error in supR3HardenedWinReSpawn

Discussions related to using VirtualBox on Windows hosts.
Post Reply
hyf
Posts: 4
Joined: 9. Feb 2021, 13:17

error in supR3HardenedWinReSpawn

Post by hyf »

where supR3HardenedWinReSpawn what:5 VERR_INVALID_NAME(-104) - Invalid (malformed) file/path name.
hyf
Posts: 4
Joined: 9. Feb 2021, 13:17

Re: error in supR3HardenedWinReSpawn

Post by hyf »

Used IBM Trusteer guide to shutdown cerebellum
what does this mean?
Attachments
Logs.zip
(159.43 KiB) Downloaded 5 times
mpack
Site Moderator
Posts: 39134
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Mostly XP

Re: error in supR3HardenedWinReSpawn

Post by mpack »

VBoxHardening.log wrote: 565c.a24: kernel32.dll: Differences in section #2 (.rdata) between file and memory:
565c.a24: 00007ffe889690e0 / 0x00790e0: d0 != 20
The hardening log contains many examples like the above, I've only quoted one example.

What it means is that your PC has been hacked. Possibly by a theme engine or some kind of AV rather than by malware.

There also seems to be some kind of signing error with "\Device\HarddiskVolume5\Windows\System32\SogouTSF.ime".
\Device\HarddiskVolume5\Windows\System32\SogouTSF.ime: None of the 1 path(s) have a trust anchor.: \Device\HarddiskVolume5\Windows\System32\SogouTSF.ime
459c.2a84: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume5\Windows\System32\SogouTSF.ime
FAQ: Diagnosing VirtualBox Hardening Issues.
hyf
Posts: 4
Joined: 9. Feb 2021, 13:17

Re: error in supR3HardenedWinReSpawn

Post by hyf »

i cannot delete this file. Could you tell me what to do?
BillG
Volunteer
Posts: 5106
Joined: 19. Sep 2009, 04:44
Primary OS: MS Windows 10
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Windows 10,7 and earlier
Location: Sydney, Australia

Re: error in supR3HardenedWinReSpawn

Post by BillG »

Did you search that file name on the Internet? There are a few references - it seems to be harmless.
Bill
hyf
Posts: 4
Joined: 9. Feb 2021, 13:17

Re: error in supR3HardenedWinReSpawn

Post by hyf »

after searching i still don't know what it is. so what should i do
mpack
Site Moderator
Posts: 39134
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Mostly XP

Re: error in supR3HardenedWinReSpawn

Post by mpack »

Read the FAQ. You need to get rid of whatever has resulted in those hacks recorded in the log. There's no way for us to know what you have installed, so we can't give you detailed instructions. If it's pervasive (affects all other apps) and not native to Windows 10, then it's a candidate for removal.
Post Reply