Probleme virtual box
Fermé
qouide
Messages postés
3
Date d'inscription
lundi 3 août 2015
Statut
Membre
Dernière intervention
4 août 2015
-
Modifié par qouide le 4/08/2015 à 01:19
mozii95 Messages postés 796 Date d'inscription vendredi 12 juin 2015 Statut Membre Dernière intervention 19 octobre 2019 - 7 août 2015 à 16:33
mozii95 Messages postés 796 Date d'inscription vendredi 12 juin 2015 Statut Membre Dernière intervention 19 octobre 2019 - 7 août 2015 à 16:33
A voir également:
- Supr3hardntchildpurify
- Virtual dj gratuit - Télécharger - DJ & Karaoké
- Virtual box - Télécharger - Émulation & Virtualisation
- Virtual pc - Télécharger - Émulation & Virtualisation
- Virtual cable - Télécharger - Audio & Musique
- Tera box - Télécharger - Stockage
2 réponses
Morille1
Messages postés
38
Date d'inscription
dimanche 10 novembre 2013
Statut
Membre
Dernière intervention
26 juillet 2022
2
4 août 2015 à 05:01
4 août 2015 à 05:01
Bon, écoute j'ai eu le même problème alors...
J'avais vm lite (virtual box open source)
Désinstalle virtual box et ta machine virtuelle (bien que tu aies eu ce message d'erreur, windows crée le fichier de la machine virtuelle) .Redémarre,
réinstalle tout. Normalement, il ne devrait pas te faire deux fois ce message d'erreur ;)
J'avais vm lite (virtual box open source)
Désinstalle virtual box et ta machine virtuelle (bien que tu aies eu ce message d'erreur, windows crée le fichier de la machine virtuelle) .Redémarre,
réinstalle tout. Normalement, il ne devrait pas te faire deux fois ce message d'erreur ;)
mozii95
Messages postés
796
Date d'inscription
vendredi 12 juin 2015
Statut
Membre
Dernière intervention
19 octobre 2019
524
Modifié par mozii95 le 7/08/2015 à 00:32
Modifié par mozii95 le 7/08/2015 à 00:32
Pourquoi avoir ouvert un double post pour le même sujet ?
https://forums.commentcamarche.net/forum/affich-32346183-echec-de-l-ouverture-de-session-pour-la-machine-virtuelle-window#p32355982
Logique, détermination et motivation sont les clés de la réussite.
https://forums.commentcamarche.net/forum/affich-32346183-echec-de-l-ouverture-de-session-pour-la-machine-virtuelle-window#p32355982
Logique, détermination et motivation sont les clés de la réussite.
brino1987
Messages postés
5
Date d'inscription
mardi 26 mars 2013
Statut
Membre
Dernière intervention
7 août 2015
7 août 2015 à 16:29
7 août 2015 à 16:29
voilà le contenu de fichier 'VBoxStartup.log'
170c.ad8: Log file opened: 5.0.0r101573 g_hStartupLog=00000010 g_uNtVerCombined=0x611db110
170c.ad8: \SystemRoot\System32\ntdll.dll:
170c.ad8: CreationTime: 2015-06-13T17:17:40.242089500Z
170c.ad8: LastWriteTime: 2015-05-25T18:04:08.382563200Z
170c.ad8: ChangeTime: 2015-06-20T15:59:53.631956700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x13f400
170c.ad8: NT Headers: 0xd0
170c.ad8: Timestamp: 0x55636303
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55636303
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x141000 (1314816)
170c.ad8: Resource Dir: 0xe1000 LB 0x5a028
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18869
170c.ad8: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
170c.ad8: FileDescription: NT Layer DLL
170c.ad8: \SystemRoot\System32\kernel32.dll:
170c.ad8: CreationTime: 2015-06-10T16:32:27.019691300Z
170c.ad8: LastWriteTime: 2015-05-09T03:13:42.222000000Z
170c.ad8: ChangeTime: 2015-06-10T20:54:20.256027700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xd4000
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x554d7aff
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x554d7aff
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0xd4000 (868352)
170c.ad8: Resource Dir: 0xc7000 LB 0x528
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18847
170c.ad8: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
170c.ad8: FileDescription: Windows NT BASE API Client DLL
170c.ad8: \SystemRoot\System32\KernelBase.dll:
170c.ad8: CreationTime: 2015-06-10T16:32:27.050891300Z
170c.ad8: LastWriteTime: 2015-05-09T03:13:42.222000000Z
170c.ad8: ChangeTime: 2015-06-10T20:54:20.443228000Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x47a00
170c.ad8: NT Headers: 0xe0
170c.ad8: Timestamp: 0x554d7b00
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x554d7b00
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x4b000 (307200)
170c.ad8: Resource Dir: 0x47000 LB 0x530
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18847
170c.ad8: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
170c.ad8: FileDescription: Windows NT BASE API Client DLL
170c.ad8: \SystemRoot\System32\apisetschema.dll:
170c.ad8: CreationTime: 2015-06-13T17:17:37.712085900Z
170c.ad8: LastWriteTime: 2015-05-25T17:55:18.977000000Z
170c.ad8: ChangeTime: 2015-06-20T15:59:53.475956400Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x1a00
170c.ad8: NT Headers: 0xc0
170c.ad8: Timestamp: 0x55636244
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55636244
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x50000 (327680)
170c.ad8: Resource Dir: 0x30000 LB 0x3f8
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18869
170c.ad8: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
170c.ad8: FileDescription: ApiSet Schema DLL
170c.ad8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
170c.ad8: supR3HardenedWinFindAdversaries: 0x40
170c.ad8: \SystemRoot\System32\drivers\kl1.sys:
170c.ad8: CreationTime: 2014-03-31T08:47:08.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:53:15.076416700Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.238723300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x258b8
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x556dad51
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x556dad51
170c.ad8: Image Version: 0.0
170c.ad8: SizeOfImage: 0x526000 (5398528)
170c.ad8: Resource Dir: 0x521000 LB 0x448
170c.ad8: ProductName: Kaspersky Anti-Virus
170c.ad8: ProductVersion: 6.0.1.990
170c.ad8: FileVersion: 6.8.0.51
170c.ad8: FileDescription: Kaspersky Unified Driver
170c.ad8: \SystemRoot\System32\drivers\klflt.sys:
170c.ad8: CreationTime: 2014-11-28T16:19:36.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:46:22.194801300Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.425555700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x1f6d8
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x551678f6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x551678f6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0x28000 (163840)
170c.ad8: Resource Dir: 0x25000 LB 0x370
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.7.0.20
170c.ad8: FileVersion: 1.7.0.20
170c.ad8: FileDescription: Filter Core [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klif.sys:
170c.ad8: CreationTime: 2014-12-13T16:21:14.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:46:23.993904200Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.370555300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xac2b8
170c.ad8: NT Headers: 0x100
170c.ad8: Timestamp: 0x5570a95f
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x5570a95f
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xb1000 (724992)
170c.ad8: Resource Dir: 0xa7000 LB 0x1538
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.17.0.268
170c.ad8: FileVersion: 8.17.0.268
170c.ad8: FileDescription: Klif Mini-Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klim6.sys:
170c.ad8: CreationTime: 2014-10-10T15:02:52.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:22.264123300Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.549741100Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8570
170c.ad8: NT Headers: 0xe8
170c.ad8: Timestamp: 0x55354ea6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55354ea6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0x8000 (32768)
170c.ad8: Resource Dir: 0x6000 LB 0x490
170c.ad8: ProductName: Kaspersky Anti-Virus
170c.ad8: ProductVersion: 6.0.1.990
170c.ad8: FileVersion: 8.0.0.94
170c.ad8: FileDescription: Kaspersky Lab Intermediate Network Driver [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klkbdflt.sys:
170c.ad8: CreationTime: 2014-10-30T02:22:12.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:49:22.278101400Z
170c.ad8: ChangeTime: 2015-06-29T11:26:00.004580400Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8d70
170c.ad8: NT Headers: 0x100
170c.ad8: Timestamp: 0x553fe1a9
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x553fe1a9
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xa000 (40960)
170c.ad8: Resource Dir: 0x8000 LB 0x3a8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.15.0.49
170c.ad8: FileVersion: 8.15.0.49
170c.ad8: FileDescription: KLKBDFLT Keyboard Device Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klmouflt.sys:
170c.ad8: CreationTime: 2013-08-08T14:10:58.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:49:23.638179200Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.703564300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8b70
170c.ad8: NT Headers: 0xf8
170c.ad8: Timestamp: 0x553fe0e6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x553fe0e6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xa000 (40960)
170c.ad8: Resource Dir: 0x8000 LB 0x3a8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.11.0.15
170c.ad8: FileVersion: 8.11.0.15
170c.ad8: FileDescription: KLMOUFLT Mouse Device Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\kltdi.sys:
170c.ad8: CreationTime: 2014-10-09T10:31:42.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:23.916217800Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.815756300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xd438
170c.ad8: NT Headers: 0x268
170c.ad8: Timestamp: 0x55782d6d
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55782d6d
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x8f80 (36736)
170c.ad8: Resource Dir: 0x8300 LB 0x3b0
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.7.0.15
170c.ad8: FileVersion: 1.7.0.15 built by: WinDDK
170c.ad8: FileDescription: Network filtering component [fre_wxp_x86]
170c.ad8: \SystemRoot\System32\drivers\kneps.sys:
170c.ad8: CreationTime: 2014-11-10T15:48:04.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:26.668375200Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.948763900Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x26638
170c.ad8: NT Headers: 0x278
170c.ad8: Timestamp: 0x55795d36
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55795d36
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x22180 (139648)
170c.ad8: Resource Dir: 0x20480 LB 0x390
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 5.7.0.44
170c.ad8: FileVersion: 5.7.0.44 built by: WinDDK
170c.ad8: FileDescription: KNEPS Power [fre_wxp_x86]
170c.ad8: \SystemRoot\System32\klfphc.dll:
170c.ad8: CreationTime: 2013-05-06T06:13:26.000000000Z
170c.ad8: LastWriteTime: 2013-05-06T06:13:26.000000000Z
170c.ad8: ChangeTime: 2015-05-24T20:41:36.423573500Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x17a60
170c.ad8: NT Headers: 0xe8
170c.ad8: Timestamp: 0x51873be9
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x51873be9
170c.ad8: Image Version: 0.0
170c.ad8: SizeOfImage: 0x19000 (102400)
170c.ad8: Resource Dir: 0x13000 LB 0x3af8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.0.0.12
170c.ad8: FileVersion: 1.0.0.12
170c.ad8: FileDescription: Filtering Platform Helper Class
170c.ad8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
170c.ad8: Calling main()
170c.ad8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
170c.ad8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
170c.ad8: SUPR3HardenedMain: Respawn #1
170c.ad8: System32: \Device\HarddiskVolume3\Windows\System32
170c.ad8: WinSxS: \Device\HarddiskVolume3\Windows\winsxs
170c.ad8: KnownDllPath: C:\Windows\system32
170c.ad8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
170c.ad8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
170c.ad8: supR3HardNtEnableThreadCreation:
170c.ad8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77bb3861 pvNtTerminateThread=77b96930
170c.ad8: supR3HardenedWinDoReSpawn(1): New child ddc.1454 [kernel32].
170c.ad8: supR3HardNtChildGatherData: PebBaseAddress=7ffde000 cbPeb=0x248
170c.ad8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77b50000 uNtDllChildAddr=77b50000
170c.ad8: supR3HardenedWinSetupChildInit: uLdrInitThunk=77bb3861
170c.ad8: supR3HardenedWinSetupChildInit: Start child.
170c.ad8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 26 ms.
170c.ad8: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 0 sleeps
170c.ad8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
170c.ad8: *00000000-fffeffff 0x0001/0x0000 0x0000000
170c.ad8: *00010000-fffeffff 0x0004/0x0004 0x0020000
170c.ad8: *00030000-0002bfff 0x0002/0x0002 0x0040000
170c.ad8: 00034000-00027fff 0x0001/0x0000 0x0000000
170c.ad8: *00040000-00040fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 00041000-000b6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b7000-000b7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b8000-000f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f2000-000f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f3000-000f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f4000-000f4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f5000-000f5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f6000-000f7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f8000-000fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000fb000-0013efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 0013f000-0013dfff 0x0001/0x0000 0x0000000
170c.ad8: *00140000-00042fff 0x0000/0x0004 0x0020000
170c.ad8: 0023d000-0023afff 0x0104/0x0004 0x0020000
170c.ad8: 0023f000-0023dfff 0x0004/0x0004 0x0020000
170c.ad8: *00240000-0023efff 0x0004/0x0004 0x0020000
170c.ad8: 00241000-c04a1fff 0x0001/0x0000 0x0000000
170c.ad8: *3ffe0000-3ffdefff 0x0040/0x0040 0x0020000 !!
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 3ffe0000 (LB 0x1000, 3ffe0000 LB 0x1000)
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [3ffe0000/3ffe0000 LB 0/0x1000]
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [00000000]/3ffe0000 LB 0x10000 s=0x10000 ap=0x0 rp=0x000001
170c.ad8: 3ffe1000-3ffd1fff 0x0001/0x0000 0x0000000
170c.ad8: *3fff0000-3ffeefff 0x0040/0x0040 0x0020000 !!
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 3fff0000 (LB 0x1000, 3fff0000 LB 0x1000)
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [3fff0000/3fff0000 LB 0/0x1000]
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [00000000]/3fff0000 LB 0x37b60000 s=0x10000 ap=0x0 rp=0x000001
170c.ad8: 3fff1000-08491fff 0x0001/0x0000 0x0000000
170c.ad8: *77b50000-77b50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77b51000-77c27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c28000-77c2dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2e000-77c2efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2f000-77c30fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c31000-77c90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c91000-77b71fff 0x0001/0x0000 0x0000000
170c.ad8: *77db0000-77db0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll
170c.ad8: 77db1000-6fbb1fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
170c.ad8: 7ffd3000-7ffc7fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffde000-7ffdcfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
170c.ad8: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
170c.ad8: apisetschema.dll: timestamp 0x55636244 (rc=VINF_SUCCESS)
170c.ad8: VirtualBox.exe: timestamp 0x559e4a2c (rc=VINF_SUCCESS)
170c.ad8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
170c.ad8: '\Device\HarddiskVolume3\Windows\System32\apisetschema.dll' has no imports
170c.ad8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
170c.ad8: supR3HardNtChildPurify: cFixes=2 g_fSupAdversaries=0x40
170c.ad8: supR3HardNtChildPurify: Startup delay kludge #1/1: 532 ms, 0 sleeps
170c.ad8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
170c.ad8: *00000000-fffeffff 0x0001/0x0000 0x0000000
170c.ad8: *00010000-fffeffff 0x0004/0x0004 0x0020000
170c.ad8: *00030000-0002bfff 0x0002/0x0002 0x0040000
170c.ad8: 00034000-00027fff 0x0001/0x0000 0x0000000
170c.ad8: *00040000-00040fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 00041000-000b6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b7000-000b7fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b8000-000f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f2000-000fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000fb000-0013efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 0013f000-0013dfff 0x0001/0x0000 0x0000000
170c.ad8: *00140000-00042fff 0x0000/0x0004 0x0020000
170c.ad8: 0023d000-0023afff 0x0104/0x0004 0x0020000
170c.ad8: 0023f000-0023dfff 0x0004/0x0004 0x0020000
170c.ad8: *00240000-0023efff 0x0004/0x0004 0x0020000
170c.ad8: 00241000-88931fff 0x0001/0x0000 0x0000000
170c.ad8: *77b50000-77b50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77b51000-77c27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c28000-77c2dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2e000-77c30fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c31000-77c90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c91000-77b71fff 0x0001/0x0000 0x0000000
170c.ad8: *77db0000-77db0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll
170c.ad8: 77db1000-6fbb1fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
170c.ad8: 7ffd3000-7ffc7fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffde000-7ffdcfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
170c.ad8: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
170c.ad8: supR3HardNtChildPurify: Done after 1366 ms and 2 fixes (loop #1).
170c.ad8: supR3HardNtEnableThreadCreation:
ddc.1454: Log file opened: 5.0.0r101573 g_hStartupLog=00000004 g_uNtVerCombined=0x611db110
ddc.1454: supR3HardenedVmProcessInit: uNtDllAddr=77b50000
ddc.1454: ntdll.dll: timestamp 0x55636303 (rc=VINF_SUCCESS)
ddc.1454: New simple heap: #1 00350000 LB 0x400000 (for 1314816 allocation)
ddc.1454: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: System32: \Device\HarddiskVolume3\Windows\System32
ddc.1454: WinSxS: \Device\HarddiskVolume3\Windows\winsxs
ddc.1454: KnownDllPath: C:\Windows\system32
ddc.1454: supR3HardenedVmProcessInit: Opening vboxdrv stub...
ddc.1454: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
ddc.1454: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
ddc.1454: Registered Dll notification callback with NTDLL.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
ddc.1454: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00000000:<flags> [calling]
ddc.1454: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedDllNotificationCallback: load 765c0000 LB 0x000d4000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
ddc.1454: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedDllNotificationCallback: load 75cb0000 LB 0x0004b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
ddc.1454: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=765c0000 'C:\Windows\system32\kernel32.dll'
ddc.1454: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77bb3861 pvNtTerminateThread=77b96930
170c.ad8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 124 ms.
ddc.1454: \SystemRoot\System32\ntdll.dll:
ddc.1454: CreationTime: 2015-06-13T17:17:40.242089500Z
ddc.1454: LastWriteTime: 2015-05-25T18:04:08.382563200Z
ddc.1454: ChangeTime: 2015-06-20T15:59:53.631956700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x13f400
ddc.1454: NT Headers: 0xd0
ddc.1454: Timestamp: 0x55636303
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55636303
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x141000 (1314816)
ddc.1454: Resource Dir: 0xe1000 LB 0x5a028
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18869
ddc.1454: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
ddc.1454: FileDescription: NT Layer DLL
ddc.1454: \SystemRoot\System32\kernel32.dll:
ddc.1454: CreationTime: 2015-06-10T16:32:27.019691300Z
ddc.1454: LastWriteTime: 2015-05-09T03:13:42.222000000Z
ddc.1454: ChangeTime: 2015-06-10T20:54:20.256027700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xd4000
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x554d7aff
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x554d7aff
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0xd4000 (868352)
ddc.1454: Resource Dir: 0xc7000 LB 0x528
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18847
ddc.1454: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
ddc.1454: FileDescription: Windows NT BASE API Client DLL
ddc.1454: \SystemRoot\System32\KernelBase.dll:
ddc.1454: CreationTime: 2015-06-10T16:32:27.050891300Z
ddc.1454: LastWriteTime: 2015-05-09T03:13:42.222000000Z
ddc.1454: ChangeTime: 2015-06-10T20:54:20.443228000Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x47a00
ddc.1454: NT Headers: 0xe0
ddc.1454: Timestamp: 0x554d7b00
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x554d7b00
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x4b000 (307200)
ddc.1454: Resource Dir: 0x47000 LB 0x530
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18847
ddc.1454: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
ddc.1454: FileDescription: Windows NT BASE API Client DLL
ddc.1454: \SystemRoot\System32\apisetschema.dll:
ddc.1454: CreationTime: 2015-06-13T17:17:37.712085900Z
ddc.1454: LastWriteTime: 2015-05-25T17:55:18.977000000Z
ddc.1454: ChangeTime: 2015-06-20T15:59:53.475956400Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x1a00
ddc.1454: NT Headers: 0xc0
ddc.1454: Timestamp: 0x55636244
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55636244
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x50000 (327680)
ddc.1454: Resource Dir: 0x30000 LB 0x3f8
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18869
ddc.1454: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
ddc.1454: FileDescription: ApiSet Schema DLL
ddc.1454: NtOpenDirectoryObject failed on \Driver: 0xc0000022
ddc.1454: supR3HardenedWinFindAdversaries: 0x40
ddc.1454: \SystemRoot\System32\drivers\kl1.sys:
ddc.1454: CreationTime: 2014-03-31T08:47:08.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:53:15.076416700Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.238723300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x258b8
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x556dad51
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x556dad51
ddc.1454: Image Version: 0.0
ddc.1454: SizeOfImage: 0x526000 (5398528)
ddc.1454: Resource Dir: 0x521000 LB 0x448
ddc.1454: ProductName: Kaspersky Anti-Virus
ddc.1454: ProductVersion: 6.0.1.990
ddc.1454: FileVersion: 6.8.0.51
ddc.1454: FileDescription: Kaspersky Unified Driver
ddc.1454: \SystemRoot\System32\drivers\klflt.sys:
ddc.1454: CreationTime: 2014-11-28T16:19:36.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:46:22.194801300Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.425555700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x1f6d8
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x551678f6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x551678f6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0x28000 (163840)
ddc.1454: Resource Dir: 0x25000 LB 0x370
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.7.0.20
ddc.1454: FileVersion: 1.7.0.20
ddc.1454: FileDescription: Filter Core [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klif.sys:
ddc.1454: CreationTime: 2014-12-13T16:21:14.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:46:23.993904200Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.370555300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xac2b8
ddc.1454: NT Headers: 0x100
ddc.1454: Timestamp: 0x5570a95f
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x5570a95f
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xb1000 (724992)
ddc.1454: Resource Dir: 0xa7000 LB 0x1538
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.17.0.268
ddc.1454: FileVersion: 8.17.0.268
ddc.1454: FileDescription: Klif Mini-Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klim6.sys:
ddc.1454: CreationTime: 2014-10-10T15:02:52.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:22.264123300Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.549741100Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8570
ddc.1454: NT Headers: 0xe8
ddc.1454: Timestamp: 0x55354ea6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55354ea6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0x8000 (32768)
ddc.1454: Resource Dir: 0x6000 LB 0x490
ddc.1454: ProductName: Kaspersky Anti-Virus
ddc.1454: ProductVersion: 6.0.1.990
ddc.1454: FileVersion: 8.0.0.94
ddc.1454: FileDescription: Kaspersky Lab Intermediate Network Driver [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klkbdflt.sys:
ddc.1454: CreationTime: 2014-10-30T02:22:12.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:49:22.278101400Z
ddc.1454: ChangeTime: 2015-06-29T11:26:00.004580400Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8d70
ddc.1454: NT Headers: 0x100
ddc.1454: Timestamp: 0x553fe1a9
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x553fe1a9
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xa000 (40960)
ddc.1454: Resource Dir: 0x8000 LB 0x3a8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.15.0.49
ddc.1454: FileVersion: 8.15.0.49
ddc.1454: FileDescription: KLKBDFLT Keyboard Device Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klmouflt.sys:
ddc.1454: CreationTime: 2013-08-08T14:10:58.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:49:23.638179200Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.703564300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8b70
ddc.1454: NT Headers: 0xf8
ddc.1454: Timestamp: 0x553fe0e6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x553fe0e6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xa000 (40960)
ddc.1454: Resource Dir: 0x8000 LB 0x3a8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.11.0.15
ddc.1454: FileVersion: 8.11.0.15
ddc.1454: FileDescription: KLMOUFLT Mouse Device Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\kltdi.sys:
ddc.1454: CreationTime: 2014-10-09T10:31:42.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:23.916217800Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.815756300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xd438
ddc.1454: NT Headers: 0x268
ddc.1454: Timestamp: 0x55782d6d
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55782d6d
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x8f80 (36736)
ddc.1454: Resource Dir: 0x8300 LB 0x3b0
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.7.0.15
ddc.1454: FileVersion: 1.7.0.15 built by: WinDDK
ddc.1454: FileDescription: Network filtering component [fre_wxp_x86]
ddc.1454: \SystemRoot\System32\drivers\kneps.sys:
ddc.1454: CreationTime: 2014-11-10T15:48:04.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:26.668375200Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.948763900Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x26638
ddc.1454: NT Headers: 0x278
ddc.1454: Timestamp: 0x55795d36
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55795d36
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x22180 (139648)
ddc.1454: Resource Dir: 0x20480 LB 0x390
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 5.7.0.44
ddc.1454: FileVersion: 5.7.0.44 built by: WinDDK
ddc.1454: FileDescription: KNEPS Power [fre_wxp_x86]
ddc.1454: \SystemRoot\System32\klfphc.dll:
ddc.1454: CreationTime: 2013-05-06T06:13:26.000000000Z
ddc.1454: LastWriteTime: 2013-05-06T06:13:26.000000000Z
ddc.1454: ChangeTime: 2015-05-24T20:41:36.423573500Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x17a60
ddc.1454: NT Headers: 0xe8
ddc.1454: Timestamp: 0x51873be9
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x51873be9
ddc.1454: Image Version: 0.0
ddc.1454: SizeOfImage: 0x19000 (102400)
ddc.1454: Resource Dir: 0x13000 LB 0x3af8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.0.0.12
ddc.1454: FileVersion: 1.0.0.12
ddc.1454: FileDescription: Filtering Platform Helper Class
ddc.1454: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: Calling main()
ddc.1454: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
ddc.1454: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
ddc.1454: SUPR3HardenedMain: Respawn #2
ddc.1454: supR3HardNtEnableThreadCreation:
ddc.1454: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
ddc.1454: Error relaunching VirtualBox VM process: 5
Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment windows --startvm 9166892c-4a06-4e4b-aa96-634f862765bf --no-startvm-errormsgbox "--sup-startup-log=C:\Users\Rabi3a\VirtualBox VMs\windows\Logs\VBoxStartup.log"'
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtguivbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtnetworkvbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qtopenglvbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shell32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'comdlg32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'winmm.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume3\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ddraw.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ddraw.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'nsi.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc
170c.ad8: Log file opened: 5.0.0r101573 g_hStartupLog=00000010 g_uNtVerCombined=0x611db110
170c.ad8: \SystemRoot\System32\ntdll.dll:
170c.ad8: CreationTime: 2015-06-13T17:17:40.242089500Z
170c.ad8: LastWriteTime: 2015-05-25T18:04:08.382563200Z
170c.ad8: ChangeTime: 2015-06-20T15:59:53.631956700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x13f400
170c.ad8: NT Headers: 0xd0
170c.ad8: Timestamp: 0x55636303
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55636303
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x141000 (1314816)
170c.ad8: Resource Dir: 0xe1000 LB 0x5a028
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18869
170c.ad8: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
170c.ad8: FileDescription: NT Layer DLL
170c.ad8: \SystemRoot\System32\kernel32.dll:
170c.ad8: CreationTime: 2015-06-10T16:32:27.019691300Z
170c.ad8: LastWriteTime: 2015-05-09T03:13:42.222000000Z
170c.ad8: ChangeTime: 2015-06-10T20:54:20.256027700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xd4000
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x554d7aff
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x554d7aff
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0xd4000 (868352)
170c.ad8: Resource Dir: 0xc7000 LB 0x528
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18847
170c.ad8: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
170c.ad8: FileDescription: Windows NT BASE API Client DLL
170c.ad8: \SystemRoot\System32\KernelBase.dll:
170c.ad8: CreationTime: 2015-06-10T16:32:27.050891300Z
170c.ad8: LastWriteTime: 2015-05-09T03:13:42.222000000Z
170c.ad8: ChangeTime: 2015-06-10T20:54:20.443228000Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x47a00
170c.ad8: NT Headers: 0xe0
170c.ad8: Timestamp: 0x554d7b00
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x554d7b00
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x4b000 (307200)
170c.ad8: Resource Dir: 0x47000 LB 0x530
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18847
170c.ad8: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
170c.ad8: FileDescription: Windows NT BASE API Client DLL
170c.ad8: \SystemRoot\System32\apisetschema.dll:
170c.ad8: CreationTime: 2015-06-13T17:17:37.712085900Z
170c.ad8: LastWriteTime: 2015-05-25T17:55:18.977000000Z
170c.ad8: ChangeTime: 2015-06-20T15:59:53.475956400Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x1a00
170c.ad8: NT Headers: 0xc0
170c.ad8: Timestamp: 0x55636244
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55636244
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x50000 (327680)
170c.ad8: Resource Dir: 0x30000 LB 0x3f8
170c.ad8: ProductName: Microsoft® Windows® Operating System
170c.ad8: ProductVersion: 6.1.7601.18869
170c.ad8: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
170c.ad8: FileDescription: ApiSet Schema DLL
170c.ad8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
170c.ad8: supR3HardenedWinFindAdversaries: 0x40
170c.ad8: \SystemRoot\System32\drivers\kl1.sys:
170c.ad8: CreationTime: 2014-03-31T08:47:08.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:53:15.076416700Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.238723300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x258b8
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x556dad51
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x556dad51
170c.ad8: Image Version: 0.0
170c.ad8: SizeOfImage: 0x526000 (5398528)
170c.ad8: Resource Dir: 0x521000 LB 0x448
170c.ad8: ProductName: Kaspersky Anti-Virus
170c.ad8: ProductVersion: 6.0.1.990
170c.ad8: FileVersion: 6.8.0.51
170c.ad8: FileDescription: Kaspersky Unified Driver
170c.ad8: \SystemRoot\System32\drivers\klflt.sys:
170c.ad8: CreationTime: 2014-11-28T16:19:36.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:46:22.194801300Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.425555700Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x1f6d8
170c.ad8: NT Headers: 0xf0
170c.ad8: Timestamp: 0x551678f6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x551678f6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0x28000 (163840)
170c.ad8: Resource Dir: 0x25000 LB 0x370
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.7.0.20
170c.ad8: FileVersion: 1.7.0.20
170c.ad8: FileDescription: Filter Core [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klif.sys:
170c.ad8: CreationTime: 2014-12-13T16:21:14.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:46:23.993904200Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.370555300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xac2b8
170c.ad8: NT Headers: 0x100
170c.ad8: Timestamp: 0x5570a95f
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x5570a95f
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xb1000 (724992)
170c.ad8: Resource Dir: 0xa7000 LB 0x1538
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.17.0.268
170c.ad8: FileVersion: 8.17.0.268
170c.ad8: FileDescription: Klif Mini-Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klim6.sys:
170c.ad8: CreationTime: 2014-10-10T15:02:52.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:22.264123300Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.549741100Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8570
170c.ad8: NT Headers: 0xe8
170c.ad8: Timestamp: 0x55354ea6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55354ea6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0x8000 (32768)
170c.ad8: Resource Dir: 0x6000 LB 0x490
170c.ad8: ProductName: Kaspersky Anti-Virus
170c.ad8: ProductVersion: 6.0.1.990
170c.ad8: FileVersion: 8.0.0.94
170c.ad8: FileDescription: Kaspersky Lab Intermediate Network Driver [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klkbdflt.sys:
170c.ad8: CreationTime: 2014-10-30T02:22:12.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:49:22.278101400Z
170c.ad8: ChangeTime: 2015-06-29T11:26:00.004580400Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8d70
170c.ad8: NT Headers: 0x100
170c.ad8: Timestamp: 0x553fe1a9
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x553fe1a9
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xa000 (40960)
170c.ad8: Resource Dir: 0x8000 LB 0x3a8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.15.0.49
170c.ad8: FileVersion: 8.15.0.49
170c.ad8: FileDescription: KLKBDFLT Keyboard Device Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\klmouflt.sys:
170c.ad8: CreationTime: 2013-08-08T14:10:58.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:49:23.638179200Z
170c.ad8: ChangeTime: 2015-06-29T11:25:59.703564300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x8b70
170c.ad8: NT Headers: 0xf8
170c.ad8: Timestamp: 0x553fe0e6
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x553fe0e6
170c.ad8: Image Version: 6.0
170c.ad8: SizeOfImage: 0xa000 (40960)
170c.ad8: Resource Dir: 0x8000 LB 0x3a8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 8.11.0.15
170c.ad8: FileVersion: 8.11.0.15
170c.ad8: FileDescription: KLMOUFLT Mouse Device Filter [fre_wlh_x86]
170c.ad8: \SystemRoot\System32\drivers\kltdi.sys:
170c.ad8: CreationTime: 2014-10-09T10:31:42.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:23.916217800Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.815756300Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0xd438
170c.ad8: NT Headers: 0x268
170c.ad8: Timestamp: 0x55782d6d
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55782d6d
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x8f80 (36736)
170c.ad8: Resource Dir: 0x8300 LB 0x3b0
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.7.0.15
170c.ad8: FileVersion: 1.7.0.15 built by: WinDDK
170c.ad8: FileDescription: Network filtering component [fre_wxp_x86]
170c.ad8: \SystemRoot\System32\drivers\kneps.sys:
170c.ad8: CreationTime: 2014-11-10T15:48:04.000000000Z
170c.ad8: LastWriteTime: 2015-06-22T21:56:26.668375200Z
170c.ad8: ChangeTime: 2015-06-22T21:56:50.948763900Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x26638
170c.ad8: NT Headers: 0x278
170c.ad8: Timestamp: 0x55795d36
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x55795d36
170c.ad8: Image Version: 6.1
170c.ad8: SizeOfImage: 0x22180 (139648)
170c.ad8: Resource Dir: 0x20480 LB 0x390
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 5.7.0.44
170c.ad8: FileVersion: 5.7.0.44 built by: WinDDK
170c.ad8: FileDescription: KNEPS Power [fre_wxp_x86]
170c.ad8: \SystemRoot\System32\klfphc.dll:
170c.ad8: CreationTime: 2013-05-06T06:13:26.000000000Z
170c.ad8: LastWriteTime: 2013-05-06T06:13:26.000000000Z
170c.ad8: ChangeTime: 2015-05-24T20:41:36.423573500Z
170c.ad8: FileAttributes: 0x20
170c.ad8: Size: 0x17a60
170c.ad8: NT Headers: 0xe8
170c.ad8: Timestamp: 0x51873be9
170c.ad8: Machine: 0x14c - i386
170c.ad8: Timestamp: 0x51873be9
170c.ad8: Image Version: 0.0
170c.ad8: SizeOfImage: 0x19000 (102400)
170c.ad8: Resource Dir: 0x13000 LB 0x3af8
170c.ad8: ProductName: Kasperskyâ"¢ Anti-Virus ®
170c.ad8: ProductVersion: 1.0.0.12
170c.ad8: FileVersion: 1.0.0.12
170c.ad8: FileDescription: Filtering Platform Helper Class
170c.ad8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
170c.ad8: Calling main()
170c.ad8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
170c.ad8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
170c.ad8: SUPR3HardenedMain: Respawn #1
170c.ad8: System32: \Device\HarddiskVolume3\Windows\System32
170c.ad8: WinSxS: \Device\HarddiskVolume3\Windows\winsxs
170c.ad8: KnownDllPath: C:\Windows\system32
170c.ad8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
170c.ad8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
170c.ad8: supR3HardNtEnableThreadCreation:
170c.ad8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77bb3861 pvNtTerminateThread=77b96930
170c.ad8: supR3HardenedWinDoReSpawn(1): New child ddc.1454 [kernel32].
170c.ad8: supR3HardNtChildGatherData: PebBaseAddress=7ffde000 cbPeb=0x248
170c.ad8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=77b50000 uNtDllChildAddr=77b50000
170c.ad8: supR3HardenedWinSetupChildInit: uLdrInitThunk=77bb3861
170c.ad8: supR3HardenedWinSetupChildInit: Start child.
170c.ad8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 26 ms.
170c.ad8: supR3HardNtChildPurify: Startup delay kludge #1/0: 518 ms, 0 sleeps
170c.ad8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
170c.ad8: *00000000-fffeffff 0x0001/0x0000 0x0000000
170c.ad8: *00010000-fffeffff 0x0004/0x0004 0x0020000
170c.ad8: *00030000-0002bfff 0x0002/0x0002 0x0040000
170c.ad8: 00034000-00027fff 0x0001/0x0000 0x0000000
170c.ad8: *00040000-00040fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 00041000-000b6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b7000-000b7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b8000-000f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f2000-000f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f3000-000f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f4000-000f4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f5000-000f5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f6000-000f7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f8000-000fafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000fb000-0013efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 0013f000-0013dfff 0x0001/0x0000 0x0000000
170c.ad8: *00140000-00042fff 0x0000/0x0004 0x0020000
170c.ad8: 0023d000-0023afff 0x0104/0x0004 0x0020000
170c.ad8: 0023f000-0023dfff 0x0004/0x0004 0x0020000
170c.ad8: *00240000-0023efff 0x0004/0x0004 0x0020000
170c.ad8: 00241000-c04a1fff 0x0001/0x0000 0x0000000
170c.ad8: *3ffe0000-3ffdefff 0x0040/0x0040 0x0020000 !!
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 3ffe0000 (LB 0x1000, 3ffe0000 LB 0x1000)
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [3ffe0000/3ffe0000 LB 0/0x1000]
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [00000000]/3ffe0000 LB 0x10000 s=0x10000 ap=0x0 rp=0x000001
170c.ad8: 3ffe1000-3ffd1fff 0x0001/0x0000 0x0000000
170c.ad8: *3fff0000-3ffeefff 0x0040/0x0040 0x0020000 !!
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 3fff0000 (LB 0x1000, 3fff0000 LB 0x1000)
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [3fff0000/3fff0000 LB 0/0x1000]
170c.ad8: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [00000000]/3fff0000 LB 0x37b60000 s=0x10000 ap=0x0 rp=0x000001
170c.ad8: 3fff1000-08491fff 0x0001/0x0000 0x0000000
170c.ad8: *77b50000-77b50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77b51000-77c27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c28000-77c2dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2e000-77c2efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2f000-77c30fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c31000-77c90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c91000-77b71fff 0x0001/0x0000 0x0000000
170c.ad8: *77db0000-77db0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll
170c.ad8: 77db1000-6fbb1fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
170c.ad8: 7ffd3000-7ffc7fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffde000-7ffdcfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
170c.ad8: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
170c.ad8: apisetschema.dll: timestamp 0x55636244 (rc=VINF_SUCCESS)
170c.ad8: VirtualBox.exe: timestamp 0x559e4a2c (rc=VINF_SUCCESS)
170c.ad8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
170c.ad8: '\Device\HarddiskVolume3\Windows\System32\apisetschema.dll' has no imports
170c.ad8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
170c.ad8: supR3HardNtChildPurify: cFixes=2 g_fSupAdversaries=0x40
170c.ad8: supR3HardNtChildPurify: Startup delay kludge #1/1: 532 ms, 0 sleeps
170c.ad8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
170c.ad8: *00000000-fffeffff 0x0001/0x0000 0x0000000
170c.ad8: *00010000-fffeffff 0x0004/0x0004 0x0020000
170c.ad8: *00030000-0002bfff 0x0002/0x0002 0x0040000
170c.ad8: 00034000-00027fff 0x0001/0x0000 0x0000000
170c.ad8: *00040000-00040fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 00041000-000b6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b7000-000b7fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000b8000-000f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000f2000-000fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 000fb000-0013efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
170c.ad8: 0013f000-0013dfff 0x0001/0x0000 0x0000000
170c.ad8: *00140000-00042fff 0x0000/0x0004 0x0020000
170c.ad8: 0023d000-0023afff 0x0104/0x0004 0x0020000
170c.ad8: 0023f000-0023dfff 0x0004/0x0004 0x0020000
170c.ad8: *00240000-0023efff 0x0004/0x0004 0x0020000
170c.ad8: 00241000-88931fff 0x0001/0x0000 0x0000000
170c.ad8: *77b50000-77b50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77b51000-77c27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c28000-77c2dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c2e000-77c30fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c31000-77c90fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170c.ad8: 77c91000-77b71fff 0x0001/0x0000 0x0000000
170c.ad8: *77db0000-77db0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll
170c.ad8: 77db1000-6fbb1fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffb0000-7ff8cfff 0x0002/0x0002 0x0040000
170c.ad8: 7ffd3000-7ffc7fff 0x0001/0x0000 0x0000000
170c.ad8: *7ffde000-7ffdcfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffdf000-7ffddfff 0x0004/0x0004 0x0020000
170c.ad8: *7ffe0000-7ffdefff 0x0002/0x0002 0x0020000
170c.ad8: 7ffe1000-7ffd1fff 0x0001/0x0002 0x0020000
170c.ad8: supR3HardNtChildPurify: Done after 1366 ms and 2 fixes (loop #1).
170c.ad8: supR3HardNtEnableThreadCreation:
ddc.1454: Log file opened: 5.0.0r101573 g_hStartupLog=00000004 g_uNtVerCombined=0x611db110
ddc.1454: supR3HardenedVmProcessInit: uNtDllAddr=77b50000
ddc.1454: ntdll.dll: timestamp 0x55636303 (rc=VINF_SUCCESS)
ddc.1454: New simple heap: #1 00350000 LB 0x400000 (for 1314816 allocation)
ddc.1454: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: System32: \Device\HarddiskVolume3\Windows\System32
ddc.1454: WinSxS: \Device\HarddiskVolume3\Windows\winsxs
ddc.1454: KnownDllPath: C:\Windows\system32
ddc.1454: supR3HardenedVmProcessInit: Opening vboxdrv stub...
ddc.1454: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
ddc.1454: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
ddc.1454: Registered Dll notification callback with NTDLL.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
ddc.1454: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=00000000:<flags> [calling]
ddc.1454: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedDllNotificationCallback: load 765c0000 LB 0x000d4000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
ddc.1454: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedDllNotificationCallback: load 75cb0000 LB 0x0004b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
ddc.1454: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=765c0000 'C:\Windows\system32\kernel32.dll'
ddc.1454: supR3HardNtDisableThreadCreation: pvLdrInitThunk=77bb3861 pvNtTerminateThread=77b96930
170c.ad8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 124 ms.
ddc.1454: \SystemRoot\System32\ntdll.dll:
ddc.1454: CreationTime: 2015-06-13T17:17:40.242089500Z
ddc.1454: LastWriteTime: 2015-05-25T18:04:08.382563200Z
ddc.1454: ChangeTime: 2015-06-20T15:59:53.631956700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x13f400
ddc.1454: NT Headers: 0xd0
ddc.1454: Timestamp: 0x55636303
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55636303
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x141000 (1314816)
ddc.1454: Resource Dir: 0xe1000 LB 0x5a028
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18869
ddc.1454: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
ddc.1454: FileDescription: NT Layer DLL
ddc.1454: \SystemRoot\System32\kernel32.dll:
ddc.1454: CreationTime: 2015-06-10T16:32:27.019691300Z
ddc.1454: LastWriteTime: 2015-05-09T03:13:42.222000000Z
ddc.1454: ChangeTime: 2015-06-10T20:54:20.256027700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xd4000
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x554d7aff
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x554d7aff
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0xd4000 (868352)
ddc.1454: Resource Dir: 0xc7000 LB 0x528
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18847
ddc.1454: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
ddc.1454: FileDescription: Windows NT BASE API Client DLL
ddc.1454: \SystemRoot\System32\KernelBase.dll:
ddc.1454: CreationTime: 2015-06-10T16:32:27.050891300Z
ddc.1454: LastWriteTime: 2015-05-09T03:13:42.222000000Z
ddc.1454: ChangeTime: 2015-06-10T20:54:20.443228000Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x47a00
ddc.1454: NT Headers: 0xe0
ddc.1454: Timestamp: 0x554d7b00
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x554d7b00
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x4b000 (307200)
ddc.1454: Resource Dir: 0x47000 LB 0x530
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18847
ddc.1454: FileVersion: 6.1.7601.18847 (win7sp1_gdr.150508-1512)
ddc.1454: FileDescription: Windows NT BASE API Client DLL
ddc.1454: \SystemRoot\System32\apisetschema.dll:
ddc.1454: CreationTime: 2015-06-13T17:17:37.712085900Z
ddc.1454: LastWriteTime: 2015-05-25T17:55:18.977000000Z
ddc.1454: ChangeTime: 2015-06-20T15:59:53.475956400Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x1a00
ddc.1454: NT Headers: 0xc0
ddc.1454: Timestamp: 0x55636244
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55636244
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x50000 (327680)
ddc.1454: Resource Dir: 0x30000 LB 0x3f8
ddc.1454: ProductName: Microsoft® Windows® Operating System
ddc.1454: ProductVersion: 6.1.7601.18869
ddc.1454: FileVersion: 6.1.7601.18869 (win7sp1_gdr.150525-0603)
ddc.1454: FileDescription: ApiSet Schema DLL
ddc.1454: NtOpenDirectoryObject failed on \Driver: 0xc0000022
ddc.1454: supR3HardenedWinFindAdversaries: 0x40
ddc.1454: \SystemRoot\System32\drivers\kl1.sys:
ddc.1454: CreationTime: 2014-03-31T08:47:08.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:53:15.076416700Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.238723300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x258b8
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x556dad51
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x556dad51
ddc.1454: Image Version: 0.0
ddc.1454: SizeOfImage: 0x526000 (5398528)
ddc.1454: Resource Dir: 0x521000 LB 0x448
ddc.1454: ProductName: Kaspersky Anti-Virus
ddc.1454: ProductVersion: 6.0.1.990
ddc.1454: FileVersion: 6.8.0.51
ddc.1454: FileDescription: Kaspersky Unified Driver
ddc.1454: \SystemRoot\System32\drivers\klflt.sys:
ddc.1454: CreationTime: 2014-11-28T16:19:36.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:46:22.194801300Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.425555700Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x1f6d8
ddc.1454: NT Headers: 0xf0
ddc.1454: Timestamp: 0x551678f6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x551678f6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0x28000 (163840)
ddc.1454: Resource Dir: 0x25000 LB 0x370
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.7.0.20
ddc.1454: FileVersion: 1.7.0.20
ddc.1454: FileDescription: Filter Core [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klif.sys:
ddc.1454: CreationTime: 2014-12-13T16:21:14.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:46:23.993904200Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.370555300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xac2b8
ddc.1454: NT Headers: 0x100
ddc.1454: Timestamp: 0x5570a95f
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x5570a95f
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xb1000 (724992)
ddc.1454: Resource Dir: 0xa7000 LB 0x1538
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.17.0.268
ddc.1454: FileVersion: 8.17.0.268
ddc.1454: FileDescription: Klif Mini-Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klim6.sys:
ddc.1454: CreationTime: 2014-10-10T15:02:52.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:22.264123300Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.549741100Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8570
ddc.1454: NT Headers: 0xe8
ddc.1454: Timestamp: 0x55354ea6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55354ea6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0x8000 (32768)
ddc.1454: Resource Dir: 0x6000 LB 0x490
ddc.1454: ProductName: Kaspersky Anti-Virus
ddc.1454: ProductVersion: 6.0.1.990
ddc.1454: FileVersion: 8.0.0.94
ddc.1454: FileDescription: Kaspersky Lab Intermediate Network Driver [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klkbdflt.sys:
ddc.1454: CreationTime: 2014-10-30T02:22:12.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:49:22.278101400Z
ddc.1454: ChangeTime: 2015-06-29T11:26:00.004580400Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8d70
ddc.1454: NT Headers: 0x100
ddc.1454: Timestamp: 0x553fe1a9
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x553fe1a9
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xa000 (40960)
ddc.1454: Resource Dir: 0x8000 LB 0x3a8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.15.0.49
ddc.1454: FileVersion: 8.15.0.49
ddc.1454: FileDescription: KLKBDFLT Keyboard Device Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\klmouflt.sys:
ddc.1454: CreationTime: 2013-08-08T14:10:58.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:49:23.638179200Z
ddc.1454: ChangeTime: 2015-06-29T11:25:59.703564300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x8b70
ddc.1454: NT Headers: 0xf8
ddc.1454: Timestamp: 0x553fe0e6
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x553fe0e6
ddc.1454: Image Version: 6.0
ddc.1454: SizeOfImage: 0xa000 (40960)
ddc.1454: Resource Dir: 0x8000 LB 0x3a8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 8.11.0.15
ddc.1454: FileVersion: 8.11.0.15
ddc.1454: FileDescription: KLMOUFLT Mouse Device Filter [fre_wlh_x86]
ddc.1454: \SystemRoot\System32\drivers\kltdi.sys:
ddc.1454: CreationTime: 2014-10-09T10:31:42.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:23.916217800Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.815756300Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0xd438
ddc.1454: NT Headers: 0x268
ddc.1454: Timestamp: 0x55782d6d
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55782d6d
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x8f80 (36736)
ddc.1454: Resource Dir: 0x8300 LB 0x3b0
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.7.0.15
ddc.1454: FileVersion: 1.7.0.15 built by: WinDDK
ddc.1454: FileDescription: Network filtering component [fre_wxp_x86]
ddc.1454: \SystemRoot\System32\drivers\kneps.sys:
ddc.1454: CreationTime: 2014-11-10T15:48:04.000000000Z
ddc.1454: LastWriteTime: 2015-06-22T21:56:26.668375200Z
ddc.1454: ChangeTime: 2015-06-22T21:56:50.948763900Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x26638
ddc.1454: NT Headers: 0x278
ddc.1454: Timestamp: 0x55795d36
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x55795d36
ddc.1454: Image Version: 6.1
ddc.1454: SizeOfImage: 0x22180 (139648)
ddc.1454: Resource Dir: 0x20480 LB 0x390
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 5.7.0.44
ddc.1454: FileVersion: 5.7.0.44 built by: WinDDK
ddc.1454: FileDescription: KNEPS Power [fre_wxp_x86]
ddc.1454: \SystemRoot\System32\klfphc.dll:
ddc.1454: CreationTime: 2013-05-06T06:13:26.000000000Z
ddc.1454: LastWriteTime: 2013-05-06T06:13:26.000000000Z
ddc.1454: ChangeTime: 2015-05-24T20:41:36.423573500Z
ddc.1454: FileAttributes: 0x20
ddc.1454: Size: 0x17a60
ddc.1454: NT Headers: 0xe8
ddc.1454: Timestamp: 0x51873be9
ddc.1454: Machine: 0x14c - i386
ddc.1454: Timestamp: 0x51873be9
ddc.1454: Image Version: 0.0
ddc.1454: SizeOfImage: 0x19000 (102400)
ddc.1454: Resource Dir: 0x13000 LB 0x3af8
ddc.1454: ProductName: Kasperskyâ"¢ Anti-Virus ®
ddc.1454: ProductVersion: 1.0.0.12
ddc.1454: FileVersion: 1.0.0.12
ddc.1454: FileDescription: Filtering Platform Helper Class
ddc.1454: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: Calling main()
ddc.1454: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
ddc.1454: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
ddc.1454: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
ddc.1454: SUPR3HardenedMain: Respawn #2
ddc.1454: supR3HardNtEnableThreadCreation:
ddc.1454: Error -104 in supR3HardenedWinReSpawn! (enmWhat=5)
ddc.1454: Error relaunching VirtualBox VM process: 5
Command line: '60eaff78-4bdd-042d-2e72-669728efd737-suplib-3rdchild --comment windows --startvm 9166892c-4a06-4e4b-aa96-634f862765bf --no-startvm-errormsgbox "--sup-startup-log=C:\Users\Rabi3a\VirtualBox VMs\windows\Logs\VBoxStartup.log"'
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qtguivbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qtnetworkvbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qtopenglvbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'shell32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'comdlg32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'winmm.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winmm.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ole32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtopenglvbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtopenglvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtopenglvbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qtguivbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtOpenGLVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtnetworkvbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtnetworkvbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtnetworkvbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtNetworkVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtguivbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtguivbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtguivbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'comdlg32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'qtcorevbox4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtGuiVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume3\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ddraw.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ddraw.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'nsi.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qtcorevbox4.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'qtcorevbox4.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qtcorevbox4.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\QtCoreVBox4.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ole32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winmm.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
ddc.1454: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
ddc.1454: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
ddc.1454: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\comdlg32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
ddc.1454: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
ddc.1454: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
ddc
mozii95
Messages postés
796
Date d'inscription
vendredi 12 juin 2015
Statut
Membre
Dernière intervention
19 octobre 2019
524
7 août 2015 à 16:33
7 août 2015 à 16:33
Avez vous la mise à jour suivante d'installé sur votre PC ? -> KB3004394
