Thanks for contributing this tool!

And two hard boiled eggs!

Try Volatilty + ProcMon.

Check if this is what you are looking for:

http://www.kernelmode.info/forum/viewto ... lit=Drvmon

Windows XP x64 was not supported by Sandboxie.

tzuk were using shadow ssdt hooks in earlier experimental builds, but with windows 8 patch guard he was forced to switch to the running sandboxed process in untrusted IL with anonymous user token. SBIEDLL is a virtualization compatibility layer which makes sandbox transparent to the sandboxed appli...

Thank you very much for the update and the new features!

EP_X0FF wrote:http://new-download.drweb.com/console_dos/?lng=en

Best solution is an antivirus boot cd like "Kaspersky Rescue Disk".

Hello Yes, with the "sinjector.exe" client you can inject any DLL to a new spawned process, or running by its PID. Of course, you can use Linux or Windows for the host, but the instructions are not ready yet. If you understand how it works, I think you shouldn't have too many problems to set up the...