|
|
EDA365欢迎您登录！
您需要 登录 才可以下载或查看，没有帐号？注册
x
9 O6 }+ N S: t+ r8 L& a" ?( D8 q
报错提示如下2 `0 I9 V3 b7 a1 l1 p
& P3 n- U+ D8 x1 T' r) ]# T( w. J9 @
% J0 ?1 E& N. k; C5 Q/ s9 @. i
VBoxHardening.log日志如下：
, ^* G# Y8 |/ e& }
4 S! n) \! k' A5 M4 K0 K- I27fc.33b0: Log file opened: 6.1.12r139181 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047ba00
& W" c' ~8 M& o8 s: q& Z6 [27fc.33b0: \SystemRoot\System32\ntdll.dll:
}( w: c1 `2 S27fc.33b0: CreationTime: 2020-05-13T04:08:01.305832200Z3 c3 `( }( T' M) K
27fc.33b0: LastWriteTime: 2020-05-13T04:08:01.364711200Z+ i; _4 M: p+ Z0 Z
27fc.33b0: ChangeTime: 2020-08-12T03:51:05.663111000Z
4 U0 Y7 e; x' o2 _7 y; r3 W3 a2 B27fc.33b0: FileAttributes: 0x20
2 A; n( {' ~" ~$ |) {27fc.33b0: Size: 0x1e84605 ~( m6 P7 s& _) P' _
27fc.33b0: NT Headers: 0xd8
0 b, O; U, p% W6 Q$ _5 a8 J27fc.33b0: Timestamp: 0xb29ecf52
( F, Z8 o* s! b# @27fc.33b0: Machine: 0x8664 - amd64, U; v; l: ]6 c- K1 b" e+ l
27fc.33b0: Timestamp: 0xb29ecf52 n$ [; g. L' i8 h4 z1 d
27fc.33b0: Image Version: 10.0" [# H1 ~0 s" T* o; Q* z
27fc.33b0: SizeOfImage: 0x1f0000 (2031616): Y, h. w4 Z) m' I+ |- H' K
27fc.33b0: Resource Dir: 0x17f000 LB 0x6f3101 `' p2 Q* W7 G* v
27fc.33b0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
7 m6 p& n- i7 B! V: q: u27fc.33b0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)] |/ _; I% v* z- U0 H" g( E
27fc.33b0: ProductName: Microsoft® Windows® Operating System
1 a5 q! E5 r7 T* U27fc.33b0: ProductVersion: 10.0.18362.8155 P; V7 p" @* ?; `7 M9 W
27fc.33b0: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
% O6 k9 B" d3 F6 I27fc.33b0: FileDescription: NT Layer DLL
" k3 W: y+ _: {2 i f27fc.33b0: \SystemRoot\System32\kernel32.dll:
' W8 m- ?9 v6 z3 p5 P27fc.33b0: CreationTime: 2020-07-15T02:37:51.154008500Z$ h# x6 P( l# X' w) h6 t* K
27fc.33b0: LastWriteTime: 2020-07-15T02:37:51.189919900Z, G$ X; N1 t) S* T1 @) L" N
27fc.33b0: ChangeTime: 2020-08-12T03:51:05.332995100Z1 [$ G( I+ C3 ~4 G N
27fc.33b0: FileAttributes: 0x207 K# f7 G# u9 n; x. M
27fc.33b0: Size: 0xb04981 G+ U& P0 u$ N% [) B
27fc.33b0: NT Headers: 0xe8
& t% q3 a- }; u( N# w, }27fc.33b0: Timestamp: 0xce6bbd737 p z6 @6 |( O& n
27fc.33b0: Machine: 0x8664 - amd64: m& `4 ~7 J3 w/ d
27fc.33b0: Timestamp: 0xce6bbd738 s7 {- ^ X+ T4 X3 H
27fc.33b0: Image Version: 10.0
# @9 N, @2 j- U27fc.33b0: SizeOfImage: 0xb2000 (729088)
! L( `( N! x" Y8 D' M27fc.33b0: Resource Dir: 0xb0000 LB 0x520$ [7 I3 d; w r; B, c
27fc.33b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5 M& A- K1 g, e+ T7 y7 B27fc.33b0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]1 n8 @( ~0 r0 ~1 ^& L8 [
27fc.33b0: ProductName: Microsoft® Windows® Operating System, q+ {/ a1 L. o2 r& ~3 m
27fc.33b0: ProductVersion: 10.0.18362.9592 `/ U0 t9 U+ @
27fc.33b0: FileVersion: 10.0.18362.959 (WinBuild.160101.0800)- q, F; B# F. @8 h0 b# g. l
27fc.33b0: FileDescription: Windows NT BASE API Client DLL7 [* y8 Q+ C* j7 j M( m
27fc.33b0: \SystemRoot\System32\KernelBase.dll:" P- H' D" D; }
27fc.33b0: CreationTime: 2020-08-12T03:50:16.150249100Z- f% c* t. E( f
27fc.33b0: LastWriteTime: 2020-08-12T03:50:16.238020800Z
% g+ h) Z D1 h8 S; J6 q27fc.33b0: ChangeTime: 2020-08-12T09:44:10.047506100Z
7 N7 Y g1 y& j* T+ p# N27fc.33b0: FileAttributes: 0x20
- ?4 ]8 C8 [. L5 ^9 u8 k, ]27fc.33b0: Size: 0x2a3868
( Q( g; U2 z* e8 R1 \9 G4 z27fc.33b0: NT Headers: 0xf8
! N/ J+ E; r5 I+ h8 {: b+ I d1 e27fc.33b0: Timestamp: 0x91b9349a
9 i, y) x: m h" u; J- A5 z& P4 n27fc.33b0: Machine: 0x8664 - amd64
# H6 \( p+ W& _7 u2 w27fc.33b0: Timestamp: 0x91b9349a
/ F2 d8 v* ?; P* `" k- Z! \( M6 N$ S27fc.33b0: Image Version: 10.0: D, v0 ~' Z6 n- `* D6 d, T
27fc.33b0: SizeOfImage: 0x2a4000 (2768896)3 R! D' O( Y: k. Z. b+ f
27fc.33b0: Resource Dir: 0x27e000 LB 0x548
! D& Z. ]9 d7 }; H7 J27fc.33b0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]* }. p+ H/ x) o; N% H9 k( I8 ?
27fc.33b0: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
. X6 T" G+ S1 R2 {: X& F27fc.33b0: ProductName: Microsoft® Windows® Operating System
1 m4 M; R$ L- N+ L* V27fc.33b0: ProductVersion: 10.0.18362.9974 U. C+ p7 ^/ r1 Q
27fc.33b0: FileVersion: 10.0.18362.997 (WinBuild.160101.0800)6 E$ F D& }% N# n0 v
27fc.33b0: FileDescription: Windows NT BASE API Client DLL
1 e* X* O# r/ ?1 \5 \& R! @27fc.33b0: \SystemRoot\System32\apisetschema.dll:
6 ~8 s, W3 Q; F! G27fc.33b0: CreationTime: 2019-03-19T04:43:54.837151500Z, j. N- M- m8 ^+ ?8 a9 o
27fc.33b0: LastWriteTime: 2019-03-19T04:43:54.837151500Z
+ S D; U0 a# I9 O: S27fc.33b0: ChangeTime: 2020-08-12T03:51:05.320029000Z3 z) s# v9 L) r4 f/ m x
27fc.33b0: FileAttributes: 0x20
9 C6 ?$ `7 w5 x; ?9 o: |& R27fc.33b0: Size: 0x1d028 I+ z" s( r, r2 f9 e) f
27fc.33b0: NT Headers: 0xc8
9 {! O/ B3 V- L4 a0 s5 i27fc.33b0: Timestamp: 0xd6ced0804 B/ J8 K6 d# H/ N% e
27fc.33b0: Machine: 0x8664 - amd64$ D1 J. y5 K' T5 P6 a1 _" }) Y3 S$ k
27fc.33b0: Timestamp: 0xd6ced080& e" d7 B9 }" T i7 f
27fc.33b0: Image Version: 10.0
{; Z6 \; M5 t27fc.33b0: SizeOfImage: 0x1e000 (122880)' Y* @7 m3 @3 H
27fc.33b0: Resource Dir: 0x1d000 LB 0x408 K! D/ ^" R, s$ z. |9 v
27fc.33b0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)], R" a3 p& |' G3 ~, }. y
27fc.33b0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
" ]- z1 I+ s) U& E9 W3 s27fc.33b0: ProductName: Microsoft® Windows® Operating System. E0 g4 B7 ~- _ `
27fc.33b0: ProductVersion: 10.0.18362.1
7 _1 g: S, K, m: }27fc.33b0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)6 G% f; ~( W& y. g4 V
27fc.33b0: FileDescription: ApiSet Schema DLL2 n6 i ^. O% {
27fc.33b0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
) D4 J; w" F' T# n2 |! c27fc.33b0: supR3HardenedWinFindAdversaries: 0x0
, c" ~, }5 a( f: Y27fc.33b0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\virtualBox'2 |' V) u* y- C# K3 r
27fc.33b0: Calling main()7 Q# U$ }) D. H9 @9 F7 E$ R7 L: d
27fc.33b0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
- B! l6 c/ ?: {; F2 Z i5 W. M6 G27fc.33b0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume6\virtualBox'4 W) o6 I; J4 n4 z' |/ h
27fc.33b0: SUPR3HardenedMain: Respawn #1
4 a- J* |2 Z0 y9 ]- }27fc.33b0: System32: \Device\HarddiskVolume3\Windows\System32
: Q: v- }0 r) O6 C" a27fc.33b0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
# u3 \8 G t w9 W3 A27fc.33b0: KnownDllPath: C:\Windows\System32, W: v4 I+ `8 E% v& k0 |9 e. W
27fc.33b0: supR3HardenedWinInit: PeRForming a limited self purification...
* {$ C+ m# S3 q' P27fc.33b0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION8 C9 d. ?# D/ I0 h7 ?- @0 _* m) @
27fc.33b0: *0000000000000000-0000000000acffff 0x0001/0x0000 0x00000001 ?9 `* d, @4 b/ J5 q
27fc.33b0: *0000000000ad0000-0000000000adffff 0x0004/0x0004 0x0040000, @7 }+ w* y$ L; k6 q, c4 T
27fc.33b0: 0000000000ae0000-0000000000aeffff 0x0001/0x0000 0x0000000/ X- I1 ]5 C9 ^6 b0 A% y/ v+ t
27fc.33b0: *0000000000af0000-0000000000b0afff 0x0002/0x0002 0x0040000: N$ o7 L4 |, m# |" T. U
27fc.33b0: 0000000000b0b000-0000000000b0ffff 0x0001/0x0000 0x00000003 h% n/ I* Q( T4 M* u- |! [6 u6 s6 {
27fc.33b0: *0000000000b10000-0000000000b13fff 0x0002/0x0002 0x00400000 `, A M, m5 O$ F/ M
27fc.33b0: 0000000000b14000-0000000000b1ffff 0x0001/0x0000 0x0000000
+ e! w% W% A# {# b27fc.33b0: *0000000000b20000-0000000000b21fff 0x0004/0x0004 0x0020000" }/ }. G S; ]/ g; M
27fc.33b0: 0000000000b22000-0000000000b2ffff 0x0001/0x0000 0x00000004 p) f5 n2 w0 y1 h; H% d. e1 j
27fc.33b0: *0000000000b30000-0000000000bf6fff 0x0002/0x0002 0x0040000
' }: k* e1 [" R. y9 j& [( s$ D! v27fc.33b0: 0000000000bf7000-0000000000bfffff 0x0001/0x0000 0x0000000
4 R8 x) _+ Q# T$ o% M27fc.33b0: *0000000000c00000-0000000000d8efff 0x0000/0x0004 0x0020000# H. [* t$ ~9 S" q3 n; f
27fc.33b0: 0000000000d8f000-0000000000d91fff 0x0004/0x0004 0x0020000
* h$ [. T/ M7 |. d27fc.33b0: 0000000000d92000-0000000000dfffff 0x0000/0x0004 0x0020000
* M1 ` h) A3 t/ ~27fc.33b0: *0000000000e00000-0000000000eb8fff 0x0000/0x0004 0x0020000
7 S" h: D% n, I2 e! ~27fc.33b0: 0000000000eb9000-0000000000ebbfff 0x0104/0x0004 0x0020000: j! N! y* B+ u9 N2 \- @- u" E
27fc.33b0: 0000000000ebc000-0000000000efffff 0x0004/0x0004 0x0020000# z2 v. _0 p m" \2 d4 j. j
27fc.33b0: *0000000000f00000-0000000000f01fff 0x0004/0x0004 0x0020000
. {( K( ^2 T3 u27fc.33b0: 0000000000f02000-0000000000f19fff 0x0000/0x0004 0x0020000
% P% e/ Z, H$ Z6 f27fc.33b0: 0000000000f1a000-0000000000ffffff 0x0001/0x0000 0x0000000
0 {! z7 @; V @$ O27fc.33b0: *0000000001000000-0000000001004fff 0x0004/0x0004 0x0020000+ ?/ V) P5 p: c& r
27fc.33b0: 0000000001005000-00000000010fffff 0x0000/0x0004 0x0020000$ _# A4 t8 N: U3 L- m! P) y
27fc.33b0: *0000000001100000-000000000111cfff 0x0004/0x0004 0x0020000
! |) V& V5 b7 v7 n) W& b27fc.33b0: 000000000111d000-00000000011fffff 0x0000/0x0004 0x0020000
7 l2 N7 k; P4 X% ^5 s27fc.33b0: 0000000001200000-00000000012effff 0x0001/0x0000 0x00000003 ]0 q4 d. V& L7 x4 u0 Z* M2 }
27fc.33b0: *00000000012f0000-00000000012fefff 0x0004/0x0004 0x0020000! L! I3 l4 ?, _- k% N4 e/ F( k
27fc.33b0: 00000000012ff000-00000000012fffff 0x0000/0x0004 0x00200008 r$ ~& U7 ?" N6 P2 Q* C
27fc.33b0: *0000000001300000-0000000001303fff 0x0000/0x0004 0x00200006 _& m+ N. J$ V' _/ O$ ^
27fc.33b0: 0000000001304000-00000000014f4fff 0x0004/0x0004 0x0020000
+ A8 n; q# D7 p3 [5 A0 R) z5 z; B, r27fc.33b0: 00000000014f5000-00000000014f5fff 0x0000/0x0004 0x0020000
- {, o' d* d/ Z- i7 |* f2 `27fc.33b0: 00000000014f6000-000000007ffdffff 0x0001/0x0000 0x0000000- H" y+ Z. a- D( i
27fc.33b0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
; ]3 S, N. ^- A m9 k" _27fc.33b0: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x00000003 Q7 j* g& E2 _2 f
27fc.33b0: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000
8 T1 D. p* l" t5 m- p# I27fc.33b0: 000000007fff0000-00007ff465c8ffff 0x0001/0x0000 0x0000000
4 G) _ k/ z+ z" z7 }$ C: K% p27fc.33b0: *00007ff465c90000-00007ff465c94fff 0x0002/0x0002 0x0040000- h1 f/ C) s+ L' A3 j% S
27fc.33b0: 00007ff465c95000-00007ff465d8ffff 0x0000/0x0002 0x0040000
) n! S$ c$ D E& {+ w Z! P3 ^- C27fc.33b0: *00007ff465d90000-00007ff565daffff 0x0000/0x0004 0x0020000
9 q6 a- X* }& Z7 ^- `27fc.33b0: *00007ff565db0000-00007ff567daffff 0x0000/0x0004 0x0020000' k1 X3 Y! I7 K6 A' s' J& L R
27fc.33b0: 00007ff567db0000-00007ff567db0fff 0x0004/0x0004 0x0020000
/ P5 @/ S: ^+ C' S* j' i+ h27fc.33b0: 00007ff567db1000-00007ff567dbffff 0x0001/0x0000 0x0000000
0 G7 }3 B' }5 B6 K) y27fc.33b0: *00007ff567dc0000-00007ff567dc0fff 0x0002/0x0002 0x0040000 O& w K1 Z+ X; P
27fc.33b0: 00007ff567dc1000-00007ff567dcffff 0x0001/0x0000 0x0000000
5 T# ]3 u, T! C% G- D F" `1 Q27fc.33b0: *00007ff567dd0000-00007ff567e02fff 0x0002/0x0002 0x0040000
) T; ]+ _) |! s, _7 J+ o' ?27fc.33b0: 00007ff567e03000-00007ff646a3ffff 0x0001/0x0000 0x0000000' @( _! T- o) v4 l" o, q9 ^% I5 J0 ~, r
27fc.33b0: *00007ff646a40000-00007ff646a40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
; ], f$ q p8 u) t! w/ @27fc.33b0: 00007ff646a41000-00007ff646ab6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe& b, j' m6 \% y* Z- t6 P3 ]* k
27fc.33b0: 00007ff646ab7000-00007ff646ab7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
) m$ @4 R9 g& X2 Y27fc.33b0: 00007ff646ab8000-00007ff646afffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe5 C, p. ]- \9 j
27fc.33b0: 00007ff646b00000-00007ff646b02fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
/ y) D l% p# u: |2 O% G27fc.33b0: 00007ff646b03000-00007ff646b05fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
/ S9 Z' e a! s. n* N5 ^' J27fc.33b0: 00007ff646b06000-00007ff646b08fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
! `6 F K7 z% [27fc.33b0: 00007ff646b09000-00007ff646b09fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe/ \1 |+ \* L ?! `" {- S
27fc.33b0: 00007ff646b0a000-00007ff646b0bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe0 _( M( E* m3 l% |9 I& ^
27fc.33b0: 00007ff646b0c000-00007ff646b0cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe; r" _; t4 z( |4 z5 i* W& _, O
27fc.33b0: 00007ff646b0d000-00007ff646b55fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe- T' h$ w3 s8 q8 L
27fc.33b0: 00007ff646b56000-00007ff938fcffff 0x0001/0x0000 0x0000000
' Q0 q( Q5 I0 C! [9 g; E27fc.33b0: *00007ff938fd0000-00007ff938fd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll9 V) A$ g" [6 R
27fc.33b0: 00007ff938fd1000-00007ff9390d5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll0 e4 j f7 O1 o9 `: T5 }
27fc.33b0: 00007ff9390d6000-00007ff939238fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll8 @4 m/ x2 O* D* }3 S9 B( d
27fc.33b0: 00007ff939239000-00007ff93923cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
8 v) n N6 H- q+ ]6 X27fc.33b0: 00007ff93923d000-00007ff93923dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll6 ]$ n( {4 Z2 h* c! ^& ]. O6 E1 d
27fc.33b0: 00007ff93923e000-00007ff939273fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll- f6 h7 Q* [2 g+ {$ I7 s( U
27fc.33b0: 00007ff939274000-00007ff93a98ffff 0x0001/0x0000 0x0000000
/ `+ k1 G, U% W; k7 ?% d7 V8 g$ O27fc.33b0: *00007ff93a990000-00007ff93a990fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll2 g9 y5 F& r$ E5 \
27fc.33b0: 00007ff93a991000-00007ff93aa05fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll! w1 n, O, L/ ]# S: m6 a8 {. c
27fc.33b0: 00007ff93aa06000-00007ff93aa37fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3 Q M' y' M% G _% d27fc.33b0: 00007ff93aa38000-00007ff93aa38fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll+ t! Y/ r$ R% f
27fc.33b0: 00007ff93aa39000-00007ff93aa39fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll( j+ r$ G$ \8 r
27fc.33b0: 00007ff93aa3a000-00007ff93aa41fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll+ w2 u' c' K" w
27fc.33b0: 00007ff93aa42000-00007ff93badffff 0x0001/0x0000 0x00000003 M8 ~& P1 }: Y" l: F
27fc.33b0: *00007ff93bae0000-00007ff93bae0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll m, L. G n/ c5 V' p
27fc.33b0: 00007ff93bae1000-00007ff93bbf7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll* f, d( v1 k ^. ?9 {
27fc.33b0: 00007ff93bbf8000-00007ff93bc3efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll0 f7 W1 k/ ]* u q: P |. X r
27fc.33b0: 00007ff93bc3f000-00007ff93bc3ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
& T7 N. y" V. c+ d% O4 D27fc.33b0: 00007ff93bc40000-00007ff93bc41fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll5 m9 i2 t- \2 h C$ x+ K1 u
27fc.33b0: 00007ff93bc42000-00007ff93bc4afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll# Z7 n- m* G+ h% I" f' j
27fc.33b0: 00007ff93bc4b000-00007ff93bccffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll1 m7 I( M+ z9 w4 S2 |3 _( ? D
27fc.33b0: 00007ff93bcd0000-00007ffffffeffff 0x0001/0x0000 0x0000000' T* P. D5 h2 a; }
27fc.33b0: kernel32.dll: timestamp 0xce6bbd73 (rc=VINF_SUCCESS)
. y6 O" a+ q3 r) e: E$ y27fc.33b0: kernelbase.dll: timestamp 0x91b9349a (rc=VINF_SUCCESS)
4 Y" T" }: ^( ?, D( m; w/ ~' G27fc.33b0: VirtualBoxVM.exe: timestamp 0x5f08d7bc (rc=VINF_SUCCESS). u4 G, M: U/ k& _4 m' h
27fc.33b0: '\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe' has no imports
4 Z/ o# o/ ?; i$ |9 w; B7 }27fc.33b0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports' j" U @ [+ o3 t% t' j
27fc.33b0: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
/ V6 O0 e, U, E" ]27fc.33b0: '\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe' has no imports
: |' k7 {- k- x: A1 \27fc.33b0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe); S | k" O: N6 m3 ?
27fc.33b0: supR3HardNtEnableThreadCreationEx:3 f6 F* x" i2 P: [
27fc.33b0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff93bb51770 pvNtTerminateThread=00007ff93bb7cac0
# h) g6 Y: n$ M3 X6 @, g! u27fc.33b0: supR3HardenedWinDoReSpawn(1): New child 32b0.2564 [kernel32].
5 N2 x# i9 \* ?# s8 N27fc.33b0: supR3HardNtChildGatherData: PebBaseAddress=0000000000b2e000 cbPeb=0x388
; k) R( O1 v! ^& M0 o B6 Z, V- `27fc.33b0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff93bae0000 uNtDllChildAddr=00007ff93bae00004 Y3 a) Z3 k3 \9 W/ [7 a4 m- _; M
27fc.33b0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff93bb51770
1 g. n2 H/ S# P8 [27fc.33b0: supR3HardenedWinSetupChildInit: Initial context:
; ~* j0 o0 g0 nrax=0000000000000000 rbx=0000000000000000 rcx=00007ff646a47900 rdx=0000000000b2e000
5 ^) z0 K: {$ a* j G. frsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000& M j x6 P+ X' ^( Y- T0 j
r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
* p; d) [: a6 I& e: `7 rr14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000; z" M$ h5 |7 w- ^
rip=00007ff93bb4ce30 rsp=000000000096fa68 rbp=0000000000000000 ctxflags=0010001b
" A1 T) B3 n+ X) Ics=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
# [+ w! o. A" p1 R- FP3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
/ y9 l4 p/ U9 ~8 W7 {( odr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000' t0 ?8 b! O1 k
dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000, ]; T: w( L: c" x1 q( h
lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000+ C3 ]: W+ H/ Y1 k2 Z6 R" ]
27fc.33b0: supR3HardenedWinSetupChildInit: Start child.
/ A" ^, D* q9 z" d3 [27fc.33b0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.9 g" ]+ |/ w2 p/ Y! S
27fc.33b0: supR3HardNtChildPurify: Startup delay kludge #1/0: 268 ms, 23 sleeps
: t+ \, b& ^: X6 l27fc.33b0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
% t, T% `7 G/ j( U. b8 i; r% }0 K27fc.33b0: *0000000000000000-000000000082ffff 0x0001/0x0000 0x0000000/ N* |, P* Z+ L4 A% l1 {" F7 F0 _
27fc.33b0: *0000000000830000-000000000084ffff 0x0004/0x0004 0x0020000& M* ^9 i8 L8 A, m+ f1 B
27fc.33b0: *0000000000850000-000000000086afff 0x0002/0x0002 0x0040000
c' j! [. y9 E+ E27fc.33b0: 000000000086b000-000000000086ffff 0x0001/0x0000 0x0000000
! V$ i6 e& K& u- b, t27fc.33b0: *0000000000870000-000000000096afff 0x0000/0x0004 0x0020000
: c: y. v" f4 N% \0 ~8 \' ~27fc.33b0: 000000000096b000-000000000096dfff 0x0104/0x0004 0x0020000
. e3 @5 N7 k. _! x7 t9 C27fc.33b0: 000000000096e000-000000000096ffff 0x0004/0x0004 0x0020000
! `7 l1 ?7 G- L, N9 ], D2 V) z3 t27fc.33b0: *0000000000970000-0000000000973fff 0x0002/0x0002 0x0040000. A% f) {3 _0 s$ K; |$ ]
27fc.33b0: 0000000000974000-000000000097ffff 0x0001/0x0000 0x0000000
/ y! P7 a. G2 f% [27fc.33b0: *0000000000980000-0000000000981fff 0x0004/0x0004 0x0020000
! p, \3 ^; G4 b: Q$ s6 ?2 M27fc.33b0: 0000000000982000-00000000009fffff 0x0001/0x0000 0x00000000 B) o2 |" N5 Q+ F% h
27fc.33b0: *0000000000a00000-0000000000b2dfff 0x0000/0x0004 0x0020000% t1 C: U) \0 C# ?! i/ \# d/ S
27fc.33b0: 0000000000b2e000-0000000000b30fff 0x0004/0x0004 0x0020000
. U' U- u% p1 w" \4 s+ d$ b) v: v27fc.33b0: 0000000000b31000-0000000000bfffff 0x0000/0x0004 0x0020000
4 o. s6 s8 Y5 J1 |: l7 I: R6 D27fc.33b0: 0000000000c00000-000000007ffdffff 0x0001/0x0000 0x0000000; T) I0 C$ p7 _ e4 L
27fc.33b0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
9 D5 T9 @2 M9 j1 ]27fc.33b0: 000000007ffe1000-000000007ffeefff 0x0001/0x0000 0x0000000
1 n4 P0 ]. S. k; F27fc.33b0: *000000007ffef000-000000007ffeffff 0x0002/0x0002 0x0020000, s x" Z# w6 C
27fc.33b0: 000000007fff0000-00007ff5ec1bffff 0x0001/0x0000 0x0000000
/ @9 R( b5 V$ g2 \27fc.33b0: *00007ff5ec1c0000-00007ff5ec1c0fff 0x0002/0x0002 0x0040000' E8 d# [: u9 j1 n7 N3 {+ D
27fc.33b0: 00007ff5ec1c1000-00007ff5ec1cffff 0x0001/0x0000 0x00000007 ?, Z7 G5 C( |: R2 M. F/ K
27fc.33b0: *00007ff5ec1d0000-00007ff5ec202fff 0x0002/0x0002 0x0040000. {7 v7 D; @1 M0 A0 A* v2 z
27fc.33b0: 00007ff5ec203000-00007ff646a3ffff 0x0001/0x0000 0x0000000* u. s# n0 a% ~7 ~7 s N
27fc.33b0: *00007ff646a40000-00007ff646a40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
/ I7 ^" _2 c: i27fc.33b0: 00007ff646a41000-00007ff646ab6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
2 O8 d; W: ~2 U5 U) i27fc.33b0: 00007ff646ab7000-00007ff646ab7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
( u2 _! q, c9 `6 h27fc.33b0: 00007ff646ab8000-00007ff646afffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
- Y$ ]( @" ]7 N; b' C27fc.33b0: 00007ff646b00000-00007ff646b00fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
0 n# I+ {. c3 K! l27fc.33b0: 00007ff646b01000-00007ff646b01fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe9 I) {! }1 N( W" y/ D0 N
27fc.33b0: 00007ff646b02000-00007ff646b06fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe; r0 i+ ?( t& t* N: ^
27fc.33b0: 00007ff646b07000-00007ff646b07fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
2 X; k$ O, P$ _8 m4 Q3 H27fc.33b0: 00007ff646b08000-00007ff646b08fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
# @! P$ \$ S& I7 F8 `. \2 o27fc.33b0: 00007ff646b09000-00007ff646b0cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe5 Q2 O1 _6 q+ a# t% l9 M
27fc.33b0: 00007ff646b0d000-00007ff646b55fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe
4 |6 }% y/ K' j27fc.33b0: 00007ff646b56000-00007ff93badffff 0x0001/0x0000 0x0000000
2 o7 L# u# Y8 p( O# ]" e0 p/ b27fc.33b0: *00007ff93bae0000-00007ff93bae0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
& v+ v( h- Q1 i: _4 Z# f: P27fc.33b0: 00007ff93bae1000-00007ff93bbf7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll. s! h8 }2 j1 d" R, Y
27fc.33b0: 00007ff93bbf8000-00007ff93bc3efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll# L7 i9 W6 j; I9 k9 y" B4 N
27fc.33b0: 00007ff93bc3f000-00007ff93bc4afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll# B# a* k* ?. u1 \
27fc.33b0: 00007ff93bc4b000-00007ff93bc59fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
' N7 ^% q' y6 C27fc.33b0: 00007ff93bc5a000-00007ff93bc5afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
+ s3 X8 E* }# `/ {) [% V27fc.33b0: 00007ff93bc5b000-00007ff93bc5dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll) [5 h0 v5 ]/ T j; b5 i% [$ ~
27fc.33b0: 00007ff93bc5e000-00007ff93bccffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
! _" P# I4 S7 o. N, h27fc.33b0: 00007ff93bcd0000-00007ffffffeffff 0x0001/0x0000 0x0000000
. d: W; E" H" l$ c7 [, H27fc.33b0: supR3HardNtChildPurify: Done after 274 ms and 0 fixes (loop #0).# ~ h4 n7 A) R' G. _3 M$ p+ H: Y
32b0.2564: Log file opened: 6.1.12r139181 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba004 J1 t+ D$ S, `$ G: b
32b0.2564: supR3HardenedVmProcessInit: uNtDllAddr=00007ff93bae0000 g_uNtVerCombined=0xa047ba00 (stack ~000000000096f4f8), ]7 J1 N0 F7 k+ ^, n0 q
32b0.2564: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
3 f5 {. {4 h9 \32b0.2564: New simple heap: #1 0000000000d00000 LB 0x400000 (for 2031616 allocation)
3 j! Y, }& U& o) Y) J7 s8 j7 S32b0.2564: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\virtualBox'0 B. Q& H4 d) s
32b0.2564: System32: \Device\HarddiskVolume3\Windows\System32: u6 p; k3 @2 `6 y0 Q2 s
32b0.2564: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
$ s, D! W: R$ H! d32b0.2564: KnownDllPath: C:\Windows\System32+ ^8 T. l- P/ h
32b0.2564: supR3HardenedVmProcessInit: Opening vboxdrv stub..." m; |- ]2 u D0 a' j& V' O A v" _
27fc.33b0: supR3HardNtEnableThreadCreationEx:
) w3 j( K. q/ f* g32b0.2564: supR3HardenedWinReadErrorInfoDevice: 'Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)', {# X1 s' G7 F, C# V# m9 r
32b0.2564: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)0 P9 H& W. ?+ m/ d1 a
32b0.2564: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
; C+ A, k# ^9 q9 y3 UVBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)
) D5 o! M0 n$ B/ e27fc.33b0: supR3HardenedWinCheckChild: enmRequest=2 rc=-5633 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)) C* c8 N8 N: O1 v
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)
7 `6 N; e$ A' r7 l% I32b0.2564: KiUserExceptionDispatcher: 0xc0000005 (0000000000000001, 0000000000000024) @ 00007ff93bae72a6 (flags=0x0)
" _7 w% O* s8 Grax=0000000000000000 rbx=00007ff93bc452c0 rcx=00007ff93bc452c0 rdx=00000000fffffffa: x6 l. p/ {% e# U7 u0 c
rsi=0000000000000000 rdi=00007ff93bc44f00 r8 =0000000000000000 r9 =00007ff93bc45200 Y+ {6 w% X* G6 n9 D
r10=0000000000000000 r11=0000000000968d90 r12=0000000000000000 r13=0000000000b2f000. r4 N# V7 W; l4 ?0 {% c
r14=0000000000000001 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
e1 @+ w9 u2 L, vrip=00007ff93bae72a6 rsp=0000000000968bf0 rbp=00000000ffffe900 ctxflags=0010005f
4 T0 ^. A7 @; X0 k; N9 I6 Wcs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b eflags=00010213 mxcrx=00001f80 \" K+ L/ e4 y
P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=00000000000000004 \4 Z" S0 v! ~6 w. y* m
dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
6 O6 o5 ?0 i* D9 T: n+ odr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000) P! ^- o* ]9 R: W4 b! G
lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
2 K9 F+ J* s- t* L5 S# i27fc.33b0: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)# i& P8 Y1 o$ K6 V
27fc.33b0: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
/ I! [# n6 Z5 p% t0 TVBoxDrvStub error: Unknown image file \Device\HarddiskVolume6\virtualBox\VirtualBoxVM.exe at 00007ff646a40000. (rc83Exp=-91)
! Q. w5 t1 j7 ^ \0 V
% m3 S4 P! o H% I$ t: M: } r$ r9 F) x
( _4 y1 G. v. l- ?5 j
/ B0 t' V4 }. C# O$ N7 a& j" a
0 N( r, b& ~/ A. wvboxdrv已运行1 J( Z9 p7 w, G. ^
4 h+ n# H- A! ?4 W/ J; e* M1 |请问大神们改如何解决这个问题
. n/ ^+ I: ]0 \- v' a; ^ |
|
/1 
发表于 2021-7-13 13:34
收藏
淘帖
支持！
反对！