|
|
EDA365欢迎您登录！
您需要 登录 才可以下载或查看，没有帐号？注册
x
) A1 z1 L( Z* g, _5 q报错提示如下
5 F% X2 V+ M6 S' B/ {
& d5 L) o3 Q' x7 I a
3 ]; U( C4 c1 B& x
VBoxHardening.log日志如下：
0 Q1 t+ n( w- ^
. S% i( K' a- F27fc.33b0: Log file opened: 6.1.12r139181 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047ba00
. ]& b" K Q# M: D* @, n27fc.33b0: \SystemRoot\System32\ntdll.dll:, _; h9 ^! P b* E1 M
27fc.33b0: CreationTime: 2020-05-13T04:08:01.305832200Z
' ?2 t9 l' x8 S27fc.33b0: LastWriteTime: 2020-05-13T04:08:01.364711200Z
6 _+ [. Y9 }# Q8 P27fc.33b0: ChangeTime: 2020-08-12T03:51:05.663111000Z# u+ V* f$ Z* T
27fc.33b0: FileAttributes: 0x20
4 y: t5 W6 A+ z0 k/ U( n% v) Z% E27fc.33b0: Size: 0x1e84600 {4 u# |# y; J3 g5 Q' Z
27fc.33b0: NT Headers: 0xd8
2 E& d0 `4 X8 X' u27fc.33b0: Timestamp: 0xb29ecf52- p/ [' s1 T4 r1 h6 ]' D
27fc.33b0: Machine: 0x8664 - amd64
( ]% u( u% ?% M$ D- t3 C% x27fc.33b0: Timestamp: 0xb29ecf52
0 Z. n) K5 ?$ Q0 a9 v27fc.33b0: Image Version: 10.0
3 v0 E; w) F1 x+ q27fc.33b0: SizeOfImage: 0x1f0000 (2031616)6 U/ V* C) C6 w! O0 c
27fc.33b0: Resource Dir: 0x17f000 LB 0x6f310
- V! D" Y* `2 h+ @$ ]27fc.33b0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
" W* L" x% r2 |( }8 {& I2 k. Q3 \& C27fc.33b0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]8 e; T. c# V% }; L
27fc.33b0: ProductName: Microsoft® Windows® Operating System4 ?# s y' v' h3 J! O$ U+ q; D
27fc.33b0: ProductVersion: 10.0.18362.815
0 w4 T8 Y3 h+ [3 E# n$ ?27fc.33b0: FileVersion: 10.0.18362.815 (WinBuild.160101.0800); p& r/ u7 L: _# C4 v; Y5 H
27fc.33b0: FileDescription: NT Layer DLL. T. V h2 C1 V" ]& v! _
27fc.33b0: \SystemRoot\System32\kernel32.dll:
6 V8 o4 V9 o5 W& w2 D/ h% r27fc.33b0: CreationTime: 2020-07-15T02:37:51.154008500Z
, x5 r5 J7 L* \+ n' i27fc.33b0: LastWriteTime: 2020-07-15T02:37:51.189919900Z
+ J- Y% {) G3 t+ C/ r# W7 Y27fc.33b0: ChangeTime: 2020-08-12T03:51:05.332995100Z8 X7 r2 i7 J% A8 x$ B+ n
27fc.33b0: FileAttributes: 0x20
3 ~7 t% K( x- M! [27fc.33b0: Size: 0xb0498$ c2 b9 b- C6 K+ e
27fc.33b0: NT Headers: 0xe8& M% Q* p) @' J; `% S) U
27fc.33b0: Timestamp: 0xce6bbd73- m8 c3 i7 l$ p" F6 {
27fc.33b0: Machine: 0x8664 - amd64
, m" l& S- T: n9 ]0 Z& d" l: M27fc.33b0: Timestamp: 0xce6bbd73
5 G; a3 Y4 b0 ?7 n; U27fc.33b0: Image Version: 10.06 X( {/ Z; L# c: w# U3 \: I
27fc.33b0: SizeOfImage: 0xb2000 (729088)& Y' n0 Z+ u' j" C: y6 @1 h3 P0 h6 f
27fc.33b0: Resource Dir: 0xb0000 LB 0x5202 \$ F' g7 F: p3 l" u) N6 e% M& l
27fc.33b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
, f; X7 m, ~6 |8 [" Z# `) }( `, t; t0 y27fc.33b0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]9 N! s3 |& m' p# L' R
27fc.33b0: ProductName: Microsoft® Windows® Operating System& A, m9 P+ J. b4 S3 x6 y, k
27fc.33b0: ProductVersion: 10.0.18362.9598 ~9 _: y+ X* L5 T) {# ~
27fc.33b0: FileVersion: 10.0.18362.959 (WinBuild.160101.0800)1 J7 t0 e* S1 |& G' `. y# O. y- |
27fc.33b0: FileDescription: Windows NT BASE API Client DLL
4 a, t5 N! Q- _+ g7 Q. a8 X5 S/ ^. c27fc.33b0: \SystemRoot\System32\KernelBase.dll:
. L: N3 P* N$ H1 P9 [& u2 F27fc.33b0: CreationTime: 2020-08-12T03:50:16.150249100Z
. j3 P3 q1 K! S# y27fc.33b0: LastWriteTime: 2020-08-12T03:50:16.238020800Z
6 S8 ]% v. M0 w" o3 b27fc.33b0: ChangeTime: 2020-08-12T09:44:10.047506100Z: M9 A" j0 R: J3 u$ P; {
27fc.33b0: FileAttributes: 0x20# V ^1 p( G2 Z
27fc.33b0: Size: 0x2a3868
: D$ x5 S# {4 J% p/ U27fc.33b0: NT Headers: 0xf8
( t! ?( Z& ]+ f9 m t27fc.33b0: Timestamp: 0x91b9349a8 @* X& Z1 i: I& x- |; d) R4 J* C
27fc.33b0: Machine: 0x8664 - amd64- @! X1 R3 o0 l8 D. N
27fc.33b0: Timestamp: 0x91b9349a0 p! F; j7 a" r$ D! x
27fc.33b0: Image Version: 10.0
" r1 H) Q. ~$ L; l8 N; B: S27fc.33b0: SizeOfImage: 0x2a4000 (2768896)
2 ^$ M1 H+ x8 |2 g" k27fc.33b0: Resource Dir: 0x27e000 LB 0x548$ M/ k$ q3 [0 E% j. i; Q) ?
27fc.33b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
+ r/ k) o0 L. Z4 \% T5 |27fc.33b0: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]0 I7 b( _5 U3 _6 j8 d h
27fc.33b0: ProductName: Microsoft® Windows® Operating System: D3 E; `6 @* V3 b* t
27fc.33b0: ProductVersion: 10.0.18362.997: T/ w2 `' u/ ]
27fc.33b0: FileVersion: 10.0.18362.997 (WinBuild.160101.0800)
8 `" o* p$ G- ~: ~27fc.33b0: FileDescription: Windows NT BASE API Client DLL
; `7 K& i9 \, J, e& H7 q27fc.33b0: \SystemRoot\System32\apisetschema.dll:
- x$ b3 q" j1 r27fc.33b0: CreationTime: 2019-03-19T04:43:54.837151500Z! g& T$ @' @! l) b8 W" d1 T
27fc.33b0: LastWriteTime: 2019-03-19T04:43:54.837151500Z4 U+ x! F$ R5 Z2 ~1 O0 V; n
27fc.33b0: ChangeTime: 2020-08-12T03:51:05.320029000Z
8 c- p& M; J9 w. q; f3 o7 |27fc.33b0: FileAttributes: 0x20
% p+ y" }1 R7 s8 }1 k* N$ G9 ]$ q27fc.33b0: Size: 0x1d028* L1 G6 c7 b2 w8 q& S
27fc.33b0: NT Headers: 0xc8* J3 k8 C% Y. d4 A% U1 A0 i
27fc.33b0: Timestamp: 0xd6ced080
, G% {- Z/ h! C& L27fc.33b0: Machine: 0x8664 - amd64$ H* b; c, y8 c8 U* a0 h
27fc.33b0: Timestamp: 0xd6ced0803 `' u* \* H- w7 k* S( [
27fc.33b0: Image Version: 10.0" J% {9 d7 M, |! @+ }
27fc.33b0: SizeOfImage: 0x1e000 (122880)
; y" r4 t' y7 [) w; C, D' a( V! Y9 V27fc.33b0: Resource Dir: 0x1d000 LB 0x408: y: r1 m$ E8 u* Z+ W/ ]
27fc.33b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
, x' X: c- b( H7 v/ n0 k- {27fc.33b0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]5 C7 y( ]+ ?, j# N/ ~, X0 F
27fc.33b0: ProductName: Microsoft® Windows® Operating System& \6 [4 i; ]! G4 F
27fc.33b0: ProductVersion: 10.0.18362.1, y6 g5 f+ c s x1 N3 Y0 e
27fc.33b0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
# V$ |& @! G5 w2 q+ W27fc.33b0: FileDescription: ApiSet Schema DLL
- W+ } O) C/ W27fc.33b0: NtOpenDirectoryObject failed on \Driver: 0xc0000022, k2 n2 |6 [, k U2 a7 ]* o
27fc.33b0: supR3HardenedWinFindAdversaries: 0x0
' ? A2 F' K. m; v4 t1 D27fc.33b0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\virtualBox'! A7 k3 w0 [/ r
27fc.33b0: Calling main()
2 `+ N: i; ^# g27fc.33b0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2( }7 Y k" F( F( x" d
27fc.33b0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume6\virtualBox'
/ `0 \$ S& m2 [# x7 S0 z! E) ~27fc.33b0: SUPR3HardenedMain: Respawn #1& r. |6 ]9 i4 r8 X* q5 j
27fc.33b0: System32: \Device\HarddiskVolume3\Windows\System32
" ?7 e! W& C" n- v27fc.33b0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS K( k4 X U0 Y" F7 m( v
27fc.33b0: KnownDllPath: C:\Windows\System32
, V- T6 e0 x0 L27fc.33b0: supR3HardenedWinInit: PeRForming a limited self purification...
, j- ^, n7 z$ ?. |# H6 S27fc.33b0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION# \# j V9 J3 r9 x5 f
27fc.33b0: *0000000000000000-0000000000acffff 0x0001/0x0000 0x0000000
R$ V3 o5 W, I- X27fc.33b0: *0000000000ad0000-0000000000adffff 0x0004/0x0004 0x00400005 Q! u, l w# L# j X
27fc.33b0: 0000000000ae0000-0000000000aeffff 0x0001/0x0000 0x0000000
3 M! p5 i. _- J# c# S27fc.33b0: *0000000000af0000-0000000000b0afff 0x0002/0x0002 0x00400009 o9 v/ _7 A$ R% w! Z5 F/ M
27fc.33b0: 0000000000b0b000-0000000000b0ffff 0x0001/0x0000 0x0000000
& b& M7 z# w' w0 ^$ m- B27fc.33b0: *0000000000b10000-0000000000b13fff 0x0002/0x0002 0x0040000& B) }) [& M; Y
27fc.33b0: 0000000000b14000-0000000000b1ffff 0x0001/0x0000 0x00000002 y: I* X6 l* |, }! G
27fc.33b0: *0000000000b20000-0000000000b21fff 0x0004/0x0004 0x00200005 j/ Z' c( Y$ ^2 n4 \$ Q( o
27fc.33b0: 0000000000b22000-0000000000b2ffff 0x0001/0x0000 0x0000000
& |- {; A9 j* p1 d# A3 l27fc.33b0: *0000000000b30000-0000000000bf6fff 0x0002/0x0002 0x0040000
' N, w2 }& |+ O2 p$ p: f- t+ ]) ^1 y- _27fc.33b0: 0000000000bf7000-0000000000bfffff 0x0001/0x0000 0x0000000% y6 X0 M: f4 @5 b, |' V/ T
27fc.33b0: *0000000000c00000-0000000000d8efff 0x0000/0x0004 0x0020000
9 ?( X1 l8 k ?3 \7 A, b27fc.33b0: 0000000000d8f000-0000000000d91fff 0x0004/0x0004 0x0020000
" V) N6 d9 J- W4 ~27fc.33b0: 0000000000d92000-0000000000dfffff 0x0000/0x0004 0x0020000
' N/ z; U: Z# B/ H* h27fc.33b0: *0000000000e00000-0000000000eb8fff 0x0000/0x0004 0x0020000
* S* N6 V$ ~4 T. v27fc.33b0: 0000000000eb9000-0000000000ebbfff 0x0104/0x0004 0x0020000& G2 L* U3 k/ D- o3 j* @' ?
27fc.33b0: 0000000000ebc000-0000000000efffff 0x0004/0x0004 0x0020000
$ S/ `& r8 A6 P27fc.33b0: *0000000000f00000-0000000000f01fff 0x0004/0x0004 0x00200008 p* p# N! B* ]: b
27fc.33b0: 0000000000f02000-0000000000f19fff 0x0000/0x0004 0x0020000* ~" [0 a2 o. Y/ D0 K. ]/ y- M
27fc.33b0: 0000000000f1a000-0000000000ffffff 0x0001/0x0000 0x0000000: Y! J( I, W8 \# _5 J8 E+ S
27fc.33b0: *0000000001000000-0000000001004fff 0x0004/0x0004 0x0020000
. p0 @) x* Z: Y+ Y' w! X) b27fc.33b0: 0000000001005000-00000000010fffff 0x0000/0x0004 0x0020000
" J: k, C( g% S5 I2 R27fc.33b0: *0000000001100000-000000000111cfff 0x0004/0x0004 0x0020000/ w$ A! h( A4 ?2 [; X& n
27fc.33b0: 000000000111d000-00000000011fffff 0x0000/0x0004 0x0020000& r, m: q8 e7 ]& _- R
27fc.33b0: 0000000001200000-00000000012effff 0x0001/0x0000 0x00000008 C" j! ?2 q) l7 Y; z
27fc.33b0: *00000000012f0000-00000000012fefff 0x0004/0x0004 0x0020000& j# S$ J# K2 T" L; w9 z
27fc.33b0: 00000000012ff000-00000000012fffff 0x0000/0x0004 0x00200006 s8 d* ^+ k; X
27fc.33b0: *0000000001300000-0000000001303fff 0x0000/0x0004 0x00200007 C7 \ G Q. Q' n! ]2 Z
27fc.33b0: 0000000001304000-00000000014f4fff 0x0004/0x0004 0x0020000
+ R/ ?2 G, Z$ `7 m/ @# @0 x27fc.33b0: 00000000014f5000-00000000014f5fff 0x0000/0x0004 0x0020000
4 X: N$ d$ h# [% O27fc.33b0: 00000000014f6000-000000007ffdffff 0x0001/0x0000 0x00000000 c" r$ [ K- r, W
27fc.33b0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000 {9 F! d5 X) o1 j5 @$ Z- ]
27fc.33b0: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x0000000
6 f; i7 r- b( ?4 u$ G: w27fc.33b0: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000( u" i% Q) j2 `
27fc.33b0: 000000007fff0000-00007ff465c8ffff 0x0001/0x0000 0x0000000( @! [0 p: B( H6 A
27fc.33b0: *00007ff465c90000-00007ff465c94fff 0x0002/0x0002 0x0040000( Q( }" b: a: h9 W. s$ P, A
27fc.33b0: 00007ff465c95000-00007ff465d8ffff 0x0000/0x0002 0x0040000
/ V5 b) f; a8 D27fc.33b0: *00007ff465d90000-00007ff565daffff 0x0000/0x0004 0x0020000) D8 Y* V U |" d
27fc.33b0: *00007ff565db0000-00007ff567daffff 0x0000/0x0004 0x00200000 ~6 Y9 V# W9 J
27fc.33b0: 00007ff567db0000-00007ff567db0fff 0x0004/0x0004 0x00200000 r0 ?: K0 i# G* J
27fc.33b0: 00007ff567db1000-00007ff567dbffff 0x0001/0x0000 0x0000000
0 r0 ?7 v+ c, @8 ]" x9 k d27fc.33b0: *00007ff567dc0000-00007ff567dc0fff 0x0002/0x0002 0x0040000& a' s' y% f$ A! G9 ?
27fc.33b0: 00007ff567dc1000-00007ff567dcffff 0x0001/0x0000 0x00000009 [7 N! p7 _, [' r/ [' V0 M
27fc.33b0: *00007ff567dd0000-00007ff567e02fff 0x0002/0x0002 0x0040000: P' W! j+ r4 x- P
27fc.33b0: 00007ff567e03000-00007ff646a3ffff 0x0001/0x0000 0x0000000+ s1 `% Z. ^4 V" K/ m3 W
27fc.33b0: *00007ff646a40000-00007ff646a40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe/ f8 u1 T2 [4 K
27fc.33b0: 00007ff646a41000-00007ff646ab6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
/ q$ ?( K- i K/ _27fc.33b0: 00007ff646ab7000-00007ff646ab7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
1 f' O$ {) |5 g- l27fc.33b0: 00007ff646ab8000-00007ff646afffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe6 \+ U& G7 p) Y6 p E
27fc.33b0: 00007ff646b00000-00007ff646b02fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
3 \+ \9 B, t- b5 R8 \27fc.33b0: 00007ff646b03000-00007ff646b05fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
0 h1 f g0 n" G7 Q5 j2 d6 S27fc.33b0: 00007ff646b06000-00007ff646b08fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe6 Q; U9 w7 b m h
27fc.33b0: 00007ff646b09000-00007ff646b09fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
+ k( A5 a) a3 ]: k* n, J" ~3 S- f0 I! h27fc.33b0: 00007ff646b0a000-00007ff646b0bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe1 D' |) @0 U$ B! j1 \
27fc.33b0: 00007ff646b0c000-00007ff646b0cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
- ~( d& M, e. f! ~1 j1 l8 H27fc.33b0: 00007ff646b0d000-00007ff646b55fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe+ m# y! p r, Z
27fc.33b0: 00007ff646b56000-00007ff938fcffff 0x0001/0x0000 0x0000000
$ P! l( ?' q9 `3 r2 ^ O- P3 l3 V27fc.33b0: *00007ff938fd0000-00007ff938fd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
8 w2 {0 ~- z, ~27fc.33b0: 00007ff938fd1000-00007ff9390d5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
" l# d# U4 M0 G/ X27fc.33b0: 00007ff9390d6000-00007ff939238fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
, w' c' Z3 _8 d- W) p4 O3 K27fc.33b0: 00007ff939239000-00007ff93923cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
# Q; r/ h& Y: a3 A9 Q6 W. V. H A27fc.33b0: 00007ff93923d000-00007ff93923dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
7 q! u+ t' B4 } l- w; u) }) p- F27fc.33b0: 00007ff93923e000-00007ff939273fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
5 t$ K- q# k$ F5 s1 E6 o: x X( D; L27fc.33b0: 00007ff939274000-00007ff93a98ffff 0x0001/0x0000 0x00000001 Q5 n9 K, q" i, W& g
27fc.33b0: *00007ff93a990000-00007ff93a990fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll# H! V4 W8 O+ d+ S8 D
27fc.33b0: 00007ff93a991000-00007ff93aa05fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
$ Z S- L I' P9 A* Z, g, p27fc.33b0: 00007ff93aa06000-00007ff93aa37fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
7 i1 @. A2 R, r' y+ A6 a27fc.33b0: 00007ff93aa38000-00007ff93aa38fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll4 m" K! I/ k, U" p
27fc.33b0: 00007ff93aa39000-00007ff93aa39fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
5 o2 O3 R4 z+ F+ u27fc.33b0: 00007ff93aa3a000-00007ff93aa41fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll. S2 g1 j1 Z) l$ G
27fc.33b0: 00007ff93aa42000-00007ff93badffff 0x0001/0x0000 0x0000000
3 T6 _* t( `. B& ~4 w- ~/ {4 s( ]27fc.33b0: *00007ff93bae0000-00007ff93bae0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
/ V3 t/ ~+ C- `; K/ Y l7 k0 g27fc.33b0: 00007ff93bae1000-00007ff93bbf7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll& x8 y* |6 n" Q0 g) e
27fc.33b0: 00007ff93bbf8000-00007ff93bc3efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
: L6 }5 _: V3 N0 ]- u27fc.33b0: 00007ff93bc3f000-00007ff93bc3ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
, }3 z* ~ E' p$ w! L; k; Y27fc.33b0: 00007ff93bc40000-00007ff93bc41fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6 t3 X4 J; A$ f' O% k27fc.33b0: 00007ff93bc42000-00007ff93bc4afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
6 t" C& g" P( Z2 Q# H27fc.33b0: 00007ff93bc4b000-00007ff93bccffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll- v) R; M4 @3 ]* G& t
27fc.33b0: 00007ff93bcd0000-00007ffffffeffff 0x0001/0x0000 0x0000000
K* y- I) h. F/ ?: h27fc.33b0: kernel32.dll: timestamp 0xce6bbd73 (rc=VINF_SUCCESS)0 m& Z6 o. M) v5 ?! U7 P/ Z
27fc.33b0: kernelbase.dll: timestamp 0x91b9349a (rc=VINF_SUCCESS)) x- c: e/ n& m
27fc.33b0: VirtualBoxVM.exe: timestamp 0x5f08d7bc (rc=VINF_SUCCESS) p0 H+ x! D9 R$ R( }
27fc.33b0: '\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe' has no imports6 Q! C/ H, z# u4 |6 ^1 D r; l
27fc.33b0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports& L0 E9 t( z0 b1 [8 K
27fc.33b0: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=04 a2 ?0 c( e; L& j1 N- k6 o) d
27fc.33b0: '\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe' has no imports
, Q P; g% P$ l5 P) r, o) h9 [* C27fc.33b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe)4 o- n# s7 V" N0 V. r: u
27fc.33b0: supR3HardNtEnableThreadCreationEx:) j; h, W. ^6 ^* S& h
27fc.33b0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff93bb51770 pvNtTerminateThread=00007ff93bb7cac0$ q: Y3 U) g+ Q, [2 j4 q/ o" K
27fc.33b0: supR3HardenedWinDoReSpawn(1): New child 32b0.2564 [kernel32].
9 B# G$ A; z% s' ^7 b) X9 o27fc.33b0: supR3HardNtChildGatherData: PebBaseAddress=0000000000b2e000 cbPeb=0x388 c( q, k# x+ P+ t
27fc.33b0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff93bae0000 uNtDllChildAddr=00007ff93bae0000' E! B; g ]) U6 `; b9 s
27fc.33b0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff93bb51770
6 k2 C, q9 g3 `/ I" C27fc.33b0: supR3HardenedWinSetupChildInit: Initial context:
" G, n0 y7 f' Y- urax=0000000000000000 rbx=0000000000000000 rcx=00007ff646a47900 rdx=0000000000b2e000
- @; X/ m" u6 B/ F" {rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
) _# p# D4 E# Ur10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
' m l- |$ v2 x& cr14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
* V9 W8 \0 X1 q. X! C0 C; ]rip=00007ff93bb4ce30 rsp=000000000096fa68 rbp=0000000000000000 ctxflags=0010001b. D8 }2 a- ~6 n% F
cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
' q- H1 _" |2 C! s0 w$ D2 u" H+ F- AP3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=00000000000000007 K8 P/ M3 H* X2 D5 [
dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
6 x: z: D; h- {+ J; r$ [! U4 @3 hdr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
3 |! Z4 V) S+ \' j8 L3 v5 I: }lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
0 e2 Z1 R8 l3 u7 b! ^8 \27fc.33b0: supR3HardenedWinSetupChildInit: Start child.- K% s7 A: @7 u1 `/ Q2 E# T
27fc.33b0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. _5 t% T: J& o
27fc.33b0: supR3HardNtChildPurify: Startup delay kludge #1/0: 268 ms, 23 sleeps
+ g* O4 C' k/ w0 W p& y4 s! k27fc.33b0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION5 k. J5 o: I6 J! U7 I
27fc.33b0: *0000000000000000-000000000082ffff 0x0001/0x0000 0x0000000
% K b% c F# {! O2 E27fc.33b0: *0000000000830000-000000000084ffff 0x0004/0x0004 0x0020000- `$ v; \, q" C
27fc.33b0: *0000000000850000-000000000086afff 0x0002/0x0002 0x0040000
9 e. S% i1 F9 @! n4 z( C T7 @0 k27fc.33b0: 000000000086b000-000000000086ffff 0x0001/0x0000 0x0000000
; R; r* |) N l m/ o! n27fc.33b0: *0000000000870000-000000000096afff 0x0000/0x0004 0x0020000
- v9 J$ t/ Y. `* o% J4 W27fc.33b0: 000000000096b000-000000000096dfff 0x0104/0x0004 0x0020000
4 ~4 b" M( @: I& V$ [27fc.33b0: 000000000096e000-000000000096ffff 0x0004/0x0004 0x0020000
: `- u5 o1 V& y( F1 j1 g) e27fc.33b0: *0000000000970000-0000000000973fff 0x0002/0x0002 0x0040000
$ o" O* m3 V/ D2 u2 I/ T! u27fc.33b0: 0000000000974000-000000000097ffff 0x0001/0x0000 0x0000000" i. W% |- d0 K+ g# f* [
27fc.33b0: *0000000000980000-0000000000981fff 0x0004/0x0004 0x00200009 S L+ s! Z: u) D: [& x! K5 k1 Y( Z
27fc.33b0: 0000000000982000-00000000009fffff 0x0001/0x0000 0x0000000# I4 a( E+ v; ^
27fc.33b0: *0000000000a00000-0000000000b2dfff 0x0000/0x0004 0x0020000
1 F" [0 g R) B- a* O27fc.33b0: 0000000000b2e000-0000000000b30fff 0x0004/0x0004 0x00200008 t1 l* l' K8 u
27fc.33b0: 0000000000b31000-0000000000bfffff 0x0000/0x0004 0x0020000
. ^8 W( L1 h) k27fc.33b0: 0000000000c00000-000000007ffdffff 0x0001/0x0000 0x0000000
$ o, z+ E4 X$ s) ?27fc.33b0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000* v+ j: |& j e% \$ D; ^7 [
27fc.33b0: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x0000000
. B! F; J: O- K) F27fc.33b0: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000
( J( ~- A* k% u0 t( F27fc.33b0: 000000007fff0000-00007ff5ec1bffff 0x0001/0x0000 0x0000000
* m6 d- I% G/ J" F/ |27fc.33b0: *00007ff5ec1c0000-00007ff5ec1c0fff 0x0002/0x0002 0x00400004 k6 M8 d. @- ~1 B
27fc.33b0: 00007ff5ec1c1000-00007ff5ec1cffff 0x0001/0x0000 0x00000001 ^# `7 k/ y5 O! n5 A7 a# K1 ^
27fc.33b0: *00007ff5ec1d0000-00007ff5ec202fff 0x0002/0x0002 0x0040000% b o; Z% g; H$ p# z4 D$ r
27fc.33b0: 00007ff5ec203000-00007ff646a3ffff 0x0001/0x0000 0x0000000
! i+ r7 P; O( h! K) M/ C27fc.33b0: *00007ff646a40000-00007ff646a40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
, O* j8 i/ t$ g ?7 j27fc.33b0: 00007ff646a41000-00007ff646ab6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
0 t9 m5 E' n! _) V, O9 R27fc.33b0: 00007ff646ab7000-00007ff646ab7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe9 E1 {/ p, ^! e& b" P+ E
27fc.33b0: 00007ff646ab8000-00007ff646afffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
q+ P; R, |- S7 d27fc.33b0: 00007ff646b00000-00007ff646b00fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
8 I- X. e& J S0 a6 c) v27fc.33b0: 00007ff646b01000-00007ff646b01fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
Q) o- x% T& r27fc.33b0: 00007ff646b02000-00007ff646b06fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
1 u( p. l7 ?8 L' W- O# r0 q27fc.33b0: 00007ff646b07000-00007ff646b07fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe7 h- Y" E" E( i3 ~
27fc.33b0: 00007ff646b08000-00007ff646b08fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
0 ?1 \* d" ^( O+ V- P5 ^4 S( P27fc.33b0: 00007ff646b09000-00007ff646b0cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
, T* o; J5 R6 k2 W27fc.33b0: 00007ff646b0d000-00007ff646b55fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe. X# g3 A8 y! u4 R
27fc.33b0: 00007ff646b56000-00007ff93badffff 0x0001/0x0000 0x0000000* G5 G9 |6 |( U Q4 C7 ]) y& T
27fc.33b0: *00007ff93bae0000-00007ff93bae0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll# I- a9 o0 _- ~( Y, u& y+ l; L& A0 S
27fc.33b0: 00007ff93bae1000-00007ff93bbf7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll% h3 j/ C3 ?3 D
27fc.33b0: 00007ff93bbf8000-00007ff93bc3efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
^9 J, l$ l$ t* ?9 L27fc.33b0: 00007ff93bc3f000-00007ff93bc4afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
. n! V& K3 r$ v5 c9 p' r27fc.33b0: 00007ff93bc4b000-00007ff93bc59fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
* M$ ]1 u H' n% N$ S5 x V& B. F- M27fc.33b0: 00007ff93bc5a000-00007ff93bc5afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll# P: ?" O: } @, x
27fc.33b0: 00007ff93bc5b000-00007ff93bc5dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll$ ~& [2 k* V; l# h
27fc.33b0: 00007ff93bc5e000-00007ff93bccffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
$ `9 K+ X4 |" i- }' M- X6 h27fc.33b0: 00007ff93bcd0000-00007ffffffeffff 0x0001/0x0000 0x0000000
, w. l0 F0 P7 l27fc.33b0: supR3HardNtChildPurify: Done after 274 ms and 0 fixes (loop #0).
8 _( U3 w+ g& q" N1 W32b0.2564: Log file opened: 6.1.12r139181 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
& u4 V$ L/ |7 S* d. z: w' v32b0.2564: supR3HardenedVmProcessInit: uNtDllAddr=00007ff93bae0000 g_uNtVerCombined=0xa047ba00 (stack ~000000000096f4f8)( |" e: g. v8 {6 {
32b0.2564: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)4 d8 @" G$ O- [7 _2 a
32b0.2564: New simple heap: #1 0000000000d00000 LB 0x400000 (for 2031616 allocation)2 h3 t% Z: b4 g4 M
32b0.2564: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\virtualBox'; N4 B! v0 m% q2 B
32b0.2564: System32: \Device\HarddiskVolume3\Windows\System32! g. `7 p) \1 k. R+ C/ S
32b0.2564: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS+ p3 b) Y: c$ s
32b0.2564: KnownDllPath: C:\Windows\System320 D. I8 q; }9 C
32b0.2564: supR3HardenedVmProcessInit: Opening vboxdrv stub...
% Y8 { D [% |: h$ L; s# t0 s27fc.33b0: supR3HardNtEnableThreadCreationEx:: J" A9 P5 G+ H0 w
32b0.2564: supR3HardenedWinReadErrorInfoDevice: 'Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)'+ ?+ P* [* k1 y& m w2 L* y! e+ E
32b0.2564: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
, h* B$ G$ x( l) P8 D1 S- o32b0.2564: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)! R" r; ^3 l$ H/ [
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)/ b6 f8 V8 p$ u# V, R6 w
27fc.33b0: supR3HardenedWinCheckChild: enmRequest=2 rc=-5633 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
M* V+ t5 C( w5 f3 D' {% Q( J$ yVBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)' D1 ~1 X; f$ y1 ?. s0 H& ?* n
32b0.2564: KiUserExceptionDispatcher: 0xc0000005 (0000000000000001, 0000000000000024) @ 00007ff93bae72a6 (flags=0x0)
- f- P8 j) q6 V- j9 Yrax=0000000000000000 rbx=00007ff93bc452c0 rcx=00007ff93bc452c0 rdx=00000000fffffffa
1 ], a. ^% _8 Q% ]( frsi=0000000000000000 rdi=00007ff93bc44f00 r8 =0000000000000000 r9 =00007ff93bc45200
! \: }( ]8 I dr10=0000000000000000 r11=0000000000968d90 r12=0000000000000000 r13=0000000000b2f000
; l' P4 V+ i% f2 d" ~( fr14=0000000000000001 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
' v9 X) u! q: G* Z& y9 \rip=00007ff93bae72a6 rsp=0000000000968bf0 rbp=00000000ffffe900 ctxflags=0010005f
6 `8 b# }7 T# V( [3 C0 Ocs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b eflags=00010213 mxcrx=00001f806 \$ B: v2 `3 j$ M8 s$ R
P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000; N7 U! h1 a% H
dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
) L* K. K0 q4 u$ s* k& ~% K1 f, zdr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
K7 j& `0 H$ [. `9 elbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
5 k* y N/ D# [1 G( v. ^27fc.33b0: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3) q4 P2 t: }- ?7 O$ t
27fc.33b0: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)0 [& b6 a1 I. L+ Z- D( g8 M" f
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)
" R1 i, ^- ? w+ b) {- z3 M
; h9 D/ Y$ C" x
" l6 a( L) E. A( ~& O- b Z/ a- X4 T! p( z* t
/ i- K. l! ?( A* A G1 n# P3 W
: K* ?* p# E: V1 X9 B3 Avboxdrv已运行
6 I5 U# r2 w2 x; K" z& j* j+ g
! z9 x& T; B" `2 O请问大神们改如何解决这个问题
9 G: R+ j, {$ j9 V+ j% Z: W |
|
/1 
发表于 2021-7-13 13:34
收藏
淘帖
支持！
反对！