Avecto Defendpoint Breaks Virtualbox

[Nicolas]

Hi, I have Avecto Defendpoint installed on y corporate computer (company policy, no way to remove it), and it prevents virtualbox from starting. From Hardeoning log:

3144.1518: supR3HardenedMonitor_LdrLoadDll: Refusing to load 'C:\Program Files\Avecto\Privilege Guard Client\PGHook.dll' as it is expected to create undesirable threads that will upset our respawn checks (returning STATUS_TOO_MANY_THREADS)

VB 5.2.10 was not affected by this issue.

Best regards, NicolaF_

[Nicolas]

Edit: VB 5.2.10 and 5.2.2 (at least) are also affected.

[Socratis]

Replying to NicolaF_:

I have Avecto Defendpoint installed on y corporate computer (company policy, no way to remove it)

Tell Avecto to fix it then. Read really carefully, and point Avecto to the following FAQ: ​Diagnosing VirtualBox Hardening Issues. They'll know what to do, or advise you how to exclude VirtualBox from their aggressive scanning.

This is not a VirtualBox problem as you'll read in the FAQ, this is a problem with their signing of their application. They have to address that...

[Nicolas]

Hi socratis,

This is not a signing issue IMO. To me the message is pretty clear that this DLL has been blacklisted by VB.

Regards, NicolaF_

[Socratis]

Yes, exactly. Because of a signing issue! Read the FAQ. Again...