Merge branch 'Shell' of https://github.com/love-code-yeyixiao/Sandboxie into Shell

.editorconfig

@@ -13,6 +13,9 @@ indent_size = 4
 [my_version.h]
 charset = utf-8-bom
 
+[SandboxiePlus/SandMan/Troubleshooting/lang_*.json]
+charset = utf-8-bom
+
 [*.{c,h,cpp}]
 indent_style = tab
 indent_size = unset

.github/workflows/winget.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: windows-latest # action can only be run on Windows
     steps:
       - name: Publish Sandboxie-Plus
-        uses: vedantmgoyal2009/winget-releaser@v2
+        uses: vedantmgoyal9/winget-releaser@main
         with:
           identifier: Sandboxie.Plus
           installers-regex: "Sandboxie-Plus.*.exe$"
@@ -23,7 +23,7 @@ jobs:
           "CLASSIC_VER=$VERSION" >> $env:GITHUB_OUTPUT
         shell: pwsh
       - name: Publish Sandboxie-Classic
-        uses: vedantmgoyal2009/winget-releaser@v2
+        uses: vedantmgoyal9/winget-releaser@main
         with:
           version: ${{ steps.get_version.outputs.CLASSIC_VER }}
           identifier: Sandboxie.Classic

CHANGELOG.md

@@ -2,11 +2,19 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
-## [1.14.x / 5.69.x] - 2024-xx-xx
+## [1.14.3 / 5.69.3] - 2024-06-??
 
 ### Changed
 - changed Qt 5 version to Qt 5.15.14 with OpenSSL 3.3.1 [#3994](https://github.com/sandboxie-plus/Sandboxie/pull/3994) (thanks offhub)
 
+### Fixed
+- fixed Applications cannot be launched as admin in a sandbox with "UseCreateToken/SandboxieAllGroup" enabled when using an MSFT account [#4022](https://github.com/sandboxie-plus/Sandboxie/issues/4022)
+- fixed Firefox issue with Sbie 1.14.1 and 1.14.2 [#4012](https://github.com/sandboxie-plus/Sandboxie/issues/4012)
+  - rolled back the driver verifier fix added in 1.14.1
+- fixed CustomChromiumFlags and --single-argument issue [#4033](https://github.com/sandboxie-plus/Sandboxie/issues/4033)
+- fixed Sandboxie programs do not terminate after closing programs that run as admin with UseCreateToken/SandboxieAllGroup enabled [#4030](https://github.com/sandboxie-plus/Sandboxie/issues/4030)
+
+
 
 
 ## [1.14.2 / 5.69.2] - 2024-06-19
@@ -14,14 +22,14 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 ### Added
 - added SbieIni option to modify password-protected configs [#3903](https://github.com/sandboxie-plus/Sandboxie/issues/3903)
   - usage: set|append|insert|delete [/passwd:********] <section> <setting> <value>
-  - note: use /passwd without the password to have SbieIni prompot for the password on the console, this hides the password from view and from bing captured with the command line
+  - Note: use /passwd without the password to have SbieIni prompot for the password on the console, this hides the password from view and from bing captured with the command line
 - added checkbox for "PromptForInternetAccess" option to the New Box Wizard
-- added option "HideNonSystemProcesses" to hide processes not in a sandbox from processes lists for sandboxed processes.
+- added option "HideNonSystemProcesses" to hide processes not in a sandbox from processes lists for sandboxed processes
-- added option "HideSbieProcesses" to hide Sandboxie Work Process(SbieSvc,SandboxieRpcSs,etc.).
+- added option "HideSbieProcesses" to hide Sandboxie Work Process (SbieSvc, SandboxieRpcSs, etc.)
 - added option "HideFirmwareInfo"
   - when it is set, the programs that try getting fireware information will get false data from HKEY_CURRENT_USER\\SOFTWARE\\SandboxieHide\\FalseFirmwareValue
-- added template "BlockAccessWMI" to prevent sandboxed processes from accessing system information through WMI.
+- added template "BlockAccessWMI" to prevent sandboxed processes from accessing system information through WMI
-- added template "BlockLocalConnect" to prevent sandboxed processes from sending network packs to localhost to breakout sandbox.
+- added template "BlockLocalConnect" to prevent sandboxed processes from sending network packs to localhost to breakout sandbox
 - added new option "AllowCoverTaskbar" for [#3975](https://github.com/sandboxie-plus/Sandboxie/issues/3975)
 - added RPC Port message filter mechanism to block unsafe RDP calls via the driver [#3930](https://github.com/sandboxie-plus/Sandboxie/issues/3930)
   - Usage: "RpcPortFilter=Port,ID,Label" label is optional
@@ -31,7 +39,7 @@ This project adheres to [Semantic Versioning](http://semver.org/).
   - You can also use "Sandman.exe /add_force program_path" to do it.
 
 ### Changed
-- Extend "Temp Template" to make it could delete local template section.
+- Extend "Temp Template" to make it could delete local template section
 
 ### Fixed
 - fixed security issue with the newly introduced experimental "UseCreateToken=y" mechanism
@@ -41,7 +49,7 @@ This project adheres to [Semantic Versioning](http://semver.org/).
   - Sandboxie will add CustomChromiumFlags=--disable-features=PrintCompositorLPAC to chrome based browsers command line
   - Note: Less Privileged App Container (LPAC) don't work with sandboxie currently
 - fixed Problem accessing a relative symlink with a target that starts with a dot [#3981](https://github.com/sandboxie-plus/Sandboxie/issues/3981)
-- fixed Bug - Can't open a sandbox's properties window via double-click in System Tray context window [#3861](https://github.com/sandboxie-plus/Sandboxie/issues/3861)
+- fixed Can't open a sandbox's properties window via double-click in System Tray context window [#3861](https://github.com/sandboxie-plus/Sandboxie/issues/3861)
 - fixed Delay in launching forced programs after version 1.12.9 [#3868](https://github.com/sandboxie-plus/Sandboxie/issues/3868)
   - this issue was introdiced in 1.13.0 and may have broadly affected other usecases and cause variosue problems
 - fixed issue with Misc Options list

Installer/get_openssl.cmd

@@ -1,6 +1,6 @@
 echo %*
-IF "%~3" == "" ( set "ghSsl_repo=openssl" ) ELSE ( set "ghSsl_repo=%~3" )
+IF "%~3" == "" ( set "ghSsl_repo=openssl-builds" ) ELSE ( set "ghSsl_repo=%~3" )
-IF "%~2" == "" ( set "ghSsl_user=DavidXanatos" ) ELSE ( set "ghSsl_user=%~2" )
+IF "%~2" == "" ( set "ghSsl_user=xanasoft" ) ELSE ( set "ghSsl_user=%~2" )
 IF "%~1" == "" ( set "openssl_version=3.3.1" ) ELSE ( set "openssl_version=%~1" )
 
 set "openssl_version_underscore=%openssl_version:.=_%"

README.md

@@ -100,7 +100,7 @@ If you find Sandboxie useful, then feel free to contribute through our [Contribu
 
 - DavidBerdik - Maintainer of [Sandboxie Website Archive](https://github.com/Sandboxie-Website-Archive/sandboxie-website-archive.github.io)
 - Jackenmen - Maintainer of Chocolatey packages for Sandboxie ([support](https://github.com/Jackenmen/choco-auto/issues?q=is%3Aissue+Sandboxie))
-- vedantmgoyal2009 - Maintainer of Winget Releaser for Sandboxie ([support](https://github.com/vedantmgoyal2009/winget-releaser/issues?q=is%3Aissue+Sandboxie))
+- vedantmgoyal9 - Maintainer of Winget Releaser for Sandboxie ([support](https://github.com/vedantmgoyal9/winget-releaser/issues?q=is%3Aissue+Sandboxie))
 - blap - Maintainer of [SandboxToys2](https://github.com/blap/SandboxToys2) addon
 - diversenok - Security analysis & PoCs / Security fixes
 - TechLord - Team-IRA / Reversing

Sandboxie/core/dll/kernel.c

@@ -112,12 +112,27 @@ _FX BOOLEAN Kernel_Init()
 			status = SbieApi_QueryConfAsIs(NULL, L"CustomChromiumFlags", 0, CustomChromiumFlags, ARRAYSIZE(CustomChromiumFlags));
 			if (NT_SUCCESS(status)) {
 
+				const WCHAR* lpCommandLine = ProcessParms->CommandLine.Buffer;
+				const WCHAR* lpArguments = SbieDll_FindArgumentEnd(lpCommandLine);
+				if (lpArguments == NULL)
+					lpArguments = wcsrchr(lpCommandLine, L'\0');
+
 				Kernel_CommandLineW.MaximumLength = ProcessParms->CommandLine.MaximumLength + (CONF_LINE_LEN + 8) * sizeof(WCHAR);
 				Kernel_CommandLineW.Buffer = LocalAlloc(LMEM_FIXED,Kernel_CommandLineW.MaximumLength);
-				wcscpy(Kernel_CommandLineW.Buffer, ProcessParms->CommandLine.Buffer);
+
-				if(Kernel_CommandLineW.Buffer[ProcessParms->CommandLine.Length/sizeof(WCHAR) - 1] != L' ')
+				// copy argument 0
+				wmemcpy(Kernel_CommandLineW.Buffer, lpCommandLine, lpArguments - lpCommandLine);
+				Kernel_CommandLineW.Buffer[lpArguments - lpCommandLine] = 0;
+				
+				// add custom arguments
+				if(Kernel_CommandLineW.Buffer[lpArguments - lpCommandLine - 1] != L' ')
 					wcscat(Kernel_CommandLineW.Buffer, L" ");
 				wcscat(Kernel_CommandLineW.Buffer, CustomChromiumFlags);
+
+				// add remaining arguments
+				wcscat(Kernel_CommandLineW.Buffer, lpArguments);
+
+
 				Kernel_CommandLineW.Length = wcslen(Kernel_CommandLineW.Buffer) * sizeof(WCHAR);
 
 				RtlUnicodeStringToAnsiString(&Kernel_CommandLineA, &Kernel_CommandLineW, TRUE);

Sandboxie/core/drv/ipc.c

@@ -1402,30 +1402,34 @@ _FX NTSTATUS Ipc_Api_DuplicateObject(PROCESS *proc, ULONG64 *parms)
 
     } else if (IS_ARG_CURRENT_PROCESS(TargetProcessHandle)) {
 
+        //
+        // we duplicate the handle into kernel space such that that user 
+        // won't be able to grab it while we are evaluaiting it
+        //
+
         HANDLE SourceProcessKernelHandle;
         status = Thread_GetKernelHandleForUserHandle(&SourceProcessKernelHandle, SourceProcessHandle);
         if (NT_SUCCESS(status)) {
 
             HANDLE TargetProcessKernelHandle = ZwCurrentProcess(); // TargetProcessHandle == NtCurrentProcess();
             
-            HANDLE SourceKernelHandle;
+            //
-            status = Thread_GetKernelHandleForUserHandle(&SourceKernelHandle, SourceHandle);
+            // driver verifier wants us to provide a kernel handle as process handles
+            // but the source handle must be a user handle and the ZwDuplicateObject
+            // function creates another user handle hence NtClose
+            //
+
+            status = ZwDuplicateObject(
+                SourceProcessKernelHandle, SourceHandle,
+                TargetProcessKernelHandle, &DuplicatedHandle,
+                DesiredAccess, HandleAttributes,
+                Options & ~DUPLICATE_CLOSE_SOURCE);
+
             if (NT_SUCCESS(status)) {
 
-                status = ZwDuplicateObject(
+                status = Ipc_CheckObjectName(DuplicatedHandle, UserMode);
-                    SourceProcessKernelHandle, SourceHandle,
-                    TargetProcessKernelHandle, &DuplicatedHandle,
-                    DesiredAccess, HandleAttributes,
-                    Options & ~DUPLICATE_CLOSE_SOURCE);
 
-                if (NT_SUCCESS(status)) {
+                NtClose(DuplicatedHandle);
-
-                    status = Ipc_CheckObjectName(DuplicatedHandle, UserMode);
-
-                    NtClose(DuplicatedHandle);
-                }
-
-                ZwClose(SourceKernelHandle);
             }
 
             ZwClose(SourceProcessKernelHandle);
@@ -1440,40 +1444,30 @@ _FX NTSTATUS Ipc_Api_DuplicateObject(PROCESS *proc, ULONG64 *parms)
 
     if (NT_SUCCESS(status)) {
 
-        HANDLE SourceProcessKernelHandle = ZwCurrentProcess();
+        HANDLE SourceProcessKernelHandle = (HANDLE)-1;
+        HANDLE TargetProcessKernelHandle = (HANDLE)-1;
+
         if (!IS_ARG_CURRENT_PROCESS(SourceProcessHandle)) 
             status = Thread_GetKernelHandleForUserHandle(&SourceProcessKernelHandle, SourceProcessHandle);
         if (NT_SUCCESS(status)) {
 
-            HANDLE TargetProcessKernelHandle = ZwCurrentProcess();
             if (!IS_ARG_CURRENT_PROCESS(TargetProcessHandle))
                 status = Thread_GetKernelHandleForUserHandle(&TargetProcessKernelHandle, TargetProcessHandle);
             if (NT_SUCCESS(status)) {
 
-                HANDLE SourceKernelHandle;
+                status = ZwDuplicateObject(
-                status = Thread_GetKernelHandleForUserHandle(&SourceKernelHandle, SourceHandle);
+                    SourceProcessKernelHandle, SourceHandle,
-                if (NT_SUCCESS(status)) {
+                    TargetProcessKernelHandle, &DuplicatedHandle,
+                    DesiredAccess, HandleAttributes, Options);
 
-                    status = ZwDuplicateObject(
+                *TargetHandle = DuplicatedHandle;
-                        SourceProcessKernelHandle, SourceKernelHandle,
-                        TargetProcessKernelHandle, &DuplicatedHandle,
-                        DesiredAccess, HandleAttributes, Options & ~DUPLICATE_CLOSE_SOURCE);
-
-                    if (Options & DUPLICATE_CLOSE_SOURCE)
-                        NtClose(SourceHandle);
-
-                    *TargetHandle = DuplicatedHandle;
-
-                    ZwClose(SourceKernelHandle);
-                }
-
-                if (!IS_ARG_CURRENT_PROCESS(TargetProcessKernelHandle))
-                    ZwClose(TargetProcessKernelHandle);
             }
-
-            if (!IS_ARG_CURRENT_PROCESS(SourceProcessKernelHandle))
-                ZwClose(SourceProcessKernelHandle);
         }
+
+        if (SourceProcessKernelHandle && !IS_ARG_CURRENT_PROCESS(SourceProcessKernelHandle))
+            ZwClose(SourceProcessKernelHandle);
+        if (TargetProcessKernelHandle && !IS_ARG_CURRENT_PROCESS(TargetProcessKernelHandle))
+            ZwClose(TargetProcessKernelHandle);
     }
 
     //

Sandboxie/core/drv/token.c

@@ -2181,9 +2181,9 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
     PTOKEN_DEFAULT_DACL		LocalDefaultDacl = NULL;
     PTOKEN_SOURCE			LocalSource = NULL;
 
-    PTOKEN_DEFAULT_DACL		NewDefaultDacl = NULL;
+    //PTOKEN_DEFAULT_DACL		NewDefaultDacl = NULL;
-    ULONG                   DefaultDacl_Length = 0;
+    //ULONG                   DefaultDacl_Length = 0;
-    PACL                    NewDacl = NULL;
+    //PACL                    NewDacl = NULL;
 
 
     TOKEN_TYPE              TokenType = TokenPrimary;
@@ -2193,6 +2193,12 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
     OBJECT_ATTRIBUTES       ObjectAttributes;
     SECURITY_QUALITY_OF_SERVICE SecurityQos;
 
+    TOKEN_PRIVILEGES		AllowedPrivilege;
+    AllowedPrivilege.PrivilegeCount = 1;
+    AllowedPrivilege.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED | SE_PRIVILEGE_ENABLED_BY_DEFAULT;
+    AllowedPrivilege.Privileges[0].Luid.HighPart = 0;
+    AllowedPrivilege.Privileges[0].Luid.LowPart = SE_CHANGE_NOTIFY_PRIVILEGE;
+
     //
     // Gather information from the original token
     //
@@ -2290,6 +2296,15 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
             RtlCopyMemory(&LocalGroups->Groups[1], OldLocalGroups->Groups, OldLocalGroups->GroupCount * sizeof(SID_AND_ATTRIBUTES));
             LocalGroups->GroupCount = NewGroupCount;
         }
+
+        /*for (ULONG i = 0; i < LocalPrivileges->PrivilegeCount; ++i) {
+            LUID_AND_ATTRIBUTES *entry_i = &LocalPrivileges->Privileges[i];
+
+            DbgPrint("Priv: %d-%d (0x%x)\n", entry_i->Luid.HighPart, entry_i->Luid.LowPart, entry_i->Attributes);
+        }*/
+
+        if (LocalPrivileges) ExFreePool((PVOID)LocalPrivileges);
+        LocalPrivileges = &AllowedPrivilege;
     }
 
     //
@@ -2318,13 +2333,7 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
 		memcpy(LocalUser->User.Sid, proc->SandboxieLogonSid, RtlLengthSid(proc->SandboxieLogonSid));
 	}
     
-    //UNICODE_STRING unicodeString;
+retry:
-    //status = RtlConvertSidToUnicodeString(&unicodeString, LocalUser->User.Sid, TRUE);
-    //if (NT_SUCCESS(status)) {
-    //    DbgPrint("SID: %wZ\n", &unicodeString);
-    //    RtlFreeUnicodeString(&unicodeString);
-    //}
-
     status = SbieCreateToken(
         &TokenHandle,
         TOKEN_ALL_ACCESS,
@@ -2335,7 +2344,7 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
         LocalUser,
         LocalGroups,
         LocalPrivileges,
-        
+
         0, //UserAttributes,
         0, //DeviceAttributes,
         0, //DeviceGroups,
@@ -2347,114 +2356,72 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
         LocalSource
     );
 
-    //
+    if (proc->SandboxieLogonSid && status == STATUS_INVALID_PRIMARY_GROUP && LocalPrimaryGroup->PrimaryGroup != LocalUser->User.Sid)
-    // For online accounts we must change the primary group
-    //
-
-    if (proc->SandboxieLogonSid && status == STATUS_INVALID_PRIMARY_GROUP)
     {
+        //
+        // For online accounts we must change the primary group
+        //
+
         ExFreePool((PVOID)LocalPrimaryGroup);
         LocalPrimaryGroup = (PTOKEN_PRIMARY_GROUP)ExAllocatePoolWithTag(PagedPool, sizeof(PTOKEN_PRIMARY_GROUP), tzuk);
         LocalPrimaryGroup->PrimaryGroup = LocalUser->User.Sid;
 
-        status = SbieCreateToken(
+        goto retry;
-            &TokenHandle,
-            TOKEN_ALL_ACCESS,
-            &ObjectAttributes,
-            TokenType,
-            &AuthenticationId,
-            &ExpirationTime,
-            LocalUser,
-            LocalGroups,
-            LocalPrivileges,
-
-            0, //UserAttributes,
-            0, //DeviceAttributes,
-            0, //DeviceGroups,
-            MandatoryPolicy,
-
-            LocalOwner,
-            LocalPrimaryGroup,
-            NewDefaultDacl,
-            LocalSource
-        );
     }
-
+    else if (proc->SandboxieLogonSid && status == STATUS_INVALID_OWNER && LocalOwner->Owner != LocalUser->User.Sid)
-    if (NT_SUCCESS(status))
-        status = Thread_GetKernelHandleForUserHandle(&KernelTokenHandle, TokenHandle);
-
-    //
-    // Retry with new DACLs on error
-    //
-
-    if (proc->SandboxieLogonSid && status == STATUS_INVALID_OWNER)
     {
-        DefaultDacl_Length = LocalDefaultDacl->DefaultDacl->AclSize;
+        //
-        
+        // Retry with new DACLs on error
-        // Construct a new ACL 
+        //
-        NewDefaultDacl = (PTOKEN_DEFAULT_DACL)ExAllocatePoolWithTag(PagedPool, sizeof(TOKEN_DEFAULT_DACL) + 8 + DefaultDacl_Length + 128, tzuk);
-        if (NULL == NewDefaultDacl)
-        {
-            Log_Status_Ex_Process(MSG_1222, 0xA2, status, NULL, proc->box->session_id, proc->pid);
-            goto finish;
-        }
-
-        memcpy(NewDefaultDacl, LocalDefaultDacl, DefaultDacl_Length);
-
-        NewDefaultDacl->DefaultDacl = NewDacl = (PACL)((ULONG_PTR)NewDefaultDacl + sizeof(TOKEN_DEFAULT_DACL));
-        NewDefaultDacl->DefaultDacl->AclSize += 128;
 
         ExFreePool((PVOID)LocalOwner);
         LocalOwner = (PTOKEN_OWNER)ExAllocatePoolWithTag(PagedPool, sizeof(TOKEN_OWNER), tzuk);
         LocalOwner->Owner = LocalUser->User.Sid;
 
-        RtlAddAccessAllowedAce(NewDacl, ACL_REVISION2, GENERIC_ALL, LocalOwner->Owner);
 
-        status = SbieCreateToken(
+        //DefaultDacl_Length = LocalDefaultDacl->DefaultDacl->AclSize;
-            &TokenHandle,
-            TOKEN_ALL_ACCESS,
-            &ObjectAttributes,
-            TokenType,
-            &AuthenticationId,
-            &ExpirationTime,
-            LocalUser,
-            LocalGroups,
-            LocalPrivileges,
 
-            0, //UserAttributes,
+        //// Construct a new ACL 
-            0, //DeviceAttributes,
+        //NewDefaultDacl = (PTOKEN_DEFAULT_DACL)ExAllocatePoolWithTag(PagedPool, sizeof(TOKEN_DEFAULT_DACL) + 8 + DefaultDacl_Length + 128, tzuk);
-            0, //DeviceGroups,
+        //memcpy(NewDefaultDacl, LocalDefaultDacl, DefaultDacl_Length);
-            MandatoryPolicy,
 
-            LocalOwner,
+        //NewDefaultDacl->DefaultDacl = NewDacl = (PACL)((ULONG_PTR)NewDefaultDacl + sizeof(TOKEN_DEFAULT_DACL));
-            LocalPrimaryGroup,
+        //NewDefaultDacl->DefaultDacl->AclSize += 128;
-            NewDefaultDacl,
-            LocalSource
-        );
 
-        if (NT_SUCCESS(status))
+        //RtlAddAccessAllowedAce(NewDacl, ACL_REVISION2, GENERIC_ALL, LocalOwner->Owner);
-            status = Thread_GetKernelHandleForUserHandle(&KernelTokenHandle, TokenHandle);
-        
-        if (!NT_SUCCESS(status)) 
-        {
-            Log_Status_Ex_Process(MSG_1222, 0xA3, status, NULL, proc->box->session_id, proc->pid);
-            goto finish;
-        }
 
-        Token_SetHandleDacl(NtCurrentProcess(), NewDacl);
+        goto retry;
-        Token_SetHandleDacl(NtCurrentThread(), NewDacl);
-        Token_SetHandleDacl(KernelTokenHandle, NewDacl);
     }
-    
+
+
+    if (!NT_SUCCESS(status))
+    {
+        Log_Status_Ex_Process(MSG_1222, 0xA3, status, NULL, proc->box->session_id, proc->pid);
+        goto finish;
+    }
+
+    if (NT_SUCCESS(status))
+        status = Thread_GetKernelHandleForUserHandle(&KernelTokenHandle, TokenHandle);
+
+    //if (NT_SUCCESS(status) && NewDacl)
+    //{
+    //    Token_SetHandleDacl(NtCurrentProcess(), NewDacl);
+    //    Token_SetHandleDacl(NtCurrentThread(), NewDacl);
+    //    Token_SetHandleDacl(KernelTokenHandle, NewDacl);
+    //}
+
+    if (NT_SUCCESS(status)) 
+    {
+        ULONG virtualizationAllowed = 1;
+        status = ZwSetInformationToken(KernelTokenHandle, TokenVirtualizationAllowed, &virtualizationAllowed, sizeof(ULONG));
+    }
+
     if (!NT_SUCCESS(status))
     {
         Log_Status_Ex_Process(MSG_1222, 0xA4, status, NULL, proc->box->session_id, proc->pid);
         goto finish;
     }
 
-    ULONG virtualizationAllowed = 1;
-    status = ZwSetInformationToken(KernelTokenHandle, TokenVirtualizationAllowed, &virtualizationAllowed, sizeof(ULONG));
-
     if (Conf_Get_Boolean(proc->box->name, L"CopyTokenAttributes", 0, FALSE))
     {
         HANDLE OldTokenHandle;
@@ -2490,11 +2457,38 @@ _FX void* Token_CreateToken(void* TokenObject, PROCESS* proc)
 finish:
     if (KernelTokenHandle)  ZwClose(KernelTokenHandle);
 
+    //UNICODE_STRING unicodeString;
+
+    //DbgPrint("Create Token: 0x%08x\n", status);
+    //if (NT_SUCCESS(RtlConvertSidToUnicodeString(&unicodeString, LocalUser->User.Sid, TRUE))) {
+    //    DbgPrint("LocalUser: %wZ (0x%x)\n", &unicodeString, LocalUser->User.Attributes);
+    //    RtlFreeUnicodeString(&unicodeString);
+    //}
+
+    //for (ULONG i = 0; i < LocalGroups->GroupCount; i++) {
+    //    if (NT_SUCCESS(RtlConvertSidToUnicodeString(&unicodeString, LocalGroups->Groups[i].Sid, TRUE))) {
+    //        DbgPrint("LocalGroups[%d]: %wZ (0x%x)\n", i, &unicodeString, LocalGroups->Groups[i].Attributes);
+    //        RtlFreeUnicodeString(&unicodeString);
+    //    }
+    //}
+
+    //if (NT_SUCCESS(RtlConvertSidToUnicodeString(&unicodeString, LocalOwner->Owner, TRUE))) {
+    //    DbgPrint("LocalOwner: %wZ\n", &unicodeString);
+    //    RtlFreeUnicodeString(&unicodeString);
+    //}
+
+    //if (NT_SUCCESS(RtlConvertSidToUnicodeString(&unicodeString, LocalPrimaryGroup->PrimaryGroup, TRUE))) {
+    //    DbgPrint("LocalPrimaryGroup: %wZ\n", &unicodeString);
+    //    RtlFreeUnicodeString(&unicodeString);
+    //}
+    //DbgPrint("+++\n");
+
+
     if (LocalStatistics)    ExFreePool((PVOID)LocalStatistics);
     if (LocalUser)          ExFreePool((PVOID)LocalUser);
     if (LocalGroups)        ExFreePool((PVOID)LocalGroups);
     if (OldLocalGroups)     ExFreePool((PVOID)OldLocalGroups);
-    if (LocalPrivileges)    ExFreePool((PVOID)LocalPrivileges);
+    if (LocalPrivileges && LocalPrivileges != &AllowedPrivilege) ExFreePool((PVOID)LocalPrivileges);
 
     //if (UserAttributes)     ExFreePool((PVOID)UserAttributes);
     //if (DeviceAttributes)   ExFreePool((PVOID)DeviceAttributes);
@@ -2506,7 +2500,7 @@ finish:
     if (LocalDefaultDacl)   ExFreePool((PVOID)LocalDefaultDacl);
     if (LocalSource)        ExFreePool((PVOID)LocalSource);
 
-    if (NewDefaultDacl)     ExFreePool((PVOID)NewDefaultDacl);
+    //if (NewDefaultDacl)     ExFreePool((PVOID)NewDefaultDacl);
 
     //
     // get the actual token object from the handle

SandboxiePlus/SandMan/Troubleshooting/lang_de.json

@@ -2,10 +2,10 @@
 "Description Text...": "Beschreibungstext...",
 "Fix current issues": "Aktuelle Probleme beheben",
 "Fix issues with sandboxing": "Sandboxprobleme beheben",
-"An Application does not work properly when sandboxed": "Eine Anwendung funktioniert nicht richtig",
+"An Application does not work properly when sandboxed": "Eine Anwendung funktioniert in der Sandbox nicht richtig",
-"Issues with a web browser": "Probleme mit einem Webbrowser beheben",
+"Issues with a web browser": "Probleme mit einem Webbrowser",
 "Perform Sandbox maintenance": "Sandboxwartung durchführen",
-"Fix issues with the UI or Shell": "Problemen mit der Benutzeroberfläche beheben",
+"Fix issues with the UI or Shell": "Problemen mit der Benutzeroberfläche oder Menüintegration beheben",
 
 "Yes": "Ja",
 "No": "Nein",
@@ -16,7 +16,7 @@
 "Loaded %1 templates": "%1 Vorlagen geladen",
 
 "Browser shortcut is missing from the desktop": "Browser-Verknüpfung fehlt auf dem Desktop",
-"This procedure will add a browser shortcut to the desktop": "Dieser Vorgang wird eine Browser-Verknüpfung zum Desktop hinzufügen",
+"This procedure will add a browser shortcut to the desktop": "Dieser Vorgang wird eine Browser-Verknüpfung auf dem Desktop hinzufügen",
 "Default Browser": "Standardbrowser",
 "Another": "Ein anderer",
 "Select Browser": "Browser auswählen",
@@ -31,84 +31,84 @@
 "Install legacy shell extensions": "Legacy-Menüerweiterungen installieren",
 "Select which shell options should be reinstalled": "Wählen Sie aus, welche Menüoptionen neu installiert werden sollen",
 
-"Low FPS in sandboxed games": "Low FPS in sandboxed games",
+"Low FPS in sandboxed games": "Niedrige Bildrate (FPS) in sandgeboxten Spielen",
-"This procedure will optimize the box settings for gaming": "This procedure will optimize the box settings for gaming",
+"This procedure will optimize the box settings for gaming": "Dieser Vorgang wird die Boxeinstellungen für Spiele optimieren",
-"Select which box to optimize.": "Select which box to optimize.",
+"Select which box to optimize.": "Wählen Sie aus, welche Box optimiert werden soll.",
-"To apply recommended settings press NEXT. \n": "To apply recommended settings press NEXT. \n",
+"To apply recommended settings press NEXT. \n": "Um die empfohlenen Einstellungen anzuwenden, drücken Sie auf WEITER. \n",
-"The options has been applied please tryout your game in %1 and indicate if the issue has been resolved.": "The options has been applied please tryout your game in %1 and indicate if the issue has been resolved.",
+"The options has been applied please tryout your game in %1 and indicate if the issue has been resolved.": "Die Optionen wurden angewendet. Bitte probieren Sie Ihr Spiel in %1 aus und geben Sie an, ob das Problem behoben wurde.",
-"FPS optimization not successful": "FPS optimization not successful",
+"FPS optimization not successful": "Optimierung der Bildrate (FPS) war nicht erfolgreich",
 
-"Failed to install application into a sandbox": "Fehler beim Installieren der Anwendung in einer Sandbox",
+"Failed to install application into a sandbox": "Fehler beim Installieren einer Anwendung in eine Sandbox",
-"It helps troubleshoot issues related to installing applications in the sandbox": "It helps troubleshoot issues related to installing applications in the sandbox",
+"It helps troubleshoot issues related to installing applications in the sandbox": "Es hilft bei der Behebung von Problemen im Zusammenhang mit dem Installieren von Anwendungen in der Sandbox",
 "Enter Installer Path": "Installerpfad eingeben",
 "Select a sandbox to install into": "Wählen Sie eine Sandbox zur Installation aus",
-"This box has DropAdminRights enabled, preventing execution of installers. Do you want to disable this restriction, that will reduce the security level.": "In dieser Box ist Adminrechte abgeben aktiviert, was die Ausführung von Installern verhindert. Möchten Sie diese Einschränkung deaktivieren, was das Sicherheitsniveau senken wird?",
+"This box has DropAdminRights enabled, preventing execution of installers. Do you want to disable this restriction, that will reduce the security level.": "In dieser Box ist Adminrechte abgeben aktiviert, was die Ausführung von Installern verhindert. Möchten Sie diese Einschränkung deaktivieren, was den Sicherheitslevel reduziert wird?",
 "Disable DropAdminRights": "Adminrechte abgeben deaktivieren",
 "Enable FakeAdminRights": "Adminrechte abgeben aktivieren",
-"running installer, pid: %1 press NEXT once it finishes to continue": "Installer wird ausgeführt, PID: %1 drücken Sie auf WEITER, sobald dieser fertig ist, um fortzufahren",
+"running installer, pid: %1 press NEXT once it finishes to continue": "Installer wird ausgeführt, PID: %1, drücken Sie auf WEITER, sobald dieser fertig ist, um fortzufahren",
 "Was the issue resolved?": "Wurde das Problem behoben?",
-"no mitigation worked": "no mitigation worked",
+"no mitigation worked": "Keine Problementschärfung hat funktioniert",
 
 "Webcam or Sound does not work when sandboxed": "Webcam oder Ton funktioniert nicht in einer Sandbox",
-"It helps troubleshoot webcam and audio issues in the sandbox": "It helps troubleshoot webcam and audio issues in the sandbox",
+"It helps troubleshoot webcam and audio issues in the sandbox": "Es hilft bei der Behebung von Webcam- und Audioproblemen in der Sandbox",
-"To enable webcam support on Windows 11, the isolation level must be reduced. \nIf you want to proceed, please press NEXT and select a sandbox to modify. \n": "Um die Webcam-Unterstützung unter Windows 11 zu aktivieren, muss das Isolationsniveau reduziert werden. \nWenn Sie fortfahren möchten, drücken Sie bitte auf WEITER und wählen eine Sandbox zur Modifikation aus. \n",
+"To enable webcam support on Windows 11, the isolation level must be reduced. \nIf you want to proceed, please press NEXT and select a sandbox to modify. \n": "Um die Webcam-Unterstützung unter Windows 11 zu aktivieren, muss der Isolationslevel reduziert werden. \nWenn Sie fortfahren möchten, drücken Sie bitte auf WEITER und wählen eine Sandbox zur Modifikation aus. \n",
-"Select which box to turn into a reduced isolation app compartment box.": "Wählen Sie, welche Box in eine Applikationsunterteilungsbox mit reduzierter Isolation umgewandelt werden soll.",
+"Select which box to turn into a reduced isolation app compartment box.": "Wählen Sie aus, welche Box in eine Applikationsunterteilungsbox mit reduzierter Isolation umgewandelt werden soll.",
-"The mitigation has been applied please try out the web cam in %1 and indicate if the issue has been resolved.": "Die Umwandlung wurde durchgeführt, bitte testen Sie die Webcam in %1 und geben Sie an, ob das Problem behoben wurde.",
+"The mitigation has been applied please try out the web cam in %1 and indicate if the issue has been resolved.": "Die Problementschärfung wurde angewandt, bitte probieren Sie die Webcam in %1 aus und geben Sie an, ob das Problem behoben wurde.",
-"Webcam mitigation not successful": "Webcam mitigation not successful",
+"Webcam mitigation not successful": "Problementschärfung für Webcam war nicht erfolgreich",
 
 "Select affected sandbox": "Betroffene Sandbox auswählen",
 "Enter Process Name": "Prozessname eingeben",
 
-"SBIE1307: Program cannot access the Internet due to restrictions": "SBIE1307: Program cannot access the Internet due to restrictions",
+"SBIE1307: Program cannot access the Internet due to restrictions": "SBIE1307: Programm kann aufgrund von Beschränkungen nicht auf das Internet zugreifen",
-"Program cannot access the Internet due to restrictions": "Program cannot access the Internet due to restrictions",
+"Program cannot access the Internet due to restrictions": "Programm kann aufgrund von Beschränkungen nicht auf das Internet zugreifen",
 "Internet Access restrictions are in effect for the sandbox in which the program is running. The program is prohibited from accessing the Internet.": "Für die Sandbox, in der das Programm ausgeführt wird, gelten Internetzugriffsbeschränkungen. Dem Programm ist der Zugriff auf das Internet untersagt.",
 
-"SBIE1308: Program cannot start due to restrictions": "SBIE1308: Program cannot start due to restrictions",
+"SBIE1308: Program cannot start due to restrictions": "SBIE1308: Programm kann aufgrund von Beschränkungen nicht gestartet werden",
-"Program cannot start due to restrictions": "Program cannot start due to restrictions",
+"Program cannot start due to restrictions": "Programm kann aufgrund von Beschränkungen nicht gestartet werden",
 "Start/Run restrictions are in effect for the sandbox in which the program is running. The program is prohibited from starting or running.": "Für die Sandbox, in der das Programm ausgeführt wird, gelten Start-/Ausführungsbeschränkungen. Das Programm darf nicht gestartet oder ausgeführt werden.",
 
-"SBIE2102: File is too large to copy into sandbox": "SBIE2102: File is too large to copy into sandbox",
+"SBIE2102: File is too large to copy into sandbox": "SBIE2102: Die Datei ist zu groß, um sie in die Sandbox zu kopieren",
-"File is too large to copy into sandbox": "File is too large to copy into sandbox",
+"File is too large to copy into sandbox": "Die Datei ist zu groß, um sie in die Sandbox zu kopieren",
 
-"SBIE2113: File is too large to copy into sandbox, creating empty file": "SBIE2113: File is too large to copy into sandbox, creating empty file",
+"SBIE2113: File is too large to copy into sandbox, creating empty file": "SBIE2113: Die Datei ist zu groß, um sie in die Sandbox zu kopieren, erzeuge leere Datei",
-"File is too large to copy into sandbox, creating empty file": "File is too large to copy into sandbox, creating empty file",
+"File is too large to copy into sandbox, creating empty file": "Die Datei ist zu groß, um sie in die Sandbox zu kopieren, erzeuge leere Datei",
 
-"SBIE2114: File is too large to copy into sandbox, denying access": "SBIE2114: File is too large to copy into sandbox, denying access",
+"SBIE2114: File is too large to copy into sandbox, denying access": "SBIE2114: Die Datei ist zu groß, um sie in die Sandbox zu kopieren, verweigere Zugriff",
-"File is too large to copy into sandbox, denying access": "File is too large to copy into sandbox, denying access",
+"File is too large to copy into sandbox, denying access": "Die Datei ist zu groß, um sie in die Sandbox zu kopieren, verweigere Zugriff",
 
-"SBIE2115: File is too large to copy into sandbox, opening in read only": "SBIE2115: File is too large to copy into sandbox, opening in read only",
+"SBIE2115: File is too large to copy into sandbox, opening in read only": "SBIE2115: Die Datei ist zu groß, um sie in die Sandbox zu kopieren, öffne Datei nur schreibgeschützt",
-"File is too large to copy into sandbox, opening in read only": "File is too large to copy into sandbox, opening in read only",
+"File is too large to copy into sandbox, opening in read only": "Die Datei ist zu groß, um sie in die Sandbox zu kopieren, öffne Datei nur schreibgeschützt",
 
-"SBIE2181: Failed to load SbieDll.dll": "SBIE2181: Failed to load SbieDll.dll",
+"SBIE2181: Failed to load SbieDll.dll": "SBIE2181: SbieDll.dll konnte nicht geladen werden",
-"Fix the DACLs of Sandboxie's home folder": "Fix the DACLs of Sandboxie's home folder",
+"Fix the DACLs of Sandboxie's home folder": "Reparieren der DACLs des Sandboxie-Ordners",
-"Failures to load SbieDll.dll when encountered by Chrome, or another software employing app containers, it is often caused by invalid DACL entries for the Sandboxie home directory. This mitigation measure will fix them, for this reason it will prompt for admin privileges which need to be granted for kmdutil.exe.": "Wenn Chrome oder eine andere Software, die App-Container verwendet, die Datei SbieDll.dll nicht laden kann, wird dies häufig durch ungültige DACL-Einträge für das Sandboxie-Verzeichnis verursacht. Diese Maßnahme wird die DACL-Einträge beheben. Aus diesem Grund wird sie Adminrechte anfordern, die für kmdutil.exe gewährt werden müssen.",
+"Failures to load SbieDll.dll when encountered by Chrome, or another software employing app containers, it is often caused by invalid DACL entries for the Sandboxie home directory. This mitigation measure will fix them, for this reason it will prompt for admin privileges which need to be granted for kmdutil.exe.": "Wenn Chrome oder eine andere Software, die App-Container verwendet, die Datei SbieDll.dll nicht laden kann, wird dies häufig durch ungültige DACL-Einträge für das Sandboxie-Verzeichnis verursacht. Diese Problementschärfungsmaßnahme wird die DACL-Einträge reparieren. Aus diesem Grund wird sie Adminrechte anfordern, die für kmdutil.exe gewährt werden müssen.",
 "The DACLs have been adjusted, please try to run your application again and indicate if the issue has been resolved.": "Die DACLs wurden angepasst. Bitte versuchen Sie, Ihre Anwendung erneut auszuführen und geben Sie an, ob das Problem behoben wurde.",
-"DACLs fix did not resolve the issue": "Korrektur der DACLs hat das Problem nicht behoben",
+"DACLs fix did not resolve the issue": "Reparatur der DACLs hat das Problem nicht behoben",
 
-"SBIE2204: Cannot start a specific sandboxed service": "SBIE2204: Cannot start a specific sandboxed service",
+"SBIE2204: Cannot start a specific sandboxed service": "SBIE2204: Kann einen bestimmten sandgeboxten Dienst nicht starten",
-"Sandboxie failed to start a service in the sandbox": "Sandboxie failed to start a service in the sandbox",
+"Sandboxie failed to start a service in the sandbox": "Sandboxie konnte einen Dienst in der Sandbox nicht starten",
 "The message indicates that Sandboxie was unable to start one of the helper programs SandboxieRpcSs or SandboxieDcomLaunch. The name noted in the message can be rpcss or dcomlaunch.\n\nYou can submit an issue report on the next page to help us to analyze the issue.": "Die Nachricht zeigt an, dass Sandboxie nicht in der Lage war, eines der Hilfsprogramme SandboxieRpcSs oder SandboxieDcomLaunch zu starten. Der in der Nachricht angegebene Name kann rpcss oder dcomlaunch sein.\n\nAuf der nächsten Seite können Sie einen Problembericht einreichen, um uns bei der Analyse des Problems zu helfen.",
 
-"SBIE2313: Could not execute specific process": "SBIE2313: Could not execute specific process",
+"SBIE2313: Could not execute specific process": "SBIE2313: Konnte bestimmten Prozess nicht ausführen",
-"Sandboxie failed to start a process in the sandbox": "Sandboxie failed to start a process in the sandbox",
+"Sandboxie failed to start a process in the sandbox": "Sandboxie konnte einen Prozess in der Sandbox nicht starten",
 "Sandboxie was not able to execute one of its own programs. Check access permissions to the Sandboxie installation folder and/or reinstall Sandboxie.\n\nPossible Causes:\n1. Sandboxie was configured to block access to the folder containing its program files.\n2. A third-party (HIPS) security software was configured to block the execution of the program mentioned in the message.\n\nYou can submit an issue report on the next page to help us to analyze the issue.": "Sandboxie war nicht in der Lage, eines seiner eigenen Programme auszuführen. Überprüfen Sie die Zugriffsrechte auf den Sandboxie-Installationsordner und/oder installieren Sie Sandboxie neu.\n\nMögliche Ursachen:\n1. Sandboxie wurde so konfiguriert, dass der Zugriff auf den Ordner mit seinen Programmdateien blockiert wird.\n2. Eine Sicherheitssoftware eines Drittanbieters (HIPS) wurde so konfiguriert, dass sie die Ausführung des in der Nachricht genannten Programms blockiert.\n\nAuf der nächsten Seite können Sie einen Problembericht einreichen, um uns bei der Analyse des Problems zu helfen.",
 
-"open config": "open config",
+"open config": "Konfiguration öffnen",
-"opens box config on a given page": "opens box config on a given page",
+"opens box config on a given page": "Öffnet die Boxkonfiguration auf einer bestimmten Seite",
-"Do you want to open the box option dialog to change this preset?": "Möchten Sie das Dialogfeld mit den Boxoptionen öffnen, um diese Voreinstellung zu ändern?",
+"Do you want to open the box option dialog to change this preset?": "Möchten Sie den Boxoptionendialog öffnen, um diese Voreinstellung zu ändern?",
 "No, it is fine as it is": "Nein, es ist gut so, wie es ist",
 "No, but I want to report a bug": "Nein, aber ich möchte einen Fehler melden",
 
 "SBIE 2113/2114/2115 and 2102": "SBIE 2113/2114/2115 and 2102",
-"handle migration error messages": "handle migration error messages",
+"handle migration error messages": "Migrationsfehlernachrichten behandeln",
 "The message %1 is caused by the file migration limit being reached.": "Die Nachricht %1 wird dadurch verursacht, dass das Limit für die Dateimigration erreicht wurde.",
 
-"fix parental controls breaking sandboxie": "fix parental controls breaking sandboxie",
+"fix parental controls breaking sandboxie": "Kindersicherungsprobleme von Sandboxie beheben",
-"stops AppId driver and AppIdSvc service and disables the offending policy file": "stops AppId driver and AppIdSvc service and disables the offending policy file",
+"stops AppId driver and AppIdSvc service and disables the offending policy file": "Stoppt den AppId-Treiber und den AppIdSvc-Dienst und deaktiviert die problemverursachende Richtliniendatei",
 "It seems you are using a non-administrative user account on a system with enabled parental controls, this is known to be incompatible with Sandboxie.\nYou have the following options to resolve the issue.": "Es scheint, dass Sie ein nicht-administratives Benutzerkonto auf einem System mit aktivierter Kindersicherung verwenden, das bekanntermaßen nicht mit Sandboxie kompatibel ist.\nSie haben folgende Möglichkeiten, das Problem zu lösen.",
 
-"SBIEMSG, I'm getting a cryptic SBIExxxx message": "SBIEMSG, I'm getting a cryptic SBIExxxx message",
+"SBIEMSG, I'm getting a cryptic SBIExxxx message": "SBIEMSG, ich erhalte eine kryptische SBIExxxx Nachricht",
-"Handle all sbie messages...": "Handle all sbie messages...",
+"Handle all sbie messages...": "Alle SBIE Nachrichten behandeln...",
 "Sbie Message Code": "SBIE Nachrichten-Code",
 "Name affected process": "Name des betroffenen Prozesses",
 "Please enter the SBIEMSG ID you have encountered.": "Bitte geben Sie die SBIE Nachrichten-ID ein, auf die Sie gestoßen sind.",

SandboxiePlus/SandMan/Views/SbieView.cpp

@@ -1786,7 +1786,7 @@ void CSbieView::OnDoubleClicked(const CSandBoxPtr &pBox)
 
 	if (!pBox->IsEnabled())
 	{
-		if (QMessageBox("Sandboxie-Plus", tr("This sandbox is disabled, do you want to enable it?"), QMessageBox::Question, QMessageBox::Yes, QMessageBox::No | QMessageBox::Default | QMessageBox::Escape, QMessageBox::NoButton, this).exec() != QMessageBox::Yes)
+		if (QMessageBox("Sandboxie-Plus", tr("This sandbox is disabled or restricted to a group/user, do you want to edit it?"), QMessageBox::Question, QMessageBox::Yes, QMessageBox::No | QMessageBox::Default | QMessageBox::Escape, QMessageBox::NoButton, this).exec() != QMessageBox::Yes)
 			return;
 		pBox->SetText("Enabled", "y");
 		return;

SandboxiePlus/SandMan/sandman_de.ts

@@ -1124,7 +1124,7 @@ Sie können %USER% verwenden, um für jeden Benutzer die Sandbox in einem eigene
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="746"/>
         <source>Prompt user whether to allow an exemption from the blockade</source>
-        <translation type="unfinished"></translation>
+        <translation>Den Nutzer fragen, ob er eine Ausnahme von dieser Blockade erlauben will</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="752"/>
@@ -4966,8 +4966,8 @@ This file is part of Sandboxie and all change done to it will be reverted next t
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Diese Sandbox ist deaktiviert. Möchten Sie diese aktivieren?</translation>
+        <translation>Diese Sandbox ist deaktiviert oder auf andere Gruppen/Benutzer beschränkt. Möchten Sie die Sandbox bearbeiten?</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="549"/>
@@ -7318,33 +7318,33 @@ an Stelle von &quot;*&quot;.</translation>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1711"/>
         <source>Limit restrictions</source>
-        <translation type="unfinished"></translation>
+        <translation>Limit-Beschränkungen</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1629"/>
         <location filename="Forms/OptionsWindow.ui" line="1636"/>
         <source>Leave it blank to disable the setting(Unit:KB)</source>
-        <translation type="unfinished"></translation>
+        <translation>Leer lassen, um die Einstellung zu deaktivieren (Einheit: KB)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1643"/>
         <source>Leave it blank to disable the setting</source>
-        <translation type="unfinished"></translation>
+        <translation>Leer lassen, um die Einstellung zu deaktivieren</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1585"/>
         <source>Total Processes Number Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>Limit Gesamtzahl an Prozessen:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1615"/>
         <source>Total Processes Memory Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>Speicherlimit aller Prozesse zusammen:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1622"/>
         <source>Single Process Memory Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>Speicherlimit einzelner Prozess:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4522"/>
@@ -7354,19 +7354,17 @@ an Stelle von &quot;*&quot;.</translation>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4711"/>
         <source>Don&apos;t allow sandboxed processes to see processes running outside any boxes</source>
-        <translation type="unfinished"></translation>
+        <translation>Nicht erlauben, dass sandgeboxte Prozesse die Prozesse außerhalb der Boxen sehen können</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4718"/>
         <source>Prevent sandboxed processes from accessing system details through WMI</source>
-        <oldsource>Prevent sandboxed processes from accessing system deatils through WMI</oldsource>
+        <translation>Hindere sandgeboxte Prozesse daran, über WMI auf Systemdetails zuzugreifen</translation>
-        <translation type="unfinished"></translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4759"/>
         <source>Some programs retrieve system details via WMI (Windows Management Instrumentation), a built-in Windows database, rather than using conventional methods. For instance, &apos;tasklist.exe&apos; can access a complete list of processes even if &apos;HideOtherBoxes&apos; is enabled. Enable this option to prevent such behavior.</source>
-        <oldsource>Some programs read system deatils through WMI(A Windows built-in database) instead of normal ways. For example,&quot;tasklist.exe&quot; could get full processes list even if &quot;HideOtherBoxes&quot; is opened through accessing WMI. Enable this option to stop these heavior.</oldsource>
+        <translation>Einige Programme rufen Systemdetails über WMI (Windows Management Instrumentation), eine integrierte Windows-Datenbank, ab, anstatt herkömmliche Methoden zu verwenden. Zum Beispiel kann &apos;tasklist.exe&apos; auf eine komplette Liste von Prozessen zugreifen, auch wenn &apos;HideOtherBoxes&apos; aktiviert ist. Aktivieren Sie diese Option, um ein solches Verhalten zu verhindern.</translation>
-        <translation type="unfinished"></translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4860"/>
@@ -7645,8 +7643,7 @@ Dies wird gemacht um bösartige Prozesse in einer Sandbox daran zu hindern, eine
     <message>
         <location filename="Forms/OptionsWindow.ui" line="811"/>
         <source>Allow sandboxed windows to cover the taskbar</source>
-        <oldsource>Allow sandboxed windows to cover taskbar</oldsource>
+        <translation>Erlaube sandgeboxten Fenstern die Taskleiste zu verdecken</translation>
-        <translation type="unfinished"></translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="855"/>
@@ -7661,7 +7658,7 @@ Dies wird gemacht um bösartige Prozesse in einer Sandbox daran zu hindern, eine
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1577"/>
         <source>Job Object</source>
-        <translation type="unfinished"></translation>
+        <translation>Job-Objekt</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2135"/>
@@ -7848,7 +7845,7 @@ Um einen Prozess anzugeben verwenden Sie &apos;$:program.exe&apos; als Pfad.</tr
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1650"/>
         <source>Allow use of nested job objects (works on Windows 8 and later)</source>
-        <translation>Erlaube Verwendung von verschachtelten Jobobjekten (funktioniert ab Windows 8 und neuer)</translation>
+        <translation>Erlaube Verwendung von verschachtelten Job-Objekten (funktioniert ab Windows 8 und neuer)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="887"/>

SandboxiePlus/SandMan/sandman_en.ts

@@ -5107,8 +5107,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation></translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished"></translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_es.ts

@@ -5694,8 +5694,9 @@ NO seleccionará: %2</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Esta sandbox esta deshabilitada, ¿desea habilitarla?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Esta sandbox esta deshabilitada, ¿desea habilitarla?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_fr.ts

@@ -5787,8 +5787,9 @@ Remarque : La recherche de mise à jour est souvent en retard par rapport à la
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Ce bac à sable est désactivé, voulez-vous l&apos;activer ?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Ce bac à sable est désactivé, voulez-vous l&apos;activer ?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_hu.ts

@@ -5323,8 +5323,9 @@ Ez a fájl a Sandboxie része, és minden rajta végzett módosítás vissza les
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Ez a homokozó le van tiltva. Bekapcsolja?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Ez a homokozó le van tiltva. Bekapcsolja?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_it.ts

@@ -5379,8 +5379,9 @@ Questo file fa parte di Sandboxie e tutte le modifiche apportate ad esso saranno
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Quest&apos;area virtuale è disattivata, vuoi attivarla?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Quest&apos;area virtuale è disattivata, vuoi attivarla?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_ja.ts

@@ -5041,7 +5041,8 @@ This file is part of Sandboxie and all change done to it will be reverted next t
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
         <translation type="unfinished"></translation>
     </message>
 </context>

SandboxiePlus/SandMan/sandman_ko.ts

@@ -5552,8 +5552,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>이 샌드박스를 사용할 수 없습니다. 사용하시겠습니까?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">이 샌드박스를 사용할 수 없습니다. 사용하시겠습니까?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_nl.ts

@@ -5438,8 +5438,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Deze sandbox is uitgeschakeld. Wilt u hem inschakelen?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Deze sandbox is uitgeschakeld. Wilt u hem inschakelen?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_pl.ts

@@ -5653,8 +5653,9 @@ Uwaga: Sprawdzanie aktualizacji często pomija najnowsze wydania GitHub, aby zap
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Ta piaskownica jest wyłączona, czy chcesz ją teraz włączyć?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Ta piaskownica jest wyłączona, czy chcesz ją teraz włączyć?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_pt_BR.ts

@@ -5655,8 +5655,9 @@ Não vou escolher: %2</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Essa caixa está desativada, deseja ativá-la?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Essa caixa está desativada, deseja ativá-la?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_pt_PT.ts

@@ -5659,8 +5659,9 @@ Não vou definir: %2</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Esta caixa está desativada, deseja ativá-la?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Esta caixa está desativada, deseja ativá-la?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_ru.ts

@@ -5098,8 +5098,9 @@ This file is part of Sandboxie and all change done to it will be reverted next t
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Эта песочница отключена, вы хотите ее включить?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Эта песочница отключена, вы хотите ее включить?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_sv_SE.ts

@@ -5700,8 +5700,9 @@ Notera: Uppdateringskollen är ofta bakom senaste GitHub-utgivningen för att s
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Denna sandlåda är inaktiverad, vill du aktivera den?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Denna sandlåda är inaktiverad, vill du aktivera den?</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="174"/>

SandboxiePlus/SandMan/sandman_tr.ts

@@ -4724,8 +4724,9 @@ Lütfen Sandboxie için bir güncelleme olup olmadığını kontrol edin.</trans
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Bu alan devre dışı, etkinleştirmek istiyor musunuz?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Bu alan devre dışı, etkinleştirmek istiyor musunuz?</translation>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1263"/>

SandboxiePlus/SandMan/sandman_uk.ts

@@ -5402,8 +5402,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Ця пісочниця вимкнена, ви хочете її увімкнути?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Ця пісочниця вимкнена, ви хочете її увімкнути?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_vi.ts

@@ -5312,8 +5312,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>Sandbox này bị vô hiệu hóa, bạn có muốn bật nó không?</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation type="unfinished">Sandbox này bị vô hiệu hóa, bạn có muốn bật nó không?</translation>
     </message>
 </context>
 <context>

SandboxiePlus/SandMan/sandman_zh_CN.ts

@@ -269,7 +269,7 @@
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="881"/>
         <source>Prevent sandboxed windows from being captured</source>
-        <translation>阻止沙盒化窗口被捕获图像。</translation>
+        <translation>阻止捕获沙盒中程序的窗口图像。</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="882"/>
@@ -462,7 +462,8 @@ To disable this template for a sandbox, simply uncheck it in the template list.<
     <message>
         <location filename="Windows/BoxImageWindow.cpp" line="37"/>
         <source>Creating new box image, please enter a secure password, and choose a disk image size.</source>
-        <translation>正在创建新的沙盒磁盘映像。请输入强密码，并设置映像大小。</translation>
+        <translation>正在创建新的沙盒磁盘映像。
+	请输入强密码，并设置映像大小。</translation>
     </message>
     <message>
         <location filename="Windows/BoxImageWindow.cpp" line="41"/>
@@ -510,7 +511,7 @@ This length permits approximately 384 bits of entropy with a passphrase composed
 increases to 512 bits with the application of Leet (L337) speak modifications, and exceeds 768 bits when composed of entirely random printable ASCII characters.</source>
         <translation>密码的最大长度限制为 128 个字符。
 如果密码由实际的英文单词组成，这个长度允许大约 384 位的熵，
-如果使用 Leet(L337) 密语，则增加到 512 位熵，如果完全由随机的可打印 ASCII 字符组成，则超过 768 位熵。</translation>
+如果使用 Leet(L337) 密语，则增加到 512 位熵，如果完全由随机的可打印 ASCII 字符组成，则允许超过 768 位熵。</translation>
     </message>
     <message>
         <location filename="Windows/BoxImageWindow.cpp" line="164"/>
@@ -634,12 +635,12 @@ While the level of isolation is reduced compared to other box types, it offers i
 Access to the virtual disk when mounted is restricted to programs running within the sandbox. Sandboxie prevents other processes on the host system from accessing the sandboxed processes. 
 This ensures the utmost level of privacy and data protection within the confidential sandbox environment.</source>
         <translation>该类型的沙盒使用加密的磁盘映像作为文件根目录，为安全性与隐私性提供了额外的保障。
-当虚拟磁盘被挂载时，只有沙盒内的程序可以访问，而其他进程将会被阻止访问。这确保了在该沙盒环境中最高级别的隐私和数据保护。</translation>
+当虚拟磁盘映像被挂载时，只有沙盒内的程序可以访问它，而其他进程将会被阻止访问。这确保了在该沙盒环境中最高级别的隐私和数据保护。</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="441"/>
         <source>Hardened Sandbox with Data Protection</source>
-        <translation>带数据保护的加固型沙盒</translation>
+        <translation>带有数据保护的加固型沙盒</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="442"/>
@@ -649,7 +650,7 @@ This ensures the utmost level of privacy and data protection within the confiden
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="443"/>
         <source>Sandbox with Data Protection</source>
-        <translation>带数据保护的沙盒</translation>
+        <translation>带有数据保护的沙盒</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="444"/>
@@ -659,7 +660,7 @@ This ensures the utmost level of privacy and data protection within the confiden
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="446"/>
         <source>Application Compartment with Data Protection</source>
-        <translation>带数据保护的应用隔间</translation>
+        <translation>带有数据保护的应用隔间</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="447"/>
@@ -812,7 +813,7 @@ Please browse to the correct user profile directory.</source>
 Note: you need to run the browser unsandboxed for them to get created.
 Please browse to the correct user profile directory.</oldsource>
         <translation>没有发现合适的目录
-注意：你需要在不使用沙盒的情况下运行一次浏览器，以便使它们被正确创建
+注意：您需要在不使用沙盒的情况下先运行一次浏览器，以便使它们被正确创建。
 请浏览并选择正确的用户资料配置文件目录</translation>
     </message>
     <message>
@@ -1317,7 +1318,7 @@ You can use %USER% to save each users sandbox to an own fodler.</oldsource>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="746"/>
         <source>Prompt user whether to allow an exemption from the blockade</source>
-        <translation type="unfinished"></translation>
+        <translation>提示用户是否允许豁免封锁</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="752"/>
@@ -1327,7 +1328,7 @@ You can use %USER% to save each users sandbox to an own fodler.</oldsource>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="756"/>
         <source>Drop rights from Administrators and Power Users groups</source>
-        <translation>撤销管理员和 Power Users 用户组的权限</translation>
+        <translation>撤销管理员和 Power Users （Windows Vista 以前 及之后的 专业版 Windows 系统） 用户组的权限</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="762"/>
@@ -1337,7 +1338,7 @@ You can use %USER% to save each users sandbox to an own fodler.</oldsource>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="767"/>
         <source>Allow MSIServer to run with a sandboxed system token</source>
-        <translation>允许 MSIServer 在沙盒内使用系统令牌运行</translation>
+        <translation>允许 MSIServer 使用沙盒化的系统令牌运行</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="774"/>
@@ -1449,7 +1450,7 @@ You can use %USER% to save each users sandbox to an own fodler.</oldsource>
         <location filename="Wizards/NewBoxWizard.cpp" line="76"/>
         <source>This sandbox content will be placed in an encrypted container file, please note that any corruption of the container&apos;s header will render all its content permanently inaccessible. Corruption can occur as a result of a BSOD, a storage hardware failure, or a malicious application overwriting random files. This feature is provided under a strict &lt;b&gt;No Backup No Mercy&lt;/b&gt; policy, YOU the user are responsible for the data you put into an encrypted box. &lt;br /&gt;&lt;br /&gt;IF YOU AGREE TO TAKE FULL RESPONSIBILITY FOR YOUR DATA PRESS [YES], OTHERWISE PRESS [NO].</source>
         <oldsource>This sandbox content will be placed in an encrypted container file, please note that any corruption of the container&apos;s header will render all its content permanently innaccessible. Corruption can occur as a result of a BSOD, a storage hadrware failure, or a maliciouse application overwriting random files. This feature is provided under a strickt &lt;b&gt;No Backup No Mercy&lt;/b&gt; policy, YOU the user are responsible for the data you put into an encrypted box. &lt;br /&gt;&lt;br /&gt;IF YOU AGREE TO TAKE FULL RESPONSIBILITY FOR YOUR DATA PRESS [YES], OTHERWISE PRESS [NO].</oldsource>
-        <translation>该沙盒的文件将会存储在加密的容器文件中，注意：容器头文件的任何损坏都可能导致容器内文件不可读取。同时，可能导致不限于蓝屏、死机、存储设备故障、或沙盒中恶意程序随机覆写文件。该功能以严格遵守 &lt;br /&gt;无备份、不宽容&lt;br /&gt;的形式提供，您需要自行为该加密沙盒中的文件承担风险。 &lt;br /&gt;&lt;br /&gt;如果您同意为您的数据自行承担风险则选择 [确认], 否则 [取消].</translation>
+        <translation>该沙盒的文件将会存储在加密的容器文件中，注意：容器头的任何损坏都可能导致容器内文件不可读取（这等同于损坏硬盘的引导分区）。同时，可能导致不限于蓝屏、死机、存储设备故障、或沙盒中恶意程序随机覆写文件。该功能以严格遵守 &lt;br /&gt;无备份、不宽容&lt;br /&gt;的形式提供，您需要自行为该加密沙盒中的文件承担风险。 &lt;br /&gt;&lt;br /&gt;如果您同意为您的数据自行承担风险则选择 [确认], 否则 [取消].</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="107"/>
@@ -2051,7 +2052,7 @@ Note: The update check is often behind the latest GitHub release to ensure that
     <message>
         <location filename="Windows/OptionsWindow.cpp" line="1011"/>
         <source>This sandbox has been deleted hence configuration can not be saved.</source>
-        <translation>该沙盒已被删除，因此配置无法保存</translation>
+        <translation>该沙盒已被删除，因此无法保存配置</translation>
     </message>
     <message>
         <location filename="Windows/OptionsWindow.cpp" line="1075"/>
@@ -3026,7 +3027,7 @@ Unlike the preview channel, it does not include untested, potentially breaking,
     <message>
         <location filename="Wizards/SetupWizard.cpp" line="677"/>
         <source>Sandboxie-Plus applies strict application restrictions, which can lead to compatibility issues. Stay updated with Sandboxie-Plus, including compatibility templates and troubleshooting, to ensure smooth operation amid Windows updates and application changes.</source>
-        <translation>Sandboxie Plus 应用了严格的应用程序限制，这可能会导致兼容性问题。使 Sandboxie Plus （及其兼容性模板和故障排除向导）保持在最新版本，有利于在 Windows 更新和应用程序变动时保证这些应用程序限制稳定运行。</translation>
+        <translation>Sandboxie-Plus 应用了严格的应用程序限制，这可能会导致兼容性问题。使 Sandboxie-Plus （及其兼容性模板和故障排除向导）保持在最新版本，有利于在 Windows 更新和应用程序变动时保证这些应用程序限制稳定运行。</translation>
     </message>
     <message>
         <location filename="Wizards/SetupWizard.cpp" line="683"/>
@@ -3690,7 +3691,7 @@ Do you want to do the clean up?</source>
         <location filename="SandMan.cpp" line="1563"/>
         <source>This box does not enforce isolation, it is intended to be used as an &lt;a href=&quot;sbie://docs/compartment-mode&quot;&gt;application compartment&lt;/a&gt; for software virtualization only.</source>
         <oldsource>This box does not enforce isolation, it is intended to be used as an application compartment for software virtualization only.</oldsource>
-        <translation>此类沙盒不执行隔离，它的目的是将一个应用程序虚拟化</translation>
+        <translation>此类沙盒不执行隔离，它用于将一个应用程序虚拟化</translation>
     </message>
     <message>
         <location filename="SandMan.cpp" line="1571"/>
@@ -3834,7 +3835,7 @@ Please check if there is an update for sandboxie.</oldsource>
     <message>
         <location filename="SandMan.cpp" line="2526"/>
         <source>Your Windows build %1 exceeds the current known support capabilities of your Sandboxie version, Sandboxie will attempt to use the last-known offsets which may cause system instability.</source>
-        <translation>您的Windows版本 %1 超过了 Sandboxie 版本的当前已知支持范围，Sandboxie 将尝试使用上一个已知的配置，这可能会导致系统不稳定。</translation>
+        <translation>您的 Windows 版本 %1 超过了 Sandboxie 版本的当前已知支持范围，Sandboxie 将尝试使用上一个已知的配置，这可能会导致系统不稳定。</translation>
     </message>
     <message>
         <location filename="SandMan.cpp" line="2537"/>
@@ -5481,8 +5482,8 @@ Error: %1</source>
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>此沙盒已禁用，确定启用吗？</translation>
+        <translation>此沙盒已禁用或仅限于特定组/用户，确定要编辑它吗？</translation>
     </message>
 </context>
 <context>
@@ -7733,7 +7734,7 @@ If you are a great patreaon supporter already, sandboxie can check online for an
         <location filename="Forms/OptionsWindow.ui" line="811"/>
         <source>Allow sandboxed windows to cover the taskbar</source>
         <oldsource>Allow sandboxed windows to cover taskbar</oldsource>
-        <translation type="unfinished">允许沙盒内窗口遮盖任务栏</translation>
+        <translation>允许沙盒内窗口遮盖任务栏</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="855"/>
@@ -7807,13 +7808,13 @@ If you are a great patreaon supporter already, sandboxie can check online for an
         <location filename="Forms/OptionsWindow.ui" line="4718"/>
         <source>Prevent sandboxed processes from accessing system details through WMI</source>
         <oldsource>Prevent sandboxed processes from accessing system deatils through WMI</oldsource>
-        <translation type="unfinished">防止沙盒内的进程通过 WMI 访问系统信息</translation>
+        <translation>防止沙盒内的进程通过 WMI 访问系统信息</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4759"/>
         <source>Some programs retrieve system details via WMI (Windows Management Instrumentation), a built-in Windows database, rather than using conventional methods. For instance, &apos;tasklist.exe&apos; can access a complete list of processes even if &apos;HideOtherBoxes&apos; is enabled. Enable this option to prevent such behavior.</source>
         <oldsource>Some programs read system deatils through WMI(A Windows built-in database) instead of normal ways. For example,&quot;tasklist.exe&quot; could get full processes list even if &quot;HideOtherBoxes&quot; is opened through accessing WMI. Enable this option to stop these heavior.</oldsource>
-        <translation type="unfinished">一些程序通过 WMI(一个Windows内置数据库) 读取系统信息，而不是通过正常方式。例如，尽管已经打开 &quot;隐藏其它沙盒&quot; ，&quot;tasklist.exe&quot; 仍然可以通过访问 WMI 获取全部进程列表。开启此选项来阻止这些行为。</translation>
+        <translation>一些程序通过 WMI(一个Windows内置数据库) 读取系统信息，而不是通过正常方式。例如，尽管已经打开 &quot;隐藏其它沙盒&quot; ，&quot;tasklist.exe&quot; 仍然可以通过访问 WMI 获取全部进程列表。开启此选项来阻止这些行为。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4777"/>

SandboxiePlus/SandMan/sandman_zh_TW.ts

@@ -57,7 +57,7 @@
     <message>
         <location filename="Forms/BoxImageWindow.ui" line="163"/>
         <source>Lock the box when all processes stop.</source>
-        <translation>當全部執行緒停止後鎖定沙箱。</translation>
+        <translation>當全部處理程序停止後鎖定沙箱。</translation>
     </message>
 </context>
 <context>
@@ -256,7 +256,7 @@
         <source>Prevent sandboxed programs on the host from loading sandboxed DLLs</source>
         <oldsource>Prevent sandboxed programs installed on the host from loading DLLs from the sandbox</oldsource>
         <translatorcomment>&quot;應用程式擴充&quot; is the actual translation showed in Windows for TradChinese</translatorcomment>
-        <translation type="unfinished">防止主機上安裝的沙箱化程式從沙箱載入應用程式擴充 (DLL) 檔案</translation>
+        <translation>防止主機上被沙箱化的程式載入被沙箱化的應用程式擴充 (DLL) 檔案</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="875"/>
@@ -1271,83 +1271,83 @@ You can use %USER% to save each users sandbox to an own fodler.</oldsource>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="717"/>
         <source>Sandbox Isolation options</source>
-        <translation type="unfinished"></translation>
+        <translation>沙箱隔離選項</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="718"/>
         <source>On this page sandbox isolation options can be configured.</source>
-        <translation type="unfinished"></translation>
+        <translation>在此頁面可以調整沙箱隔離選項的組態。</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="723"/>
         <source>Network Access</source>
-        <translation type="unfinished">區域網路存取</translation>
+        <translation>區域網路存取</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="731"/>
         <source>Allow network/internet access</source>
-        <translation type="unfinished">允許區域網路/網際網路存取</translation>
+        <translation>允許區域網路/網際網路存取</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="732"/>
         <source>Block network/internet by denying access to Network devices</source>
-        <translation type="unfinished">透過拒絕存取區域網路裝置來阻止區域網路/網際網路</translation>
+        <translation>透過拒絕存取區域網路裝置，以阻止區域網路/網際網路存取</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="734"/>
         <source>Block network/internet using Windows Filtering Platform</source>
-        <translation type="unfinished">使用 Windows 篩選平台阻止區域網路/網際網路</translation>
+        <translation>使用 Windows 篩選平台阻止區域網路/網際網路存取</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="740"/>
         <source>Allow access to network files and folders</source>
-        <translation type="unfinished">允許存取區域網路檔案和資料夾</translation>
+        <translation>允許存取區域網路檔案和資料夾</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="741"/>
         <location filename="Wizards/NewBoxWizard.cpp" line="768"/>
         <source>This option is not recommended for Hardened boxes</source>
-        <translation type="unfinished">不建議將此選項用於加固型沙箱</translation>
+        <translation>不推薦將此選項用於加固型沙箱</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="746"/>
         <source>Prompt user whether to allow an exemption from the blockade</source>
-        <translation type="unfinished"></translation>
+        <translation>提示使用者是否允許豁免封鎖</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="752"/>
         <source>Admin Options</source>
-        <translation type="unfinished">管理員選項</translation>
+        <translation>管理員選項</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="756"/>
         <source>Drop rights from Administrators and Power Users groups</source>
-        <translation type="unfinished">廢棄來自管理員和 Power Users 使用者組的許可</translation>
+        <translation>廢棄來自管理員和 Power Users (高權限使用者) 群組的許可</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="762"/>
         <source>Make applications think they are running elevated</source>
-        <translation type="unfinished">使應用程式認為其已在權限提升狀態下執行</translation>
+        <translation>使應用程式認為其已在權限提升狀態下運作</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="767"/>
         <source>Allow MSIServer to run with a sandboxed system token</source>
-        <translation type="unfinished">允許 MSIServer 使用沙箱化系統權杖執行</translation>
+        <translation>允許 MSIServer 使用沙箱化系統權杖運作</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="774"/>
         <source>Box Options</source>
-        <translation type="unfinished">沙箱選項</translation>
+        <translation>沙箱選項</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="778"/>
         <source>Use a Sandboxie login instead of an anonymous token</source>
-        <translation type="unfinished">使用 Sandboxie 登入程序替代匿名權杖</translation>
+        <translation>使用 Sandboxie 登入程序替代匿名權杖</translation>
     </message>
     <message>
         <location filename="Wizards/NewBoxWizard.cpp" line="779"/>
         <source>Using a custom Sandboxie Token allows to isolate individual sandboxes from each other better, and it shows in the user column of task managers the name of the box a process belongs to. Some 3rd party security solutions may however have problems with custom tokens.</source>
-        <translation type="unfinished">使用自訂 Sandboxie 權杖可以更好地將各個沙箱相互隔離，同時可以實現在工作管理員的使用者欄位中顯示處理程序所屬的沙箱。但是，某些第三方安全性解決方案可能會與自訂權杖產生相容性問題。</translation>
+        <translation>使用自訂 Sandboxie 權杖可以更好地將各個沙箱相互隔離，同時可以實現在工作管理員的使用者欄位中顯示處理程序所屬的沙箱。但是，某些第三方安全性解決方案可能會與自訂權杖產生相容性問題。</translation>
     </message>
 </context>
 <context>
@@ -2331,27 +2331,27 @@ Note: The update check is often behind the latest GitHub release to ensure that
     <message>
         <location filename="Windows/OptionsNetwork.cpp" line="802"/>
         <source>Please enter a domain to be filtered</source>
-        <translation type="unfinished"></translation>
+        <translation>請輸入將要被過濾的域名</translation>
     </message>
     <message>
         <location filename="Windows/OptionsNetwork.cpp" line="832"/>
         <source>Yes</source>
-        <translation type="unfinished">是</translation>
+        <translation>是</translation>
     </message>
     <message>
         <location filename="Windows/OptionsNetwork.cpp" line="833"/>
         <source>No</source>
-        <translation type="unfinished">否</translation>
+        <translation>否</translation>
     </message>
     <message>
         <location filename="Windows/OptionsNetwork.cpp" line="857"/>
         <source>Please enter IP and Port.</source>
-        <translation type="unfinished"></translation>
+        <translation>請輸入 IP 位址和連接埠。</translation>
     </message>
     <message>
         <location filename="Windows/OptionsNetwork.cpp" line="1030"/>
         <source> entry: IP or Port cannot be empty</source>
-        <translation type="unfinished"></translation>
+        <translation> 輸入: IP 位址或連接埠不能為空</translation>
     </message>
     <message>
         <location filename="Windows/OptionsAdvanced.cpp" line="1168"/>
@@ -4130,7 +4130,7 @@ No will choose: %2</source>
         <location filename="SandMan.cpp" line="513"/>
         <location filename="SandMan.cpp" line="657"/>
         <source>Suspend All Processes</source>
-        <translation>暫停全部執行緒</translation>
+        <translation>暫停全部處理程序</translation>
     </message>
     <message>
         <location filename="SandMan.cpp" line="515"/>
@@ -5456,8 +5456,9 @@ This file is part of Sandboxie and all changed done to it will be reverted next
     </message>
     <message>
         <location filename="Views/SbieView.cpp" line="1789"/>
-        <source>This sandbox is disabled, do you want to enable it?</source>
+        <source>This sandbox is disabled or restricted to a group/user, do you want to edit it?</source>
-        <translation>此沙箱已停用，是否啟用？</translation>
+        <oldsource>This sandbox is disabled, do you want to enable it?</oldsource>
+        <translation>此沙箱已停用或被限制到特定群組/使用者，是否編輯？</translation>
     </message>
 </context>
 <context>
@@ -7512,18 +7513,18 @@ If you are a great patreaon supporter already, sandboxie can check online for an
     <message>
         <source>Prevent sandboxed processes from interfering with power operations</source>
         <oldsource>Prevents processes in the sandbox from interfering with power operation</oldsource>
-        <translation type="obsolete">防止沙箱中的執行緒幹擾電源作業</translation>
+        <translation type="obsolete">防止沙箱中的處理程序幹擾電源作業</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1545"/>
         <source>Prevent processes from capturing window images from sandboxed windows</source>
         <oldsource>Prevents getting an image of the window in the sandbox.</oldsource>
-        <translation>防止執行緒從沙箱化視窗擷取視窗之影像</translation>
+        <translation>防止處理程序從沙箱化視窗擷取視窗之影像</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1516"/>
         <source>Allow useful Windows processes access to protected processes</source>
-        <translation>允許實用 Windows 執行緒存取受保護的執行緒</translation>
+        <translation>允許實用 Windows 處理程序存取受保護的處理程序</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1808"/>
@@ -7563,7 +7564,7 @@ If you are a great patreaon supporter already, sandboxie can check online for an
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2428"/>
         <source>Don&apos;t stop lingering processes with windows</source>
-        <translation>不停止 Windows 的延遲執行緒</translation>
+        <translation>不停止 Windows 的延遲處理程序</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2468"/>
@@ -7762,7 +7763,7 @@ This is done to prevent rogue processes inside the sandbox from creating a renam
         <location filename="Forms/OptionsWindow.ui" line="4231"/>
         <source>Sandboxie&apos;s functionality can be enhanced by using optional DLLs which can be loaded into each sandboxed process on start by the SbieDll.dll file, the add-on manager in the global settings offers a couple of useful extensions, once installed they can be enabled here for the current box.</source>
         <oldsource>Sandboxies functionality can be enhanced using optional dll’s which can be loaded into each sandboxed process on start by the SbieDll.dll, the add-on manager in the global settings offers a couple useful extensions, once installed they can be enabled here for the current box.</oldsource>
-        <translation>Sandboxie 的功能可以透過使用可選 DLL 加以增強，這些 DLL 可在啟動時透過 SbieDll.dll 檔案載入到每個沙箱執行緒中，全域設定中的附加元件管理員提供了一些實用擴充套件，安裝後可以在此處對目前沙箱啟用。</translation>
+        <translation>Sandboxie 的功能可以透過使用可選 DLL 加以增強，這些 DLL 可在啟動時透過 SbieDll.dll 檔案載入到每個沙箱處理程序中，全域設定中的附加元件管理員提供了一些實用擴充套件，安裝後可以在此處對目前沙箱啟用。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1727"/>
@@ -7829,39 +7830,39 @@ This is done to prevent rogue processes inside the sandbox from creating a renam
         <location filename="Forms/OptionsWindow.ui" line="818"/>
         <source>This feature does not block all means of obtaining a screen capture, only some common ones.</source>
         <oldsource>This feature does not block all means of optaining a screen capture only some common once.</oldsource>
-        <translation type="unfinished">此功能不會阻止所有能夠取得螢幕擷取內容的方法，僅阻止某些常見行為一次。</translation>
+        <translation>此功能不會阻止所有能夠取得螢幕擷取內容的方法，僅阻止某些常見行為。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="801"/>
         <source>Prevent move mouse, bring in front, and similar operations, this is likely to cause issues with games.</source>
         <oldsource>Prevent move mouse, bring in front, and simmilar operations, this is likely to cause issues with games.</oldsource>
-        <translation type="unfinished">防止移動滑鼠、移動視窗至前景、以及類似的作業，這可能對遊戲造成問題。</translation>
+        <translation>防止移動滑鼠、移動視窗至前景、以及類似的作業，這可能對遊戲造成問題。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="811"/>
         <source>Allow sandboxed windows to cover the taskbar</source>
         <oldsource>Allow sandboxed windows to cover taskbar</oldsource>
-        <translation type="unfinished"></translation>
+        <translation>允許沙箱化視窗覆蓋工作列</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="855"/>
         <source>Isolation</source>
-        <translation type="unfinished"></translation>
+        <translation>隔離</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1569"/>
         <source>Only Administrator user accounts can make changes to this sandbox</source>
-        <translation type="unfinished"></translation>
+        <translation>僅管理員使用者帳戶可以對此沙箱進行變更</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1577"/>
         <source>Job Object</source>
-        <translation type="unfinished"></translation>
+        <translation>工作物件</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2165"/>
         <source>&lt;b&gt;&lt;font color=&apos;red&apos;&gt;SECURITY ADVISORY&lt;/font&gt;:&lt;/b&gt; Using &lt;a href=&quot;sbie://docs/breakoutfolder&quot;&gt;BreakoutFolder&lt;/a&gt; and/or &lt;a href=&quot;sbie://docs/breakoutprocess&quot;&gt;BreakoutProcess&lt;/a&gt; in combination with Open[File/Pipe]Path directives can compromise security. Please review the security section for each option in the documentation before use.</source>
-        <translation type="unfinished"></translation>
+        <translation>&lt;b&gt;&lt;font color=&apos;red&apos;&gt;安全性建議&lt;/font&gt;:&lt;/b&gt; 使用 &lt;a href=&quot;sbie://docs/breakoutfolder&quot;&gt;BreakoutFolder&lt;/a&gt; 和/或 &lt;a href=&quot; sbie://docs/breakoutprocess&quot;&gt;BreakoutProcess&lt;/a&gt; 與 Open[File/Pipe]Path 指令結合使用可能會損害安全性。使用前請檢查說明文件中每個選項的安全性章節。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2238"/>
@@ -7887,13 +7888,13 @@ This is done to prevent rogue processes inside the sandbox from creating a renam
         <location filename="Forms/OptionsWindow.ui" line="2574"/>
         <source>This setting can be used to prevent programs from running in the sandbox without the user&apos;s knowledge or consent.</source>
         <oldsource>This can be used to prevent a host malicious program from breaking through by launching a pre-designed malicious program into an unlocked encrypted sandbox.</oldsource>
-        <translation type="unfinished"></translation>
+        <translation>此設定可用於防止程式在使用者不知情或未經使用者同意的情況下在沙箱中運作。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2577"/>
         <source>Display a pop-up warning before starting a process in the sandbox from an external source</source>
         <oldsource>A pop-up warning before launching a process into the sandbox from an external source.</oldsource>
-        <translation type="unfinished"></translation>
+        <translation>在從外部來源的沙箱中開始執行處理程序前，顯示一則跳出式警告</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="2596"/>
@@ -8103,17 +8104,17 @@ To specify a process use &apos;$:program.exe&apos; as path.</source>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="794"/>
         <source>Prevent sandboxed processes from interfering with power operations (Experimental)</source>
-        <translation>防止沙箱化執行緒干預電源作業 (試驗性)</translation>
+        <translation>防止沙箱化處理程序干預電源作業 (實驗性)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="804"/>
         <source>Prevent interference with the user interface (Experimental)</source>
-        <translation>防止干預使用者介面 (試驗性)</translation>
+        <translation>防止干預使用者介面 (實驗性)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="821"/>
         <source>Prevent sandboxed processes from capturing window images (Experimental, may cause UI glitches)</source>
-        <translation>防止沙箱化執行緒擷取視窗影像 (試驗性，可能造成 UI 故障)</translation>
+        <translation>防止沙箱化處理程序擷取視窗影像 (實驗性，可能造成 UI 故障)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1864"/>
@@ -8138,62 +8139,62 @@ To specify a process use &apos;$:program.exe&apos; as path.</source>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3523"/>
         <source>DNS Filter</source>
-        <translation type="unfinished"></translation>
+        <translation>DNS 過濾器</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3540"/>
         <source>Add Filter</source>
-        <translation type="unfinished"></translation>
+        <translation>新增過濾器</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3560"/>
         <source>With the DNS filter individual domains can be blocked, on a per process basis. Leave the IP column empty to block or enter an ip to redirect.</source>
-        <translation type="unfinished"></translation>
+        <translation>使用 DNS 過濾器，可以按處理程序阻止各個網域。將 IP 位址列留空以將其阻止，或輸入 IP 位址以進行重新導向。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3586"/>
         <source>Domain</source>
-        <translation type="unfinished"></translation>
+        <translation>域名</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3602"/>
         <source>Internet Proxy</source>
-        <translation type="unfinished"></translation>
+        <translation>網際網路 Proxy</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3663"/>
         <source>Add Proxy</source>
-        <translation type="unfinished"></translation>
+        <translation>新增 Proxy</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3636"/>
         <source>Test Proxy</source>
-        <translation type="unfinished">測試代理</translation>
+        <translation>測試 Proxy</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3689"/>
         <source>Auth</source>
-        <translation type="unfinished"></translation>
+        <translation>憑據</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3694"/>
         <source>Login</source>
-        <translation type="unfinished"></translation>
+        <translation>登入</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3699"/>
         <source>Password</source>
-        <translation type="unfinished"></translation>
+        <translation>密碼</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3619"/>
         <source>Sandboxed programs can be forced to use a preset SOCKS5 proxy.</source>
-        <translation type="unfinished"></translation>
+        <translation>可以強制沙箱化程式使用預定義的 SOCKS5 Proxy。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3629"/>
         <source>Resolve hostnames via proxy</source>
-        <translation type="unfinished"></translation>
+        <translation>透過 Proxy 解析主機名稱</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="3752"/>
@@ -8485,7 +8486,7 @@ The process match level has a higher priority than the specificity and describes
     </message>
     <message>
         <source>This command runs after all processes in the sandbox have finished.</source>
-        <translation type="vanished">此命令在沙箱中所有執行緒完成後執行。</translation>
+        <translation type="vanished">此命令在沙箱中所有處理程序完成後執行。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4522"/>
@@ -8545,12 +8546,12 @@ The process match level has a higher priority than the specificity and describes
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4072"/>
         <source>Exclude this sandbox from being terminated when &quot;Terminate All Processes&quot; is invoked.</source>
-        <translation>當呼叫「終止所有執行緒」時，排除此沙箱。</translation>
+        <translation>當呼叫「終止所有處理程序」時，排除此沙箱。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4519"/>
         <source>These commands are run UNBOXED after all processes in the sandbox have finished.</source>
-        <translation>這些指令將在沙箱內全部執行緒完成後以「未沙箱化」狀態執行。</translation>
+        <translation>這些指令將在沙箱內全部處理程序完成後以「未沙箱化」狀態執行。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4589"/>
@@ -8809,50 +8810,50 @@ Please note that this values are currently user specific and saved globally for
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1711"/>
         <source>Limit restrictions</source>
-        <translation type="unfinished"></translation>
+        <translation>上限限制</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1629"/>
         <location filename="Forms/OptionsWindow.ui" line="1636"/>
         <source>Leave it blank to disable the setting(Unit:KB)</source>
-        <translation type="unfinished"></translation>
+        <translation>留空以停用設定 (單位: KB)</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1643"/>
         <source>Leave it blank to disable the setting</source>
-        <translation type="unfinished"></translation>
+        <translation>留空以停用設定</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1585"/>
         <source>Total Processes Number Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>總計處理程序數量限制:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1615"/>
         <source>Total Processes Memory Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>總計處理程序記憶體限制:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="1622"/>
         <source>Single Process Memory Limit:</source>
-        <translation type="unfinished"></translation>
+        <translation>單一處理程序記憶體限制:</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4711"/>
         <source>Don&apos;t allow sandboxed processes to see processes running outside any boxes</source>
-        <translation type="unfinished"></translation>
+        <translation>不允許沙箱化處理程序發現在任何沙箱外執行的處理程序</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4718"/>
         <source>Prevent sandboxed processes from accessing system details through WMI</source>
         <oldsource>Prevent sandboxed processes from accessing system deatils through WMI</oldsource>
-        <translation type="unfinished"></translation>
+        <translation>阻止沙箱化處理程序透過 WMI 存取系統詳細資訊</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4759"/>
         <source>Some programs retrieve system details via WMI (Windows Management Instrumentation), a built-in Windows database, rather than using conventional methods. For instance, &apos;tasklist.exe&apos; can access a complete list of processes even if &apos;HideOtherBoxes&apos; is enabled. Enable this option to prevent such behavior.</source>
         <oldsource>Some programs read system deatils through WMI(A Windows built-in database) instead of normal ways. For example,&quot;tasklist.exe&quot; could get full processes list even if &quot;HideOtherBoxes&quot; is opened through accessing WMI. Enable this option to stop these heavior.</oldsource>
-        <translation type="unfinished"></translation>
+        <translation>某些程式透過 WMI (Windows 管理規範)，一個內建的 Windows 資料庫，檢索作業系統詳細資訊，而不是使用通常方法。例如，即使啟用了「HideOtherBoxes」(隱藏其他沙箱)，「tasklist.exe」也可以存取完整的處理程序清單。啟用此選項可以防止此類行為。</translation>
     </message>
     <message>
         <location filename="Forms/OptionsWindow.ui" line="4962"/>
@@ -9025,7 +9026,7 @@ Please note that this values are currently user specific and saved globally for
     <message>
         <location filename="Forms/SelectBoxWindow.ui" line="45"/>
         <source>Force direct child to be sandboxed, but does not include indirect child processes that are opened through the DCOM and IPC interface.</source>
-        <translation type="unfinished"></translation>
+        <translation>強制直接的子處理程序被沙箱化，但不包括非直接的由 DCOM 和 IPC 介面開啟的子處理程序。</translation>
     </message>
     <message>
         <location filename="Forms/SelectBoxWindow.ui" line="105"/>
@@ -9040,7 +9041,7 @@ Please note that this values are currently user specific and saved globally for
     <message>
         <location filename="Forms/SelectBoxWindow.ui" line="48"/>
         <source>Force Children</source>
-        <translation type="unfinished"></translation>
+        <translation>強制子處理程序</translation>
     </message>
     <message>
         <location filename="Forms/SelectBoxWindow.ui" line="56"/>
@@ -9311,13 +9312,13 @@ Please note that this values are currently user specific and saved globally for
     <message>
         <location filename="Forms/SettingsWindow.ui" line="212"/>
         <source>Hotkey for suspending process/folder forcing:</source>
-        <translation>用於暫停 強制執行緒/資料夾 的快速鍵:</translation>
+        <translation>用於暫停 強制處理程序/資料夾 的快速鍵:</translation>
     </message>
     <message>
         <location filename="Forms/SettingsWindow.ui" line="80"/>
         <source>Hotkey for suspending all processes:</source>
         <oldsource>Hotkey for suspending all process</oldsource>
-        <translation type="unfinished">用於暫停全部執行緒的快速鍵</translation>
+        <translation>用於暫停全部處理程序的快速鍵:</translation>
     </message>
     <message>
         <location filename="Forms/SettingsWindow.ui" line="236"/>
@@ -9892,7 +9893,7 @@ Unlike the preview channel, it does not include untested, potentially breaking,
     <message>
         <location filename="Forms/SettingsWindow.ui" line="2165"/>
         <source>Add &quot;Sandboxie\All Sandboxes&quot; group to the sandboxed token (experimental)</source>
-        <translation type="unfinished"></translation>
+        <translation>將「Sandboxie\All Sandboxes (全部沙箱)」群組新增至沙箱化權杖 (實驗性)</translation>
     </message>
     <message>
         <location filename="Forms/SettingsWindow.ui" line="2368"/>

SandboxiePlus/install_qt.cmd

@@ -1,6 +1,6 @@
 echo %*
-IF "%~7" == "" ( set "ghQtBuilds_hash_x64=f9029e02badd6a79d9bb092f9fb0772214dbcf8cd0122422514291d755860c37" ) ELSE ( set "ghQtBuilds_hash_x64=%~7" )
+IF "%~7" == "" ( set "ghQtBuilds_hash_x64=30290d82a02bfaa24c1bf37bcb9c074aba18a673a7176628fccdf71197cee898" ) ELSE ( set "ghQtBuilds_hash_x64=%~7" )
-IF "%~6" == "" ( set "ghQtBuilds_hash_x86=79755f2bf95d0ca305096fc33582cd557345a79aa63f9821002fdddefdc0fd94" ) ELSE ( set "ghQtBuilds_hash_x86=%~6" )
+IF "%~6" == "" ( set "ghQtBuilds_hash_x86=bf4124046cc50ccbbeb3f786c041e884fd4205cd6e616070a75c850105cbf1db" ) ELSE ( set "ghQtBuilds_hash_x86=%~6" )
 IF "%~5" == "" ( set "ghQtBuilds_repo=qt-builds" ) ELSE ( set "ghQtBuilds_repo=%~5" )
 IF "%~4" == "" ( set "ghQtBuilds_user=xanasoft" ) ELSE ( set "ghQtBuilds_user=%~4" )
 IF "%~3" == "" ( set "qt6_version=6.3.1" ) ELSE ( set "qt6_version=%~3" )