Ok, I have removed jqs.exe and regedit.exe from the packages with which they showed up within log monitor. I still have the same issue, ie, the sandbox is locked and can’t be deleted.
So now when I browse to a site not included in either packages thindirect url list then look at process explorer NO process are locking the sandbox. Also, if I use log viewer then launch the package no other processes other than iexplorer are launched.
I am beginning to think that this is normal behaviour as IE is never really closed when you browse away from a site included in the thindirect url list and as such is still running within the virt environment. This is also backup by the fact that when you actual DO close IE then you CAN delete the sandbox?