4.3.14 conflicts with anti-virus packages.

[Trinity]

Hello,

I experience the same/similar error when I want to access Ubuntu Guest. My system config:

OS: Windows 8.1 64-bit
AntiVirus: Windows Defender 4.5.218.0
Firewall: Default Windows Firewall

[mpack]

(moaning post deleted).

Guys - please stop using this topic as a place to moan about how this software you got for free has let you down. I'll simply delete the post and you'll have wasted both your time and mine.

The purpose of this topic is to collect data on which antivirus (or other) packages conflict with VirtualBox, so that the devs can add exceptions for them. Do not post about anything else here.

[sbosanquet]

Hi,

I have had a similar issue with starting the new 4.3.14 release (Note: not starting a VM). My issue was down to comodo (Firewall 7.0.317799.4142) and its "Shell Code Injection" protection. I have added it to the exclusion list and now it starts up into the GUI but still wont run the VM.

For anyone else who uses the latest comodo you can change the settings here to get you going:

[RaawrItsTomi]

When starting VM

eror.png (11.99 KiB) Viewed 5804 times

(I get that when starting a VM)

However, before i added virtualbox executables to behavior blocker whitelist i got this error

Before adding to whitelist

adasd.png (23.36 KiB) Viewed 5804 times

Emsisoft Anti-Malware 9.0

[Anunes]

VirtualBox will not start here!
Host : Win 8.1 64-bit
Anti-Virus: Avast Free

I do not believe Virus-Scanner are the problem. Disabing Anti-Virus does not help. Also there are too many people with same problem with differente Anti-Virus.
Regards

EDIT: the "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"
registry entry does not exist on my System, so it is not the problem.

[jianglai]

Host: Windows 8.1 64-bit
Antivirus: Kaspersky Internet Security 15.0.0.463(a) (real time protection not running)

Similar error as everyone else, see attachment.

Vbox.png (10.24 KiB) Viewed 5781 times

[djk]

Microsoft Surface Pro 2
Window 8.1Pro 64bit current with Windows Updates
USB Dock Plugable (http://plugable.com/products/ud-3900) USB video using DisplayLink
All Anti-virus uninstalled
MS Defender disabled
Firewall disabled
VirtualBox network driver installed using bridged

The attached screen shot and and information below is with the above configuration. I had the same results with Avira, Immunet 3.0, and Defender installed. I have also tried to install 4.3.14, uninstall and install 4.3.14 with no A/V or Firewall active with the same results. This is appearing to not be an A/V product conflict under Windows 8.1 Pro.

I uninstalled 4.3.14 and install 4.3.12 and it is working again.

On a Windows 7 Enterprise system with McAfee install the upgrade from 4.3.12 to 4.3.14 worked with VM's starting successfully.

There is no reference to the mentioned registry key or value on either systems (8.1 or 7)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"

=============================================================================
Failed to open a session for the virtual machine xxxx.

The virtual machine 'xxxx' has terminated unexpectedly during startup with exit code 1.
Result Code: E_FAIL (0x80004005)
Component: Machine
Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}

[Legorol]

The DISABLEUSERCALLBACKEXCEPTION registry key has nothing to do with AV software, it's part of a Windows feature. It is currently unknown why some systems have the key set and others don't.

I believe DISABLEUSERCALLBACKEXCEPTION is set automatically by Windows' own Program Compatibility Assistant feature, when certain trigger conditions occur. See the explanation for "Unhandled Exception in User Callback" on this page:
http://blogs.msdn.com/b/cjacks/archive/ ... t-pca.aspx

A part of the explanation says

This scenario detects that an exception transited a user callback (ntdll!KiUserCallbackDispatcherContinue) and if this exception leads to the application crashing because it wasn’t handled, we revert to the earlier behavior by applying DISABLEUSERCALLBACKEXCEPTION.

It sounds to me that this is applied automatically, without active user action, which is why you see it on some systems and not on others.

Issues due to this compatibility setting include the VirtualBox Manager failing to start up (with error message). Whether this is linked to antivirus software is not clear to me, but it seems linked to the new harderning in 4.3.14.

Edit: I should add that it should be trivial to reproduce this issue at least on any Windows 7+ machine by right-clicking VirtualBox.exe, selecting Properties, going to Compatibility tab, and enabling compatibility mode for Windows Vista.

[DigiAngel]

Confirmed here. After having an admin add an exception to Symantec Endpoint, I now get a message that C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll is an invalid image and to try and reinstall VB. I've uninstalled and downgraded to 4.3.12 which runs perfectly.

[ashukusheee]

Another confirmation.

Win8.1x64 Kaspersky Internet Security 2015.

error:

---------------------------
VirtualBox - Error In supR3HardenedWinReSpawn
---------------------------
<html><b>Error relaunching VirtualBox VM process: 5<br>Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild --comment "Windows 7" --startvm 40c2265e-e194-44f2-8f1c-9567d6953d07 --no-startvm-errormsgbox' (rc=-104)</b><br/><br/></html>
---------------------------
Abort
---------------------------

and then

Failed to open a session for the virtual machine Windows 7.

The virtual machine 'Windows 7' has terminated unexpectedly during startup with exit code 1.

Result Code: E_FAIL (0x80004005)
Component: Machine
Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}

[idanm]

Hi,

I can confirm that the following antiviruses aren't compatible with 4.3.14:

Symantec.cloud Endpoint Protection:

* On Desktops it installs: Norton Internet Security NIS 20.4.0.40
* On Servers it installs: Symantec Endpoint Protection 12.1 -- SEP 12.1.2015.2015

**Update: The relevent OS's I finally was able to test are:
- Windows 7 SP1 x64 (Pro, Enterprise, Ultimate and Home Premium)
- Windows 8 x64 (Pro, Enterprise, "standard")
- Windows 8.1 Update1 (Pro, Enterprise, "standard")
- Windows Server 2008R2 (Enterprise, Standard)
- Windows Server 2012 (Enterprise ,Standard)

Hope you guys can get this resolved quickly and keep up the great work!

Thanks,
Idan.

[rseiler]

Window 8.1 64bit current with Windows Updates
All A/V uninstalled
MS Defender disabled

Curious, since I have no issue with 8.1 x64 and no other AV. Defender is active. I wonder if it's some remnant (e.g. a driver not removed with an uninstall) from another AV that's still loading in your case, since all 3rd-party AVs seem to show the problem? The Autoruns utility (Driver tab) is good for revealing those.

[ThatsIT]

For the safty, just rename below file.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox.exe"="DISABLEUSERCALLBACKEXCEPTION"

Rename to: C:\\Program Files\\Oracle\\VirtualBox\\VirtualBox_DEL.exe

All fixed!!!
That's it.

[bradski]

I got the exact same error and have been running on Windows 7 home premium 64 bit. I have a virtual machine for Windows XP Pro SP3.

Solution (after trying re-download, checking MD5 sums and re-installing - to NO avail) was to re-install my previously running version 4.3.10 and everything is happy once again.

I'm content to wait for the next version AFTER 4.3.14 and see if they fixed the problem by then.

bradski

[djk]

Window 8.1 64bit current with Windows Updates
All A/V uninstalled
MS Defender disabled

Curious, since I have no issue with 8.1 x64 and no other AV. Defender is active. I wonder if it's some remnant (e.g. a driver not removed with an uninstall) from another AV that's still loading in your case, since all 3rd-party AVs seem to show the problem? The Autoruns utility (Driver tab) is good for revealing those.

There is no reference to Avira of Immunet in reviewing the Autoruns Everything tab. Your PM comment on the vBox install without network drivers since you use NAT might be a hint. I have the drivers installed and use Bridged.