Windows Server 2012 cannot start VM (exit code 0xc0000005)

Discussions related to using VirtualBox on Windows hosts.
Post Reply
kimbo
Posts: 1
Joined: 19. Oct 2014, 20:05

Windows Server 2012 cannot start VM (exit code 0xc0000005)

Post by kimbo »

Forgive me if there is already a topic for this, but I searched and could not find anything similar to the errors I was encountering.
When I start up any VM, it fails with the exit code 0xc0000005, which I've found is an access violation.
I'm running a fully updated Windows Server 2012 host (don't know if R2, I'm not sure what the difference between them is).
This is my startup log:

Code: Select all

f20.bc8: Log file opened: 4.3.18r96516 g_hStartupLog=0000000000000050 g_uNtVerCombined=0x6223f000
f20.bc8: \SystemRoot\System32\ntdll.dll:
f20.bc8:     CreationTime:    2012-07-26T05:26:45.441874500Z
f20.bc8:     LastWriteTime:   2012-07-26T05:26:45.473074300Z
f20.bc8:     ChangeTime:      2014-10-18T01:06:00.133752900Z
f20.bc8:     FileAttributes:  0x20
f20.bc8:     Size:            0x1bd9c0
f20.bc8:     NT Headers:      0xd8
f20.bc8:     Timestamp:       0x5010acd2
f20.bc8:     Machine:         0x8664 - amd64
f20.bc8:     Timestamp:       0x5010acd2
f20.bc8:     Image Version:   6.2
f20.bc8:     SizeOfImage:     0x1be000 (1826816)
f20.bc8:     Resource Dir:    0x15c000 LB 0x60f30
f20.bc8:     ProductName:     Microsoft® Windows® Operating System
f20.bc8:     ProductVersion:  6.2.9200.16384
f20.bc8:     FileVersion:     6.2.9200.16384 (win8_rtm.120725-1247)
f20.bc8:     FileDescription: NT Layer DLL
f20.bc8: \SystemRoot\System32\kernel32.dll:
f20.bc8:     CreationTime:    2012-07-26T02:15:33.866076500Z
f20.bc8:     LastWriteTime:   2012-07-26T03:05:55.112000000Z
f20.bc8:     ChangeTime:      2014-10-18T00:09:37.227581200Z
f20.bc8:     FileAttributes:  0x20
f20.bc8:     Size:            0x132e00
f20.bc8:     NT Headers:      0xf8
f20.bc8:     Timestamp:       0x5010a83a
f20.bc8:     Machine:         0x8664 - amd64
f20.bc8:     Timestamp:       0x5010a83a
f20.bc8:     Image Version:   6.2
f20.bc8:     SizeOfImage:     0x136000 (1269760)
f20.bc8:     Resource Dir:    0x129000 LB 0x518
f20.bc8:     ProductName:     Microsoft® Windows® Operating System
f20.bc8:     ProductVersion:  6.2.9200.16384
f20.bc8:     FileVersion:     6.2.9200.16384 (win8_rtm.120725-1247)
f20.bc8:     FileDescription: Windows NT BASE API Client DLL
f20.bc8: \SystemRoot\System32\KernelBase.dll:
f20.bc8:     CreationTime:    2012-07-26T05:26:42.228295100Z
f20.bc8:     LastWriteTime:   2012-07-26T05:26:42.275094800Z
f20.bc8:     ChangeTime:      2014-10-18T00:09:37.933429900Z
f20.bc8:     FileAttributes:  0x20
f20.bc8:     Size:            0xede00
f20.bc8:     NT Headers:      0xf0
f20.bc8:     Timestamp:       0x5010ab2d
f20.bc8:     Machine:         0x8664 - amd64
f20.bc8:     Timestamp:       0x5010ab2d
f20.bc8:     Image Version:   6.2
f20.bc8:     SizeOfImage:     0xf3000 (995328)
f20.bc8:     Resource Dir:    0xee000 LB 0x3390
f20.bc8:     ProductName:     Microsoft® Windows® Operating System
f20.bc8:     ProductVersion:  6.2.9200.16384
f20.bc8:     FileVersion:     6.2.9200.16384 (win8_rtm.120725-1247)
f20.bc8:     FileDescription: Windows NT BASE API Client DLL
f20.bc8: \SystemRoot\System32\apisetschema.dll:
f20.bc8:     CreationTime:    2012-07-26T03:03:15.602092000Z
f20.bc8:     LastWriteTime:   2012-07-26T04:55:14.433670100Z
f20.bc8:     ChangeTime:      2014-10-18T01:05:55.115273400Z
f20.bc8:     FileAttributes:  0x20
f20.bc8:     Size:            0xb4f0
f20.bc8:     NT Headers:      0xc0
f20.bc8:     Timestamp:       0x5010b373
f20.bc8:     Machine:         0x8664 - amd64
f20.bc8:     Timestamp:       0x5010b373
f20.bc8:     Image Version:   6.2
f20.bc8:     SizeOfImage:     0xd000 (53248)
f20.bc8:     Resource Dir:    0xb000 LB 0x3f0
f20.bc8:     ProductName:     Microsoft® Windows® Operating System
f20.bc8:     ProductVersion:  6.2.9200.16384
f20.bc8:     FileVersion:     6.2.9200.16384 (win8_rtm.120725-1247)
f20.bc8:     FileDescription: ApiSet Schema DLL
f20.bc8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
f20.bc8: supR3HardenedWinFindAdversaries: 0x0
f20.bc8: Calling main()
f20.bc8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
f20.bc8: SUPR3HardenedMain: Respawn #1
f20.bc8: System32:  \Device\HarddiskVolume4\Windows\System32
f20.bc8: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
f20.bc8: KnownDllPath: C:\Windows\system32
f20.bc8: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
f20.bc8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
f20.bc8: supR3HardNtEnableThreadCreation:
f20.bc8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000007f81dacc1a0 pvNtTerminateThread=000007f81dab30d0
f20.bc8: supR3HardenedWinDoReSpawn(1): New child d34.d2c [kernel32].
f20.bc8: supR3HardNtChildGatherData: PebBaseAddress=000007f70f01c000 cbPeb=0x388
f20.bc8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=000007f81dab0000 uNtDllChildAddr=000007f81dab0000
f20.bc8: supR3HardenedWinSetupChildInit: uLdrInitThunk=000007f81dacc1a0
f20.bc8: supR3HardenedWinSetupChildInit: Start child.
f20.bc8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
f20.bc8: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 29 sleeps
f20.bc8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
f20.bc8:  *0000000000000000-ffffffffff11ffff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000000ee0000-0000000000ebffff 0x0004/0x0004 0x0020000
f20.bc8:  *0000000000f00000-0000000000ef6fff 0x0002/0x0002 0x0040000
f20.bc8:   0000000000f09000-0000000000f01fff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000000f10000-0000000000e13fff 0x0000/0x0004 0x0020000
f20.bc8:   000000000100c000-0000000001008fff 0x0104/0x0004 0x0020000
f20.bc8:   000000000100f000-000000000100dfff 0x0004/0x0004 0x0020000
f20.bc8:  *0000000001010000-000000000100bfff 0x0002/0x0002 0x0040000
f20.bc8:   0000000001014000-0000000001007fff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000001020000-000000000101dfff 0x0004/0x0004 0x0020000
f20.bc8:   0000000001022000-0000000001013fff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000001030000-000000000102efff 0x0040/0x0040 0x0020000 !!
f20.bc8: supHardNtVpScanVirtualMemory: Freeing exec mem at 0000000001030000 (0000000001030000 LB 0x1000)
f20.bc8:   0000000001031000-ffffffff82081fff 0x0001/0x0000 0x0000000
f20.bc8:  *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
f20.bc8:   000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
f20.bc8:   000000007fff0000-fffff809f0feffff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70eff0000-000007f70efccfff 0x0002/0x0002 0x0040000
f20.bc8:   000007f70f013000-000007f70f009fff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f01c000-000007f70f01afff 0x0004/0x0004 0x0020000
f20.bc8:   000007f70f01d000-000007f70f01bfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f01e000-000007f70f01bfff 0x0004/0x0004 0x0020000
f20.bc8:   000007f70f020000-000007f70ecaffff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f390000-000007f70f38efff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f391000-000007f70f30cfff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f415000-000007f70f413fff 0x0080/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f416000-000007f70f3d8fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f453000-000007f70f451fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f454000-000007f70f452fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f455000-000007f70f452fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f457000-000007f70f455fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f458000-000007f70f456fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f459000-000007f70f454fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f45d000-000007f70f423fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f496000-000007f600e7bfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f81dab0000-000007f81daaefff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dab1000-000007f81d979fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbe8000-000007f81dbe2fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbed000-000007f81dbebfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbee000-000007f81dbe8fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbf3000-000007f81dbddfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc08000-000007f81dc06fff 0x0010/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc09000-000007f81dba3fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc6e000-000007f03b8fbfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
f20.bc8: VirtualBox.exe: timestamp 0x5439147c (rc=VINF_SUCCESS)
f20.bc8: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
f20.bc8: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
f20.bc8: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x80000000 cPatchCount=0
f20.bc8: supR3HardNtChildPurify: Startup delay kludge #1/1: 516 ms, 58 sleeps
f20.bc8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
f20.bc8:  *0000000000000000-ffffffffff11ffff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000000ee0000-0000000000ebffff 0x0004/0x0004 0x0020000
f20.bc8:  *0000000000f00000-0000000000ef6fff 0x0002/0x0002 0x0040000
f20.bc8:   0000000000f09000-0000000000f01fff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000000f10000-0000000000e13fff 0x0000/0x0004 0x0020000
f20.bc8:   000000000100c000-0000000001008fff 0x0104/0x0004 0x0020000
f20.bc8:   000000000100f000-000000000100dfff 0x0004/0x0004 0x0020000
f20.bc8:  *0000000001010000-000000000100bfff 0x0002/0x0002 0x0040000
f20.bc8:   0000000001014000-0000000001007fff 0x0001/0x0000 0x0000000
f20.bc8:  *0000000001020000-000000000101dfff 0x0004/0x0004 0x0020000
f20.bc8:   0000000001022000-ffffffff82063fff 0x0001/0x0000 0x0000000
f20.bc8:  *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
f20.bc8:   000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
f20.bc8:   000000007fff0000-fffff809f0feffff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70eff0000-000007f70efccfff 0x0002/0x0002 0x0040000
f20.bc8:   000007f70f013000-000007f70f009fff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f01c000-000007f70f01afff 0x0004/0x0004 0x0020000
f20.bc8:   000007f70f01d000-000007f70f01bfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f01e000-000007f70f01bfff 0x0004/0x0004 0x0020000
f20.bc8:   000007f70f020000-000007f70ecaffff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f70f390000-000007f70f38efff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f391000-000007f70f30cfff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f415000-000007f70f413fff 0x0040/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f416000-000007f70f3d8fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f453000-000007f70f448fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f45d000-000007f70f423fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8:   000007f70f496000-000007f600e7bfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007f81dab0000-000007f81daaefff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dab1000-000007f81d979fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbe8000-000007f81dbdcfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dbf3000-000007f81dbddfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc08000-000007f81dc06fff 0x0010/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc09000-000007f81dba3fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
f20.bc8:   000007f81dc6e000-000007f03b8fbfff 0x0001/0x0000 0x0000000
f20.bc8:  *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
f20.bc8: supR3HardNtChildPurify: Done after 854 ms and 1 fixes (loop #1).
d34.d2c: Log file opened: 4.3.18r96516 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x6223f000
d34.d2c: supR3HardenedVmProcessInit: uNtDllAddr=000007f81dab0000
d34.d2c: ntdll.dll: timestamp 0x5010acd2 (rc=VINF_SUCCESS)
d34.d2c: New simple heap: #1 0000000001130000 LB 0x400000 (for 1826816 allocation)
f20.bc8: supR3HardNtEnableThreadCreation:
d34.d2c: System32:  \Device\HarddiskVolume4\Windows\System32
d34.d2c: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
d34.d2c: KnownDllPath: C:\Windows\system32
d34.d2c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
d34.d2c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
d34.d2c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
d34.d2c: Registered Dll notification callback with NTDLL.
d34.d2c: supR3HardenedMonitor_LdrLoadDll: 'KERNEL32.DLL' -> 'C:\Windows\system32\KERNEL32.DLL' [rcNt=0xc0150008]
d34.d2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
d34.d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
d34.d2c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\KERNEL32.DLL *pfFlags=0xffffffff pwszSearchPath=0000000000000801:<flags> [calling]
d34.d2c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
d34.d2c: supR3HardenedDllNotificationCallback: load   000007f81ac40000 LB 0x000f3000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
d34.d2c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
d34.d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
d34.d2c: supR3HardenedDllNotificationCallback: load   000007f81d270000 LB 0x00136000 C:\Windows\system32\KERNEL32.DLL [fFlags=0x0]
d34.d2c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
d34.d2c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007f81d270000 'C:\Windows\system32\KERNEL32.DLL'
d34.d2c: supR3HardenedDllNotificationCallback: load   000007f70f390000 LB 0x00106000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
d34.d2c: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
d34.d2c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
d34.d2c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
f20.bc8: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 242 ms, CloseEvents);
Also, I should mention that in trying to fix this bug I have disabled DEP and SEHOP temporarily, but neither had any effect.
I am also not currently running an antivirus, but I will be getting one soon, so that is not the problem.

UPDATE:
I just installed 4.3.12 and everything is working fine. Would still appreciate an answer to this, because running outdated software is usually a bad idea, but I can live with this for now.
Post Reply