| 13 | | Replying to [comment:1 jkAB]: |
| 14 | | > I tried following the instructions in the following link, but they did not work. https://forums.virtualbox.org/viewtopic.php?f=6&t=66442#p314829 |
| 15 | | > |
| 16 | | > Replying to [ticket:16864 jkAB]: |
| 17 | | > > VM's created with Manager 5.1.22 r115126 were working in Win7. |
| 18 | | > > Upgraded to Win10 Enterprise, ver 1703, build 15063.0. |
| 19 | | > > VMs will not start. |
| 20 | | > > VMs are Ubuntu Xenial 16.04. |
| 21 | | > > Tried running the repair VM Manager from the VBox installer. Did not work. |
| 22 | | > > |
| 23 | | > > On VM "Start", I get 2 popups. |
| 24 | | > > The 1st popup refers to running a cmd 'sc.exe', the results of which are posted. |
| 25 | | > > The 2nd popup refers to a file that I pasted below. |
| 26 | | > > I could not find a button to attach the file. |
| 27 | | > > |
| 28 | | > > POPUP 1) |
| 29 | | > > |
| 30 | | > > "NtCreateFile(\Device\VboxDrvStub) failed: 0x000034 |
| 31 | | > > STATUS_OBJECT_NAME_NOT_FOUND (0 retries) (RC=-101) |
| 32 | | > > where: supR3HardenedWinReSpawn |
| 33 | | > > what: 3 |
| 34 | | > > VERR_OPEN_FAILED (-101) File/Device open failed. Driver is probably stuck stopping/starting. |
| 35 | | > > Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help. |
| 36 | | > > |
| 37 | | > > (my note not part of the popup - rebooting does not help) |
| 38 | | > > |
| 39 | | > > POPUP 2) |
| 40 | | > > |
| 41 | | > > Failed to open a session for the virtual machine VM2. |
| 42 | | > > |
| 43 | | > > The virtual machine 'VM2' has terminated unexpectedly during startup with exit code 1 (0x1). More details may be available in 'C:\Users\xxxxxxxx\VirtualBox VMs\VM2\Logs\VBoxHardening.log'. |
| 44 | | > > |
| 45 | | > > Result Code: E_FAIL (0x80004005) |
| 46 | | > > Component: MachineWrap |
| 47 | | > > Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0} |
| 48 | | > > |
| 49 | | > > |
| 50 | | > > REFERENCED FILE IN the 2nd POPUP |
| 51 | | > > |
| 52 | | > > 2c4c.3040: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000054 g_uNtVerCombined=0xa03ad700 |
| 53 | | > > 2c4c.3040: \SystemRoot\System32\ntdll.dll: |
| 54 | | > > 2c4c.3040: CreationTime: 2017-03-18T20:57:39.201977500Z |
| 55 | | > > 2c4c.3040: LastWriteTime: 2017-03-18T20:57:39.201977500Z |
| 56 | | > > 2c4c.3040: ChangeTime: 2017-06-29T21:25:22.939590300Z |
| 57 | | > > 2c4c.3040: FileAttributes: 0x20 |
| 58 | | > > 2c4c.3040: Size: 0x1d7450 |
| 59 | | > > 2c4c.3040: NT Headers: 0xe0 |
| 60 | | > > 2c4c.3040: Timestamp: 0xb79b6ddb |
| 61 | | > > 2c4c.3040: Machine: 0x8664 - amd64 |
| 62 | | > > 2c4c.3040: Timestamp: 0xb79b6ddb |
| 63 | | > > 2c4c.3040: Image Version: 10.0 |
| 64 | | > > 2c4c.3040: SizeOfImage: 0x1db000 (1945600) |
| 65 | | > > 2c4c.3040: Resource Dir: 0x170000 LB 0x69398 |
| 66 | | > > 2c4c.3040: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)] |
| 67 | | > > 2c4c.3040: [Raw version resource data: 0x1700f0 LB 0x380, codepage 0x0 (reserved 0x0)] |
| 68 | | > > 2c4c.3040: ProductName: Microsoft® Windows® Operating System |
| 69 | | > > 2c4c.3040: ProductVersion: 10.0.15063.0 |
| 70 | | > > 2c4c.3040: FileVersion: 10.0.15063.0 (WinBuild.160101.0800) |
| 71 | | > > 2c4c.3040: FileDescription: NT Layer DLL |
| 72 | | > > 2c4c.3040: \SystemRoot\System32\kernel32.dll: |
| 73 | | > > 2c4c.3040: CreationTime: 2017-03-18T20:57:15.887502700Z |
| 74 | | > > 2c4c.3040: LastWriteTime: 2017-03-18T20:57:15.887502700Z |
| 75 | | > > 2c4c.3040: ChangeTime: 2017-06-29T21:25:19.532984000Z |
| 76 | | > > 2c4c.3040: FileAttributes: 0x20 |
| 77 | | > > 2c4c.3040: Size: 0xad068 |
| 78 | | > > 2c4c.3040: NT Headers: 0xf8 |
| 79 | | > > 2c4c.3040: Timestamp: 0x17a3637d |
| 80 | | > > 2c4c.3040: Machine: 0x8664 - amd64 |
| 81 | | > > 2c4c.3040: Timestamp: 0x17a3637d |
| 82 | | > > 2c4c.3040: Image Version: 10.0 |
| 83 | | > > 2c4c.3040: SizeOfImage: 0xae000 (712704) |
| 84 | | > > 2c4c.3040: Resource Dir: 0xac000 LB 0x520 |
| 85 | | > > 2c4c.3040: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] |
| 86 | | > > 2c4c.3040: [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)] |
| 87 | | > > 2c4c.3040: ProductName: Microsoft® Windows® Operating System |
| 88 | | > > 2c4c.3040: ProductVersion: 10.0.15063.0 |
| 89 | | > > 2c4c.3040: FileVersion: 10.0.15063.0 (WinBuild.160101.0800) |
| 90 | | > > 2c4c.3040: FileDescription: Windows NT BASE API Client DLL |
| 91 | | > > 2c4c.3040: \SystemRoot\System32\KernelBase.dll: |
| 92 | | > > 2c4c.3040: CreationTime: 2017-03-18T20:57:35.951701900Z |
| 93 | | > > 2c4c.3040: LastWriteTime: 2017-03-18T20:57:35.951701900Z |
| 94 | | > > 2c4c.3040: ChangeTime: 2017-06-29T21:25:19.798611800Z |
| 95 | | > > 2c4c.3040: FileAttributes: 0x20 |
| 96 | | > > 2c4c.3040: Size: 0x249bf0 |
| 97 | | > > 2c4c.3040: NT Headers: 0x100 |
| 98 | | > > 2c4c.3040: Timestamp: 0x461a0ff5 |
| 99 | | > > 2c4c.3040: Machine: 0x8664 - amd64 |
| 100 | | > > 2c4c.3040: Timestamp: 0x461a0ff5 |
| 101 | | > > 2c4c.3040: Image Version: 10.0 |
| 102 | | > > 2c4c.3040: SizeOfImage: 0x249000 (2396160) |
| 103 | | > > 2c4c.3040: Resource Dir: 0x22a000 LB 0x548 |
| 104 | | > > 2c4c.3040: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)] |
| 105 | | > > 2c4c.3040: [Raw version resource data: 0x22a0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)] |
| 106 | | > > 2c4c.3040: ProductName: Microsoft® Windows® Operating System |
| 107 | | > > 2c4c.3040: ProductVersion: 10.0.15063.0 |
| 108 | | > > 2c4c.3040: FileVersion: 10.0.15063.0 (WinBuild.160101.0800) |
| 109 | | > > 2c4c.3040: FileDescription: Windows NT BASE API Client DLL |
| 110 | | > > 2c4c.3040: \SystemRoot\System32\apisetschema.dll: |
| 111 | | > > 2c4c.3040: CreationTime: 2017-03-18T20:57:35.373527900Z |
| 112 | | > > 2c4c.3040: LastWriteTime: 2017-03-18T20:57:35.373527900Z |
| 113 | | > > 2c4c.3040: ChangeTime: 2017-06-29T21:25:14.274069100Z |
| 114 | | > > 2c4c.3040: FileAttributes: 0x20 |
| 115 | | > > 2c4c.3040: Size: 0x1ada0 |
| 116 | | > > 2c4c.3040: NT Headers: 0xc0 |
| 117 | | > > 2c4c.3040: Timestamp: 0x76544b2 |
| 118 | | > > 2c4c.3040: Machine: 0x8664 - amd64 |
| 119 | | > > 2c4c.3040: Timestamp: 0x76544b2 |
| 120 | | > > 2c4c.3040: Image Version: 10.0 |
| 121 | | > > 2c4c.3040: SizeOfImage: 0x1b000 (110592) |
| 122 | | > > 2c4c.3040: Resource Dir: 0x1a000 LB 0x408 |
| 123 | | > > 2c4c.3040: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] |
| 124 | | > > 2c4c.3040: [Raw version resource data: 0x1a060 LB 0x3a8, codepage 0x0 (reserved 0x0)] |
| 125 | | > > 2c4c.3040: ProductName: Microsoft® Windows® Operating System |
| 126 | | > > 2c4c.3040: ProductVersion: 10.0.15063.0 |
| 127 | | > > 2c4c.3040: FileVersion: 10.0.15063.0 (WinBuild.160101.0800) |
| 128 | | > > 2c4c.3040: FileDescription: ApiSet Schema DLL |
| 129 | | > > 2c4c.3040: NtOpenDirectoryObject failed on \Driver: 0xc0000022 |
| 130 | | > > 2c4c.3040: supR3HardenedWinFindAdversaries: 0x8000 |
| 131 | | > > 2c4c.3040: \SystemRoot\System32\drivers\cyprotectdrv64.sys: |
| 132 | | > > 2c4c.3040: CreationTime: 2016-06-29T19:02:46.040789700Z |
| 133 | | > > 2c4c.3040: LastWriteTime: 2017-06-27T19:18:12.518993200Z |
| 134 | | > > 2c4c.3040: ChangeTime: 2017-06-29T21:38:26.956722800Z |
| 135 | | > > 2c4c.3040: FileAttributes: 0x20 |
| 136 | | > > 2c4c.3040: Size: 0x2ffd0 |
| 137 | | > > 2c4c.3040: NT Headers: 0xf8 |
| 138 | | > > 2c4c.3040: Timestamp: 0x5926f5ef |
| 139 | | > > 2c4c.3040: Machine: 0x8664 - amd64 |
| 140 | | > > 2c4c.3040: Timestamp: 0x5926f5ef |
| 141 | | > > 2c4c.3040: Image Version: 6.1 |
| 142 | | > > 2c4c.3040: SizeOfImage: 0x130000 (1245184) |
| 143 | | > > 2c4c.3040: Resource Dir: 0x12e000 LB 0x2f0 |
| 144 | | > > 2c4c.3040: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)] |
| 145 | | > > 2c4c.3040: [Raw version resource data: 0x12e060 LB 0x28c, codepage 0x0 (reserved 0x0)] |
| 146 | | > > 2c4c.3040: ProductName: CylancePROTECT |
| 147 | | > > 2c4c.3040: ProductVersion: 2.0.1450.2 |
| 148 | | > > 2c4c.3040: FileVersion: 2.0.1450.2 |
| 149 | | > > 2c4c.3040: FileDescription: Cylance Protect Driver |
| 150 | | > > 2c4c.3040: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' |
| 151 | | > > 2c4c.3040: Calling main() |
| 152 | | > > 2c4c.3040: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 |
| 153 | | > > 2c4c.3040: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' |
| 154 | | > > 2c4c.3040: SUPR3HardenedMain: Respawn #1 |
| 155 | | > > 2c4c.3040: System32: \Device\HarddiskVolume4\Windows\System32 |
| 156 | | > > 2c4c.3040: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS |
| 157 | | > > 2c4c.3040: KnownDllPath: C:\WINDOWS\System32 |
| 158 | | > > 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports |
| 159 | | > > 2c4c.3040: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe) |
| 160 | | > > 2c4c.3040: supR3HardNtEnableThreadCreation: |
| 161 | | > > 2c4c.3040: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffb2f2a9ad0 pvNtTerminateThread=00007ffb2f2d5e00 |
| 162 | | > > 2c4c.3040: supR3HardenedWinDoReSpawn(1): New child 2d74.1148 [kernel32]. |
| 163 | | > > 2c4c.3040: supR3HardNtChildGatherData: PebBaseAddress=000000000108d000 cbPeb=0x388 |
| 164 | | > > 2c4c.3040: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffb2f230000 uNtDllChildAddr=00007ffb2f230000 |
| 165 | | > > 2c4c.3040: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffb2f2a9ad0 |
| 166 | | > > 2c4c.3040: supR3HardenedWinSetupChildInit: Start child. |
| 167 | | > > 2c4c.3040: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. |
| 168 | | > > 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/0: 516 ms, 30 sleeps |
| 169 | | > > 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION |
| 170 | | > > 2c4c.3040: *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000 |
| 171 | | > > 2c4c.3040: *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000 |
| 172 | | > > 2c4c.3040: *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000 |
| 173 | | > > 2c4c.3040: 0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000 |
| 174 | | > > 2c4c.3040: *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000 |
| 175 | | > > 2c4c.3040: 0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000 |
| 176 | | > > 2c4c.3040: 0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000 |
| 177 | | > > 2c4c.3040: *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000 |
| 178 | | > > 2c4c.3040: 0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000 |
| 179 | | > > 2c4c.3040: *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000 |
| 180 | | > > 2c4c.3040: 0000000000f61000-0000000000f6ffff 0x0001/0x0000 0x0000000 |
| 181 | | > > 2c4c.3040: *0000000000f70000-0000000000f70fff 0x0020/0x0020 0x0020000 !! |
| 182 | | > > 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000f70000 (LB 0x1000, 0000000000f70000 LB 0x1000) |
| 183 | | > > 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000f70000/0000000000f70000 LB 0/0x1000] |
| 184 | | > > 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000f70000 LB 0x90000 s=0x10000 ap=0x0 rp=0x00000000000001 |
| 185 | | > > 2c4c.3040: 0000000000f71000-0000000000ffffff 0x0001/0x0000 0x0000000 |
| 186 | | > > 2c4c.3040: *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000 |
| 187 | | > > 2c4c.3040: 000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000 |
| 188 | | > > 2c4c.3040: 0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000 |
| 189 | | > > 2c4c.3040: 0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000 |
| 190 | | > > 2c4c.3040: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 |
| 191 | | > > 2c4c.3040: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000 |
| 192 | | > > 2c4c.3040: 000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000 |
| 193 | | > > 2c4c.3040: *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000 |
| 194 | | > > 2c4c.3040: 00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000 |
| 195 | | > > 2c4c.3040: *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 196 | | > > 2c4c.3040: 00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 197 | | > > 2c4c.3040: 00007ff620db1000-00007ff620db1fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 198 | | > > 2c4c.3040: 00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 199 | | > > 2c4c.3040: 00007ff620df7000-00007ff620df7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 200 | | > > 2c4c.3040: 00007ff620df8000-00007ff620df8fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 201 | | > > 2c4c.3040: 00007ff620df9000-00007ff620dfdfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 202 | | > > 2c4c.3040: 00007ff620dfe000-00007ff620dfefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 203 | | > > 2c4c.3040: 00007ff620dff000-00007ff620dfffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 204 | | > > 2c4c.3040: 00007ff620e00000-00007ff620e03fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 205 | | > > 2c4c.3040: 00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 206 | | > > 2c4c.3040: 00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000 |
| 207 | | > > 2c4c.3040: *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 208 | | > > 2c4c.3040: 00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 209 | | > > 2c4c.3040: 00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 210 | | > > 2c4c.3040: 00007ffb2f385000-00007ffb2f38cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 211 | | > > 2c4c.3040: 00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 212 | | > > 2c4c.3040: 00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 213 | | > > 2c4c.3040: 00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 214 | | > > 2c4c.3040: 00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 215 | | > > 2c4c.3040: 00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000 |
| 216 | | > > 2c4c.3040: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000 |
| 217 | | > > 2c4c.3040: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS) |
| 218 | | > > 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports |
| 219 | | > > 2c4c.3040: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports |
| 220 | | > > 2c4c.3040: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x8000 |
| 221 | | > > 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/1: 514 ms, 31 sleeps |
| 222 | | > > 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION |
| 223 | | > > 2c4c.3040: *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000 |
| 224 | | > > 2c4c.3040: *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000 |
| 225 | | > > 2c4c.3040: *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000 |
| 226 | | > > 2c4c.3040: 0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000 |
| 227 | | > > 2c4c.3040: *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000 |
| 228 | | > > 2c4c.3040: 0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000 |
| 229 | | > > 2c4c.3040: 0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000 |
| 230 | | > > 2c4c.3040: *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000 |
| 231 | | > > 2c4c.3040: 0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000 |
| 232 | | > > 2c4c.3040: *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000 |
| 233 | | > > 2c4c.3040: 0000000000f61000-0000000000ffffff 0x0001/0x0000 0x0000000 |
| 234 | | > > 2c4c.3040: *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000 |
| 235 | | > > 2c4c.3040: 000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000 |
| 236 | | > > 2c4c.3040: 0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000 |
| 237 | | > > 2c4c.3040: 0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000 |
| 238 | | > > 2c4c.3040: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 |
| 239 | | > > 2c4c.3040: *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000 |
| 240 | | > > 2c4c.3040: 000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000 |
| 241 | | > > 2c4c.3040: *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000 |
| 242 | | > > 2c4c.3040: 00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000 |
| 243 | | > > 2c4c.3040: *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 244 | | > > 2c4c.3040: 00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 245 | | > > 2c4c.3040: 00007ff620db1000-00007ff620db1fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 246 | | > > 2c4c.3040: 00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 247 | | > > 2c4c.3040: 00007ff620df7000-00007ff620e03fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 248 | | > > 2c4c.3040: 00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe |
| 249 | | > > 2c4c.3040: 00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000 |
| 250 | | > > 2c4c.3040: *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 251 | | > > 2c4c.3040: 00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 252 | | > > 2c4c.3040: 00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 253 | | > > 2c4c.3040: 00007ffb2f385000-00007ffb2f388fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 254 | | > > 2c4c.3040: 00007ffb2f389000-00007ffb2f38cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 255 | | > > 2c4c.3040: 00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 256 | | > > 2c4c.3040: 00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 257 | | > > 2c4c.3040: 00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 258 | | > > 2c4c.3040: 00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll |
| 259 | | > > 2c4c.3040: 00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000 |
| 260 | | > > 2c4c.3040: *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000 |
| 261 | | > > 2c4c.3040: supR3HardNtChildPurify: Done after 1173 ms and 1 fixes (loop #1). |
| 262 | | > > 2c4c.3040: supR3HardNtEnableThreadCreation: |
| 263 | | > > 2d74.1148: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03ad700 |
| 264 | | > > 2d74.1148: supR3HardenedVmProcessInit: uNtDllAddr=00007ffb2f230000 g_uNtVerCombined=0xa03ad700 |
| 265 | | > > 2d74.1148: ntdll.dll: timestamp 0xb79b6ddb (rc=VINF_SUCCESS) |
| 266 | | > > 2d74.1148: New simple heap: #1 0000000001300000 LB 0x400000 (for 1945600 allocation) |
| 267 | | > > 2d74.1148: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox' |
| 268 | | > > 2d74.1148: System32: \Device\HarddiskVolume4\Windows\System32 |
| 269 | | > > 2d74.1148: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS |
| 270 | | > > 2d74.1148: KnownDllPath: C:\WINDOWS\System32 |
| 271 | | > > 2d74.1148: supR3HardenedVmProcessInit: Opening vboxdrv stub... |
| 272 | | > > 2d74.1148: Error opening VBoxDrvStub: STATUS_OBJECT_NAME_NOT_FOUND |
| 273 | | > > 2d74.1148: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034 |
| 274 | | > > 2d74.1148: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3) |
| 275 | | > > 2d74.1148: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) |
| 276 | | > > |
| 277 | | > > Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help. |
| 278 | | > > 2c4c.3040: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) |
| 279 | | > > |
| 280 | | > > Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help. |
| 281 | | > > 2c4c.3040: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3) |
| 282 | | > > 2c4c.3040: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) |
| 283 | | > > |
| 284 | | > > Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help. |
| 285 | | > > |
| 286 | | > > COMMAND - SC.EXE |
| 287 | | > > |
| 288 | | > > sc.exe query vboxdrv |
| 289 | | > > [SC] EnumQueryServicesStatus:OpenService FAILED 1060: |
| 290 | | > > |
| 291 | | > > The specified service does not exist as an installed service. |
| 292 | | > > |