Ubuntu Guests Crash When Windows Host is Unlocked
Posted: 24. Oct 2015, 11:38
I've discovered more and more often lately that if I lock my Win7 machine, and then log in some time later, I will find that if I had a VBox Ubuntu guest on, there is a very good chance that it will have crashed, saying that 0x_____ referenced memory at 0x_______. This has happened with both Ubuntu Server 14.04 x64 and Lubuntu Desktop 14.04 x64 guests, and it seems to be connected with me having upgraded VBox to 4.3.30 from 4.3.20 in September.
Any ideas would be much appreciated.
Here's (what I believe) is the relevant part of the VBox log:
Any ideas would be much appreciated.
Here's (what I believe) is the relevant part of the VBox log:
Code: Select all
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009e0 pwszName=\Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000088a280
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000088a280
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002a7a520:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdb20000 'C:\Windows\system32\WINTRUST.DLL'
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000002a7a520:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd990000 'C:\Windows\system32\CRYPT32.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8FFB8CDACDC5C9C6D9256E97FB0710E2753FFAA1
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002a7a7f0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef86c0000 'C:\Windows\system32\cryptnet.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3045645~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\apphelp.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1778.1f8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)WinVerifyTrust
1778.1f8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
1778.1f8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedDllNotificationCallback: load 000007fefd780000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd780000 'C:\Windows\system32\apphelp.dll'
2458.2250: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 23778005 ms, the end);
1dfc.ef0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 23778840 ms, the end);