Context Navigation

← Previous Change
Ticket Comment History
Next Change →

Changes between Initial Version and Version 1 of Ticket #16864, comment 1

Timestamp:: Jun 30, 2017 1:05:41 PM (7 years ago)
Author:: jkAB

Legend:

: Unmodified
: Added
: Removed
: Modified

Ticket #16864, comment 1

-              initial
+              v1
 I tried following the instructions in the following link, but they did not work.  https://forums.virtualbox.org/viewtopic.php?f=6&t=66442#p314829
-Replying to [ticket:16864 jkAB]:
-> VM's created with Manager 5.1.22 r115126 were working in Win7.
-> Upgraded to Win10 Enterprise, ver 1703, build 15063.0.
-> VMs will not start.
-> VMs are Ubuntu Xenial 16.04.
-> Tried running the repair VM Manager from the VBox installer.  Did not work.
+>
-> On VM "Start", I get 2 popups.
-> The 1st popup refers to running a cmd 'sc.exe', the results of which are posted.
-> The 2nd popup refers to a file that I pasted below.
-> I could not find a button to attach the file.
+>
-> POPUP 1)
+>
->  "NtCreateFile(\Device\VboxDrvStub) failed: 0x000034
-> STATUS_OBJECT_NAME_NOT_FOUND (0 retries) (RC=-101)
-> where: supR3HardenedWinReSpawn
-> what: 3
-> VERR_OPEN_FAILED (-101) File/Device open failed. Driver is probably stuck stopping/starting.
-> Try 'sc.exe query vboxdrv' to get more information about its state.  Rebooting may actually help.
+>
-> (my note not part of the popup - rebooting does not help)
+>
-> POPUP 2)
+>
-> Failed to open a session for the virtual machine VM2.
+>
-> The virtual machine 'VM2' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\xxxxxxxx\VirtualBox VMs\VM2\Logs\VBoxHardening.log'.
+>
-> Result Code: E_FAIL (0x80004005)
-> Component: MachineWrap
-> Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}
+>
+>
-> REFERENCED FILE IN the 2nd POPUP
+>
-> 2c4c.3040: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000054 g_uNtVerCombined=0xa03ad700
-> 2c4c.3040: \SystemRoot\System32\ntdll.dll:
-> 2c4c.3040:     CreationTime:    2017-03-18T20:57:39.201977500Z
-> 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:39.201977500Z
-> 2c4c.3040:     ChangeTime:      2017-06-29T21:25:22.939590300Z
-> 2c4c.3040:     FileAttributes:  0x20
-> 2c4c.3040:     Size:            0x1d7450
-> 2c4c.3040:     NT Headers:      0xe0
-> 2c4c.3040:     Timestamp:       0xb79b6ddb
-> 2c4c.3040:     Machine:         0x8664 - amd64
-> 2c4c.3040:     Timestamp:       0xb79b6ddb
-> 2c4c.3040:     Image Version:   10.0
-> 2c4c.3040:     SizeOfImage:     0x1db000 (1945600)
-> 2c4c.3040:     Resource Dir:    0x170000 LB 0x69398
-> 2c4c.3040:     [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
-> 2c4c.3040:     [Raw version resource data: 0x1700f0 LB 0x380, codepage 0x0 (reserved 0x0)]
-> 2c4c.3040:     ProductName:     MicrosoftÂ® WindowsÂ® Operating System
-> 2c4c.3040:     ProductVersion:  10.0.15063.0
-> 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
-> 2c4c.3040:     FileDescription: NT Layer DLL
-> 2c4c.3040: \SystemRoot\System32\kernel32.dll:
-> 2c4c.3040:     CreationTime:    2017-03-18T20:57:15.887502700Z
-> 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:15.887502700Z
-> 2c4c.3040:     ChangeTime:      2017-06-29T21:25:19.532984000Z
-> 2c4c.3040:     FileAttributes:  0x20
-> 2c4c.3040:     Size:            0xad068
-> 2c4c.3040:     NT Headers:      0xf8
-> 2c4c.3040:     Timestamp:       0x17a3637d
-> 2c4c.3040:     Machine:         0x8664 - amd64
-> 2c4c.3040:     Timestamp:       0x17a3637d
-> 2c4c.3040:     Image Version:   10.0
-> 2c4c.3040:     SizeOfImage:     0xae000 (712704)
-> 2c4c.3040:     Resource Dir:    0xac000 LB 0x520
-> 2c4c.3040:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
-> 2c4c.3040:     [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
-> 2c4c.3040:     ProductName:     MicrosoftÂ® WindowsÂ® Operating System
-> 2c4c.3040:     ProductVersion:  10.0.15063.0
-> 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
-> 2c4c.3040:     FileDescription: Windows NT BASE API Client DLL
-> 2c4c.3040: \SystemRoot\System32\KernelBase.dll:
-> 2c4c.3040:     CreationTime:    2017-03-18T20:57:35.951701900Z
-> 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:35.951701900Z
-> 2c4c.3040:     ChangeTime:      2017-06-29T21:25:19.798611800Z
-> 2c4c.3040:     FileAttributes:  0x20
-> 2c4c.3040:     Size:            0x249bf0
-> 2c4c.3040:     NT Headers:      0x100
-> 2c4c.3040:     Timestamp:       0x461a0ff5
-> 2c4c.3040:     Machine:         0x8664 - amd64
-> 2c4c.3040:     Timestamp:       0x461a0ff5
-> 2c4c.3040:     Image Version:   10.0
-> 2c4c.3040:     SizeOfImage:     0x249000 (2396160)
-> 2c4c.3040:     Resource Dir:    0x22a000 LB 0x548
-> 2c4c.3040:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
-> 2c4c.3040:     [Raw version resource data: 0x22a0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
-> 2c4c.3040:     ProductName:     MicrosoftÂ® WindowsÂ® Operating System
-> 2c4c.3040:     ProductVersion:  10.0.15063.0
-> 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
-> 2c4c.3040:     FileDescription: Windows NT BASE API Client DLL
-> 2c4c.3040: \SystemRoot\System32\apisetschema.dll:
-> 2c4c.3040:     CreationTime:    2017-03-18T20:57:35.373527900Z
-> 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:35.373527900Z
-> 2c4c.3040:     ChangeTime:      2017-06-29T21:25:14.274069100Z
-> 2c4c.3040:     FileAttributes:  0x20
-> 2c4c.3040:     Size:            0x1ada0
-> 2c4c.3040:     NT Headers:      0xc0
-> 2c4c.3040:     Timestamp:       0x76544b2
-> 2c4c.3040:     Machine:         0x8664 - amd64
-> 2c4c.3040:     Timestamp:       0x76544b2
-> 2c4c.3040:     Image Version:   10.0
-> 2c4c.3040:     SizeOfImage:     0x1b000 (110592)
-> 2c4c.3040:     Resource Dir:    0x1a000 LB 0x408
-> 2c4c.3040:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
-> 2c4c.3040:     [Raw version resource data: 0x1a060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
-> 2c4c.3040:     ProductName:     MicrosoftÂ® WindowsÂ® Operating System
-> 2c4c.3040:     ProductVersion:  10.0.15063.0
-> 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
-> 2c4c.3040:     FileDescription: ApiSet Schema DLL
-> 2c4c.3040: NtOpenDirectoryObject failed on \Driver: 0xc0000022
-> 2c4c.3040: supR3HardenedWinFindAdversaries: 0x8000
-> 2c4c.3040: \SystemRoot\System32\drivers\cyprotectdrv64.sys:
-> 2c4c.3040:     CreationTime:    2016-06-29T19:02:46.040789700Z
-> 2c4c.3040:     LastWriteTime:   2017-06-27T19:18:12.518993200Z
-> 2c4c.3040:     ChangeTime:      2017-06-29T21:38:26.956722800Z
-> 2c4c.3040:     FileAttributes:  0x20
-> 2c4c.3040:     Size:            0x2ffd0
-> 2c4c.3040:     NT Headers:      0xf8
-> 2c4c.3040:     Timestamp:       0x5926f5ef
-> 2c4c.3040:     Machine:         0x8664 - amd64
-> 2c4c.3040:     Timestamp:       0x5926f5ef
-> 2c4c.3040:     Image Version:   6.1
-> 2c4c.3040:     SizeOfImage:     0x130000 (1245184)
-> 2c4c.3040:     Resource Dir:    0x12e000 LB 0x2f0
-> 2c4c.3040:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
-> 2c4c.3040:     [Raw version resource data: 0x12e060 LB 0x28c, codepage 0x0 (reserved 0x0)]
-> 2c4c.3040:     ProductName:     CylancePROTECT
-> 2c4c.3040:     ProductVersion:  2.0.1450.2
-> 2c4c.3040:     FileVersion:     2.0.1450.2
-> 2c4c.3040:     FileDescription: Cylance Protect Driver
-> 2c4c.3040: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
-> 2c4c.3040: Calling main()
-> 2c4c.3040: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
-> 2c4c.3040: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
-> 2c4c.3040: SUPR3HardenedMain: Respawn #1
-> 2c4c.3040: System32:  \Device\HarddiskVolume4\Windows\System32
-> 2c4c.3040: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
-> 2c4c.3040: KnownDllPath: C:\WINDOWS\System32
-> 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
-> 2c4c.3040: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
-> 2c4c.3040: supR3HardNtEnableThreadCreation:
-> 2c4c.3040: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffb2f2a9ad0 pvNtTerminateThread=00007ffb2f2d5e00
-> 2c4c.3040: supR3HardenedWinDoReSpawn(1): New child 2d74.1148 [kernel32].
-> 2c4c.3040: supR3HardNtChildGatherData: PebBaseAddress=000000000108d000 cbPeb=0x388
-> 2c4c.3040: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffb2f230000 uNtDllChildAddr=00007ffb2f230000
-> 2c4c.3040: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffb2f2a9ad0
-> 2c4c.3040: supR3HardenedWinSetupChildInit: Start child.
-> 2c4c.3040: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
-> 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/0: 516 ms, 30 sleeps
-> 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
-> 2c4c.3040:  *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:  *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000
-> 2c4c.3040:   0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:  *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000
-> 2c4c.3040:   0000000000f61000-0000000000f6ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000f70000-0000000000f70fff 0x0020/0x0020 0x0020000 !!
-> 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000f70000 (LB 0x1000, 0000000000f70000 LB 0x1000)
-> 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000f70000/0000000000f70000 LB 0/0x1000]
-> 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000f70000 LB 0x90000 s=0x10000 ap=0x0 rp=0x00000000000001
-> 2c4c.3040:   0000000000f71000-0000000000ffffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:   0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
-> 2c4c.3040:  *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
-> 2c4c.3040:   000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620db1000-00007ff620db1fff 0x0080/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620df7000-00007ff620df7fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620df8000-00007ff620df8fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620df9000-00007ff620dfdfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620dfe000-00007ff620dfefff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620dff000-00007ff620dfffff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620e00000-00007ff620e03fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f385000-00007ffb2f38cfff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
-> 2c4c.3040: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
-> 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
-> 2c4c.3040: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
-> 2c4c.3040: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x8000
-> 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/1: 514 ms, 31 sleeps
-> 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
-> 2c4c.3040:  *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:  *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000
-> 2c4c.3040:   0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:  *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000
-> 2c4c.3040:   0000000000f61000-0000000000ffffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000
-> 2c4c.3040:   0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000
-> 2c4c.3040:   0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
-> 2c4c.3040:  *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
-> 2c4c.3040:   000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000
-> 2c4c.3040:   00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620db1000-00007ff620db1fff 0x0040/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620df7000-00007ff620e03fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
-> 2c4c.3040:   00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f385000-00007ffb2f388fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f389000-00007ffb2f38cfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
-> 2c4c.3040:   00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000
-> 2c4c.3040:  *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
-> 2c4c.3040: supR3HardNtChildPurify: Done after 1173 ms and 1 fixes (loop #1).
-> 2c4c.3040: supR3HardNtEnableThreadCreation:
-> 2d74.1148: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03ad700
-> 2d74.1148: supR3HardenedVmProcessInit: uNtDllAddr=00007ffb2f230000 g_uNtVerCombined=0xa03ad700
-> 2d74.1148: ntdll.dll: timestamp 0xb79b6ddb (rc=VINF_SUCCESS)
-> 2d74.1148: New simple heap: #1 0000000001300000 LB 0x400000 (for 1945600 allocation)
-> 2d74.1148: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
-> 2d74.1148: System32:  \Device\HarddiskVolume4\Windows\System32
-> 2d74.1148: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
-> 2d74.1148: KnownDllPath: C:\WINDOWS\System32
-> 2d74.1148: supR3HardenedVmProcessInit: Opening vboxdrv stub...
-> 2d74.1148: Error opening VBoxDrvStub:  STATUS_OBJECT_NAME_NOT_FOUND
-> 2d74.1148: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034
-> 2d74.1148: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
-> 2d74.1148: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
+>
-> Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
-> 2c4c.3040: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
+>
-> Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
-> 2c4c.3040: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
-> 2c4c.3040: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
+>
-> Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
+>
-> COMMAND - SC.EXE
+>
-> sc.exe query vboxdrv
-> [SC] EnumQueryServicesStatus:OpenService FAILED 1060:
+>
-> The specified service does not exist as an installed service.
+>