has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details may

Discussions related to using VirtualBox on Windows hosts.
Post Reply
diegomonte
Posts: 1
Joined: 28. Dec 2018, 19:03

has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details may

Post by diegomonte »

Dear,

When you try to start a VM, the error message has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details may be available
Failed to open a session for the virtual machine 01 - Course Linux Security Servers in Cloud → Firewall.

Result Code: E_FAIL (0x80004005)
Component: MachineWrap
Interface: IMachine {85cd948e-a71f-4289-281e-0ca7ad48cd89}
I've done all the steps taught here in the forum and nothing, I'm using Windows 8.1 64bits as a host.
Last edited by socratis on 30. Dec 2018, 01:12, edited 1 time in total.
Reason: Enclosed the information in [quote] tag for better readability
andyp73
Volunteer
Posts: 1631
Joined: 25. May 2010, 23:48
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Assorted Linux, Windows Server 2012, DOS, Windows 10, BIOS/UEFI emulation

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by andyp73 »

diegomonte wrote: More details may be available
The error message would have told you where there may be more details (a .log file). Without that information we can't do a great deal to help.

-Andy.
My crystal ball is currently broken. If you want assistance you are going to have to give me all of the necessary information.
Please don't ask me to do your homework for you, I have more than enough of my own things to do.
Necco
Posts: 3
Joined: 5. Jan 2019, 02:34

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by Necco »

Perhaps I can help with that.

I'm facing a similar problem running Virtualbox under Windows 10. Happens with both 5.2.22-126460 and 6.0.0-127566. Windows is fully up to date

I ran a full sfc scan, didn't help. I tried reinstalling virtualbox (both with and without "Run as Administrator) and it didn't help. I did have Hyper-V recently installed on this system, but I did completely remove all Hyper-V features before installing Virtualbox.
The virtual machine 'wowowo' has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details may be available in 'C:\Users\necco\VirtualBox VMs\wowowo\Logs\VBoxHardening.log'.

Result Code: E_FAIL (0x80004005)
Component: MachineWrap
Interface: IMachine {85cd948e-a71f-4289-281e-0ca7ad48cd89}

Code: Select all

978.2724: Log file opened: 5.2.22r126460 g_hStartupLog=0000000000000054 g_uNtVerCombined=0xa042ee00
978.2724: \SystemRoot\System32\ntdll.dll:
978.2724:     CreationTime:    2018-12-17T23:40:51.775741800Z
978.2724:     LastWriteTime:   2018-10-21T07:45:50.538945700Z
978.2724:     ChangeTime:      2018-12-18T00:17:21.827682300Z
978.2724:     FileAttributes:  0x20
978.2724:     Size:            0x1db260
978.2724:     NT Headers:      0xe8
978.2724:     Timestamp:       0x60d78cf9
978.2724:     Machine:         0x8664 - amd64
978.2724:     Timestamp:       0x60d78cf9
978.2724:     Image Version:   10.0
978.2724:     SizeOfImage:     0x1e1000 (1970176)
978.2724:     Resource Dir:    0x174000 LB 0x6b3e8
978.2724:     [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
978.2724:     [Raw version resource data: 0x1740f0 LB 0x380, codepage 0x0 (reserved 0x0)]
978.2724:     ProductName:     Microsoft® Windows® Operating System
978.2724:     ProductVersion:  10.0.17134.376
978.2724:     FileVersion:     10.0.17134.376 (WinBuild.160101.0800)
978.2724:     FileDescription: NT Layer DLL
978.2724: \SystemRoot\System32\kernel32.dll:
978.2724:     CreationTime:    2018-04-11T23:34:40.510607900Z
978.2724:     LastWriteTime:   2018-04-11T23:34:40.510607900Z
978.2724:     ChangeTime:      2018-12-17T21:42:21.724414200Z
978.2724:     FileAttributes:  0x20
978.2724:     Size:            0xafef8
978.2724:     NT Headers:      0xe8
978.2724:     Timestamp:       0x5f488a51
978.2724:     Machine:         0x8664 - amd64
978.2724:     Timestamp:       0x5f488a51
978.2724:     Image Version:   10.0
978.2724:     SizeOfImage:     0xb2000 (729088)
978.2724:     Resource Dir:    0xb0000 LB 0x520
978.2724:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
978.2724:     [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
978.2724:     ProductName:     Microsoft® Windows® Operating System
978.2724:     ProductVersion:  10.0.17134.1
978.2724:     FileVersion:     10.0.17134.1 (WinBuild.160101.0800)
978.2724:     FileDescription: Windows NT BASE API Client DLL
978.2724: \SystemRoot\System32\KernelBase.dll:
978.2724:     CreationTime:    2018-12-17T23:40:34.967203200Z
978.2724:     LastWriteTime:   2018-11-01T07:25:48.866887800Z
978.2724:     ChangeTime:      2018-12-18T00:17:21.983867300Z
978.2724:     FileAttributes:  0x20
978.2724:     Size:            0x273c38
978.2724:     NT Headers:      0xf0
978.2724:     Timestamp:       0x99042cc0
978.2724:     Machine:         0x8664 - amd64
978.2724:     Timestamp:       0x99042cc0
978.2724:     Image Version:   10.0
978.2724:     SizeOfImage:     0x273000 (2568192)
978.2724:     Resource Dir:    0x251000 LB 0x548
978.2724:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
978.2724:     [Raw version resource data: 0x2510b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
978.2724:     ProductName:     Microsoft® Windows® Operating System
978.2724:     ProductVersion:  10.0.17134.407
978.2724:     FileVersion:     10.0.17134.407 (WinBuild.160101.0800)
978.2724:     FileDescription: Windows NT BASE API Client DLL
978.2724: \SystemRoot\System32\apisetschema.dll:
978.2724:     CreationTime:    2018-04-11T23:34:44.042150700Z
978.2724:     LastWriteTime:   2018-04-11T23:34:44.042150700Z
978.2724:     ChangeTime:      2018-12-17T21:38:30.118885500Z
978.2724:     FileAttributes:  0x20
978.2724:     Size:            0x1bd98
978.2724:     NT Headers:      0xd0
978.2724:     Timestamp:       0xd02ff418
978.2724:     Machine:         0x8664 - amd64
978.2724:     Timestamp:       0xd02ff418
978.2724:     Image Version:   10.0
978.2724:     SizeOfImage:     0x1c000 (114688)
978.2724:     Resource Dir:    0x1b000 LB 0x408
978.2724:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
978.2724:     [Raw version resource data: 0x1b060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
978.2724:     ProductName:     Microsoft® Windows® Operating System
978.2724:     ProductVersion:  10.0.17134.1
978.2724:     FileVersion:     10.0.17134.1 (WinBuild.160101.0800)
978.2724:     FileDescription: ApiSet Schema DLL
978.2724: supR3HardenedWinFindAdversaries: 0x8000
978.2724: \SystemRoot\System32\drivers\cyprotectdrv64.sys:
978.2724:     CreationTime:    2018-12-11T17:14:46.306297500Z
978.2724:     LastWriteTime:   2018-10-04T03:33:58.000000000Z
978.2724:     ChangeTime:      2019-01-04T23:45:28.203947500Z
978.2724:     FileAttributes:  0x20
978.2724:     Size:            0x35890
978.2724:     NT Headers:      0x100
978.2724:     Timestamp:       0x5bad3aea
978.2724:     Machine:         0x8664 - amd64
978.2724:     Timestamp:       0x5bad3aea
978.2724:     Image Version:   6.1
978.2724:     SizeOfImage:     0x136000 (1269760)
978.2724:     Resource Dir:    0x134000 LB 0x2f0
978.2724:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
978.2724:     [Raw version resource data: 0x134060 LB 0x28c, codepage 0x0 (reserved 0x0)]
978.2724:     ProductName:     CylancePROTECT
978.2724:     ProductVersion:  2.0.1500.14
978.2724:     FileVersion:     2.0.1500.14
978.2724:     FileDescription: Cylance Protect Driver
978.2724: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
978.2724: Calling main()
978.2724: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
978.2724: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
978.2724: SUPR3HardenedMain: Respawn #1
978.2724: System32:  \Device\HarddiskVolume3\Windows\System32
978.2724: WinSxS:    \Device\HarddiskVolume3\Windows\WinSxS
978.2724: KnownDllPath: C:\WINDOWS\System32
978.2724: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
978.2724: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
978.2724: supR3HardNtEnableThreadCreation:
978.2724: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff826ba3000 pvNtTerminateThread=00007ff826bca950
978.2724: supR3HardenedWinDoReSpawn(1): New child 27d8.24b4 [kernel32].
978.2724: supR3HardNtChildGatherData: PebBaseAddress=0000000000a5f000 cbPeb=0x388
978.2724: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff826b30000 uNtDllChildAddr=00007ff826b30000
978.2724: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff826ba3000
978.2724: supR3HardenedWinSetupChildInit: Start child.
978.2724: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
978.2724: supR3HardNtChildPurify: Startup delay kludge #1/0: 517 ms, 50 sleeps
978.2724: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
978.2724:  *0000000000000000-000000000091ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000920000-000000000093ffff 0x0004/0x0004 0x0020000
978.2724:  *0000000000940000-0000000000958fff 0x0002/0x0002 0x0040000
978.2724:   0000000000959000-000000000095ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000960000-0000000000963fff 0x0002/0x0002 0x0040000
978.2724:   0000000000964000-000000000096ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000970000-0000000000970fff 0x0004/0x0004 0x0020000
978.2724:   0000000000971000-000000000097ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000980000-0000000000980fff 0x0020/0x0020 0x0020000 !!
978.2724: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000980000 (LB 0x1000, 0000000000980000 LB 0x1000)
978.2724: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000980000/0000000000980000 LB 0/0x1000]
978.2724: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000980000 LB 0x80000 s=0x10000 ap=0x0 rp=0x42342d4600000001
978.2724:   0000000000981000-00000000009fffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000a00000-0000000000a5efff 0x0000/0x0004 0x0020000
978.2724:   0000000000a5f000-0000000000a61fff 0x0004/0x0004 0x0020000
978.2724:   0000000000a62000-0000000000bfffff 0x0000/0x0004 0x0020000
978.2724:  *0000000000c00000-0000000000cfafff 0x0000/0x0004 0x0020000
978.2724:   0000000000cfb000-0000000000cfdfff 0x0104/0x0004 0x0020000
978.2724:   0000000000cfe000-0000000000cfffff 0x0004/0x0004 0x0020000
978.2724:   0000000000d00000-000000007ffdffff 0x0001/0x0000 0x0000000
978.2724:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
978.2724:   000000007ffe1000-00007ff5a700ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff5a7010000-00007ff5a7032fff 0x0002/0x0002 0x0040000
978.2724:   00007ff5a7033000-00007ff70d95ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff70d960000-00007ff70d960fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d961000-00007ff70d9d1fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d9d2000-00007ff70d9d2fff 0x0080/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d9d3000-00007ff70da18fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da19000-00007ff70da19fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da1a000-00007ff70da1afff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da1b000-00007ff70da1ffff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da20000-00007ff70da20fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da21000-00007ff70da21fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da22000-00007ff70da25fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da26000-00007ff70da6dfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da6e000-00007ff826b2ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff826b30000-00007ff826b30fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826b31000-00007ff826c3ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c40000-00007ff826c85fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c86000-00007ff826c90fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c91000-00007ff826c9efff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c9f000-00007ff826c9ffff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826ca0000-00007ff826ca2fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826ca3000-00007ff826d10fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826d11000-00007ffffffeffff 0x0001/0x0000 0x0000000
978.2724: VirtualBox.exe: timestamp 0x5be4900d (rc=VINF_SUCCESS)
978.2724: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
978.2724: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
978.2724: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x8000
978.2724: supR3HardNtChildPurify: Startup delay kludge #1/1: 516 ms, 32 sleeps
978.2724: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
978.2724:  *0000000000000000-000000000091ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000920000-000000000093ffff 0x0004/0x0004 0x0020000
978.2724:  *0000000000940000-0000000000958fff 0x0002/0x0002 0x0040000
978.2724:   0000000000959000-000000000095ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000960000-0000000000963fff 0x0002/0x0002 0x0040000
978.2724:   0000000000964000-000000000096ffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000970000-0000000000970fff 0x0004/0x0004 0x0020000
978.2724:   0000000000971000-00000000009fffff 0x0001/0x0000 0x0000000
978.2724:  *0000000000a00000-0000000000a5efff 0x0000/0x0004 0x0020000
978.2724:   0000000000a5f000-0000000000a61fff 0x0004/0x0004 0x0020000
978.2724:   0000000000a62000-0000000000bfffff 0x0000/0x0004 0x0020000
978.2724:  *0000000000c00000-0000000000cfafff 0x0000/0x0004 0x0020000
978.2724:   0000000000cfb000-0000000000cfdfff 0x0104/0x0004 0x0020000
978.2724:   0000000000cfe000-0000000000cfffff 0x0004/0x0004 0x0020000
978.2724:   0000000000d00000-000000007ffdffff 0x0001/0x0000 0x0000000
978.2724:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
978.2724:   000000007ffe1000-00007ff5a700ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff5a7010000-00007ff5a7032fff 0x0002/0x0002 0x0040000
978.2724:   00007ff5a7033000-00007ff70d95ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff70d960000-00007ff70d960fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d961000-00007ff70d9d1fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d9d2000-00007ff70d9d2fff 0x0040/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70d9d3000-00007ff70da18fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da19000-00007ff70da25fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da26000-00007ff70da6dfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
978.2724:   00007ff70da6e000-00007ff826b2ffff 0x0001/0x0000 0x0000000
978.2724:  *00007ff826b30000-00007ff826b30fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826b31000-00007ff826c3ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c40000-00007ff826c85fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c86000-00007ff826c89fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c8a000-00007ff826c90fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c91000-00007ff826c9efff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826c9f000-00007ff826c9ffff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826ca0000-00007ff826ca2fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826ca3000-00007ff826d10fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume3\Windows\System32\ntdll.dll
978.2724:   00007ff826d11000-00007ffffffeffff 0x0001/0x0000 0x0000000
978.2724: supR3HardNtChildPurify: Done after 1931 ms and 1 fixes (loop #1).
27d8.24b4: Log file opened: 5.2.22r126460 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa042ee00
27d8.24b4: supR3HardenedVmProcessInit: uNtDllAddr=00007ff826b30000 g_uNtVerCombined=0xa042ee00
27d8.24b4: ntdll.dll: timestamp 0x60d78cf9 (rc=VINF_SUCCESS)
27d8.24b4: New simple heap: #1 0000000000e00000 LB 0x400000 (for 1970176 allocation)
978.2724: supR3HardNtEnableThreadCreation:
27d8.24b4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
27d8.24b4: System32:  \Device\HarddiskVolume3\Windows\System32
27d8.24b4: WinSxS:    \Device\HarddiskVolume3\Windows\WinSxS
27d8.24b4: KnownDllPath: C:\WINDOWS\System32
27d8.24b4: supR3HardenedVmProcessInit: Opening vboxdrv stub...
27d8.24b4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
27d8.24b4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
27d8.24b4: Registered Dll notification callback with NTDLL.
27d8.24b4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
27d8.24b4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
27d8.24b4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
978.2724: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 46 ms, CloseEvents);
Last edited by socratis on 5. Jan 2019, 10:40, edited 2 times in total.
Reason: Removed unnecessary verbatim quote of the whole previous message.
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by socratis »

@Necco
You're not helping with the OP's case, but, you might help yourself, just because you posted the requested log.

For future reference, please don't Copy/Paste large chunks of text, instead simply ZIP the log (in this case VBoxHardening.log) and attach that. It helps you, it helps us, it helps save a (virtual) tree or two... ;)

Generally speaking (and if you run into this again), read really carefully the following FAQ: Diagnosing VirtualBox Hardening Issues for some generic guidelines/ideas. Remember, these are guidelines, not the exact solution, you have to use your judgement as to which program might be responsible.

In your case you have the following (known) culprit:
Necco wrote:
978.2724: supR3HardenedWinFindAdversaries: 0x8000
978.2724: \SystemRoot\System32\drivers\cyprotectdrv64.sys:
...
978.2724:     FileDescription: Cylance Protect Driver
If uninstalling this doesn't work, read the FAQ above...
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Necco
Posts: 3
Joined: 5. Jan 2019, 02:34

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by Necco »

Well, I feel silly. I spent more time looking at the end of the log file and missed the mention of Cylance.

Thank you! I'll look into how Cylance might be blocking it.
Necco
Posts: 3
Joined: 5. Jan 2019, 02:34

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by Necco »

I was able to add an exception to Cylance to prevent it from blocking it. I had to get the SHA256 hash of VirtualBoxVM.exe and add it to the Policy Safe List for my device. I'm able to start VMs now without a problem.

Note: Cylance is only in monitoring mode, it shouldn't have been blocking anything, but it still caused a problem with VirtualBox. Cylance is an incredibly crappy piece of software.

Thanks for your help, socratis.
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by socratis »

Necco wrote:Note: Cylance is only in monitoring mode, it shouldn't have been blocking anything
Cylance didn't block VirtualBox. It's VirtualBox that refused to run while another software (Cylance) was entering its memory space without being properly singed and registered in the Windows Certificate Database. Same end result, not the same cause... ;)
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
amp3rev0lt
Posts: 2
Joined: 12. Feb 2019, 16:57

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by amp3rev0lt »

Hello Everyone

I do have the same issue as op, so I'll add my case here.

I run Virtual Box 6.0.4 r128413, with the Host OS being Windows 10 Enteprise 1709.
Important to mention is that my Host System is a virtualized System on its own. (Vmware/ESX)
But as far as I know this should still work as long as I only host x32 Guest systems.

My guest System is a Debian x32. (GNS3 IOU VM)

If I try to start it, the same error as op stated occurs.

Attached you'll find the log.

Thanks in advance!
Attachments
VBoxHardening.zip
(2.85 KiB) Downloaded 24 times
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by socratis »

amp3rev0lt wrote:Important to mention is that my Host System is a virtualized System on its own. (Vmware/ESX)
That's called nested virtualization. Not really supported unless we're talking about VirtualBox running inside VirtualBox.

Please read really carefully the following FAQ: Diagnosing VirtualBox Hardening Issues for some generic guidelines/ideas. Remember, these are guidelines, not the exact solution, you have to use your judgement as to which program might be responsible.

I didn't see anything obvious from your hardening log, so you may have to follow some other advice/action from the FAQ.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
amp3rev0lt
Posts: 2
Joined: 12. Feb 2019, 16:57

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by amp3rev0lt »

I read the FAQ multiple times and I'm aware that it's most likely some .dll which is causing this error.
But I couldn't find anything in the log, which is why I was hoping you guys might be able to get some more information out of it.

Things I already tried:

Full Re-Install of VirtualBox (Setup Run as Administrator).
Disabled Antivirus
Starting the Guest VM in Headless Mode (Didn't work either)
Removed all the Hyper-V Roles

Any other ideas on what I could try to do? Or how do find out which .dll is causing the problem?
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details

Post by socratis »

amp3rev0lt wrote:Disabled Antivirus
Completely uninstall your antivirus.

And as I said, these are guidelines. Expand your horizons. For example there was a chronic problem with a Trusteer Rapport program that was used for safe banking. Any and every monitoring software, any and every system-wide software, is a suspect. Start uninstalling.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Post Reply