Discussion of Problems due to Hardened Security

Discussions related to using VirtualBox on Windows hosts.

Re: Windows 4.3.28 Specifically for errors due to Security

Postby cdg » 9. Jul 2015, 22:17

LucaCosta wrote:install older version


Be more specific. You have to go back to 4.3.12 to avoid this issue. But, of course, that reinstates various other problems that have been fixed since.
cdg
 
Posts: 33
Joined: 11. Nov 2014, 04:06

Re: Windows 4.3.28 Specifically for errors due to Security

Postby cdg » 10. Jul 2015, 09:17

The same problem began to appear with Windows7 (32-bit version) and Vbox 4.3.28 on 7/09/2015! It occurs whether or not Avira AV is enabled.

Failed to open a session for the virtual machine Windoze XP.

The virtual machine 'Windoze XP' has terminated unexpectedly during startup with exit code 1 (0x1). More details may be available in 'C:\Users\David\VirtualBox VMs\Windoze XP\Logs\VBoxStartup.log'.

Result Code: E_FAIL (0x80004005)
Component: Machine
Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048}
Attachments
VBoxStartup.zip
(6.95 KiB) Downloaded 49 times
cdg
 
Posts: 33
Joined: 11. Nov 2014, 04:06

Re: Windows 4.3.28 Specifically for errors due to Security

Postby Olegis » 10. Jul 2015, 20:32

Hello,
I have an old problem.
OS Win7 x32 Ultimate.
Bitdefender Antivirus Free Edition 1.0.21.1099.
VirtualBox - 5.0.0-101573 (similar errors appeared with version 4.3.14)
When I run the guest appears this window:
"ERROR In SupR3HardenedWinResSpawn"
After removal of the antivirus VBox starts as expected.
Daylight 4.3.12 impossible because Debian Jessie on the guest machine to these versions may not work properly.
Please, fix this bug.
Thanks.
Attachments
VirtualBox - 5.0.0-101573.png
VirtualBox - 5.0.0-101573.png (13.41 KiB) Viewed 6841 times
VBoxStartup.zip
(9.42 KiB) Downloaded 18 times
Olegis
 
Posts: 1
Joined: 10. Jul 2015, 19:57

Re: Windows 4.3.28 Specifically for errors due to Security

Postby HF » 13. Jul 2015, 16:40

I haven't been able to use any Vbox version since 4.3.16. I've posted on this before and there is never a resolution.

Today I tried 4.3.28 - no luck. Then I tried 5.0, same error (attaching logs). This has gone on for months now.

Anyone have suggestions on what product to use to replace Virtual Box for Ubuntu guests on Windows hosts?
Attachments
VBoxStartup.log
(78.22 KiB) Downloaded 56 times
HF
 
Posts: 23
Joined: 3. Dec 2014, 01:01

Re: Windows 4.3.28 Specifically for errors due to Security

Postby scottgus1 » 13. Jul 2015, 16:50

HF, down at the bottom of your log shows a bunch of Windows DLLs with the WinVerifyTrust error. This seems to indicate you may have the bunged-up Windows Updates on your PC. Search for those updates and uninstall them, and try Virtualbox again.
scottgus1
Site Moderator
 
Posts: 8122
Joined: 30. Dec 2009, 20:14
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Windows, Linux

Re: Windows 4.3.28 Specifically for errors due to Security

Postby HF » 13. Jul 2015, 16:56

It's a corporate laptop - I have no control over the updates but Vbox 4.3.16 runs fine and so does **everything** else.

I also did an sfc scan, no problems found.
HF
 
Posts: 23
Joined: 3. Dec 2014, 01:01

Re: Windows 4.3.28 Specifically for errors due to Security

Postby scottgus1 » 13. Jul 2015, 17:17

If you can't get the updates off, then you can't get by the WinVerifyTrust issue. Virtualbox actually is running correctly. Microsoft messed up their trust certificate database with the updates, that's why the issue appears. Try to make a case to IT for removal of the updates. There's info on the Web about the problem, maybe they'll see reason.
scottgus1
Site Moderator
 
Posts: 8122
Joined: 30. Dec 2009, 20:14
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Windows, Linux

Re: Windows 4.3.28 Specifically for errors due to Security

Postby HF » 13. Jul 2015, 17:35

Do you have a link that describes this problem? You should also put in the FAQ since this appears to be a common issue.
HF
 
Posts: 23
Joined: 3. Dec 2014, 01:01

Re: Windows 4.3.28 Specifically for errors due to Security

Postby mpack » 13. Jul 2015, 18:06

Links to reports on the various Windows Update issues were provided in previous incarnations of this topic. Go to the first message then follow the "old topics" links back.

I have to say that the "lacks WinVerifyTrust" thing is not clear cut. My own startup logs say (on XP host) says "lacks WinVerifyTrust" for several OS DLLs such as "user32.dll". My log also mentions "uxtheme.dll" which is a common hacked DLL. Yet my log still ends with an exit code of 0 (meaning success).

I suspect two things: first is that "lacks WinVerifyTrust" is not important unless the trust issue is still unresolved by the end of the log (mine mostly occur near the start). Second, I think that VirtualBox now simply zaps an unwanted DLL rather than erroring out. However this can cause another DLL in the process space, which is signed but which relies on an unsigned DLL, to crash. I tend to the opinion that all of the "0xC0000005" type exit codes are of this variety.

The best solution, as has been said since v4.3.14 came out, is to try to ensure that all injected DLLs are signed. I would have thought this was a no-brainer for AV suites - and you really need to talk to your own IT people if your chosen AV suite is non compliant.

It would also be useful if someone on the devteam started leaving a few clues as to how to decipher the startup log, since it seems to be here to stay.
mpack
Site Moderator
 
Posts: 31812
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.28 Specifically for errors due to Security

Postby HF » 13. Jul 2015, 18:33

The strange part of this is that when I first install 4.3.28 or 5.0, it will run. It only starts failing on subsequent attempts to use it.

We do have a corporate AV, McAfee. I suspect its the AV or our company's certificates since we have problems accessing some websites because the company puts its own proxy server in the middle to intercept all certs.

Even so, it would be nice to disable the security protection. It doesn't seem to be helping with anything.
HF
 
Posts: 23
Joined: 3. Dec 2014, 01:01

Re: Windows 4.3.28 Specifically for errors due to Security

Postby mpack » 13. Jul 2015, 18:45

HF wrote:Even so, it would be nice to disable the security protection. It doesn't seem to be helping with anything.

You are about 12 months late for that discussion. I don't see a change in the stated Oracle position happening now.
mpack
Site Moderator
 
Posts: 31812
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.28 Specifically for errors due to Security

Postby Perryg » 13. Jul 2015, 18:53

mpack wrote:
HF wrote:Even so, it would be nice to disable the security protection. It doesn't seem to be helping with anything.

You are about 12 months late for that discussion. I don't see a change in the stated Oracle position happening now.

Not to mention that while you do not see a reason for the hardening it is there to *keep* you from seeing a reason for the hardening. Nasty things can happen without it these days.
Pretty much one of the reasons I don't do Windows these days, at least on line. VirtualBox on Linux has had hardening for ever.
Perryg
Site Moderator
 
Posts: 34373
Joined: 6. Sep 2008, 22:55
Primary OS: Linux other
VBox Version: OSE self-compiled
Guest OSses: *NIX

Re: Windows 4.3.28 Specifically for errors due to Security

Postby usr258 » 13. Jul 2015, 21:14

Is there a "Windows 5.0.0 Specifically for errors due to Security" forum yet?

Thanks :?
usr258
 
Posts: 2
Joined: 22. May 2015, 15:18

Re: Windows 4.3.28 Specifically for errors due to Security

Postby mpack » 14. Jul 2015, 09:03

I'm not sure there's any point in a new topic. All of the messages in this incarnation just rehashed old territory.
mpack
Site Moderator
 
Posts: 31812
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Windows 4.3.28 Specifically for errors due to Security

Postby cdg » 14. Jul 2015, 09:28

When examining the log files, it appears that the "lacks WinVerifyTrust" message appears for VirtualBox dll's as well as Windows dll's. So how is this related to Windows Updates?
cdg
 
Posts: 33
Joined: 11. Nov 2014, 04:06

PreviousNext

Return to VirtualBox on Windows Hosts

Who is online

Users browsing this forum: No registered users and 35 guests