264.608: Log file opened: 4.3.26r98988 g_hStartupLog=00001fe8 g_uNtVerCombined=0x510a2830 264.608: \SystemRoot\System32\ntdll.dll: 264.608: CreationTime: 2004-08-17T12:04:06.000000000Z 264.608: LastWriteTime: 2008-04-14T19:40:20.000000000Z 264.608: ChangeTime: 2014-06-01T21:28:55.078125000Z 264.608: FileAttributes: 0x20 264.608: Size: 0xad600 264.608: NT Headers: 0xe0 264.608: Timestamp: 0x480381ea 264.608: Machine: 0x14c - i386 264.608: Timestamp: 0x480381ea 264.608: Image Version: 5.1 264.608: SizeOfImage: 0xb0000 (720896) 264.608: Resource Dir: 0x80000 LB 0x2cf48 264.608: \SystemRoot\System32\kernel32.dll: 264.608: CreationTime: 2004-08-17T12:04:20.000000000Z 264.608: LastWriteTime: 2008-04-14T19:40:40.000000000Z 264.608: ChangeTime: 2014-06-01T21:28:54.578125000Z 264.608: FileAttributes: 0x20 264.608: Size: 0xf3200 264.608: NT Headers: 0xf0 264.608: Timestamp: 0x480381ea 264.608: Machine: 0x14c - i386 264.608: Timestamp: 0x480381ea 264.608: Image Version: 5.1 264.608: SizeOfImage: 0xf8000 (1015808) 264.608: Resource Dir: 0x8a000 LB 0x6772c 264.608: supR3HardenedWinFindAdversaries: 0x0 264.608: Calling main() 264.608: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 264.608: SUPR3HardenedMain: Respawn #1 264.608: System32: \Device\HarddiskVolume2\WINDOWS.0\system32 264.608: WinSxS: \Device\HarddiskVolume2\WINDOWS.0\WinSxS 264.608: KnownDllPath: C:\WINDOWS.0\system32 264.608: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 264.608: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) 264.608: supR3HardNtEnableThreadCreation: 264.608: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c901166 pvNtTerminateThread=7c90de60 264.608: supR3HardenedWinDoReSpawn(1): New child fd0.afc [kernel32]. 264.608: supR3HardNtChildGatherData: PebBaseAddress=7ffd7000 cbPeb=0x20c 264.608: supR3HardNtPuChFindNtdll: uNtDllParentAddr=7c900000 uNtDllChildAddr=7c900000 264.608: supR3HardenedWinSetupChildInit: uLdrInitThunk=7c901166 264.608: supR3HardenedWinSetupChildInit: Start child. 264.608: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 15 ms. 264.608: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 0 sleeps 264.608: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 264.608: *00000000-fffeffff 0x0001/0x0000 0x0000000 264.608: *00010000-0000dfff 0x0004/0x0004 0x0020000 264.608: 00012000-00003fff 0x0001/0x0000 0x0000000 264.608: *00020000-0001efff 0x0004/0x0004 0x0020000 264.608: 00021000-00011fff 0x0001/0x0000 0x0000000 264.608: *00030000-fff31fff 0x0000/0x0004 0x0020000 264.608: 0012e000-0012cfff 0x0104/0x0004 0x0020000 264.608: 0012f000-0012dfff 0x0004/0x0004 0x0020000 264.608: *00130000-0012cfff 0x0002/0x0002 0x0040000 264.608: 00133000-ffe65fff 0x0001/0x0000 0x0000000 264.608: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00401000-0038bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00476000-00474fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00477000-00449fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a4000-004a2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a5000-004a3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a6000-004a4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a7000-004a5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a8000-004a5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004aa000-004a6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004ad000-00479fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004e0000-840bffff 0x0001/0x0000 0x0000000 264.608: *7c900000-7c8fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c901000-7c886fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c97b000-7c975fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c980000-7c94ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c9b0000-793affff 0x0001/0x0000 0x0000000 264.608: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000 264.608: 7ffd4000-7ffd0fff 0x0001/0x0000 0x0000000 264.608: *7ffd7000-7ffd5fff 0x0004/0x0004 0x0020000 264.608: 7ffd8000-7ffd0fff 0x0001/0x0000 0x0000000 264.608: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000 264.608: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000 264.608: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000 264.608: VirtualBox.exe: timestamp 0x5507167b (rc=VINF_SUCCESS) 264.608: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 264.608: '\Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll' has no imports 264.608: ntdll.dll: Differences in section #3 (.rsrc) between file and memory: 264.608: 7c9acf48 / 0x00acf48: 00 != 50 264.608: 7c9acf49 / 0x00acf49: 00 != 41 264.608: 7c9acf4a / 0x00acf4a: 00 != 44 264.608: 7c9acf4b / 0x00acf4b: 00 != 44 264.608: 7c9acf4c / 0x00acf4c: 00 != 49 264.608: 7c9acf4d / 0x00acf4d: 00 != 4e 264.608: 7c9acf4e / 0x00acf4e: 00 != 47 264.608: 7c9acf4f / 0x00acf4f: 00 != 58 264.608: 7c9acf50 / 0x00acf50: 00 != 58 264.608: 7c9acf51 / 0x00acf51: 00 != 50 264.608: 7c9acf52 / 0x00acf52: 00 != 41 264.608: 7c9acf53 / 0x00acf53: 00 != 44 264.608: 7c9acf54 / 0x00acf54: 00 != 44 264.608: 7c9acf55 / 0x00acf55: 00 != 49 264.608: 7c9acf56 / 0x00acf56: 00 != 4e 264.608: 7c9acf57 / 0x00acf57: 00 != 47 264.608: 7c9acf58 / 0x00acf58: 00 != 50 264.608: 7c9acf59 / 0x00acf59: 00 != 41 264.608: 7c9acf5a / 0x00acf5a: 00 != 44 264.608: 7c9acf5b / 0x00acf5b: 00 != 44 264.608: 7c9acf5c / 0x00acf5c: 00 != 49 264.608: 7c9acf5d / 0x00acf5d: 00 != 4e 264.608: 7c9acf5e / 0x00acf5e: 00 != 47 264.608: 7c9acf5f / 0x00acf5f: 00 != 58 264.608: 7c9acf60 / 0x00acf60: 00 != 58 264.608: 7c9acf61 / 0x00acf61: 00 != 50 264.608: 7c9acf62 / 0x00acf62: 00 != 41 264.608: 7c9acf63 / 0x00acf63: 00 != 44 264.608: 7c9acf64 / 0x00acf64: 00 != 44 264.608: 7c9acf65 / 0x00acf65: 00 != 49 264.608: 7c9acf66 / 0x00acf66: 00 != 4e 264.608: 7c9acf67 / 0x00acf67: 00 != 47 264.608: 7c9acf68 / 0x00acf68: 00 != 50 264.608: 7c9acf69 / 0x00acf69: 00 != 41 264.608: 7c9acf6a / 0x00acf6a: 00 != 44 264.608: 7c9acf6b / 0x00acf6b: 00 != 44 264.608: 7c9acf6c / 0x00acf6c: 00 != 49 264.608: 7c9acf6d / 0x00acf6d: 00 != 4e 264.608: 7c9acf6e / 0x00acf6e: 00 != 47 264.608: 7c9acf6f / 0x00acf6f: 00 != 58 264.608: 7c9acf70 / 0x00acf70: 00 != 58 264.608: 7c9acf71 / 0x00acf71: 00 != 50 264.608: 7c9acf72 / 0x00acf72: 00 != 41 264.608: 7c9acf73 / 0x00acf73: 00 != 44 264.608: 7c9acf74 / 0x00acf74: 00 != 44 264.608: 7c9acf75 / 0x00acf75: 00 != 49 264.608: 7c9acf76 / 0x00acf76: 00 != 4e 264.608: 7c9acf77 / 0x00acf77: 00 != 47 264.608: 7c9acf78 / 0x00acf78: 00 != 50 264.608: 7c9acf79 / 0x00acf79: 00 != 41 264.608: 7c9acf7a / 0x00acf7a: 00 != 44 264.608: 7c9acf7b / 0x00acf7b: 00 != 44 264.608: 7c9acf7c / 0x00acf7c: 00 != 49 264.608: 7c9acf7d / 0x00acf7d: 00 != 4e 264.608: 7c9acf7e / 0x00acf7e: 00 != 47 264.608: 7c9acf7f / 0x00acf7f: 00 != 58 264.608: 7c9acf80 / 0x00acf80: 00 != 58 264.608: 7c9acf81 / 0x00acf81: 00 != 50 264.608: 7c9acf82 / 0x00acf82: 00 != 41 264.608: 7c9acf83 / 0x00acf83: 00 != 44 264.608: 7c9acf84 / 0x00acf84: 00 != 44 264.608: 7c9acf85 / 0x00acf85: 00 != 49 264.608: 7c9acf86 / 0x00acf86: 00 != 4e 264.608: 7c9acf87 / 0x00acf87: 00 != 47 264.608: 7c9acf88 / 0x00acf88: 00 != 50 264.608: 7c9acf89 / 0x00acf89: 00 != 41 264.608: 7c9acf8a / 0x00acf8a: 00 != 44 264.608: 7c9acf8b / 0x00acf8b: 00 != 44 264.608: 7c9acf8c / 0x00acf8c: 00 != 49 264.608: 7c9acf8d / 0x00acf8d: 00 != 4e 264.608: 7c9acf8e / 0x00acf8e: 00 != 47 264.608: 7c9acf8f / 0x00acf8f: 00 != 58 264.608: 7c9acf90 / 0x00acf90: 00 != 58 264.608: 7c9acf91 / 0x00acf91: 00 != 50 264.608: 7c9acf92 / 0x00acf92: 00 != 41 264.608: 7c9acf93 / 0x00acf93: 00 != 44 264.608: 7c9acf94 / 0x00acf94: 00 != 44 264.608: 7c9acf95 / 0x00acf95: 00 != 49 264.608: 7c9acf96 / 0x00acf96: 00 != 4e 264.608: 7c9acf97 / 0x00acf97: 00 != 47 264.608: 7c9acf98 / 0x00acf98: 00 != 50 264.608: 7c9acf99 / 0x00acf99: 00 != 41 264.608: 7c9acf9a / 0x00acf9a: 00 != 44 264.608: 7c9acf9b / 0x00acf9b: 00 != 44 264.608: 7c9acf9c / 0x00acf9c: 00 != 49 264.608: 7c9acf9d / 0x00acf9d: 00 != 4e 264.608: 7c9acf9e / 0x00acf9e: 00 != 47 264.608: 7c9acf9f / 0x00acf9f: 00 != 58 264.608: 7c9acfa0 / 0x00acfa0: 00 != 58 264.608: 7c9acfa1 / 0x00acfa1: 00 != 50 264.608: 7c9acfa2 / 0x00acfa2: 00 != 41 264.608: 7c9acfa3 / 0x00acfa3: 00 != 44 264.608: 7c9acfa4 / 0x00acfa4: 00 != 44 264.608: 7c9acfa5 / 0x00acfa5: 00 != 49 264.608: 7c9acfa6 / 0x00acfa6: 00 != 4e 264.608: 7c9acfa7 / 0x00acfa7: 00 != 47 264.608: 7c9acfa8 / 0x00acfa8: 00 != 50 264.608: 7c9acfa9 / 0x00acfa9: 00 != 41 264.608: 7c9acfaa / 0x00acfaa: 00 != 44 264.608: 7c9acfab / 0x00acfab: 00 != 44 264.608: 7c9acfac / 0x00acfac: 00 != 49 264.608: 7c9acfad / 0x00acfad: 00 != 4e 264.608: 7c9acfae / 0x00acfae: 00 != 47 264.608: 7c9acfaf / 0x00acfaf: 00 != 58 264.608: 7c9acfb0 / 0x00acfb0: 00 != 58 264.608: 7c9acfb1 / 0x00acfb1: 00 != 50 264.608: 7c9acfb2 / 0x00acfb2: 00 != 41 264.608: 7c9acfb3 / 0x00acfb3: 00 != 44 264.608: 7c9acfb4 / 0x00acfb4: 00 != 44 264.608: 7c9acfb5 / 0x00acfb5: 00 != 49 264.608: 7c9acfb6 / 0x00acfb6: 00 != 4e 264.608: 7c9acfb7 / 0x00acfb7: 00 != 47 264.608: 7c9acfb8 / 0x00acfb8: 00 != 50 264.608: 7c9acfb9 / 0x00acfb9: 00 != 41 264.608: 7c9acfba / 0x00acfba: 00 != 44 264.608: 7c9acfbb / 0x00acfbb: 00 != 44 264.608: 7c9acfbc / 0x00acfbc: 00 != 49 264.608: 7c9acfbd / 0x00acfbd: 00 != 4e 264.608: 7c9acfbe / 0x00acfbe: 00 != 47 264.608: 7c9acfbf / 0x00acfbf: 00 != 58 264.608: 7c9acfc0 / 0x00acfc0: 00 != 58 264.608: 7c9acfc1 / 0x00acfc1: 00 != 50 264.608: 7c9acfc2 / 0x00acfc2: 00 != 41 264.608: 7c9acfc3 / 0x00acfc3: 00 != 44 264.608: 7c9acfc4 / 0x00acfc4: 00 != 44 264.608: 7c9acfc5 / 0x00acfc5: 00 != 49 264.608: 7c9acfc6 / 0x00acfc6: 00 != 4e 264.608: 7c9acfc7 / 0x00acfc7: 00 != 47 264.608: 7c9acfc8 / 0x00acfc8: 00 != 50 264.608: 7c9acfc9 / 0x00acfc9: 00 != 41 264.608: 7c9acfca / 0x00acfca: 00 != 44 264.608: 7c9acfcb / 0x00acfcb: 00 != 44 264.608: 7c9acfcc / 0x00acfcc: 00 != 49 264.608: 7c9acfcd / 0x00acfcd: 00 != 4e 264.608: 7c9acfce / 0x00acfce: 00 != 47 264.608: 7c9acfcf / 0x00acfcf: 00 != 58 264.608: 7c9acfd0 / 0x00acfd0: 00 != 58 264.608: 7c9acfd1 / 0x00acfd1: 00 != 50 264.608: 7c9acfd2 / 0x00acfd2: 00 != 41 264.608: 7c9acfd3 / 0x00acfd3: 00 != 44 264.608: 7c9acfd4 / 0x00acfd4: 00 != 44 264.608: 7c9acfd5 / 0x00acfd5: 00 != 49 264.608: 7c9acfd6 / 0x00acfd6: 00 != 4e 264.608: 7c9acfd7 / 0x00acfd7: 00 != 47 264.608: 7c9acfd8 / 0x00acfd8: 00 != 50 264.608: 7c9acfd9 / 0x00acfd9: 00 != 41 264.608: 7c9acfda / 0x00acfda: 00 != 44 264.608: 7c9acfdb / 0x00acfdb: 00 != 44 264.608: 7c9acfdc / 0x00acfdc: 00 != 49 264.608: 7c9acfdd / 0x00acfdd: 00 != 4e 264.608: 7c9acfde / 0x00acfde: 00 != 47 264.608: 7c9acfdf / 0x00acfdf: 00 != 58 264.608: 7c9acfe0 / 0x00acfe0: 00 != 58 264.608: 7c9acfe1 / 0x00acfe1: 00 != 50 264.608: 7c9acfe2 / 0x00acfe2: 00 != 41 264.608: 7c9acfe3 / 0x00acfe3: 00 != 44 264.608: 7c9acfe4 / 0x00acfe4: 00 != 44 264.608: 7c9acfe5 / 0x00acfe5: 00 != 49 264.608: 7c9acfe6 / 0x00acfe6: 00 != 4e 264.608: 7c9acfe7 / 0x00acfe7: 00 != 47 264.608: 7c9acfe8 / 0x00acfe8: 00 != 50 264.608: 7c9acfe9 / 0x00acfe9: 00 != 41 264.608: 7c9acfea / 0x00acfea: 00 != 44 264.608: 7c9acfeb / 0x00acfeb: 00 != 44 264.608: 7c9acfec / 0x00acfec: 00 != 49 264.608: 7c9acfed / 0x00acfed: 00 != 4e 264.608: 7c9acfee / 0x00acfee: 00 != 47 264.608: 7c9acfef / 0x00acfef: 00 != 58 264.608: 7c9acff0 / 0x00acff0: 00 != 58 264.608: 7c9acff1 / 0x00acff1: 00 != 50 264.608: 7c9acff2 / 0x00acff2: 00 != 41 264.608: 7c9acff3 / 0x00acff3: 00 != 44 264.608: 7c9acff4 / 0x00acff4: 00 != 44 264.608: 7c9acff5 / 0x00acff5: 00 != 49 264.608: 7c9acff6 / 0x00acff6: 00 != 4e 264.608: 7c9acff7 / 0x00acff7: 00 != 47 264.608: 7c9acff8 / 0x00acff8: 00 != 50 264.608: 7c9acff9 / 0x00acff9: 00 != 41 264.608: 7c9acffa / 0x00acffa: 00 != 44 264.608: 7c9acffb / 0x00acffb: 00 != 44 264.608: 7c9acffc / 0x00acffc: 00 != 49 264.608: 7c9acffd / 0x00acffd: 00 != 4e 264.608: 7c9acffe / 0x00acffe: 00 != 47 264.608: 7c9acfff / 0x00acfff: 00 != 58 264.608: Restored 0xb8 bytes of original file content at 7c9acf48 264.608: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x80000000 264.608: supR3HardNtChildPurify: Startup delay kludge #1/1: 518 ms, 0 sleeps 264.608: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 264.608: *00000000-fffeffff 0x0001/0x0000 0x0000000 264.608: *00010000-0000dfff 0x0004/0x0004 0x0020000 264.608: 00012000-00003fff 0x0001/0x0000 0x0000000 264.608: *00020000-0001efff 0x0004/0x0004 0x0020000 264.608: 00021000-00011fff 0x0001/0x0000 0x0000000 264.608: *00030000-fff31fff 0x0000/0x0004 0x0020000 264.608: 0012e000-0012cfff 0x0104/0x0004 0x0020000 264.608: 0012f000-0012dfff 0x0004/0x0004 0x0020000 264.608: *00130000-0012cfff 0x0002/0x0002 0x0040000 264.608: 00133000-ffe65fff 0x0001/0x0000 0x0000000 264.608: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00401000-0038bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00476000-00474fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 00477000-00449fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004a4000-0049afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004ad000-00479fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 264.608: 004e0000-840bffff 0x0001/0x0000 0x0000000 264.608: *7c900000-7c8fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c901000-7c886fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c97b000-7c976fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c97f000-7c97dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c980000-7c94ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 264.608: 7c9b0000-793affff 0x0001/0x0000 0x0000000 264.608: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000 264.608: 7ffd4000-7ffd0fff 0x0001/0x0000 0x0000000 264.608: *7ffd7000-7ffd5fff 0x0004/0x0004 0x0020000 264.608: 7ffd8000-7ffd0fff 0x0001/0x0000 0x0000000 264.608: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000 264.608: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000 264.608: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000 264.608: supR3HardNtChildPurify: Done after 807 ms and 1 fixes (loop #1). 264.608: supR3HardNtEnableThreadCreation: fd0.afc: Log file opened: 4.3.26r98988 g_hStartupLog=00001ffc g_uNtVerCombined=0x510a2830 fd0.afc: supR3HardenedVmProcessInit: uNtDllAddr=7c900000 fd0.afc: ntdll.dll: timestamp 0x480381ea (rc=VINF_SUCCESS) fd0.afc: System32: \Device\HarddiskVolume2\WINDOWS.0\system32 fd0.afc: WinSxS: \Device\HarddiskVolume2\WINDOWS.0\WinSxS fd0.afc: KnownDllPath: C:\WINDOWS.0\system32 fd0.afc: supR3HardenedVmProcessInit: Opening vboxdrv stub... fd0.afc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... fd0.afc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 264.608: Error (rc=258): 264.608: Timed out after 60008 ms waiting for child request #1 (CloseEvents). 264.608: Error 258 in supR3HardNtChildWaitFor! (enmWhat=5) 264.608: Timed out after 60008 ms waiting for child request #1 (CloseEvents). 224.f34: Log file opened: 4.3.26r98988 g_hStartupLog=00001fe8 g_uNtVerCombined=0x510a2830 224.f34: \SystemRoot\System32\ntdll.dll: 224.f34: CreationTime: 2004-08-17T12:04:06.000000000Z 224.f34: LastWriteTime: 2008-04-14T19:40:20.000000000Z 224.f34: ChangeTime: 2014-06-01T21:28:55.078125000Z 224.f34: FileAttributes: 0x20 224.f34: Size: 0xad600 224.f34: NT Headers: 0xe0 224.f34: Timestamp: 0x480381ea 224.f34: Machine: 0x14c - i386 224.f34: Timestamp: 0x480381ea 224.f34: Image Version: 5.1 224.f34: SizeOfImage: 0xb0000 (720896) 224.f34: Resource Dir: 0x80000 LB 0x2cf48 224.f34: \SystemRoot\System32\kernel32.dll: 224.f34: CreationTime: 2004-08-17T12:04:20.000000000Z 224.f34: LastWriteTime: 2008-04-14T19:40:40.000000000Z 224.f34: ChangeTime: 2014-06-01T21:28:54.578125000Z 224.f34: FileAttributes: 0x20 224.f34: Size: 0xf3200 224.f34: NT Headers: 0xf0 224.f34: Timestamp: 0x480381ea 224.f34: Machine: 0x14c - i386 224.f34: Timestamp: 0x480381ea 224.f34: Image Version: 5.1 224.f34: SizeOfImage: 0xf8000 (1015808) 224.f34: Resource Dir: 0x8a000 LB 0x6772c 224.f34: supR3HardenedWinFindAdversaries: 0x0 224.f34: Calling main() 224.f34: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2 224.f34: SUPR3HardenedMain: Respawn #1 224.f34: System32: \Device\HarddiskVolume2\WINDOWS.0\system32 224.f34: WinSxS: \Device\HarddiskVolume2\WINDOWS.0\WinSxS 224.f34: KnownDllPath: C:\WINDOWS.0\system32 224.f34: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 224.f34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe) 224.f34: supR3HardNtEnableThreadCreation: 224.f34: supR3HardNtDisableThreadCreation: pvLdrInitThunk=7c901166 pvNtTerminateThread=7c90de60 224.f34: supR3HardenedWinDoReSpawn(1): New child 250.e4c [kernel32]. 224.f34: supR3HardNtChildGatherData: PebBaseAddress=7ffdb000 cbPeb=0x20c 224.f34: supR3HardNtPuChFindNtdll: uNtDllParentAddr=7c900000 uNtDllChildAddr=7c900000 224.f34: supR3HardenedWinSetupChildInit: uLdrInitThunk=7c901166 224.f34: supR3HardenedWinSetupChildInit: Start child. 224.f34: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 15 ms. 224.f34: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 0 sleeps 224.f34: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 224.f34: *00000000-fffeffff 0x0001/0x0000 0x0000000 224.f34: *00010000-0000dfff 0x0004/0x0004 0x0020000 224.f34: 00012000-00003fff 0x0001/0x0000 0x0000000 224.f34: *00020000-0001efff 0x0004/0x0004 0x0020000 224.f34: 00021000-00011fff 0x0001/0x0000 0x0000000 224.f34: *00030000-fff31fff 0x0000/0x0004 0x0020000 224.f34: 0012e000-0012cfff 0x0104/0x0004 0x0020000 224.f34: 0012f000-0012dfff 0x0004/0x0004 0x0020000 224.f34: *00130000-0012cfff 0x0002/0x0002 0x0040000 224.f34: 00133000-ffe65fff 0x0001/0x0000 0x0000000 224.f34: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00401000-0038bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00476000-00474fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00477000-00449fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a4000-004a2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a5000-004a3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a6000-004a4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a7000-004a5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a8000-004a5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004aa000-004a6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004ad000-00479fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004e0000-840bffff 0x0001/0x0000 0x0000000 224.f34: *7c900000-7c8fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c901000-7c886fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c97b000-7c975fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c980000-7c94ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c9b0000-793affff 0x0001/0x0000 0x0000000 224.f34: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000 224.f34: 7ffd4000-7ffccfff 0x0001/0x0000 0x0000000 224.f34: *7ffdb000-7ffd9fff 0x0004/0x0004 0x0020000 224.f34: 7ffdc000-7ffd8fff 0x0001/0x0000 0x0000000 224.f34: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000 224.f34: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000 224.f34: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000 224.f34: VirtualBox.exe: timestamp 0x5507167b (rc=VINF_SUCCESS) 224.f34: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 224.f34: '\Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll' has no imports 224.f34: ntdll.dll: Differences in section #3 (.rsrc) between file and memory: 224.f34: 7c9acf48 / 0x00acf48: 00 != 50 224.f34: 7c9acf49 / 0x00acf49: 00 != 41 224.f34: 7c9acf4a / 0x00acf4a: 00 != 44 224.f34: 7c9acf4b / 0x00acf4b: 00 != 44 224.f34: 7c9acf4c / 0x00acf4c: 00 != 49 224.f34: 7c9acf4d / 0x00acf4d: 00 != 4e 224.f34: 7c9acf4e / 0x00acf4e: 00 != 47 224.f34: 7c9acf4f / 0x00acf4f: 00 != 58 224.f34: 7c9acf50 / 0x00acf50: 00 != 58 224.f34: 7c9acf51 / 0x00acf51: 00 != 50 224.f34: 7c9acf52 / 0x00acf52: 00 != 41 224.f34: 7c9acf53 / 0x00acf53: 00 != 44 224.f34: 7c9acf54 / 0x00acf54: 00 != 44 224.f34: 7c9acf55 / 0x00acf55: 00 != 49 224.f34: 7c9acf56 / 0x00acf56: 00 != 4e 224.f34: 7c9acf57 / 0x00acf57: 00 != 47 224.f34: 7c9acf58 / 0x00acf58: 00 != 50 224.f34: 7c9acf59 / 0x00acf59: 00 != 41 224.f34: 7c9acf5a / 0x00acf5a: 00 != 44 224.f34: 7c9acf5b / 0x00acf5b: 00 != 44 224.f34: 7c9acf5c / 0x00acf5c: 00 != 49 224.f34: 7c9acf5d / 0x00acf5d: 00 != 4e 224.f34: 7c9acf5e / 0x00acf5e: 00 != 47 224.f34: 7c9acf5f / 0x00acf5f: 00 != 58 224.f34: 7c9acf60 / 0x00acf60: 00 != 58 224.f34: 7c9acf61 / 0x00acf61: 00 != 50 224.f34: 7c9acf62 / 0x00acf62: 00 != 41 224.f34: 7c9acf63 / 0x00acf63: 00 != 44 224.f34: 7c9acf64 / 0x00acf64: 00 != 44 224.f34: 7c9acf65 / 0x00acf65: 00 != 49 224.f34: 7c9acf66 / 0x00acf66: 00 != 4e 224.f34: 7c9acf67 / 0x00acf67: 00 != 47 224.f34: 7c9acf68 / 0x00acf68: 00 != 50 224.f34: 7c9acf69 / 0x00acf69: 00 != 41 224.f34: 7c9acf6a / 0x00acf6a: 00 != 44 224.f34: 7c9acf6b / 0x00acf6b: 00 != 44 224.f34: 7c9acf6c / 0x00acf6c: 00 != 49 224.f34: 7c9acf6d / 0x00acf6d: 00 != 4e 224.f34: 7c9acf6e / 0x00acf6e: 00 != 47 224.f34: 7c9acf6f / 0x00acf6f: 00 != 58 224.f34: 7c9acf70 / 0x00acf70: 00 != 58 224.f34: 7c9acf71 / 0x00acf71: 00 != 50 224.f34: 7c9acf72 / 0x00acf72: 00 != 41 224.f34: 7c9acf73 / 0x00acf73: 00 != 44 224.f34: 7c9acf74 / 0x00acf74: 00 != 44 224.f34: 7c9acf75 / 0x00acf75: 00 != 49 224.f34: 7c9acf76 / 0x00acf76: 00 != 4e 224.f34: 7c9acf77 / 0x00acf77: 00 != 47 224.f34: 7c9acf78 / 0x00acf78: 00 != 50 224.f34: 7c9acf79 / 0x00acf79: 00 != 41 224.f34: 7c9acf7a / 0x00acf7a: 00 != 44 224.f34: 7c9acf7b / 0x00acf7b: 00 != 44 224.f34: 7c9acf7c / 0x00acf7c: 00 != 49 224.f34: 7c9acf7d / 0x00acf7d: 00 != 4e 224.f34: 7c9acf7e / 0x00acf7e: 00 != 47 224.f34: 7c9acf7f / 0x00acf7f: 00 != 58 224.f34: 7c9acf80 / 0x00acf80: 00 != 58 224.f34: 7c9acf81 / 0x00acf81: 00 != 50 224.f34: 7c9acf82 / 0x00acf82: 00 != 41 224.f34: 7c9acf83 / 0x00acf83: 00 != 44 224.f34: 7c9acf84 / 0x00acf84: 00 != 44 224.f34: 7c9acf85 / 0x00acf85: 00 != 49 224.f34: 7c9acf86 / 0x00acf86: 00 != 4e 224.f34: 7c9acf87 / 0x00acf87: 00 != 47 224.f34: 7c9acf88 / 0x00acf88: 00 != 50 224.f34: 7c9acf89 / 0x00acf89: 00 != 41 224.f34: 7c9acf8a / 0x00acf8a: 00 != 44 224.f34: 7c9acf8b / 0x00acf8b: 00 != 44 224.f34: 7c9acf8c / 0x00acf8c: 00 != 49 224.f34: 7c9acf8d / 0x00acf8d: 00 != 4e 224.f34: 7c9acf8e / 0x00acf8e: 00 != 47 224.f34: 7c9acf8f / 0x00acf8f: 00 != 58 224.f34: 7c9acf90 / 0x00acf90: 00 != 58 224.f34: 7c9acf91 / 0x00acf91: 00 != 50 224.f34: 7c9acf92 / 0x00acf92: 00 != 41 224.f34: 7c9acf93 / 0x00acf93: 00 != 44 224.f34: 7c9acf94 / 0x00acf94: 00 != 44 224.f34: 7c9acf95 / 0x00acf95: 00 != 49 224.f34: 7c9acf96 / 0x00acf96: 00 != 4e 224.f34: 7c9acf97 / 0x00acf97: 00 != 47 224.f34: 7c9acf98 / 0x00acf98: 00 != 50 224.f34: 7c9acf99 / 0x00acf99: 00 != 41 224.f34: 7c9acf9a / 0x00acf9a: 00 != 44 224.f34: 7c9acf9b / 0x00acf9b: 00 != 44 224.f34: 7c9acf9c / 0x00acf9c: 00 != 49 224.f34: 7c9acf9d / 0x00acf9d: 00 != 4e 224.f34: 7c9acf9e / 0x00acf9e: 00 != 47 224.f34: 7c9acf9f / 0x00acf9f: 00 != 58 224.f34: 7c9acfa0 / 0x00acfa0: 00 != 58 224.f34: 7c9acfa1 / 0x00acfa1: 00 != 50 224.f34: 7c9acfa2 / 0x00acfa2: 00 != 41 224.f34: 7c9acfa3 / 0x00acfa3: 00 != 44 224.f34: 7c9acfa4 / 0x00acfa4: 00 != 44 224.f34: 7c9acfa5 / 0x00acfa5: 00 != 49 224.f34: 7c9acfa6 / 0x00acfa6: 00 != 4e 224.f34: 7c9acfa7 / 0x00acfa7: 00 != 47 224.f34: 7c9acfa8 / 0x00acfa8: 00 != 50 224.f34: 7c9acfa9 / 0x00acfa9: 00 != 41 224.f34: 7c9acfaa / 0x00acfaa: 00 != 44 224.f34: 7c9acfab / 0x00acfab: 00 != 44 224.f34: 7c9acfac / 0x00acfac: 00 != 49 224.f34: 7c9acfad / 0x00acfad: 00 != 4e 224.f34: 7c9acfae / 0x00acfae: 00 != 47 224.f34: 7c9acfaf / 0x00acfaf: 00 != 58 224.f34: 7c9acfb0 / 0x00acfb0: 00 != 58 224.f34: 7c9acfb1 / 0x00acfb1: 00 != 50 224.f34: 7c9acfb2 / 0x00acfb2: 00 != 41 224.f34: 7c9acfb3 / 0x00acfb3: 00 != 44 224.f34: 7c9acfb4 / 0x00acfb4: 00 != 44 224.f34: 7c9acfb5 / 0x00acfb5: 00 != 49 224.f34: 7c9acfb6 / 0x00acfb6: 00 != 4e 224.f34: 7c9acfb7 / 0x00acfb7: 00 != 47 224.f34: 7c9acfb8 / 0x00acfb8: 00 != 50 224.f34: 7c9acfb9 / 0x00acfb9: 00 != 41 224.f34: 7c9acfba / 0x00acfba: 00 != 44 224.f34: 7c9acfbb / 0x00acfbb: 00 != 44 224.f34: 7c9acfbc / 0x00acfbc: 00 != 49 224.f34: 7c9acfbd / 0x00acfbd: 00 != 4e 224.f34: 7c9acfbe / 0x00acfbe: 00 != 47 224.f34: 7c9acfbf / 0x00acfbf: 00 != 58 224.f34: 7c9acfc0 / 0x00acfc0: 00 != 58 224.f34: 7c9acfc1 / 0x00acfc1: 00 != 50 224.f34: 7c9acfc2 / 0x00acfc2: 00 != 41 224.f34: 7c9acfc3 / 0x00acfc3: 00 != 44 224.f34: 7c9acfc4 / 0x00acfc4: 00 != 44 224.f34: 7c9acfc5 / 0x00acfc5: 00 != 49 224.f34: 7c9acfc6 / 0x00acfc6: 00 != 4e 224.f34: 7c9acfc7 / 0x00acfc7: 00 != 47 224.f34: 7c9acfc8 / 0x00acfc8: 00 != 50 224.f34: 7c9acfc9 / 0x00acfc9: 00 != 41 224.f34: 7c9acfca / 0x00acfca: 00 != 44 224.f34: 7c9acfcb / 0x00acfcb: 00 != 44 224.f34: 7c9acfcc / 0x00acfcc: 00 != 49 224.f34: 7c9acfcd / 0x00acfcd: 00 != 4e 224.f34: 7c9acfce / 0x00acfce: 00 != 47 224.f34: 7c9acfcf / 0x00acfcf: 00 != 58 224.f34: 7c9acfd0 / 0x00acfd0: 00 != 58 224.f34: 7c9acfd1 / 0x00acfd1: 00 != 50 224.f34: 7c9acfd2 / 0x00acfd2: 00 != 41 224.f34: 7c9acfd3 / 0x00acfd3: 00 != 44 224.f34: 7c9acfd4 / 0x00acfd4: 00 != 44 224.f34: 7c9acfd5 / 0x00acfd5: 00 != 49 224.f34: 7c9acfd6 / 0x00acfd6: 00 != 4e 224.f34: 7c9acfd7 / 0x00acfd7: 00 != 47 224.f34: 7c9acfd8 / 0x00acfd8: 00 != 50 224.f34: 7c9acfd9 / 0x00acfd9: 00 != 41 224.f34: 7c9acfda / 0x00acfda: 00 != 44 224.f34: 7c9acfdb / 0x00acfdb: 00 != 44 224.f34: 7c9acfdc / 0x00acfdc: 00 != 49 224.f34: 7c9acfdd / 0x00acfdd: 00 != 4e 224.f34: 7c9acfde / 0x00acfde: 00 != 47 224.f34: 7c9acfdf / 0x00acfdf: 00 != 58 224.f34: 7c9acfe0 / 0x00acfe0: 00 != 58 224.f34: 7c9acfe1 / 0x00acfe1: 00 != 50 224.f34: 7c9acfe2 / 0x00acfe2: 00 != 41 224.f34: 7c9acfe3 / 0x00acfe3: 00 != 44 224.f34: 7c9acfe4 / 0x00acfe4: 00 != 44 224.f34: 7c9acfe5 / 0x00acfe5: 00 != 49 224.f34: 7c9acfe6 / 0x00acfe6: 00 != 4e 224.f34: 7c9acfe7 / 0x00acfe7: 00 != 47 224.f34: 7c9acfe8 / 0x00acfe8: 00 != 50 224.f34: 7c9acfe9 / 0x00acfe9: 00 != 41 224.f34: 7c9acfea / 0x00acfea: 00 != 44 224.f34: 7c9acfeb / 0x00acfeb: 00 != 44 224.f34: 7c9acfec / 0x00acfec: 00 != 49 224.f34: 7c9acfed / 0x00acfed: 00 != 4e 224.f34: 7c9acfee / 0x00acfee: 00 != 47 224.f34: 7c9acfef / 0x00acfef: 00 != 58 224.f34: 7c9acff0 / 0x00acff0: 00 != 58 224.f34: 7c9acff1 / 0x00acff1: 00 != 50 224.f34: 7c9acff2 / 0x00acff2: 00 != 41 224.f34: 7c9acff3 / 0x00acff3: 00 != 44 224.f34: 7c9acff4 / 0x00acff4: 00 != 44 224.f34: 7c9acff5 / 0x00acff5: 00 != 49 224.f34: 7c9acff6 / 0x00acff6: 00 != 4e 224.f34: 7c9acff7 / 0x00acff7: 00 != 47 224.f34: 7c9acff8 / 0x00acff8: 00 != 50 224.f34: 7c9acff9 / 0x00acff9: 00 != 41 224.f34: 7c9acffa / 0x00acffa: 00 != 44 224.f34: 7c9acffb / 0x00acffb: 00 != 44 224.f34: 7c9acffc / 0x00acffc: 00 != 49 224.f34: 7c9acffd / 0x00acffd: 00 != 4e 224.f34: 7c9acffe / 0x00acffe: 00 != 47 224.f34: 7c9acfff / 0x00acfff: 00 != 58 224.f34: Restored 0xb8 bytes of original file content at 7c9acf48 224.f34: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x80000000 224.f34: supR3HardNtChildPurify: Startup delay kludge #1/1: 516 ms, 0 sleeps 224.f34: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 224.f34: *00000000-fffeffff 0x0001/0x0000 0x0000000 224.f34: *00010000-0000dfff 0x0004/0x0004 0x0020000 224.f34: 00012000-00003fff 0x0001/0x0000 0x0000000 224.f34: *00020000-0001efff 0x0004/0x0004 0x0020000 224.f34: 00021000-00011fff 0x0001/0x0000 0x0000000 224.f34: *00030000-fff31fff 0x0000/0x0004 0x0020000 224.f34: 0012e000-0012cfff 0x0104/0x0004 0x0020000 224.f34: 0012f000-0012dfff 0x0004/0x0004 0x0020000 224.f34: *00130000-0012cfff 0x0002/0x0002 0x0040000 224.f34: 00133000-ffe65fff 0x0001/0x0000 0x0000000 224.f34: *00400000-003fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00401000-0038bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00476000-00474fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 00477000-00449fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004a4000-0049afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004ad000-00479fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe 224.f34: 004e0000-840bffff 0x0001/0x0000 0x0000000 224.f34: *7c900000-7c8fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c901000-7c886fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c97b000-7c976fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c97f000-7c97dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c980000-7c94ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\WINDOWS.0\system32\ntdll.dll 224.f34: 7c9b0000-793affff 0x0001/0x0000 0x0000000 224.f34: *7ffb0000-7ff8bfff 0x0002/0x0002 0x0040000 224.f34: 7ffd4000-7ffccfff 0x0001/0x0000 0x0000000 224.f34: *7ffdb000-7ffd9fff 0x0004/0x0004 0x0020000 224.f34: 7ffdc000-7ffd8fff 0x0001/0x0000 0x0000000 224.f34: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000 224.f34: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000 224.f34: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000 224.f34: supR3HardNtChildPurify: Done after 797 ms and 1 fixes (loop #1). 224.f34: supR3HardNtEnableThreadCreation: 250.e4c: Log file opened: 4.3.26r98988 g_hStartupLog=00001ffc g_uNtVerCombined=0x510a2830 250.e4c: supR3HardenedVmProcessInit: uNtDllAddr=7c900000 250.e4c: ntdll.dll: timestamp 0x480381ea (rc=VINF_SUCCESS) 250.e4c: System32: \Device\HarddiskVolume2\WINDOWS.0\system32 250.e4c: WinSxS: \Device\HarddiskVolume2\WINDOWS.0\WinSxS 250.e4c: KnownDllPath: C:\WINDOWS.0\system32 250.e4c: supR3HardenedVmProcessInit: Opening vboxdrv stub... 250.e4c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 250.e4c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 224.f34: Error (rc=258): 224.f34: Timed out after 60002 ms waiting for child request #1 (CloseEvents). 224.f34: Error 258 in supR3HardNtChildWaitFor! (enmWhat=5) 224.f34: Timed out after 60002 ms waiting for child request #1 (CloseEvents).