Windows VirtualBox security check fails and hangs

[jrasmussen0]

VirtualBox 4.3.22 fails to start a guest OS because WinVerify security challenge fails. After attempting to start, VirtualBox.exe process cannot be killed.

I can successfully install and run VM guests on VirtualBox 4.3.12. I have Avecto Privilege Guard 3.8.320 installed on my machine by corporate policy. It looks like the PGDriver.sys driver inserts itself in every executable process to potentially elevate processes like sudo or runas.

If I change the registry setting HKLM\software\Avecto\privilege guard client\HookLoadMethod from 0x3 to 0x2 and reboot VirtualBox 4.3.22 works. Avecto support says that the 0x2 method uses a legacy appinit_dlls method to inject the DLL used for XP and can optionally be used on Win7 but this method is not available on Windows 8 and above. The new PGDriver.sys driver method is designed for Win7 and above. I have submitted a support ticket to Avecto support but it sounds like VirtualBox has needed to make compromises for AV-like security software.

Another side issue is that the VirtualBox.exe process is not able to close and the computer will need to have the power button held for 10 seconds for force the power off.

Host: Windows 7 64-bit SP1 Special security software: Avecto Privilege Guard 3.8.320 installed with HookLoadMethod = 3 which uses the PGDriver.sys driver

[jrasmussen0]

VirtualBox Startup Log

[aeichner]

Please reopen if still relevant with a recent VirtualBox release.