Windows 4.3.26 Specifically for errors due to Security

Discussions related to using VirtualBox on Windows hosts.

Re: Windows 4.3.26 Specifically for errors due to Security

Postby MikeDiack » 23. Mar 2015, 17:04

Quick update from me, following my earlier post about VBox 4.3.26 r98988 running on Windows 8.1 x64 and Windows 7 SP1 x64 hosts, having tried both Comodo Internet Security 8.1 and Symantec Endpoint Protection 12.1 RU5 on both host systems. Both hosts are fully patched according to Windows Update.
In both cases, the host systems are able to run Linux (x86), Windows XP (x86) and Window 7 (x64) and Windows 10 (x64) guest PCs without a problem.
MikeDiack
 
Posts: 66
Joined: 20. Mar 2009, 15:57
Location: UK
Primary OS: MS Windows 7
VBox Version: PUEL
Guest OSses: Win 7, Vista, XP, Linux, Win 8/ Win 8.1, Win 2000, Win NT 4

Re: Windows 4.3.26 Specifically for errors due to Security

Postby rascboy » 23. Mar 2015, 20:18

Not sure if this is the right place to post but after updating my Virtualbox from 4.3.12 to 4.3.26 I'm unable to start any VMs.

Host OS: Windows Server 2012 R2
Guest OS: Different versions of Windows ranging from Windows 7 to Windows Server 2012

I've attached logs for one of the VMs as they're identical to the other ones.

Thanks!
Attachments
VBoxStartup.zip
Startup logs
(3.15 KiB) Downloaded 41 times
rascboy
 
Posts: 2
Joined: 23. Mar 2015, 20:15

Re: Windows 4.3.26 Specifically for errors due to Security

Postby mpack » 24. Mar 2015, 12:43

I'm not sure if your problem is security related or not: the error in the log is "file not found", rather than any security issue, so I would suspect that you've simply botched the installation somehow. I would suggest uninstalling VBox and reinstalling, as the correct user, while using "Run as administrator" to run the installer.
mpack
Site Moderator
 
Posts: 31397
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.26 Specifically for errors due to Security

Postby rascboy » 25. Mar 2015, 22:33

Okay, I'll give that a shot. Thanks!
rascboy
 
Posts: 2
Joined: 23. Mar 2015, 20:15

Re: Windows 4.3.26 Specifically for errors due to Security

Postby numb3rs666 » 26. Mar 2015, 22:08

SO Host: Win 8.1
Security: Comodo
SO Guest: Win 8.1

Version 4.3.27-99222 same problems of previous. Last working 4.3.24-98716

Log attached

Thanks for your work
Attachments
VBoxStartup.zip
(15.87 KiB) Downloaded 35 times
numb3rs666
 
Posts: 22
Joined: 30. Dec 2013, 18:14

Re: Windows 4.3.26 Specifically for errors due to Security

Postby RobVT » 27. Mar 2015, 17:51

I recently received a new PC and reinstalled 4.3.12 on it. I was having some issues with VMs hanging, so i decided to try to upgrade to 4.3.26.

4.3.26 is producing a BSOD (attached). It's pointing at dgmaster.sys which is Digital Guardian.

Host OS: Win 7 x64 Pro
AV: McAfee 8.8
FW: McAfee HIPS 8.0
Other: Digital Guardian (unknown version, it's essentially hidden from view on this corporate image)
Other: Tanium Client v6 (not 100% sure what this does, but mentioning it just in case it's useful)

After the first BSOD I installed KB 3004394 but that did not solve the problem.

Next I install the test build, 4.3.27r99222. It's no longer BSODing, but now VMs won't launch stating the driver is "stuck starting/stopping" (screenshots attached).

I've reverted back to 4.3.12 for now.

Attached are BSOD image, minidump and VBoxStartup.log for 4.3.26 and screenshots of errors and VBoxStartup.log for 4.3.27.
Attachments
4.3.27r99222.zip
4.3.27 logs and screenshots
(99.15 KiB) Downloaded 31 times
4.3.26r98988.zip
4.3.26 logs, minidump and BSOD pic.
(187.62 KiB) Downloaded 25 times
RobVT
 
Posts: 2
Joined: 27. Mar 2015, 15:28
Primary OS: MS Windows other
VBox Version: OSE other
Guest OSses: Win*, *nix

Re: Windows 4.3.26 Specifically for errors due to Security

Postby odo » 28. Mar 2015, 13:38

Hi. I have a problem and i dont know how solve.

Failed to open a session for the virtual machine epc.

Unable to load R3 module C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (VBoxDD): GetLastError=1790 (VERR_UNRESOLVED_ERROR).

Result Code: E_FAIL (0x80004005)
Component: Console
Interface: IConsole {8ab7c520-2442-4b66-8d74-4ff1e195d2b6}

R3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 17911 ms, the end);


1. Windows 7 sp3
2. Is attached
3. Avira internet security

Another colleague he says than problem comes from: "00:00:09.215844 supR3HardenedErrorV: supR3HardenedScreenImage/LdrLoadDll: cached rc=VERR_LDRVI_NOT_SIGNED fImage=1 fProtect=0x0 fAccess=0x0 cHits=512 \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
00:00:09.216097 supR3HardenedErrorV: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Windows\system32\uxtheme.dll' (C:\Windows\system32\uxtheme.dll): rcNt=0xc0000190"
Attachments
VBoxStartup.rar
(16.39 KiB) Downloaded 25 times
odo
 
Posts: 2
Joined: 28. Mar 2015, 12:25

Re: Windows 4.3.26 Specifically for errors due to Security

Postby AWurlitzer » 28. Mar 2015, 18:40

Hi,

I just reinstalled my PC and installed VirtualBox. When I try to start an imported virtual machine, I get this message:
Integrity error (0xe986f166/- 3738): Found evil handle to budding VM process: pid=0000000000000004 h=00000000000044b8 acc=0x1fffff attr=0x0 type=process [System] (rc=-3738)

Please try reinstalling VirtualBox.

Code d'erreur : E_FAIL (0x80004005)
Composant : Machine
Interface : IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}


OS: Windows 7 x64 SP1
AntiVirus: Kaspersky Total Security v15.0.2.361 (a)

Thanks in advance for your help.
Attachments
VBoxStartup.zip
(12.33 KiB) Downloaded 69 times
AWurlitzer
 
Posts: 1
Joined: 28. Mar 2015, 18:24

Re: Windows 4.3.26 Specifically for errors due to Security

Postby cmiles » 29. Mar 2015, 01:57

Failed to open a session for the virtual machine gentoo-web-provision_default_1427586278460_8476.

Unable to load R3 module C:\Program Files\Oracle\VirtualBox/VBoxDD.DLL (VBoxDD): GetLastError=1790 (VERR_UNRESOLVED_ERROR).

Result Code: E_FAIL (0x80004005)
Component: Console
Interface: IConsole {8ab7c520-2442-4b66-8d74-4ff1e195d2b6}



  • Virtualbox:[/b] 4.3.22 and 4.3.26
  • Vagrant: 1.6.5 and 1.7.2
  • OS:Windows 7 Ultimate SP1 64bit will all updates
  • Virus scanner: Microsoft Security Essentials
  • Firewall: None
  • Windows skinning modification: None. But previously had Stardock WindowFX which I uninstalled just to be sure.

When it started:
This issue stated today for no apparent reason. I ran `vagrant up` and all my boxes were failing to start. I had version 4.3.20 installed when it started, which I have been running since Feb 15. I can't recall making any changes to the system to trigger this.

What I haved tried
  • I read that modified UXTheme.dll can cause this. I haven't done that, but I have had Stardock WindowFX isntalled since Nov 2014. So I have uninstalled it just to be sure.
  • I have upgraded Virtualbox to 4.3.26
  • I uninstalled Virtualbox and rebooted, and then re-installed.
  • Vagrant is creating the virtualbox, so I have upgraded it from 1.6.3 to 1.7.2.

I'm sure this is a big deal for a lot of people. It's a huge deal for me because we are heavily invested in Vagrant and Virtualbox and I have to explain to my boss that I can't do my job until I can get an alternative system in place.

UPDATE - problem solved!
Whilst I said I had not modified my uxtheme.dll, I was obviously lying.

The attached log included mention of the file:
... '\Device\HarddiskVolume2\Windows\System32\uxtheme.dll' is most likely modified.
... rejecting 'C:\Windows\system32\uxtheme.dll'


When I checked, it seems 3 years ago I must have tried out some custom themes. And fortunately I had made a backup of the file.
cmiles
 
Posts: 1
Joined: 29. Mar 2015, 01:06

Re: Windows 4.3.26 Specifically for errors due to Security

Postby gtgtgtg » 30. Mar 2015, 04:47

1) Windows 2008 R2(SP1) all latest update, newly installed OS
2) VBoxStartup.log
VBoxStartup.zip
(16.96 KiB) Downloaded 23 times

3) No anti-virus, firewalls.

Tried 4.3.26 & the test build (4.3.27 r99265), both encountered the same issue

Once I click the "start" button.
it crashes.

1.png
1.png (20.71 KiB) Viewed 5988 times

2.png
2.png (25.1 KiB) Viewed 5988 times
gtgtgtg
 
Posts: 2
Joined: 11. Apr 2014, 06:27

Re: Windows 4.3.26 Specifically for errors due to Security

Postby dk » 30. Mar 2015, 18:07

Hello,

After bumping into error in supR3HardenedWinReSpawn I found this topic. Downgrading to 4.3.12 works, but I hope you can use the data I collected meanwhile
on the latest build.

Thank you!
Attachments
VBoxStartup.log.zip
(9.27 KiB) Downloaded 21 times
dk
 
Posts: 1
Joined: 30. Mar 2015, 18:04

Re: Windows 4.3.26 Specifically for errors due to Security

Postby Balaji Sivaraman » 30. Mar 2015, 18:31

1) Windows 8.1, with all the latest updates installed from Windows Update. Though I've seen the same issue occur when I briefly switched to Windows 10 Technical Preview Build 9926 and 10022 as well.
2) VBoxStartup.log
VBoxStartup.7z
VBox Logs Folder
(21.05 KiB) Downloaded 20 times

3) I have installed Stardock's Start8 recently, though I've seen the same issue in vanilla Windows 8 as well. The only security related applications I use are Windows Firewall and Windows Defender.
4) I tried out the latest test build 4.3.27 (99282), and it doesn't help. (The attached logs are for this build only.)
Here's a snippet of the error that is coming:
Code: Select all   Expand viewCollapse view
36c.37c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
36c.37c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
36c.37c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
36c.37c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff9426f0000 LB 0x00115000 C:\WINDOWS\system32\KERNELBASE.dll [fFlags=0x0]
36c.37c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
36c.37c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff945220000 LB 0x0013e000 C:\WINDOWS\system32\KERNEL32.DLL [fFlags=0x0]
36c.37c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
36c.37c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff945220000 'C:\WINDOWS\system32\KERNEL32.DLL'
36c.37c: supR3HardenedDllNotificationCallback: load   00007ff799040000 LB 0x00108000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]


In the below screenshot, I was trying to open a Ubuntu 14.10 VM that I'd originally created using Virtualbox 4.3.12. The same error occurs when I try to create a fresh VM in VB 4.3.26 as well.
VBoxError.png
VBoxError
VBoxError.png (15.94 KiB) Viewed 5933 times


Currently, I have to go all the way back to 4.3.12 to not see this error. Although I have to admit I haven't tried out every intermediate build between 12 and 26. I'll gladly provide any other information about my system setup as necessary. Additionally, I haven't gone back through this thread history to see whether my current problem has been faced and resolved before as well. Apologies if it already has.
Balaji Sivaraman
 
Posts: 1
Joined: 30. Mar 2015, 18:13

Re: Windows 4.3.26 Specifically for errors due to Security

Postby numb3rs666 » 31. Mar 2015, 20:24

Finally Ver 4.3.27-99293 work well here.
Before of this last test build the last version working was 4.3.24-98716


Host Win 8.1 x64
Security: Comodo
Guest: Win 8.1 x64

Thanks
numb3rs666
 
Posts: 22
Joined: 30. Dec 2013, 18:14

Re: Windows 4.3.26 Specifically for errors due to Security

Postby Docfxit » 31. Mar 2015, 22:56

I uninstalled the previous version.
Cleaned out temp files.
Re-booted.

After installing 4.3.27 With Run As administrator, Re-boot, I'm getting an error before the program starts.

Image
No startup log created.
Host: Win7 sp1 32bit
Client: XP Pro sp3
Antivirus: Bitdefender 2015
Malwarebytes installed and not running
Firewall: ZoneAlarm

Thank you,
Docfxit
Docfxit
 
Posts: 107
Joined: 23. May 2014, 12:35
Primary OS: MS Windows 7
VBox Version: PUEL
Guest OSses: XP Pro, Win7, Win10

Re: Windows 4.3.26 Specifically for errors due to Security

Postby mpack » 1. Apr 2015, 10:41

@Docfxit - what made you conclude this was a security issue? And where is the startup log per the first message of this topic?
mpack
Site Moderator
 
Posts: 31397
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

PreviousNext

Return to VirtualBox on Windows Hosts

Who is online

Users browsing this forum: No registered users and 24 guests