HyperDbg with VirtualBox 4.2.6 not working

[laurent.d...@gmail.com]

Dear All,

I tried to install the HyperDbg on a Windows XP SP2 running in VirtualBox 4.2.6.
Unfortunately when I tried to install it, I got the following error: "VMX Support Not Present". I, therefore, checked the presence of the Intel Virtualzation technology
in the Guest by running the "Intel(R) Processor ID" utility. It is said "Intel(R) Virtualization Technology: Yes".
Therefore I do not understand the error. Is there anybody else that managed to run the debugger in VirtualBox ?

Here is a kernel debug log provided by DebugView:
00000001    0.00000000    [vmm] Driver Routines                          [00000000]     
00000002    0.00000670    [vmm] ---------------                          [00000000]     
00000003    0.00001509    [vmm]    Driver Entry                          [B57E2512]     
00000004    0.00002151    [vmm]    Driver Unload                         [B57E2444]     
00000005    0.00002794    [vmm]    StartVMX                              [B57E193C]     
00000006    0.00003408    [vmm]    VMMEntryPoint                         [B57E2AE8]     
00000007    0.00012292    [vmm] VMXONRegion virtual address              [F79DE000]     
00000008    0.00013242    [vmm] VMXONRegion physical address             [1C140000]     
00000009    0.00016008    [vmm] VMCSRegion virtual address               [F7992000]     
00000010    0.00016874    [vmm] VMCSRegion physical address              [1C001000]     
00000011    0.00017712    [vmm] VMMStack                                 [8908F000]     
00000012    0.00020394    [vmm] I/O bitmap A virtual address             [F79A4000]     
00000013    0.00021260    [vmm] I/O bitmap A physical address            [1BF82000]     
00000014    0.00038357    [vmm] I/O bitmap A virtual address             [F7A0A000]     
00000015    0.00039195    [vmm] I/O bitmap A physical address            [1C043000]     
00000016    0.00042044    [vmm] VMMIDT                                   [F7990000]     
00000017    0.00044363    [*] Starting PCI scan     
00000018    0.00049280    [*] Found device! Vendor: 8086 device: 1237 header: 00     
00000019    0.00114400    [*] Found device! Vendor: 8086 device: 7000 header: 00     
00000020    0.00177201    [*] Found device! Vendor: 8086 device: 7111 header: 00     
00000021    0.00241930    [*] Found device! Vendor: 80ee device: beef header: 00     
00000022    0.00303614    [D] Prefetchable PCI memory at e0000000     
00000023    0.00304340    [*] Found PCI display region at physical address e0000000     
00000024    0.01648673    [vmm] [HyperDbg] Initialized!                  [00000000]     
00000025    0.02840920    [vmm] Guest Return EIP                         [B57E283B]     
00000026    0.02844998    [vmm] Enabling VMX mode on CPU 0               [00000000]     
00000027    0.03006192    [vmm] Running on Processor                     [00000000]     
00000028    0.03011081    [vmm] GDT Base                                 [8003F000]     
00000029    0.03014378    [vmm] GDT Limit                                [000003FF]     
00000030    0.03018289    [vmm] IDT Base                                 [8003F400]     
00000031    0.03021501    [vmm] IDT Limit                                [000007FF]     
00000032    0.03027117    [vmm] VMX Support Not Present.                 [00000209]     
00000033    0.03109613    [vmm] Running on Processor                     [00000000]     
00000034    0.03114083    [vmm] ERROR : Launch aborted.                  [00000000]     
00000035    0.03118776    [vmm] [HyperDbg] Unloading...                  [00000000]
00000036    188.50973511    watchdog!WdUpdateRecoveryState: Recovery enabled.   

Thank you in advance for your help,

Best regards,
/Laurent Delosières

[Aristide Fattori]

Hi there,

so far, we never tested hyperdbg inside a VBox guest (as nested VT support is quite recent on that platform). 

Which version are you using? By a quick glance at debug prints I guess you are using an old version or a precompiled package. Could you try with the latest (svn) version?

Let us know if you find any bug that prevent hyperdbg from running inside VBox and we will try to fix it ASAP.

Cheers,

Aristide   

--
GnuPG Key on keyserver.pgp.com ID 0x25578128
http://security.dico.unimi.it/~joystick/