Any ideas would be much appreciated.
Here's (what I believe) is the relevant part of the VBox log:
Code: Select all
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009e0 pwszName=\Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000088a280
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000088a280
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002a7a520:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdb20000 'C:\Windows\system32\WINTRUST.DLL'
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000002a7a520:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd990000 'C:\Windows\system32\CRYPT32.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8FFB8CDACDC5C9C6D9256E97FB0710E2753FFAA1
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002a7a7f0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef86c0000 'C:\Windows\system32\cryptnet.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3045645~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume2\Windows\System32\apphelp.dll'
1778.1f8c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1778.1f8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)WinVerifyTrust
1778.1f8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
1778.1f8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedDllNotificationCallback: load 000007fefd780000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
1778.1f8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll
1778.1f8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd780000 'C:\Windows\system32\apphelp.dll'
2458.2250: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 23778005 ms, the end);
1dfc.ef0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc0000005 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 23778840 ms, the end);