VirtualBox

Changes between Initial Version and Version 5 of Ticket #16864


Ignore:
Timestamp:
Jul 3, 2017 1:30:38 PM (7 years ago)
Author:
Frank Mehnert
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #16864 – Description

    initial v5  
    1010I could not find a button to attach the file.
    1111
    12 POPUP 1)
    13 
    14  "NtCreateFile(\Device\VboxDrvStub) failed: 0x000034
    15 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) (RC=-101)
    16 where: supR3HardenedWinReSpawn
    17 what: 3
    18 VERR_OPEN_FAILED (-101) File/Device open failed. Driver is probably stuck stopping/starting.
    19 Try 'sc.exe query vboxdrv' to get more information about its state.  Rebooting may actually help.
    20 
    21 (my note not part of the popup - rebooting does not help)
    22 
    23 POPUP 2)
    24 
    25 Failed to open a session for the virtual machine VM2.
    26 
    27 The virtual machine 'VM2' has terminated unexpectedly during startup with exit code 1 (0x1).  More details may be available in 'C:\Users\xxxxxxxx\VirtualBox VMs\VM2\Logs\VBoxHardening.log'.
    28 
    29 Result Code: E_FAIL (0x80004005)
    30 Component: MachineWrap
    31 Interface: IMachine {b2547866-a0a1-4391-8b86-6952d82efaa0}
    32 
    33 
    34 REFERENCED FILE IN the 2nd POPUP
    35 
    36 2c4c.3040: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000054 g_uNtVerCombined=0xa03ad700
    37 2c4c.3040: \SystemRoot\System32\ntdll.dll:
    38 2c4c.3040:     CreationTime:    2017-03-18T20:57:39.201977500Z
    39 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:39.201977500Z
    40 2c4c.3040:     ChangeTime:      2017-06-29T21:25:22.939590300Z
    41 2c4c.3040:     FileAttributes:  0x20
    42 2c4c.3040:     Size:            0x1d7450
    43 2c4c.3040:     NT Headers:      0xe0
    44 2c4c.3040:     Timestamp:       0xb79b6ddb
    45 2c4c.3040:     Machine:         0x8664 - amd64
    46 2c4c.3040:     Timestamp:       0xb79b6ddb
    47 2c4c.3040:     Image Version:   10.0
    48 2c4c.3040:     SizeOfImage:     0x1db000 (1945600)
    49 2c4c.3040:     Resource Dir:    0x170000 LB 0x69398
    50 2c4c.3040:     [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
    51 2c4c.3040:     [Raw version resource data: 0x1700f0 LB 0x380, codepage 0x0 (reserved 0x0)]
    52 2c4c.3040:     ProductName:     Microsoft® Windows® Operating System
    53 2c4c.3040:     ProductVersion:  10.0.15063.0
    54 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
    55 2c4c.3040:     FileDescription: NT Layer DLL
    56 2c4c.3040: \SystemRoot\System32\kernel32.dll:
    57 2c4c.3040:     CreationTime:    2017-03-18T20:57:15.887502700Z
    58 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:15.887502700Z
    59 2c4c.3040:     ChangeTime:      2017-06-29T21:25:19.532984000Z
    60 2c4c.3040:     FileAttributes:  0x20
    61 2c4c.3040:     Size:            0xad068
    62 2c4c.3040:     NT Headers:      0xf8
    63 2c4c.3040:     Timestamp:       0x17a3637d
    64 2c4c.3040:     Machine:         0x8664 - amd64
    65 2c4c.3040:     Timestamp:       0x17a3637d
    66 2c4c.3040:     Image Version:   10.0
    67 2c4c.3040:     SizeOfImage:     0xae000 (712704)
    68 2c4c.3040:     Resource Dir:    0xac000 LB 0x520
    69 2c4c.3040:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
    70 2c4c.3040:     [Raw version resource data: 0xac0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
    71 2c4c.3040:     ProductName:     Microsoft® Windows® Operating System
    72 2c4c.3040:     ProductVersion:  10.0.15063.0
    73 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
    74 2c4c.3040:     FileDescription: Windows NT BASE API Client DLL
    75 2c4c.3040: \SystemRoot\System32\KernelBase.dll:
    76 2c4c.3040:     CreationTime:    2017-03-18T20:57:35.951701900Z
    77 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:35.951701900Z
    78 2c4c.3040:     ChangeTime:      2017-06-29T21:25:19.798611800Z
    79 2c4c.3040:     FileAttributes:  0x20
    80 2c4c.3040:     Size:            0x249bf0
    81 2c4c.3040:     NT Headers:      0x100
    82 2c4c.3040:     Timestamp:       0x461a0ff5
    83 2c4c.3040:     Machine:         0x8664 - amd64
    84 2c4c.3040:     Timestamp:       0x461a0ff5
    85 2c4c.3040:     Image Version:   10.0
    86 2c4c.3040:     SizeOfImage:     0x249000 (2396160)
    87 2c4c.3040:     Resource Dir:    0x22a000 LB 0x548
    88 2c4c.3040:     [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
    89 2c4c.3040:     [Raw version resource data: 0x22a0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
    90 2c4c.3040:     ProductName:     Microsoft® Windows® Operating System
    91 2c4c.3040:     ProductVersion:  10.0.15063.0
    92 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
    93 2c4c.3040:     FileDescription: Windows NT BASE API Client DLL
    94 2c4c.3040: \SystemRoot\System32\apisetschema.dll:
    95 2c4c.3040:     CreationTime:    2017-03-18T20:57:35.373527900Z
    96 2c4c.3040:     LastWriteTime:   2017-03-18T20:57:35.373527900Z
    97 2c4c.3040:     ChangeTime:      2017-06-29T21:25:14.274069100Z
    98 2c4c.3040:     FileAttributes:  0x20
    99 2c4c.3040:     Size:            0x1ada0
    100 2c4c.3040:     NT Headers:      0xc0
    101 2c4c.3040:     Timestamp:       0x76544b2
    102 2c4c.3040:     Machine:         0x8664 - amd64
    103 2c4c.3040:     Timestamp:       0x76544b2
    104 2c4c.3040:     Image Version:   10.0
    105 2c4c.3040:     SizeOfImage:     0x1b000 (110592)
    106 2c4c.3040:     Resource Dir:    0x1a000 LB 0x408
    107 2c4c.3040:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
    108 2c4c.3040:     [Raw version resource data: 0x1a060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
    109 2c4c.3040:     ProductName:     Microsoft® Windows® Operating System
    110 2c4c.3040:     ProductVersion:  10.0.15063.0
    111 2c4c.3040:     FileVersion:     10.0.15063.0 (WinBuild.160101.0800)
    112 2c4c.3040:     FileDescription: ApiSet Schema DLL
    113 2c4c.3040: NtOpenDirectoryObject failed on \Driver: 0xc0000022
    114 2c4c.3040: supR3HardenedWinFindAdversaries: 0x8000
    115 2c4c.3040: \SystemRoot\System32\drivers\cyprotectdrv64.sys:
    116 2c4c.3040:     CreationTime:    2016-06-29T19:02:46.040789700Z
    117 2c4c.3040:     LastWriteTime:   2017-06-27T19:18:12.518993200Z
    118 2c4c.3040:     ChangeTime:      2017-06-29T21:38:26.956722800Z
    119 2c4c.3040:     FileAttributes:  0x20
    120 2c4c.3040:     Size:            0x2ffd0
    121 2c4c.3040:     NT Headers:      0xf8
    122 2c4c.3040:     Timestamp:       0x5926f5ef
    123 2c4c.3040:     Machine:         0x8664 - amd64
    124 2c4c.3040:     Timestamp:       0x5926f5ef
    125 2c4c.3040:     Image Version:   6.1
    126 2c4c.3040:     SizeOfImage:     0x130000 (1245184)
    127 2c4c.3040:     Resource Dir:    0x12e000 LB 0x2f0
    128 2c4c.3040:     [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
    129 2c4c.3040:     [Raw version resource data: 0x12e060 LB 0x28c, codepage 0x0 (reserved 0x0)]
    130 2c4c.3040:     ProductName:     CylancePROTECT
    131 2c4c.3040:     ProductVersion:  2.0.1450.2
    132 2c4c.3040:     FileVersion:     2.0.1450.2
    133 2c4c.3040:     FileDescription: Cylance Protect Driver
    134 2c4c.3040: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
    135 2c4c.3040: Calling main()
    136 2c4c.3040: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
    137 2c4c.3040: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
    138 2c4c.3040: SUPR3HardenedMain: Respawn #1
    139 2c4c.3040: System32:  \Device\HarddiskVolume4\Windows\System32
    140 2c4c.3040: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
    141 2c4c.3040: KnownDllPath: C:\WINDOWS\System32
    142 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
    143 2c4c.3040: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe)
    144 2c4c.3040: supR3HardNtEnableThreadCreation:
    145 2c4c.3040: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffb2f2a9ad0 pvNtTerminateThread=00007ffb2f2d5e00
    146 2c4c.3040: supR3HardenedWinDoReSpawn(1): New child 2d74.1148 [kernel32].
    147 2c4c.3040: supR3HardNtChildGatherData: PebBaseAddress=000000000108d000 cbPeb=0x388
    148 2c4c.3040: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffb2f230000 uNtDllChildAddr=00007ffb2f230000
    149 2c4c.3040: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffb2f2a9ad0
    150 2c4c.3040: supR3HardenedWinSetupChildInit: Start child.
    151 2c4c.3040: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
    152 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/0: 516 ms, 30 sleeps
    153 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
    154 2c4c.3040:  *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000
    155 2c4c.3040:  *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000
    156 2c4c.3040:  *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000
    157 2c4c.3040:   0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000
    158 2c4c.3040:  *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000
    159 2c4c.3040:   0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000
    160 2c4c.3040:   0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000
    161 2c4c.3040:  *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000
    162 2c4c.3040:   0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000
    163 2c4c.3040:  *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000
    164 2c4c.3040:   0000000000f61000-0000000000f6ffff 0x0001/0x0000 0x0000000
    165 2c4c.3040:  *0000000000f70000-0000000000f70fff 0x0020/0x0020 0x0020000 !!
    166 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000f70000 (LB 0x1000, 0000000000f70000 LB 0x1000)
    167 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000f70000/0000000000f70000 LB 0/0x1000]
    168 2c4c.3040: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000f70000 LB 0x90000 s=0x10000 ap=0x0 rp=0x00000000000001
    169 2c4c.3040:   0000000000f71000-0000000000ffffff 0x0001/0x0000 0x0000000
    170 2c4c.3040:  *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000
    171 2c4c.3040:   000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000
    172 2c4c.3040:   0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000
    173 2c4c.3040:   0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000
    174 2c4c.3040:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
    175 2c4c.3040:  *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
    176 2c4c.3040:   000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000
    177 2c4c.3040:  *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000
    178 2c4c.3040:   00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000
    179 2c4c.3040:  *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    180 2c4c.3040:   00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    181 2c4c.3040:   00007ff620db1000-00007ff620db1fff 0x0080/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    182 2c4c.3040:   00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    183 2c4c.3040:   00007ff620df7000-00007ff620df7fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    184 2c4c.3040:   00007ff620df8000-00007ff620df8fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    185 2c4c.3040:   00007ff620df9000-00007ff620dfdfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    186 2c4c.3040:   00007ff620dfe000-00007ff620dfefff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    187 2c4c.3040:   00007ff620dff000-00007ff620dfffff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    188 2c4c.3040:   00007ff620e00000-00007ff620e03fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    189 2c4c.3040:   00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    190 2c4c.3040:   00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000
    191 2c4c.3040:  *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    192 2c4c.3040:   00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    193 2c4c.3040:   00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    194 2c4c.3040:   00007ffb2f385000-00007ffb2f38cfff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    195 2c4c.3040:   00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    196 2c4c.3040:   00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    197 2c4c.3040:   00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    198 2c4c.3040:   00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    199 2c4c.3040:   00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000
    200 2c4c.3040:  *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
    201 2c4c.3040: VirtualBox.exe: timestamp 0x5903619d (rc=VINF_SUCCESS)
    202 2c4c.3040: '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
    203 2c4c.3040: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
    204 2c4c.3040: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x8000
    205 2c4c.3040: supR3HardNtChildPurify: Startup delay kludge #1/1: 514 ms, 31 sleeps
    206 2c4c.3040: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
    207 2c4c.3040:  *0000000000000000-0000000000e0ffff 0x0001/0x0000 0x0000000
    208 2c4c.3040:  *0000000000e10000-0000000000e2ffff 0x0004/0x0004 0x0020000
    209 2c4c.3040:  *0000000000e30000-0000000000e47fff 0x0002/0x0002 0x0040000
    210 2c4c.3040:   0000000000e48000-0000000000e4ffff 0x0001/0x0000 0x0000000
    211 2c4c.3040:  *0000000000e50000-0000000000f4afff 0x0000/0x0004 0x0020000
    212 2c4c.3040:   0000000000f4b000-0000000000f4dfff 0x0104/0x0004 0x0020000
    213 2c4c.3040:   0000000000f4e000-0000000000f4ffff 0x0004/0x0004 0x0020000
    214 2c4c.3040:  *0000000000f50000-0000000000f53fff 0x0002/0x0002 0x0040000
    215 2c4c.3040:   0000000000f54000-0000000000f5ffff 0x0001/0x0000 0x0000000
    216 2c4c.3040:  *0000000000f60000-0000000000f60fff 0x0004/0x0004 0x0020000
    217 2c4c.3040:   0000000000f61000-0000000000ffffff 0x0001/0x0000 0x0000000
    218 2c4c.3040:  *0000000001000000-000000000108cfff 0x0000/0x0004 0x0020000
    219 2c4c.3040:   000000000108d000-000000000108ffff 0x0004/0x0004 0x0020000
    220 2c4c.3040:   0000000001090000-00000000011fffff 0x0000/0x0004 0x0020000
    221 2c4c.3040:   0000000001200000-000000007ffdffff 0x0001/0x0000 0x0000000
    222 2c4c.3040:  *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
    223 2c4c.3040:  *000000007ffe1000-000000007ffeffff 0x0000/0x0002 0x0020000
    224 2c4c.3040:   000000007fff0000-00007ff62076ffff 0x0001/0x0000 0x0000000
    225 2c4c.3040:  *00007ff620770000-00007ff620792fff 0x0002/0x0002 0x0040000
    226 2c4c.3040:   00007ff620793000-00007ff620d3ffff 0x0001/0x0000 0x0000000
    227 2c4c.3040:  *00007ff620d40000-00007ff620d40fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    228 2c4c.3040:   00007ff620d41000-00007ff620db0fff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    229 2c4c.3040:   00007ff620db1000-00007ff620db1fff 0x0040/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    230 2c4c.3040:   00007ff620db2000-00007ff620df6fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    231 2c4c.3040:   00007ff620df7000-00007ff620e03fff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    232 2c4c.3040:   00007ff620e04000-00007ff620e4bfff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Program Files\Oracle\VirtualBox\VirtualBox.exe
    233 2c4c.3040:   00007ff620e4c000-00007ffb2f22ffff 0x0001/0x0000 0x0000000
    234 2c4c.3040:  *00007ffb2f230000-00007ffb2f230fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    235 2c4c.3040:   00007ffb2f231000-00007ffb2f33ffff 0x0020/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    236 2c4c.3040:   00007ffb2f340000-00007ffb2f384fff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    237 2c4c.3040:   00007ffb2f385000-00007ffb2f388fff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    238 2c4c.3040:   00007ffb2f389000-00007ffb2f38cfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    239 2c4c.3040:   00007ffb2f38d000-00007ffb2f39afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    240 2c4c.3040:   00007ffb2f39b000-00007ffb2f39bfff 0x0004/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    241 2c4c.3040:   00007ffb2f39c000-00007ffb2f39efff 0x0008/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    242 2c4c.3040:   00007ffb2f39f000-00007ffb2f40afff 0x0002/0x0080 0x1000000  \Device\HarddiskVolume4\Windows\System32\ntdll.dll
    243 2c4c.3040:   00007ffb2f40b000-00007ffffffdffff 0x0001/0x0000 0x0000000
    244 2c4c.3040:  *00007ffffffe0000-00007ffffffeffff 0x0001/0x0002 0x0020000
    245 2c4c.3040: supR3HardNtChildPurify: Done after 1173 ms and 1 fixes (loop #1).
    246 2c4c.3040: supR3HardNtEnableThreadCreation:
    247 2d74.1148: Log file opened: 5.1.22r115126 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa03ad700
    248 2d74.1148: supR3HardenedVmProcessInit: uNtDllAddr=00007ffb2f230000 g_uNtVerCombined=0xa03ad700
    249 2d74.1148: ntdll.dll: timestamp 0xb79b6ddb (rc=VINF_SUCCESS)
    250 2d74.1148: New simple heap: #1 0000000001300000 LB 0x400000 (for 1945600 allocation)
    251 2d74.1148: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume4\Program Files\Oracle\VirtualBox'
    252 2d74.1148: System32:  \Device\HarddiskVolume4\Windows\System32
    253 2d74.1148: WinSxS:    \Device\HarddiskVolume4\Windows\WinSxS
    254 2d74.1148: KnownDllPath: C:\WINDOWS\System32
    255 2d74.1148: supR3HardenedVmProcessInit: Opening vboxdrv stub...
    256 2d74.1148: Error opening VBoxDrvStub:  STATUS_OBJECT_NAME_NOT_FOUND
    257 2d74.1148: supR3HardenedWinReadErrorInfoDevice: NtCreateFile -> 0xc0000034
    258 2d74.1148: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
    259 2d74.1148: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
    260 
    261 Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
    262 2c4c.3040: supR3HardenedWinCheckChild: enmRequest=2 rc=-101 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
    263 
    264 Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
    265 2c4c.3040: Error -101 in supR3HardenedWinReSpawn! (enmWhat=3)
    266 2c4c.3040: NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries)
    267 
    268 Driver is probably stuck stopping/starting. Try 'sc.exe query vboxdrv' to get more information about its state. Rebooting may actually help.
    269 
    27012COMMAND - SC.EXE
    271 
     13{{{
    27214sc.exe query vboxdrv
    27315[SC] EnumQueryServicesStatus:OpenService FAILED 1060:
    27416
    27517The specified service does not exist as an installed service.
    276 
     18}}}

© 2023 Oracle
Contact – Privacy policy – Terms of Use