Windows 4.3.20 specifically for errors due to security

[socratis]

For your own information, I tried to update an almost up-to-date Windows machine and it seems that Microsoft has pulled KB3004394 from its updates (yesterday there were 11 updates, today 10; guess who's missing ). It appears that there have been major issues with it, not just VirtualBox.

[wmeyer]

As of this morning, can't run any VBox VM.

Windows 7 Professional
VBoxStartup.zip attached
Kaspersky installed, but disabled.

Also tried uninstall/reinstall, before finding this thread.

I have uninstalled KB3004394, rebooted, and the log attached is from an attempt made after that.

UPDATE: After removing KB3004394, I again tried uninstall/re-install. The re-install hung. Rebooted, then uninstalled/re-installed again. That worked, and now the VMs work, so it was KB3004394 at fault.

[michaelmilette]

Having the same problem here. Uninstalled KB3004394 and still can't start a VM on Windows 7 64-bit.

This is a small piece of the log showing where things seem to be going wrong:

209c.20a0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
209c.20a0: Error opening VBoxDrvStub: STATUS_OBJECT_NAME_NOT_FOUND
209c.20a0: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034
209c.20a0: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
209c.20a0: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
2094.2098: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.

Any suggestions would be most appreciated.

Best regards,

Michael

[michaelmilette]

Fixed it! After uninstalling update KB3004394, you also need to:

1) Uninstall VirtualBox
2) Restart Windows
3) Reinstall VirtualBox
4) Restart again

That did it for me. Hope it helps you too.

Best regards,

Michael Milette

[mpack]

I don't really see what reinstalling VirtualBox would do, but restarting Windows seems like a good idea.

[Edit] However, others have insisted that a VBox reinstall is necessary.

Fair warning: I have asked for the (off-topic) KBxxxx chatter to end, but that hasn't worked. So, from now on I'll simply delete all posts which mention it.
In the meantime Microsoft have released a fix: http://support.microsoft.com/kb/3024777

[rnewman]

Hello. Still no go with 4.3.21-97191

OS: Win7 Professional 64bit - SP1
Trendmicro Office Scan: 11.0.1454

Error popup - Error In supR3HardNtChildPurify

Screen shot and start up log attached.

[ICE-Vn]

Hi, guys

My problem is a bit different it seems.
I had the same issue that most of you have, but after installing the latest windows patch which supposedly fixed their ****.

I was able to start 4.3.20 and create a new VM.

Anyway when I try to start it for the first time it opens up:

"Creating process for virtual machine "XXXX" (Gui/Qt)... (1/2) and it is stuck on 0

There is no log file to attach or at least I am unable to find it.

Please help.

Best regards,

[david_salva]

Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all   Expand viewCollapse view

Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}


You could help me solve the problem.

Regards

[mpack]

There is no log file to attach or at least I am unable to find it.

Logs can be found in the "Logs" subfolder of the VM folder.

[nmarquart]

VBox version: 4.3.20
Host OS: Windows Server 2008 R2
AV: Symantec Endpoint Protection

I'm getting error similar to what's been mentioned, and I suspect it's the AV. I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked. I've verified that I don't have the faulty Windows update installed as well. I've attached startup logs for two of the client OSes.

[BingoLarssoni]

Version 4.3.20 running on Windows 7 SP1 x64 with F-Secure Client Security Premium 11.60 build 284. After latest Windows Updates I cannot start any VMs. Installing KB3024777 did not help.

supHardenedWinVerifyProcess failed with Unknown Status -5626 (0xffffea06): No executable mapping found in the virtual address space.

[socratis]

I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked.

Unfortunately, it has to be the other way around; VirtualBox has to add an exception for SEP. In the source code...

[david_salva]

Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all   Expand viewCollapse view

Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}


You could help me solve the problem.

Regards

installed version 4.3.21.97294.

I still have the same problem

[Jacky]

Hello,

I'm not sure if I've got the same security problems, but yesterday I upgraded from 4.3.12 to 4.3.20 r96997 and every virtual machine on my Win7-32bit SP1 Enterprise Host hangs on startup with this messages:

Error in supR3HardNtChildPurify:
supHardenedWinVerifyProcess failed with
VERR_SUP_VP_REPLACE_VIRTUAL_MEMORY_FAILED: (rc=-5673)

I executed KB3024777-x86.exe to remove KB3004394 but it doesn't seem to do anything. In system control, programs, "installed updates" I can't find KB3004394.

2dc.17c0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2dc.17c0: *00000000-fffeffff 0x0001/0x0000 0x0000000
2dc.17c0: *00010000-fffeffff 0x0004/0x0004 0x0020000
2dc.17c0: *00030000-00022fff 0x0040/0x0040 0x0020000 !!
2dc.17c0: supHardNtVpScanVirtualMemory: Replacing exec mem at 00030000 (00030000 LB 0xd000)
2dc.17c0: Error (rc=-5673):
2dc.17c0: NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details

And further down:

2dc.17c0: Error (rc=-5673):
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: Error -5673 in supR3HardNtChildPurify! (enmWhat=5)
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: supR3HardNtEnableThreadCreation:

It would be great to get some help on this issue because none of my machines is working any more!
Thanks in advance,
Daniel

[mpack]

@Jacky. IMHO, having reported your findings, you should now revert to 4.3.12.