Windows 4.3.20 specifically for errors due to security

Discussions related to using VirtualBox on Windows hosts.

Re: Windows 4.3.20 specifically for errors due to security

Postby socratis » 11. Dec 2014, 12:37

For your own information, I tried to update an almost up-to-date Windows machine and it seems that Microsoft has pulled KB3004394 from its updates (yesterday there were 11 updates, today 10; guess who's missing ;) ). It appears that there have been major issues with it, not just VirtualBox.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
socratis
Site Moderator
 
Posts: 27690
Joined: 22. Oct 2010, 11:03
Location: Greece
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5

Re: Windows 4.3.20 specifically for errors due to security

Postby wmeyer » 11. Dec 2014, 16:09

As of this morning, can't run any VBox VM.

Windows 7 Professional
VBoxStartup.zip attached
Kaspersky installed, but disabled.

Also tried uninstall/reinstall, before finding this thread.

I have uninstalled KB3004394, rebooted, and the log attached is from an attempt made after that.

UPDATE: After removing KB3004394, I again tried uninstall/re-install. The re-install hung. Rebooted, then uninstalled/re-installed again. That worked, and now the VMs work, so it was KB3004394 at fault.
Attachments
VBoxStartup.zip
(2.98 KiB) Downloaded 127 times
wmeyer
 
Posts: 51
Joined: 14. May 2009, 18:42
Primary OS: MS Windows 7
VBox Version: OSE other
Guest OSses: Windows 7

Re: Windows 4.3.20 specifically for errors due to security

Postby michaelmilette » 11. Dec 2014, 16:58

Having the same problem here. Uninstalled KB3004394 and still can't start a VM on Windows 7 64-bit.

This is a small piece of the log showing where things seem to be going wrong:

209c.20a0: supR3HardenedVmProcessInit: Opening vboxdrv stub...
209c.20a0: Error opening VBoxDrvStub: STATUS_OBJECT_NAME_NOT_FOUND
209c.20a0: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034
209c.20a0: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
209c.20a0: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
2094.2098: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
2094.2098: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)

Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.

Any suggestions would be most appreciated.

Best regards,

Michael
michaelmilette
 
Posts: 2
Joined: 11. Dec 2014, 16:45

Re: Windows 4.3.20 specifically for errors due to security

Postby michaelmilette » 11. Dec 2014, 17:16

Fixed it! After uninstalling update KB3004394, you also need to:

1) Uninstall VirtualBox
2) Restart Windows
3) Reinstall VirtualBox
4) Restart again

That did it for me. Hope it helps you too.

Best regards,

Michael Milette
michaelmilette
 
Posts: 2
Joined: 11. Dec 2014, 16:45

Re: Windows 4.3.20 specifically for errors due to security

Postby mpack » 11. Dec 2014, 18:01

I don't really see what reinstalling VirtualBox would do, but restarting Windows seems like a good idea.

[Edit] However, others have insisted that a VBox reinstall is necessary.

Fair warning: I have asked for the (off-topic) KBxxxx chatter to end, but that hasn't worked. So, from now on I'll simply delete all posts which mention it.
In the meantime Microsoft have released a fix: http://support.microsoft.com/kb/3024777
mpack
Site Moderator
 
Posts: 31998
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.20 specifically for errors due to security

Postby rnewman » 12. Dec 2014, 15:42

Hello. Still no go with 4.3.21-97191

OS: Win7 Professional 64bit - SP1
Trendmicro Office Scan: 11.0.1454

Error popup - Error In supR3HardNtChildPurify

Screen shot and start up log attached.
Attachments
VirtualBox-4.3.21-97191.zip
(186.47 KiB) Downloaded 74 times
rnewman
 
Posts: 37
Joined: 11. Sep 2014, 19:58

Re: Windows 4.3.20 specifically for errors due to security

Postby ICE-Vn » 12. Dec 2014, 16:05

Hi, guys

My problem is a bit different it seems.
I had the same issue that most of you have, but after installing the latest windows patch which supposedly fixed their ****.

I was able to start 4.3.20 and create a new VM.

Anyway when I try to start it for the first time it opens up:

"Creating process for virtual machine "XXXX" (Gui/Qt)... (1/2) and it is stuck on 0

There is no log file to attach or at least I am unable to find it.

Please help.

Best regards,
ICE-Vn
 
Posts: 1
Joined: 12. Dec 2014, 16:01

Re: Windows 4.3.20 specifically for errors due to security

Postby david_salva » 12. Dec 2014, 16:42

Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all   Expand viewCollapse view
Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}


You could help me solve the problem.

Regards
Attachments
VBoxStartup.zip
(10.25 KiB) Downloaded 48 times
david_salva
 
Posts: 2
Joined: 11. Dec 2014, 23:31

Re: Windows 4.3.20 specifically for errors due to security

Postby mpack » 12. Dec 2014, 17:44

ICE-Vn wrote:There is no log file to attach or at least I am unable to find it.

Logs can be found in the "Logs" subfolder of the VM folder.
mpack
Site Moderator
 
Posts: 31998
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.20 specifically for errors due to security

Postby nmarquart » 16. Dec 2014, 17:19

VBox version: 4.3.20
Host OS: Windows Server 2008 R2
AV: Symantec Endpoint Protection

I'm getting error similar to what's been mentioned, and I suspect it's the AV. I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked. I've verified that I don't have the faulty Windows update installed as well. I've attached startup logs for two of the client OSes.
Attachments
Logs.zip
Startup logs for Windows 7 and CentOS guests.
(5.59 KiB) Downloaded 18 times
nmarquart
 
Posts: 1
Joined: 16. Dec 2014, 16:56

Re: Windows 4.3.20 specifically for errors due to security

Postby BingoLarssoni » 16. Dec 2014, 17:21

Version 4.3.20 running on Windows 7 SP1 x64 with F-Secure Client Security Premium 11.60 build 284. After latest Windows Updates I cannot start any VMs. Installing KB3024777 did not help.

supHardenedWinVerifyProcess failed with Unknown Status -5626 (0xffffea06): No executable mapping found in the virtual address space.
Attachments
VBoxStartup.zip
(2.05 KiB) Downloaded 24 times
BingoLarssoni
 
Posts: 1
Joined: 16. Dec 2014, 17:11

Re: Windows 4.3.20 specifically for errors due to security

Postby socratis » 16. Dec 2014, 17:32

nmarquart wrote:I've tried disabling and adding exceptions to SEP for VBox, but so far it hasn't worked.

Unfortunately, it has to be the other way around; VirtualBox has to add an exception for SEP. In the source code...
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
socratis
Site Moderator
 
Posts: 27690
Joined: 22. Oct 2010, 11:03
Location: Greece
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5

Re: Windows 4.3.20 specifically for errors due to security

Postby david_salva » 17. Dec 2014, 22:02

david_salva wrote:Hello,

VirtualBox v4.3.21. r97121 on a Windows 8.1 with Antivirus Nod32 shows me the following message

Code: Select all   Expand viewCollapse view
Fallo al abrir una sesión para la máquina virtual Windows XP.

The virtual machine 'Windows XP' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\David\VirtualBox VMs\Windows XP\Logs\VBoxStartup.log'.

Código Resultado: E_FAIL (0x80004005)
Componente: Machine
Interfaz: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}


You could help me solve the problem.

Regards


installed version 4.3.21.97294.

I still have the same problem
david_salva
 
Posts: 2
Joined: 11. Dec 2014, 23:31

Re: Windows 4.3.20 specifically for errors due to security

Postby Jacky » 18. Dec 2014, 09:08

Hello,

I'm not sure if I've got the same security problems, but yesterday I upgraded from 4.3.12 to 4.3.20 r96997 and every virtual machine on my Win7-32bit SP1 Enterprise Host hangs on startup with this messages:

Error in supR3HardNtChildPurify:
supHardenedWinVerifyProcess failed with
VERR_SUP_VP_REPLACE_VIRTUAL_MEMORY_FAILED: (rc=-5673)

I executed KB3024777-x86.exe to remove KB3004394 but it doesn't seem to do anything. In system control, programs, "installed updates" I can't find KB3004394.

2dc.17c0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2dc.17c0: *00000000-fffeffff 0x0001/0x0000 0x0000000
2dc.17c0: *00010000-fffeffff 0x0004/0x0004 0x0020000
2dc.17c0: *00030000-00022fff 0x0040/0x0040 0x0020000 !!
2dc.17c0: supHardNtVpScanVirtualMemory: Replacing exec mem at 00030000 (00030000 LB 0xd000)
2dc.17c0: Error (rc=-5673):
2dc.17c0: NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details


And further down:
2dc.17c0: Error (rc=-5673):
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: Error -5673 in supR3HardNtChildPurify! (enmWhat=5)
2dc.17c0: supHardenedWinVerifyProcess failed with Unknown Status -5673 (0xffffe9d7): NtAllocateVirtualMemory (00030000 LB 0xd000) failed with rcNt=0xc0000018 allocating replacement memory for working around buggy protection software. See VBoxStartup.log for more details
2dc.17c0: supR3HardNtEnableThreadCreation:


It would be great to get some help on this issue because none of my machines is working any more!
Thanks in advance,
Daniel
Attachments
VBoxStartup.log
(14.3 KiB) Downloaded 22 times
err1.jpg
err1.jpg (53.26 KiB) Viewed 10213 times
err2.jpg
err2.jpg (20.72 KiB) Viewed 10213 times
Jacky
 
Posts: 4
Joined: 18. Dec 2014, 08:40

Re: Windows 4.3.20 specifically for errors due to security

Postby mpack » 18. Dec 2014, 10:11

@Jacky. IMHO, having reported your findings, you should now revert to 4.3.12.
mpack
Site Moderator
 
Posts: 31998
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

PreviousNext

Return to VirtualBox on Windows Hosts

Who is online

Users browsing this forum: No registered users and 60 guests