hfiref0x / VBoxHardenedLoader

VirtualBox VM detection mitigation loader
BSD 2-Clause "Simplified" License
919 stars 278 forks source link

Error -101 in supR3HardenedWinReSpawn! #46

Closed genayaku closed 5 years ago

genayaku commented 5 years ago

Windows 10 - 64 bit Had issue on VB 6.0.4 Downgraded to Version 5.2.26 r128414 (Qt5.6.2) to try, same thing Clean install Screens and logs are attached Thank you! Screen_1 Screen_2 Screen_3 Screen_4 VBoxHardening.log

hfiref0x commented 5 years ago

From elevated command prompt - net stop vboxdrv. Show properties - details of this file.

genayaku commented 5 years ago

Thanks for your reply! Same thing after stopping vboxdrv VBoxHardening.log

hfiref0x commented 5 years ago

Hello,

I mean show properties of your vboxdrv.sys from windows\system32\drivers folder. Does it belong to 6.0.4?

genayaku commented 5 years ago

Sorry about delayed response. I took few screenshots with properties. Not sure hos to tell if it belongs to 6.0.4 Properties_2 Properties_3 Properties_1

hfiref0x commented 5 years ago

You have bogus VBoxDrv.sys that does not belong to 6.0.4 so it can't be loaded by this VirtualBox version. Reinstalling VirtualBox will help.

This is likely VboxDrv from TDL (part of vboxhardened loader) which mean something interrupted vboxhardened loader installation (either you or 3rd party application) or you messed up something while installing this loader.