VBoxStartup.log baloons to 10gig plus

[SGuEP]

with 4.3.16 I have a problem where VBoxStartup.log gets bigger and bigger until it fills up my hard drive. It's currently at 10gig. The errors in the log seem to be this repeated segment:

Code: Select all

å£æ¦å±¥æ¥æ´æ楶潳屲ã¸å°´é§î³ë¡è§§î¡êé¦î®êe: -> -5667 (\Device\HarddiskVolume4\Program Files (x86)\McAfee\SiteAdvisor\x64\ç³ä¡°ç¡æ¤æ®åç¡æ¤ç
                                          450.1aa4: Error (rc=0):            ¥â  ã¡¸â¤¶äµä
£æ¦å±¥æ¥æ´æ楶潳屲ã¸å°´é§î³ë¡è§§î¡êé¦î®êDll: rc=U©å«æ±¯æµµã¥åæ½²ç§æµ¡ä æ±©çfe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume4\Program Files (x86)\McAfee\SiteAdvisor\x64\ç³ä¡°ç¡æ450.1aa4: Error (rc=0):
450.1aa4: supR3HardenedMonitor_LdrLoadDll: rejecting 'c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll': rcNt=0xc0000190
450.1aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll'
450.1aa4: supR3HardenedMonitor_LdrLoadDll: pName=c:\PROGRA~2\mcafee\siteadvisor\x64\saHook.dll *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags>
450.1aa4: \Device\HarddiskVolume4\Program Files (x86)\McAfee\SiteAdvisor\x64\: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)      ¥â  ã¡¸â¤¶äµä   

Is this some sort of conflict between Vbox and my siteadvisor internet security plugin? Is there any way to keep my log file small?

UPDATE: I should also note that I am also experiencing a strange problem on my windows box whereby explorer.exe (not the file explorer, but the windows process which manages some running programs) will consume 3gigs+ of ram. I've tried to track down the problem to no avail (usually the computer grinds to a halt and I have to restart). For the first time I've freed up the ram by suspending my virtualbox session, or at least I *THINK* that's what did it, I tried a few other things. But next time I'm going to monitor my changes more closely to see if it's virtualbox that is grabbing all this memory

[rwjr]

I am seeing the same thing since upgrading to 4.3.16. My VBoxStartup.log was up to 70 GB when my drive ran out of space.

For me, the repeated error is for a video driver dll that is not signed, and a couple other dlls where the error is "Owner is not trusted installer".

Code: Select all

d38.34b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll *pfFlags=0x0 pwszSearchPath=00000000038588f0:C:\Program Files (x86)\ATI Technologies\HydraVision;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a28 pwszName=\Device\HarddiskVolume2\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000085f390
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000085f390
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1D76051063B977CC6B1CFEDA96BE09B72DB04916
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: Retrying with fresh context (CryptCATAdminEnumCatalogFromHash -> 1168; iCat=0x0)
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: New context 000000000085f390
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000085f390
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1D76051063B977CC6B1CFEDA96BE09B72DB04916
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed 1168
d38.34b0: supR3HardNtViCallWinVerifyTrustCatFile -> -22900 (org 22900)
d38.34b0: supHardenedWinVerifyImageByHandle: -> -22900 (\Device\HarddiskVolume2\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll)WinVerifyTrust
d38.34b0: Error (rc=0):
d38.34b0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -22900 (0xffffa68c) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll: Not signed.
d38.34b0: Error (rc=0):
d38.34b0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll': rcNt=0xc0000190
d38.34b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDMH64.dll'
d38.34b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll *pfFlags=0x0 pwszSearchPath=000000000413e460:C:\Program Files (x86)\DisplayFusion;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32
d38.34b0: \Device\HarddiskVolume2\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll: Owner is not trusted installer (01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00)
d38.34b0: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume2\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll)
d38.34b0: Error (rc=0):
d38.34b0: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume2\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume2\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll'.
d38.34b0: Error (rc=0):
d38.34b0: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll': rcNt=0xc0000190
d38.34b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll'

[deceiver]

I had this problem too. Annoying because it was decreasing the life of my ssd.

I updated to the latest version, which kind of fixed the issue, but the log file was still growing too fast for me (~100MB in a few hours). A quick fix for me was just to make the log file read only (delete it and make a new one if you want). You won't get any logs obviously, but at least your drive will live longer

[SGuEP]

Can you quantify the decrease in life by these writes? Seems like this whole notion of 'lifetime' is overblown for most people:

https://www.google.com/search?sourceid= ... 20lifetime

[mpack]

AFAIK this was addressed in the VirtualBox releases since 4.3.16. Locking this one.