Discussion of Problems due to Hardened Security

Discussions related to using VirtualBox on Windows hosts.
Locked
Suo
Posts: 2
Joined: 27. Feb 2015, 22:52

Digital Guardian now compatible with hardening

Post by Suo »

My problems around hardening were finally resolved by an update from Digital Guardian, our data loss prevention software provider. I am now able to run VirtualBox 5.1.4 with Digital Guardian 6.23.0835. If you see dgmaster.sys mentioned in your VirtualBox logs, an old version of Digital Guardian is likely the culprit.
socratis
Site Moderator
Posts: 27330
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Discussion of Problems due to Hardened Security

Post by socratis »

@Suo
Thank you very much for letting us know! It might help in the future.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
letsplayMAB
Posts: 2
Joined: 18. Aug 2016, 15:09

Re: Virtual Box Runtime error opening

Post by letsplayMAB »

i got this message o_o
Attachments
Knipsl.JPG
Knipsl.JPG (40.33 KiB) Viewed 7613 times
Last edited by socratis on 18. Aug 2016, 15:52, edited 1 time in total.
Reason: Post moved from "Mac OSX Hosts".
ahmed111
Posts: 1
Joined: 25. Aug 2016, 04:53

Re: Discussion of Problems due to Hardened Security

Post by ahmed111 »

Hello,

This is my first time using Virtualbox, I am trying to create a virtual machine to run a Linux OS dist and after i create it i can't run it and it gives me this error messages,
Failed to acquire the VirtualBox COM object.

The application will now terminate.



Callee RC: E_INVALIDARG (0x80070057)
Failed to open a session for the virtual machine lin.

The virtual machine 'lin' has terminated unexpectedly during startup with exit code 1 (0x1). More details may be available in 'E:\Ahmed\VMs\lin\Logs\VBoxHardening.log'.

Result Code: E_FAIL (0x80004005)
Component: MachineWrap
Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}
i am using Win7 32bit (running the app on Compatibility mode -doesn't run otherwise) no AV installed and disabled Windows defender, i tried to uninstall and reinstall with admin permissions and the problem is still there.

VB version: 5.1.5 r110316 (Qt5.5.1) it is a test build but the problem is still there with the latest stable version.
Attachments
VBoxHardening.zip
(24.86 KiB) Downloaded 25 times
HF
Posts: 31
Joined: 3. Dec 2014, 01:01

Re: Discussion of Problems due to Hardened Security

Post by HF »

I posted here quite a while back about a hardening issue that was caused by BeyondTruest Software's PowerBroker package.

They have since fixed the problems and if you have PowerBroker and are trying to use VirtualBox, then get PowerBroker v7 or later. The problem was that older versions of PowerBroker had a bad certificate.
BrianMattey
Posts: 1
Joined: 4. Sep 2016, 09:24
Primary OS: MS Windows 10
VBox Version: OSE other
Guest OSses: Centos 5,6,7; Solaris 11; Win 10

Re: Discussion of Problems due to Hardened Security

Post by BrianMattey »

Windows 10 Enterprise 1511 build
VirtualBox 5.1.4
SEP 12.1.6 build 7004
Defendpoint 4.0.349.0

RC=-5640 when starting VM - hardening log attached.

Corporate Laptop so I can't disable SEP / Defendpoint to see which is causing the issue.

If I retry the startup after failure the VM will eventually (sometimes after several attempts start OK).

Note as well (and thank you for this) that behaviour with 5.1.4 is much improved. With 5.0.x when the startup failed it hung the GUI and I had to shut down all other VMs to clear the error and then try again and with 6 VMs this was very annoying. With 5.1.4 the interrface does not hang so I can retry individual VMs until they start whilst leaving all others running.
Attachments
VBoxHardening.zip
Zipped copy of VBoxHardening.log
(9.75 KiB) Downloaded 24 times
sau
Posts: 4
Joined: 6. Sep 2016, 10:19

Re: Discussion of Problems due to Hardened Security

Post by sau »

Hi
I've been using VBox for some time with W10 and I recently decided to update my pc : windows anniversary update (build 1607) and software (including docker toolbox, therefore VBox)
After the install, VBox didn't work, neither did its Manager.
I've removed manually VBox and installed the latest from Oracle (5.1.4), it fixed the manager, but I still can't start docker.
The problem comes from VBox, as I have the same issue when trying to start a Linux VM through the GUI

Windows 10 Professional build 1607
VirtualBox 5.1.4

code E_FAIL (0x80004005)
component MachineWrap
interface IMachine
Attachments
VBoxHardening.log
log from the docker quickstart failure
(11.12 KiB) Downloaded 25 times
starting a new Linux VM from the GUI
starting a new Linux VM from the GUI
scr.jpg (20.02 KiB) Viewed 7404 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Discussion of Problems due to Hardened Security

Post by mpack »

I suspect that the devs will not be too interested in investigating problems with Docker. You would need to give them a repeatable problem which they can experience on a standard installation.
sau
Posts: 4
Joined: 6. Sep 2016, 10:19

Re: Discussion of Problems due to Hardened Security

Post by sau »

well, I did replicate the issue trying to start a regular Linux VM (Ubuntu 64bits) from the VBoxManager, cf the screenshot
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Discussion of Problems due to Hardened Security

Post by mpack »

I don't understand. You installed VirtualBox inside the Docker environment, isn't that correct? VBoxManage is not a separate install, it relies on the installed components.
sau
Posts: 4
Joined: 6. Sep 2016, 10:19

Re: Discussion of Problems due to Hardened Security

Post by sau »

No, Docker Toolbox is a set of tools required to run docker on windows (pre - docker-for-windows)
VirtualBox is embedded in this set, but anyway I installed the latest virtualbox from oracle instead of the "old" one provided in DockerToolbox.
My VirtualBox is not related at all with docker, it's only used by it.
stentor
Posts: 1
Joined: 8. Sep 2016, 20:17

Re: Discussion of Problems due to Hardened Security

Post by stentor »

OS: Windows 7 Enterprise SP1
VB: VirtualBox 5.0.26, 5.1.4 and 5.1.51r110417 (VBoxHardening.log attached)
AV: SEP 12.1.6 build 7004 (can't be disabled / Corporate IT -> user-defined Exception for "C:\Program Files\Oracle\VirtualBox\*" didn't help)

For comparison you can find attached logs of a successful start of VB 5.0.20 on the same PC before the AV was switched from McAfee to SEP.
Attachments
VBox520-working-AV-McAfee.zip
Logs from a successful start of VB 5.0.20 with different AV (McAfee)
(32.12 KiB) Downloaded 27 times
VBoxHardening.zip
Logs from VB 5.1.51r110417 with hardening issues (Corporate IT switched AV to SEP 12.1.6 build 7004)
(5.88 KiB) Downloaded 23 times
JPagan
Posts: 3
Joined: 9. Sep 2016, 22:21

Re: Discussion of Problems due to Hardened Security

Post by JPagan »

I just upgraded to Win10; not my choice but the company. I installed VBox 5.1.4 and now I can't start any VMs in headless mode. If I start the VMs with Normal Start they work fine. This happens even on newly created VMs. I get an error message like the below. I am attaching the log.
Failed to open a session for the virtual machine Test_Box.

The virtual machine 'Test_Box' has terminated unexpectedly during startup with exit code -1073741819 (0xc0000005). More details may be available in 'C:\Users\jpagan\VirtualBox VMs\Test_Box\Logs\VBoxHardening.log'.

Result Code: E_FAIL (0x80004005)
Component: MachineWrap
Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}
Attachments
VBoxHardening.zip
Log from failed start in Headless Mode.
(2.76 KiB) Downloaded 30 times
mpack
Site Moderator
Posts: 39156
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: Discussion of Problems due to Hardened Security

Post by mpack »

@JPagan: Cylance protect? Sounds like a good candidate.

Is your company aware that Win10 has fairly decent AV built in? Cylance Protect may not be what causes your problem, but I think it's certainly worth testing what happens if it's disabled.
forge33
Posts: 2
Joined: 12. Sep 2016, 17:50

Re: Discussion of Problems due to Hardened Security

Post by forge33 »

Just started getting this error this morning:
VBoxHardening.png
VBoxHardening.png (15.3 KiB) Viewed 7211 times
Win 10 x64 Build build 14393.105
Attachments
VBoxHardening.zip
(2.27 KiB) Downloaded 26 times
Locked