VirtualBox - Error In supR3HardNtChildPurify

[Rui Baptista]

I'm having a very strange error when I press Start. Whichever machine I get it from, the message is always the same...

I have already tried reinstalling VirtualBox on 6.1.46 and on 7.0.10 with no results.

[mpack]

You appear to have a hacked or corrupted system DLL.

34c8.39c8: Error (rc=-23033):
34c8.39c8: supHardenedWinVerifyProcess failed with Unknown Status -23033 (0xffffa607): Certificate is not valid (ValidTime=2023-09-17T17:08:41.747618300Z Validity=[2022-06-30T18:00:18.000000000Z...2023-09-15T18:00:18.000000000Z]): \Device\HarddiskVolume3\Windows\System32\ntdll.dll
34c8.39c8: Error -23033 in supR3HardNtChildPurify! (enmWhat=5)
34c8.39c8: supHardenedWinVerifyProcess failed with Unknown Status -23033 (0xffffa607): Certificate is not valid (ValidTime=2023-09-17T17:08:41.747618300Z Validity=[2022-06-30T18:00:18.000000000Z...2023-09-15T18:00:18.000000000Z]): \Device\HarddiskVolume3\Windows\System32\ntdll.dll
34c8.39c8: supR3HardNtEnableThreadCreationEx:

Try running "sfc /scannow" in a Windows Administrator Console.

[fth0]

It looks like you're using the ntdll.dll file from Windows 11 Dev Channel build 23521 from 2023-08-10. According to Wikipedia's Windows 11 version history, this build expired at 2023-09-15, which is also confirmed by the error messages in the VBoxHardening.log files.

[Rui Baptista]

This is what I got:

Code: Select all

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

It is valid only to 2023-09-15T18:00? What can I do about this?

-------------------------------------------------------------------------
I have now seen that it is in relation to Microsoft. I will see what I can do...