virtualbox.org

End user forums for VirtualBox
https://forums.virtualbox.org/

Cannot open ova created on earlier version

https://forums.virtualbox.org/viewtopic.php?t=95441

Page 1 of 2

Cannot open ova created on earlier version

Posted: 4. Nov 2019, 00:01
by LetoMax
I have a VirtualBox created in version VirtualBox 5.2.34 133893. When upgrading to VirtualBox 6.0.14 133895 I cannot open the same in this later version. I get a "Invalid DLL loaded into process" error

Re: Cannot open ova created on earlier version

Posted: 4. Nov 2019, 00:18
by scottgus1
If this "Invalid DLL loaded into process" error is part of an error message that mentions a 'hardening log', then please zip and post the hardening log the error message shows, using the forum's Upload Attachment tab.

Re: Cannot open ova created on earlier version

Posted: 4. Nov 2019, 05:11
by LetoMax
46c8.4eb8: supR3HardNtChildPurify: Done after 262 ms and 0 fixes (loop #0).
45e4.4ec8: Log file opened: 6.0.14r133895 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
45e4.4ec8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa62360000 g_uNtVerCombined=0xa047ba00
45e4.4ec8: ntdll.dll: timestamp 0x99ca0526 (rc=VINF_SUCCESS)
45e4.4ec8: New simple heap: #1 0000000000900000 LB 0x400000 (for 2031616 allocation)
45e4.4ec8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
46c8.4eb8: supR3HardNtEnableThreadCreationEx:
45e4.4ec8: System32:  \Device\HarddiskVolume6\Windows\System32
45e4.4ec8: WinSxS:    \Device\HarddiskVolume6\Windows\WinSxS
45e4.4ec8: KnownDllPath: C:\WINDOWS\System32
45e4.4ec8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
45e4.4ec8: supR3HardenedWinReadErrorInfoDevice: 'Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)'
45e4.4ec8: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
45e4.4ec8: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)
46c8.4eb8: supR3HardenedWinCheckChild: enmRequest=2 rc=-5633 enmWhat=3 supR3HardenedWinReSpawn: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)
46c8.4eb8: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
46c8.4eb8: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)
VBoxDrvStub error: Unknown image file \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe at 00007ff677880000. (rc83Exp=-91)

Re: Cannot open ova created on earlier version

Posted: 4. Nov 2019, 12:38
by socratis
Which part of the instructions of 'scottgus1' was complicated? :?
As told, ZIP and attach the whole log, not what you think is important!

Re: Cannot open ova created on earlier version

Posted: 5. Nov 2019, 01:28
by LetoMax
My Apologies....... see attached

Re: Cannot open ova created on earlier version

Posted: 10. Nov 2019, 15:32
by scottgus1
Thanks for posting the log. Unfortunately this time the usual suspects aren't coming out. The meaning of these logs is kept secret by the developers, and we users have had to guess. The forum gurus who actually did the guessing and came up with some really shrewd surmises put together this: Diagnosing VirtualBox Hardening Issues. Look through it and see if anything fits what you have installed. An 'sfc /scannow' might be appropriate.

Re: Cannot open ova created on earlier version

Posted: 10. Nov 2019, 18:28
by socratis
scottgus1 wrote:An 'sfc /scannow' might be appropriate.
Indeed it might be, because I see the following in the VBoxHardening.log: 
1b94.4284: kernel32.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1bc78000
1b94.4284: kernelbase.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1b636000
1b94.4284: apphelp.dll: Differences in section #2 (.rdata) between file and memory:
1b94.4284:   Restored 0x2000 bytes of original file content at 00007ffc1883e000
Something is modifying key system DLLs while they're in memory, making them invalid.

Re: Cannot open ova created on earlier version

Posted: 10. Nov 2019, 23:16
by LetoMax
Curious if anyone else had the following error in their log? 
4ac0.19cc: Error -5633 in supR3HardenedWinReSpawn! (enmWhat=3)
4ac0.19cc: NtCreateFile(\Device\VBoxDrvStub) failed: Unknown Status -5633 (0xffffe9ff) (rcNt=0xe986e9ff)

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 08:27
by socratis
LetoMax wrote:Curious if anyone else had the following error in their log?
Why? Did you spot something specific there? Is that going to help your case? Does that come from a specific troubleshooting step?

And to answer your question, yes. But that doesn't move you forward. The instructions given in the linked article will...

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 10:09
by LetoMax
No. I was hoping that someone might give me more specific help by seeing that error and remembering the fix for it.

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 10:16
by LetoMax
My skill levels at determining what is modifying system DLLs are not that high.
BTW reinstalling v5 works...... does that help? I am really stuck and would appreciate some assistance. I have gone through your link to dealing with hardening issues and I am confident that I have tried most of the suggestions.

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 10:25
by socratis
LetoMax wrote:My skill levels at determining what is modifying system DLLs are not that high.
What in the seven kingdoms are you talking about? Can you please focus? Can you follow the advice given? I'm going to repeat it one last time:
scottgus1 wrote:Diagnosing VirtualBox Hardening Issues. Look through it and see if anything fits what you have installed. An 'sfc /scannow' might be appropriate.
Do that. Follow that link and do as the linked articles suggest.

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 10:33
by socratis
LetoMax,

BTW, I have now deleted your duplicate post from the Discuss the 6.0.14 release. According to the The Forum Posting Guide, duplicate posts are not allowed.

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 11:47
by LetoMax
Fantastic. Many thanks for all your help Socratis. Important to focus on the important matters, isn't it?

Re: Cannot open ova created on earlier version

Posted: 11. Nov 2019, 13:36
by socratis
LetoMax wrote:Important to focus on the important matters, isn't it?
I take it that this is in response to me deleting your duplicate post in the "Discuss the 6.0.14 release", plus deleting another thread that you had "VirtualBox Error In supR3HardenedWinReSpawn", which was yet another duplicate of this thread. Yes, I'm definitely focused to keeping the rules and regulations of the forums.

Yes, it is absolutely important to focus on the important matters! Something that you've failed to do so far. So, please do that and try to solve your problem. Asking irrelevant questions, and going into directions that make no sense whatsoever will not help with your situation. Again; focus on the problem and the suggestions provided.

Your other comments that have nothing to do with the thread, have been redirected to the "Feedback & comment to the Administrators and Moderators" thread.
All times are UTC+02:00
Page 1 of 2

Powered by phpBB® Forum Software © phpBB Limited