help with possible "hardening" problem on windows 10

Discussions related to using VirtualBox on Windows hosts.
Post Reply
Paul M
Posts: 2
Joined: 16. Mar 2017, 20:45

help with possible "hardening" problem on windows 10

Post by Paul M »

I'm having symtoms similar to what I see in the Howto: Diagnosing VirtualBox Hardening Issues page.
But I haven't been able to use that info to fix my problem.

I have Windows10 Enterprise version 1607 build 14393.953 and am running Virtualbox 5.1.18r114002 (Qt5.6.2)
I installed virtualbox as administrator, and I've started it as administrator. I've rebooted a few times too.

Yet after all that, I cannot start an image! I get this error message:
The virtual machine 'Oracle DB Developer VM 2017-03-02_12_38_53' has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005).

Result Code: E_FAIL (0x80004005)
Component: MachineWrap
Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}

I've also attached the VBoxHardening.log file (zipped)

This machine has Windows Defender OFF; but it does have another protection program (CylancePROTECT) enabled.

Any help or advice is appreciated!
Attachments
VBoxHardening.zip
(2.81 KiB) Downloaded 10 times
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: help with possible "hardening" problem on windows 10

Post by socratis »

Cross referencing what you read in the Diagnosing VirtualBox Hardening Issues, your exit code is (the last line in your log):
1770.16a4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 62 ms, CloseEvents);
What does that mean? viewtopic.php?f=25&t=82106#p387191.
What are the candidates? Besides the standard Windows DLLs, I see:
1770.16a4: \SystemRoot\System32\drivers\cyprotectdrv64.sys:
which is the "Cylance Protect Driver". So try to 1) disable it, 2) uninstall it.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Paul M
Posts: 2
Joined: 16. Mar 2017, 20:45

Re: help with possible "hardening" problem on windows 10

Post by Paul M »

I uninstalled Cylance and now I can start my VirtualBox image.

Thanks!
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: help with possible "hardening" problem on windows 10

Post by socratis »

Thanks for reporting back and verifying the issue.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Post Reply