E-4949-B9BC-6BADA8C7FD63}
Ipc \Sessions\1\BaseNamedObjects\{D911EF4B-00BE-47b0-A137-2A8E63FF6287}_1009d4
Ipc \Sessions\1\BaseNamedObjects\1134_68b2
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-helper
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-pending
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-aolsearch
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-aolsearch-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ask
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ask-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-baidu
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-bing
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-clusty
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-delicious
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-digg
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dmoz
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dogpile
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-dogpile-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-gmail
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-gmail-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-google
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-googleimages
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-googleimages-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-google-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-hotmail
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-ixquick-pre1
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-mahalo
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-msn
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-msn-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-reddit
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-searchcom
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-searchcom-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-seznam
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-seznam-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-webde
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-wikipedia
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo-pre0
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yahoo-pre1
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-search-yandex
Ipc \Sessions\1\BaseNamedObjects\75259554-F69D-4da3-8542-24D16167BE51-S-1-5-21-3776523042-2144172045-2165215158-1005-Software-Against Intuition-WOT-shared
Ipc \Sessions\1\BaseNamedObjects\A522BF01-A1EE-440e-8851-5F36E269A79120090414-E62FEA13-B2A8-4fb4-86A1-822A38B1D2FA-S-1-5-21-3776523042-2144172045-2165215158-1005-1
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!feeds cache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!mshist012009081420090815!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!cookies!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!iecompatcache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!ietldcache!
Ipc \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!privacie!
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Feeds Cache_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_MSHist012009081420090815_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_49152
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_65536
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_16384
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IECompatCache_index.dat_868352
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IETldCache_index.dat_245760
Ipc \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_PrivacIE_index.dat_32768
Ipc \Sessions\1\BaseNamedObjects\ComPlusCOMRegTable
Ipc \Sessions\1\BaseNamedObjects\ConnHashTable<3952>_HashTable_Mutex
Ipc \Sessions\1\BaseNamedObjects\df0_3b3c
Ipc \Sessions\1\BaseNamedObjects\E62FEA13-B2A8-4fb4-86A1-822A38B1D2FA-S-1-5-21-3776523042-2144172045-2165215158-1005-1
Ipc \Sessions\1\BaseNamedObjects\IDCRL_STATECHANGE_EVENT_V1
Ipc \Sessions\1\BaseNamedObjects\IDCRL_STATECHANGE_FILE_V1
Ipc \Sessions\1\BaseNamedObjects\Identity CRL v1 File Access
Ipc \Sessions\1\BaseNamedObjects\IE_EarlyTabStart_0xe00
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_ConnHashTable<3952>
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_LogonHigh
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_LogonMedium
Ipc \Sessions\1\BaseNamedObjects\ie_lcie_main_f70
Ipc \Sessions\1\BaseNamedObjects\IEDDEExecuteEvent
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateQuery!3952
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateReply!3952
Ipc \Sessions\1\BaseNamedObjects\IEFrame!GetAsyncKeyStateSharedMem!3952
Ipc \Sessions\1\BaseNamedObjects\IEFrame.EventCheckDefaultBrowser
Ipc \Sessions\1\BaseNamedObjects\Internet Explorer Immutable Application State (00000F70-0000-0000-0000-000000000000)
Ipc \Sessions\1\BaseNamedObjects\Isolation Process Registry (067B9A57-88E9-11DE-AD7A-001AA0938247)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry (067B9A57-88E9-11DE-AD7A-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry Event (067B9A57-88E9-11DE-AD7A-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry Event (067B9A58-88E9-11DE-AD7A-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\Isolation Signal Registry Event (0F55E637-88E9-11DE-AD7A-001AA0938247, 0)
Ipc \Sessions\1\BaseNamedObjects\KSIEParentEventF70
Ipc \Sessions\1\BaseNamedObjects\LgScrollData
Ipc \Sessions\1\BaseNamedObjects\MSIMGSIZECacheMap
Ipc \Sessions\1\BaseNamedObjects\MSIMGSIZECacheMutex
Ipc \Sessions\1\BaseNamedObjects\oleacc-msaa-loaded
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot1B5CD0057D13BC9F
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot227E99288A96D8B0
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot61F69EF1A1EC7C0A
Ipc \Sessions\1\BaseNamedObjects\OleDfRoot78C8514F9FB76CD2
Ipc \Sessions\1\BaseNamedObjects\OleDfRootDC20FE42675EDFE1
Ipc \Sessions\1\BaseNamedObjects\OleDfRootF4A1C0709A1C2741
Ipc \Sessions\1\BaseNamedObjects\RotHintTable
Ipc \Sessions\1\BaseNamedObjects\SandboxieHelper_ProtectedStorage_Mutex
Ipc \Sessions\1\BaseNamedObjects\SandboxieHelper_ProtectedStorage_Section
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_2736
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_3144
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_3568
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_3952
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_4404
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_4876
Ipc \Sessions\1\BaseNamedObjects\SbieDllDummyEvent_5180
Ipc \Sessions\1\BaseNamedObjects\SbieServiceInitComplete_DcomLaunch
Ipc \Sessions\1\BaseNamedObjects\SbieServiceInitComplete_RpcSs
Ipc \Sessions\1\BaseNamedObjects\ScmCreatedEvent
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_ClientId_Mutex
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_UrsCache_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-1-5-21-3776523042-2144172045-2165215158-1005
Ipc \Sessions\1\BaseNamedObjects\SmartScreen_UrsCacheMutex_2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2High_S-1-5-21-3776523042-2144172045-2165215158-1005
Ipc \Sessions\1\BaseNamedObjects\UrlZonesSM_Dell PC
Ipc \Sessions\1\BaseNamedObjects\windows_ie_global_counters
Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc \Sessions\1\BaseNamedObjects\ZoneAttributeCacheCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc O \...\WerTargetListTable
Ipc O \BaseNamedObjects\mmGlobalPnpInfo
Ipc O \BaseNamedObjects\msctf.serverDefault1
Ipc O \BaseNamedObjects\Sandboxie_DeviceIdList
Ipc O \BaseNamedObjects\Sandboxie_DeviceSetupClasses
Ipc O \BaseNamedObjects\TabletHardwarePresent
Ipc O \KnownDlls\advapi32.dll
Ipc O \KnownDlls\clbcatq.dll
Ipc O \KnownDlls\COMDLG32.dll
Ipc O \KnownDlls\gdi32.dll
Ipc O \KnownDlls\IERTUTIL.dll
Ipc O \KnownDlls\IMAGEHLP.dll
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\LPK.dll
Ipc O \KnownDlls\MSCTF.dll
Ipc O \KnownDlls\MSVCRT.dll
Ipc O \KnownDlls\NORMALIZ.dll
Ipc O \KnownDlls\NSI.dll
Ipc O \KnownDlls\ole32.dll
Ipc O \KnownDlls\OLEAUT32.dll
Ipc O \KnownDlls\PSAPI.DLL
Ipc O \KnownDlls\rpcrt4.dll
Ipc O \KnownDlls\Setupapi.dll
Ipc O \KnownDlls\SHELL32.dll
Ipc O \KnownDlls\SHLWAPI.dll
Ipc O \KnownDlls\URLMON.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\USP10.dll
Ipc O \KnownDlls\WININET.dll
Ipc O \KnownDlls\WLDAP32.dll
Ipc O \KnownDlls\WS2_32.dll
Ipc O \LsaAuthenticationPort
Ipc O \RPC Control\AudioClientRpc
Ipc O \RPC Control\Audiosrv
Ipc O \RPC Control\DNSResolver
Ipc O \RPC Control\nlaapi
Ipc O \RPC Control\RasmanRpc
Ipc O \RPC Control\SbieSvcPort
Ipc O \RPC Control\senssvc
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \Sessions\1\BaseNamedObjects\__DDrawCheckExclMode__
Ipc O \Sessions\1\BaseNamedObjects\__DDrawExclMode__
Ipc O \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
Ipc O \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefaultS-1-5-21-3776523042-2144172045-2165215158-1005
Ipc O \Sessions\1\BaseNamedObjects\DDrawDriverObjectListMutex
Ipc O \Sessions\1\BaseNamedObjects\DDrawWindowListMutex
Ipc O \Sessions\1\BaseNamedObjects\DINPUTWINMM
Ipc O \Sessions\1\BaseNamedObjects\Dwm-0E10-ApiPort-1713
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler DLL Shutdown Event
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler Driver Mutex
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler Tray Icon Mutex
Ipc O \Sessions\1\BaseNamedObjects\KeyScrambler Yield Icon Event
Ipc O \Sessions\1\BaseNamedObjects\KSEncryptionEvent0
Ipc O \Sessions\1\BaseNamedObjects\KSEncryptionEvent1
Ipc O \Sessions\1\BaseNamedObjects\KSEncStatusEvent
Ipc O \Sessions\1\BaseNamedObjects\KSProcEvent1134
Ipc O \Sessions\1\BaseNamedObjects\KSProcEventDF0
Ipc O \Sessions\1\BaseNamedObjects\KSProcEventF70
Ipc O \Sessions\1\BaseNamedObjects\MidiMapper_modLongMessage_RefCnt
Ipc O \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefaultS-1-5-21-3776523042-2144172045-2165215158-1005
Ipc O \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
Ipc O \Sessions\1\BaseNamedObjects\RasPbFile
Ipc O \Sessions\1\BaseNamedObjects\WininetConnectionMutex
Ipc O \Sessions\1\BaseNamedObjects\WininetProxyRegistryMutex
Ipc O \Sessions\1\BaseNamedObjects\WininetStartupMutex
Ipc O \Sessions\1\Windows\ApiPort
Ipc O \Sessions\1\Windows\SharedSection
Ipc O \ThemeApiPort
Ipc O \UxSmsApiPort
Ipc X \BaseNamedObjects\windows_shell_global_counters
Ipc X \RPC Control\protected_storage
Ipc X \Sessions\1\BaseNamedObjects\!IETld!Mutex
Ipc X \Sessions\1\BaseNamedObjects\_!MSFTHISTORY!_
Ipc X \Sessions\1\BaseNamedObjects\_!SHMSFTHISTORY!_
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!history!history.ie5!mshist012009081420090815!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!cookies!
Ipc X \Sessions\1\BaseNamedObjects\c:!users!dell pc!appdata!roaming!microsoft!windows!ietldcache!
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_History_History.IE5_MSHist012009081420090815_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_32768
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_16384
Ipc X \Sessions\1\BaseNamedObjects\C:_Users_Dell PC_AppData_Roaming_Microsoft_Windows_IETldCache_index.dat_245760
Ipc X \Sessions\1\BaseNamedObjects\windows_ie_global_counters
Ipc X \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Pipe -------------------------------
Pipe \Device\NamedPipe\keysvc
Pipe \Device\NamedPipe\Winsock2\CatalogChangeListener-130c-0
Pipe O \Device\Afd
Pipe O \Device\Afd\AsyncConnectHlp
Pipe O \Device\Afd\Endpoint
Pipe O \Device\NamedPipe\KSTIPipeDell PC
Pipe X \Device\NamedPipe\keysvc
Pipe X \Device\NamedPipe\lsarpc
Pipe X \Device\NamedPipe\samr
Pipe X \Device\NamedPipe\srvsvc
Pipe X \Device\NamedPipe\wkssvc
WinCls -------------------------------
WinCls IEFrame
WinCls Static
WinCls O *:iexplore.exe
WinCls O MS_WebCheckMonitor
WinCls O MS_WebcheckMonitor
WinCls O MS_WebCheckMonitor
WinCls O MS_WebcheckMonitor
WinCls O MS_WebCheckMonitor
WinCls O Shell_TrayWnd
WinCls X (unknown)
WinCls X Button
WinCls X CiceroUIWndFrame
WinCls X DDEMLMom
WinCls X LOGI_STROMBOLI_WND_CLASS
WinCls X MS_AutodialMonitor
WinCls X Progman
WinCls X tooltips_class32
WinCls X WorkerW

I look forward to your comments. Many thanks for your help.