Cannot open ova created on earlier version

Discussions related to using VirtualBox on Windows hosts.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Cannot open ova created on earlier version

Post by LetoMax »

I have a VirtualBox created in version VirtualBox 5.2.34 133893. When upgrading to VirtualBox 6.0.14 133895 I cannot open the same in this later version. I get a "Invalid DLL loaded into process" error
scottgus1
Site Moderator
Posts: 20945
Joined: 30. Dec 2009, 20:14
Primary OS: MS Windows 10
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Windows, Linux

Re: Cannot open ova created on earlier version

Post by scottgus1 »

If this "Invalid DLL loaded into process" error is part of an error message that mentions a 'hardening log', then please zip and post the hardening log the error message shows, using the forum's Upload Attachment tab.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

46c8.4eb8: supR3HardNtChildPurify: Done after 262 ms and 0 fixes (loop #0).
45e4.4ec8: Log file opened: 6.0.14r133895 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
45e4.4ec8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa62360000 g_uNtVerCombined=0xa047ba00
45e4.4ec8: ntdll.dll: timestamp 0x99ca0526 (rc=VINF_SUCCESS)
45e4.4ec8: New simple heap: #1 0000000000900000 LB 0x400000 (for 2031616 allocation)
45e4.4ec8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
46c8.4eb8: supR3HardNtEnableThreadCreationEx:
45e4.4ec8: System32:  \Device\HarddiskVolume6\Windows\System32
45e4.4ec8: WinSxS:    \Device\HarddiskVolume6\Windows\WinSxS
45e4.4ec8: KnownDllPath: C:\WINDOWS\System32
45e4.4ec8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
45e4.4ec8: supR3HardenedWinReadErrorInfoDevice: 'Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)'
45e4.4ec8: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
45e4.4ec8: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)
46c8.4eb8: supR3HardenedWinCheckChild: enmRequest=2 rc=-5633 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)
46c8.4eb8: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
46c8.4eb8: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

Which part of the instructions of 'scottgus1' was complicated? :?
As told, ZIP and attach the whole log, not what you think is important!
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

My Apologies....... see attached
Attachments
VBoxHardening.zip
Unable to open V5 machine in v6
(3.73 KiB) Downloaded 27 times
scottgus1
Site Moderator
Posts: 20945
Joined: 30. Dec 2009, 20:14
Primary OS: MS Windows 10
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Windows, Linux

Re: Cannot open ova created on earlier version

Post by scottgus1 »

Thanks for posting the log. Unfortunately this time the usual suspects aren't coming out. The meaning of these logs is kept secret by the developers, and we users have had to guess. The forum gurus who actually did the guessing and came up with some really shrewd surmises put together this: Diagnosing VirtualBox Hardening Issues. Look through it and see if anything fits what you have installed. An 'sfc /scannow' might be appropriate.
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

scottgus1 wrote:An 'sfc /scannow' might be appropriate.
Indeed it might be, because I see the following in the VBoxHardening.log:
1b94.4284: kernel32.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1bc78000
1b94.4284: kernelbase.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1b636000
1b94.4284: apphelp.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1883e000
Something is modifying key system DLLs while they're in memory, making them invalid.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

Curious if anyone else had the following error in their log?
4ac0.19cc: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
4ac0.19cc: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

LetoMax wrote:Curious if anyone else had the following error in their log?
Why? Did you spot something specific there? Is that going to help your case? Does that come from a specific troubleshooting step?

And to answer your question, yes. But that doesn't move you forward. The instructions given in the linked article will...
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

No. I was hoping that someone might give me more specific help by seeing that error and remembering the fix for it.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

My skill levels at determining what is modifying system DLLs are not that high.
BTW reinstalling v5 works...... does that help? I am really stuck and would appreciate some assistance. I have gone through your link to dealing with hardening issues and I am confident that I have tried most of the suggestions.
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

LetoMax wrote:My skill levels at determining what is modifying system DLLs are not that high.
What in the seven kingdoms are you talking about? Can you please focus? Can you follow the advice given? I'm going to repeat it one last time:
scottgus1 wrote:Diagnosing VirtualBox Hardening Issues. Look through it and see if anything fits what you have installed. An 'sfc /scannow' might be appropriate.
Do that. Follow that link and do as the linked articles suggest.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

LetoMax,

BTW, I have now deleted your duplicate post from the Discuss the 6.0.14 release. According to the The Forum Posting Guide, duplicate posts are not allowed.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
LetoMax
Posts: 11
Joined: 3. Nov 2019, 10:27

Re: Cannot open ova created on earlier version

Post by LetoMax »

Fantastic. Many thanks for all your help Socratis. Important to focus on the important matters, isn't it?
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: VirtualBox+Oracle ExtPack
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: Cannot open ova created on earlier version

Post by socratis »

LetoMax wrote:Important to focus on the important matters, isn't it?
I take it that this is in response to me deleting your duplicate post in the "Discuss the 6.0.14 release", plus deleting another thread that you had "VirtualBox Error In supR3HardenedWinReSpawn", which was yet another duplicate of this thread. Yes, I'm definitely focused to keeping the rules and regulations of the forums.

Yes, it is absolutely important to focus on the important matters! Something that you've failed to do so far. So, please do that and try to solve your problem. Asking irrelevant questions, and going into directions that make no sense whatsoever will not help with your situation. Again; focus on the problem and the suggestions provided.

Your other comments that have nothing to do with the thread, have been redirected to the "Feedback & comment to the Administrators and Moderators" thread.
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
Post Reply