Windows 4.3.20 specifically for errors due to security

Discussions related to using VirtualBox on Windows hosts.
Locked
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Windows 4.3.20 specifically for errors due to security

Post by socratis »

For your own information, I tried to update an almost up-to-date Windows machine and it seems that Microsoft has pulled KB3004394 from its updates (yesterday there were 11 updates, today 10; guess who's missing ;) ). It appears that there have been major issues with it, not just VirtualBox.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
wmeyer
Posts: 66
Joined: 14. May 2009, 18:42
Primary OS: MS Windows 7
VBox Version: OSE other
Guest OSses: Windows 7

Re: Windows 4.3.20 specifically for errors due to security

Post by wmeyer »

As of this morning, can't run any VBox VM.

Windows 7 Professional
VBoxStartup.zip attached
Kaspersky installed, but disabled.

Also tried uninstall/reinstall, before finding this thread.

I have uninstalled KB3004394, rebooted, and the log attached is from an attempt made after that.

UPDATE: After removing KB3004394, I again tried uninstall/re-install. The re-install hung. Rebooted, then uninstalled/re-installed again. That worked, and now the VMs work, so it was KB3004394 at fault.
Attachments
VBoxStartup.zip
(2.98 KiB) Downloaded 136 times
michaelmilette
Posts: 2
Joined: 11. Dec 2014, 16:45

Re: Windows 4.3.20 specifically for errors due to security

Post by michaelmilette »

Having the same problem here. Uninstalled KB3004394 and still can't start a VM on Windows 7 64-bit.

This is a small piece of the log showing where things seem to be going wrong:

209c.20a0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
209c.20a0: Error opening VBoxDrvStub: STATUS_OBJECT_NAME_NOT_FOUND
209c.20a0: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034
209c.20a0: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
209c.20a0: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
2094.2098: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.

Any suggestions would be most appreciated.

Best regards,

Michael
michaelmilette
Posts: 2
Joined: 11. Dec 2014, 16:45

Re: Windows 4.3.20 specifically for errors due to security

Post by michaelmilette »

Fixed it! After uninstalling update KB3004394, you also need to:

1) Uninstall VirtualBox
2) Restart Windows
3) Reinstall VirtualBox
4) Restart again

That did it for me. Hope it helps you too.

Best regards,

Michael Milette
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.20 specifically for errors due to security

Post by mpack »

I don't really see what reinstalling VirtualBox would do, but restarting Windows seems like a good idea.
 Edit:  However, others have insisted that a VBox reinstall is necessary.

Fair warning: I have asked for the (off-topic) KBxxxx chatter to end, but that hasn't worked. So, from now on I'll simply delete all posts which mention it.
In the meantime Microsoft have released a fix: http://support.microsoft.com/kb/3024777 
rnewman
Posts: 37
Joined: 11. Sep 2014, 19:58

Re: Windows 4.3.20 specifically for errors due to security

Post by rnewman »

Hello. Still no go with 4.3.21-97191

OS: Win7 Professional 64bit - SP1
Trendmicro Office Scan: 11.0.1454

Error popup - Error In supR3HardNtChildPurify

Screen shot and start up log attached.
Attachments
VirtualBox-4.3.21-97191.zip
(186.47 KiB) Downloaded 80 times
ICE-Vn
Posts: 1
Joined: 12. Dec 2014, 16:01

Re: Windows 4.3.20 specifically for errors due to security

Post by ICE-Vn »

Hi, guys

My problem is a bit different it seems.
I had the same issue that most of you have, but after installing the latest windows patch which supposedly fixed their ****.

I was able to start 4.3.20 and create a new VM.

Anyway when I try to start it for the first time it opens up:

"Creating process for virtual machine "XXXX" (Gui/Qt)... (1/2) and it is stuck on 0

There is no log file to attach or at least I am unable to find it.

Please help.

Best regards,
david_salva
Posts: 2
Joined: 11. Dec 2014, 23:31

Re: Windows 4.3.20 specifically for errors due to security

Post by david_salva »

Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all

Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
You could help me solve the problem.

Regards
Attachments
VBoxStartup.zip
(10.25 KiB) Downloaded 52 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.20 specifically for errors due to security

Post by mpack »

ICE-Vn wrote: There is no log file to attach or at least I am unable to find it.
Logs can be found in the "Logs" subfolder of the VM folder.
nmarquart
Posts: 1
Joined: 16. Dec 2014, 16:56

Re: Windows 4.3.20 specifically for errors due to security

Post by nmarquart »

VBox version: 4.3.20
Host OS: Windows Server 2008 R2
AV: Symantec Endpoint Protection

I'm getting error similar to what's been mentioned, and I suspect it's the AV. I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked. I've verified that I don't have the faulty Windows update installed as well. I've attached startup logs for two of the client OSes.
Attachments
Logs.zip
Startup logs for Windows 7 and CentOS guests.
(5.59 KiB) Downloaded 23 times
BingoLarssoni
Posts: 1
Joined: 16. Dec 2014, 17:11

Re: Windows 4.3.20 specifically for errors due to security

Post by BingoLarssoni »

Version 4.3.20 running on Windows 7 SP1 x64 with F-Secure Client Security Premium 11.60 build 284. After latest Windows Updates I cannot start any VMs. Installing KB3024777 did not help.
supHardenedWinVerifyProcess failed with Unknown Status -5626 (0xffffea06): No executable mapping found in the virtual address space.
Attachments
VBoxStartup.zip
(2.05 KiB) Downloaded 29 times
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Windows 4.3.20 specifically for errors due to security

Post by socratis »

nmarquart wrote:I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked.
Unfortunately, it has to be the other way around; VirtualBox has to add an exception for SEP. In the source code...
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
david_salva
Posts: 2
Joined: 11. Dec 2014, 23:31

Re: Windows 4.3.20 specifically for errors due to security

Post by david_salva »

david_salva wrote:Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all

Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
You could help me solve the problem.

Regards
installed version 4.3.21.97294.

I still have the same problem
Jacky
Posts: 4
Joined: 18. Dec 2014, 08:40

Re: Windows 4.3.20 specifically for errors due to security

Post by Jacky »

Hello,

I'm not sure if I've got the same security problems, but yesterday I upgraded from 4.3.12 to 4.3.20 r96997 and every virtual machine on my Win7-32bit SP1 Enterprise Host hangs on startup with this messages:

Error in supR3HardNtChildPurify:
supHardenedWinVerifyProcess failed with
VERR_SUP_VP_REPLACE_VIRTUAL_MEMORY_FAILED: (rc=-5673)

I executed KB3024777-x86.exe to remove KB3004394 but it doesn't seem to do anything. In system control, programs, "installed updates" I can't find KB3004394.
2dc.17c0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2dc.17c0: *00000000-fffeffff 0x0001/0x0000 0x0000000
2dc.17c0: *00010000-fffeffff 0x0004/0x0004 0x0020000
2dc.17c0: *00030000-00022fff 0x0040/0x0040 0x0020000 !!
2dc.17c0: supHardNtVpScanVirtualMemory: Replacing exec mem at 00030000 (00030000 LB 0xd000)
2dc.17c0: Error (rc=-5673):
2dc.17c0: NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
And further down:
2dc.17c0: Error (rc=-5673):
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: Error -5673 in supR3HardNtChildPurify! (enmWhat=5)
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: supR3HardNtEnableThreadCreation:
It would be great to get some help on this issue because none of my machines is working any more!
Thanks in advance,
Daniel
Attachments
VBoxStartup.log
(14.3 KiB) Downloaded 27 times
err1.jpg
err1.jpg (53.26 KiB) Viewed 14321 times
err2.jpg
err2.jpg (20.72 KiB) Viewed 14321 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.20 specifically for errors due to security

Post by mpack »

@Jacky. IMHO, having reported your findings, you should now revert to 4.3.12.
Locked