Cant start any VM 64/32bit Linux/Windows

[badokun]

After doing a clean install of VB 5.0.8 (also tried latest 5.0.10) I'm unable to start any VM. So by just creating a new VM, say Linux Ubuntu 64bit, and clicking on Start it immediately crashes. I see a lot of [lacks WinVerifyTrust] messages and not sure if it's related to some missing cert.

Company policy prevents uploads, so below is just an excerpt. The crash message from VB is" WinVerifyTrust failed on stub executable: WinVerifyTrust failed with hrc=TRUST_E_SYSTEM_ERROR on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtuableBox.exe (rc=-22919) ..... where: VirtualBox what: 1 VERR_LDRVI_UNSUPPORTED_ARCH (-22919) - Unsupported image target architecture

I have Intel Virtualization enabled in the BIOS. Any help greatly appreciated

Code: Select all

29cc.28f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007c87a0:C:\Program Files\Oracle\VirtualBox;C:\windows\system32;C:\windows\system;C:\windows;.;C:\Program Files (x86)\IBM\WebSphere MQ\Java\lib;C:\Python27\;C:\Python27\Scripts;C:\Perl\bin;c:\apps\oracle\clients\112_32\bin;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;c:\program files\CSSystem;c:\program files (x86)\CSSystem;c:\util\iDesktop\tools\;C:\Program Files (x86)\Java\jdk1.8.0_51\jre\bin\client;C:\Program Files (x86)\Java\jdk1.8.0_51\jre\bin;C:\Program Files\Gemalto\Access Client\v5\;C:\Program Files (x86)\Gemalto\Access Client\v5\;C:\Program Files (x86)\Microsoft Application Virtualization Client;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\CollabNet\Subversion Client;C:\Program Files\TortoiseSVN\bin;C:\Program Files\TortoiseGit\bin;C:\Program Files (x86)\nodejs\;C:\Users\hjanseva\.dnx\bin;C:\Program Files\Microsoft DNX\Dnvm\;C:\Program Files\Sybase\IQ-15_4\Bin64;C:\Program Files\Sybase\IQ-15_4\Bin32;C:\Program Files\Sybase\DataAccess64\ADONET\dll;C:\Program Files\Sybase\DataAccess\ADONET\dll;C:\Program Files\Sybase\DataAccess64\ODBC\dll;C:\Program Files\Sybase\DataAccess\ODBC\dll;C:\Program Files\Sybase\DataAccess64\OLEDB\dll;C:\Program Files\Sybase\DataAccess\OLEDB\dll;C:\Program Files\Sybase\OCS-15_0\lib3p64;C:\Program Files\Sybase\OCS-15_0\lib3p;C:\Program Files\Sybase\OCS-15_0\dll;C:\Program Files\Sybase\OCS-15_0\bin;C:\windows\SysWOW64\;C:\windows\SysWOW64\Wbem;C:\windows\SysWOW64\WindowsPowerShell\v1.0;C:\Program Files (x86)\IBM\WebSphere MQ\bin64;C:\Program Files (x86)\IBM\Web;C:\Program Files\Citrix\ICAService\;C:\Program Files\Citrix\System32\;C:\Program Files\Citrix\Virtual Desktop Agent\;C:\Program Files (x86)\Common Files\Citrix\system32;C:\Program Files (x86)\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\;C:\Apps\Nuget\;C:\Program Files (x86)\Microsoft VS Code\bin;C:\Users\hjanseva\AppData\Roaming\npm;C:\Program Files\Docker Toolbox [calling]
29cc.28f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc620000 'C:\windows\system32\CRYPTSP.dll'
29cc.28f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -23021 (0xffffa613)) on \Device\HarddiskVolume2\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll [lacks WinVerifyTrust]
29cc.28f8: Error (rc=0):
29cc.28f8: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -23021 (0xffffa613) fImage=1 fProtect=0x0 fAccess=0x0 cHits=2 \Device\HarddiskVolume2\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll
29cc.28f8: Error (rc=0):
29cc.28f8: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll' (C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll): rcNt=0xc0000190
29cc.28f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll'
29cc.28f8: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x80096001 (TRUST_E_SYSTEM_ERROR) on '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe'
29cc.28f8: Error -22919 in VirtualBox! (enmWhat=1)

[socratis]

I see a lot of [lacks WinVerifyTrust] messages and not sure if it's related to some missing cert.

Yeap, you've been bitten by the Hardened Security issue. Take a look at Discussion of Problems due to Hardened Security. You most certainly have a problem with the Entrust software, as can be seen from the partial log (next time, please zip and include a complete log):

29cc.28f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -23021 (0xffffa613)) on \Device\HarddiskVolume2\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll [lacks WinVerifyTrust]
29cc.28f8: Error (rc=0):
29cc.28f8: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -23021 (0xffffa613) fImage=1 fProtect=0x0 fAccess=0x0 cHits=2 \Device\HarddiskVolume2\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll
29cc.28f8: Error (rc=0):
29cc.28f8: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll' (C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll): rcNt=0xc0000190
29cc.28f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Common Files\Entrust\ESP\eeccpbp64.dll'

[loukingjr]

Company policy prevents uploads, so below is just an excerpt.

Possible explanation for an incomplete log.

[badokun]

Thanks for the reply. I'll dig a little deeper.

To be sure, [lacks WinVerifyTrust], is not expected, or is it fine?

[loukingjr]

No it is not fine. Entrust seems to be at least one of the reasons your VMs won't run.

[badokun]

Hmmm... I seem to be getting a lot of those errors. Here's an excerpt from the first hit.How is it that core Windows libraries are giving me this error?

Code: Select all

ec4.228c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
ec4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
ec4.228c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
ec4.228c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ec4.228c: supR3HardenedDllNotificationCallback: load   0000000077460000 LB 0x0011f000 C:\windows\system32\kernel32.dll [fFlags=0x0]
ec4.228c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ec4.228c: supR3HardenedDllNotificationCallback: load   000007fefd680000 LB 0x0006b000 C:\windows\system32\KERNELBASE.dll [fFlags=0x0]
ec4.228c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
ec4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
ec4.228c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000077460000 'C:\windows\system32\kernel32.dll'
ec4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll)
ec4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll
ec4.228c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007887a0:C:\Program Files\Oracle\VirtualBox;C:\windows\system32;C:\windows\system;C:\windows;.;C:\Program Files (x86)\IBM\WebSphere MQ\Java\lib;C:\Python27\;C:\Python27\Scripts;C:\Perl\bin;c:\apps\oracle\clients\112_32\bin;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;c:\program files\CSSystem;c:\program files (x86)\CSSystem;c:\util\iDesktop\tools\;C:\Program Files (x86)\Java\jdk1.8.0_51\jre\bin\client;C:\Program Files (x86)\Java\jdk1.8.0_51\jre\bin;C:\Program Files\Gemalto\Access Client\v5\;C:\Program Files (x86)\Gemalto\Access Client\v5\;C:\Program Files (x86)\Microsoft Application Virtualization Client;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\CollabNet\Subversion Client;C:\Program Files\TortoiseSVN\bin;C:\Program Files\TortoiseGit\bin;C:\Program Files (x86)\nodejs\;C:\Users\hjanseva\.dnx\bin;C:\Program Files\Microsoft DNX\Dnvm\;C:\Program Files\Sybase\IQ-15_4\Bin64;C:\Program Files\Sybase\IQ-15_4\Bin32;C:\Program Files\Sybase\DataAccess64\ADONET\dll;C:\Program Files\Sybase\DataAccess\ADONET\dll;C:\Program Files\Sybase\DataAccess64\ODBC\dll;C:\Program Files\Sybase\DataAccess\ODBC\dll;C:\Program Files\Sybase\DataAccess64\OLEDB\dll;C:\Program Files\Sybase\DataAccess\OLEDB\dll;C:\Program Files\Sybase\OCS-15_0\lib3p64;C:\Program Files\Sybase\OCS-15_0\lib3p;C:\Program Files\Sybase\OCS-15_0\dll;C:\Program Files\Sybase\OCS-15_0\bin;C:\windows\SysWOW64\;C:\windows\SysWOW64\Wbem;C:\windows\SysWOW64\WindowsPowerShell\v1.0;C:\Program Files (x86)\IBM\WebSphere MQ\bin64;C:\Program Files (x86)\IBM\Web;C:\Program Files\Citrix\ICAService\;C:\Program Files\Citrix\System32\;C:\Program Files\Citrix\Virtual Desktop Agent\;C:\Program Files (x86)\Common Files\Citrix\system32;C:\Program Files (x86)\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\;C:\Apps\Nuget\;C:\Program Files (x86)\Microsoft VS Code\bin;C:\Users\hjanseva\AppData\Roaming\npm;C:\Program Files\Docker Toolbox [calling]
ec4.228c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll [lacks WinVerifyTrust]
ec4.228c: supR3HardenedDllNotificationCallback: load   000007fefce80000 LB 0x0001c000 C:\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll [fFlags=0x0]
ec4.228c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\AppSense\Environment Manager\Agent\EmLoader.dll [lacks WinVerifyTrust]
ec4.228c: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
ec4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
ec4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll

[loukingjr]

See: viewtopic.php?f=6&t=67840

[socratis]

See: viewtopic.php?f=6&t=67840

Yeah, I already told him that, but apparently educating oneself is too much work, and the preferred solution would be to have a custom, personalized response to each and every user that faces the exact same problem...

Take a look at Discussion of Problems due to Hardened Security.

[loukingjr]

Some people just don't catch on I suppose.