4.3.14 conflicts with anti-virus packages.

Discussions related to using VirtualBox on Windows hosts.
Locked
Trinity
Posts: 13
Joined: 17. Jul 2014, 15:46

Re: 4.3.14 conflicts with anti-virus packages.

Post by Trinity »

Hello,

I experience the same/similar error when I want to access Ubuntu Guest. My system config:

OS: Windows 8.1 64-bit
AntiVirus: Windows Defender 4.5.218.0
Firewall: Default Windows Firewall
Attachments
vberr.jpg
vberr.jpg (39.12 KiB) Viewed 13152 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: 4.3.14 conflicts with anti-virus packages.

Post by mpack »

(moaning post deleted).

Guys - please stop using this topic as a place to moan about how this software you got for free has let you down. I'll simply delete the post and you'll have wasted both your time and mine.

The purpose of this topic is to collect data on which antivirus (or other) packages conflict with VirtualBox, so that the devs can add exceptions for them. Do not post about anything else here.
sbosanquet
Posts: 1
Joined: 17. Jul 2014, 16:48

Re: 4.3.14 conflicts with anti-virus packages.

Post by sbosanquet »

Hi,

I have had a similar issue with starting the new 4.3.14 release (Note: not starting a VM). My issue was down to comodo (Firewall 7.0.317799.4142) and its "Shell Code Injection" protection. I have added it to the exclusion list and now it starts up into the GUI but still wont run the VM.

For anyone else who uses the latest comodo you can change the settings here to get you going:
Attachments
2014_07_17_15_51_15_Oracle_VM_VirtualBox_Manager.png
2014_07_17_15_51_15_Oracle_VM_VirtualBox_Manager.png (82.67 KiB) Viewed 13123 times
RaawrItsTomi
Posts: 1
Joined: 17. Jul 2014, 18:30

Re: 4.3.14 conflicts with anti-virus packages.

Post by RaawrItsTomi »

When starting VM
When starting VM
eror.png (11.99 KiB) Viewed 13070 times
(I get that when starting a VM)

However, before i added virtualbox executables to behavior blocker whitelist i got this error
Before adding to whitelist
Before adding to whitelist
adasd.png (23.36 KiB) Viewed 13070 times
Emsisoft Anti-Malware 9.0
Anunes
Posts: 71
Joined: 17. Jul 2014, 18:49

Re: 4.3.14 conflicts with anti-virus packages.

Post by Anunes »

VirtualBox will not start here!
Host : Win 8.1 64-bit
Anti-Virus: Avast Free

I do not believe Virus-Scanner are the problem. Disabing Anti-Virus does not help. Also there are too many people with same problem with differente Anti-Virus.
Regards

EDIT: the "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"
registry entry does not exist on my System, so it is not the problem.
Attachments
VBox error.jpg
VBox error.jpg (42.1 KiB) Viewed 13056 times
Last edited by Anunes on 17. Jul 2014, 20:56, edited 1 time in total.
jianglai
Posts: 6
Joined: 1. Jun 2012, 19:47

Re: 4.3.14 conflicts with anti-virus packages.

Post by jianglai »

Host: Windows 8.1 64-bit
Antivirus: Kaspersky Internet Security 15.0.0.463(a) (real time protection not running)

Similar error as everyone else, see attachment.
Vbox.png
Vbox.png (10.24 KiB) Viewed 13047 times
djk
Posts: 11
Joined: 22. Nov 2008, 18:43

Re: 4.3.14 conflicts with anti-virus packages.

Post by djk »

Microsoft Surface Pro 2
Window 8.1Pro 64bit current with Windows Updates
USB Dock Plugable (http://plugable.com/products/ud-3900) USB video using DisplayLink
All Anti-virus uninstalled
MS Defender disabled
Firewall disabled
VirtualBox network driver installed using bridged

The attached screen shot and and information below is with the above configuration. I had the same results with Avira, Immunet 3.0, and Defender installed. I have also tried to install 4.3.14, uninstall and install 4.3.14 with no A/V or Firewall active with the same results. This is appearing to not be an A/V product conflict under Windows 8.1 Pro.

I uninstalled 4.3.14 and install 4.3.12 and it is working again.

On a Windows 7 Enterprise system with McAfee install the upgrade from 4.3.12 to 4.3.14 worked with VM's starting successfully.

There is no reference to the mentioned registry key or value on either systems (8.1 or 7)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"

=============================================================================
Failed to open a session for the virtual machine xxxx.

The virtual machine 'xxxx' has terminated unexpectedly during startup with exit code 1.
Result Code: E_FAIL (0x80004005)
Component: Machine
Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
Attachments
VB-4.3.14r95030.png
VB-4.3.14r95030.png (13.22 KiB) Viewed 13043 times
Last edited by djk on 19. Jul 2014, 18:04, edited 6 times in total.
Legorol
Posts: 95
Joined: 11. Mar 2014, 21:40

Re: 4.3.14 conflicts with anti-virus packages.

Post by Legorol »

michaln wrote:The DISABLEUSERCALLBACKEXCEPTION registry key has nothing to do with AV software, it's part of a Windows feature. It is currently unknown why some systems have the key set and others don't.
I believe DISABLEUSERCALLBACKEXCEPTION is set automatically by Windows' own Program Compatibility Assistant feature, when certain trigger conditions occur. See the explanation for "Unhandled Exception in User Callback" on this page:
http://blogs.msdn.com/b/cjacks/archive/ ... t-pca.aspx

A part of the explanation says
This scenario detects that an exception transited a user callback (ntdll!KiUserCallbackDispatcherContinue) and if this exception leads to the application crashing because it wasn’t handled, we revert to the earlier behavior by applying DISABLEUSERCALLBACKEXCEPTION.
It sounds to me that this is applied automatically, without active user action, which is why you see it on some systems and not on others.

Issues due to this compatibility setting include the VirtualBox Manager failing to start up (with error message). Whether this is linked to antivirus software is not clear to me, but it seems linked to the new harderning in 4.3.14.

Edit: I should add that it should be trivial to reproduce this issue at least on any Windows 7+ machine by right-clicking VirtualBox.exe, selecting Properties, going to Compatibility tab, and enabling compatibility mode for Windows Vista.
DigiAngel
Posts: 8
Joined: 20. Feb 2010, 18:23
Primary OS: Mac OS X other
VBox Version: OSE other
Guest OSses: Linux, Win 7, Win XP

Re: 4.3.14 conflicts with anti-virus packages.

Post by DigiAngel »

Confirmed here. After having an admin add an exception to Symantec Endpoint, I now get a message that C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll is an invalid image and to try and reinstall VB. I've uninstalled and downgraded to 4.3.12 which runs perfectly.
ashukusheee
Posts: 5
Joined: 17. Jul 2014, 20:35

Re: 4.3.14 conflicts with anti-virus packages.

Post by ashukusheee »

Another confirmation.

Win8.1x64 Kaspersky Internet Security 2015.

error:
---------------------------
VirtualBox - Error In supR3HardenedWinReSpawn
---------------------------
<html><b>Error relaunching VirtualBox VM process: 5<br>Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild --comment "Windows 7" --startvm 40c2265e-e194-44f2-8f1c-9567d6953d07 --no-startvm-errormsgbox' (rc=-104)</b><br/><br/></html>
---------------------------
Abort
---------------------------
and then
Failed to open a session for the virtual machine Windows 7.

The virtual machine 'Windows 7' has terminated unexpectedly during startup with exit code 1.

Result Code: E_FAIL (0x80004005)
Component: Machine
Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
idanm
Posts: 1
Joined: 17. Jul 2014, 21:34

Re: 4.3.14 conflicts with anti-virus packages.

Post by idanm »

Hi,

I can confirm that the following antiviruses aren't compatible with 4.3.14:

Symantec.cloud Endpoint Protection:

* On Desktops it installs: Norton Internet Security NIS 20.4.0.40
* On Servers it installs: Symantec Endpoint Protection 12.1 -- SEP 12.1.2015.2015

**Update: The relevent OS's I finally was able to test are:
- Windows 7 SP1 x64 (Pro, Enterprise, Ultimate and Home Premium)
- Windows 8 x64 (Pro, Enterprise, "standard")
- Windows 8.1 Update1 (Pro, Enterprise, "standard")
- Windows Server 2008R2 (Enterprise, Standard)
- Windows Server 2012 (Enterprise ,Standard)

Hope you guys can get this resolved quickly and keep up the great work!

Thanks,
Idan.
Last edited by idanm on 18. Jul 2014, 05:26, edited 1 time in total.
rseiler
Posts: 158
Joined: 5. Feb 2009, 20:26

Re: 4.3.14 conflicts with anti-virus packages.

Post by rseiler »

djk wrote:Window 8.1 64bit current with Windows Updates
All A/V uninstalled
MS Defender disabled
Curious, since I have no issue with 8.1 x64 and no other AV. Defender is active. I wonder if it's some remnant (e.g. a driver not removed with an uninstall) from another AV that's still loading in your case, since all 3rd-party AVs seem to show the problem? The Autoruns utility (Driver tab) is good for revealing those.
ThatsIT
Posts: 1
Joined: 17. Jul 2014, 22:53

Re: 4.3.14 conflicts with anti-virus packages.

Post by ThatsIT »

For the safty, just rename below file.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"

Rename to: C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox_DEL.exe

All fixed!!!
That's it.
bradski
Posts: 2
Joined: 17. Jul 2014, 23:33

Re: 4.3.14 conflicts with anti-virus packages.

Post by bradski »

I got the exact same error and have been running on Windows 7 home premium 64 bit. I have a virtual machine for Windows XP Pro SP3.

Solution (after trying re-download, checking MD5 sums and re-installing - to NO avail) was to re-install my previously running version 4.3.10 and everything is happy once again.

I'm content to wait for the next version AFTER 4.3.14 and see if they fixed the problem by then.

bradski
djk
Posts: 11
Joined: 22. Nov 2008, 18:43

Re: 4.3.14 conflicts with anti-virus packages.

Post by djk »

rseiler wrote:
djk wrote:Window 8.1 64bit current with Windows Updates
All A/V uninstalled
MS Defender disabled
Curious, since I have no issue with 8.1 x64 and no other AV. Defender is active. I wonder if it's some remnant (e.g. a driver not removed with an uninstall) from another AV that's still loading in your case, since all 3rd-party AVs seem to show the problem? The Autoruns utility (Driver tab) is good for revealing those.
There is no reference to Avira of Immunet in reviewing the Autoruns Everything tab. Your PM comment on the vBox install without network drivers since you use NAT might be a hint. I have the drivers installed and use Bridged.
Locked