Faulting module name: ntdll.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c

We are having somewhat regular crashes (every couple of weeks) of RDS.  Our analysis shows heap corruption.  RAM tests okay.
Log Name: Application
Source: Application Error
Date: 4/17/2015 2:37:50 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: APPSERVER.ourdomain.local
Description:
Faulting application name: svchost.exe_TermService, version: 6.2.9200.16420, time stamp: 0x505a9a4e
Faulting module name: ntdll.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c
Exception code: 0xc0000005
Fault offset: 0x0000000000006ff5
Faulting process id: 0x250
Faulting application start time: 0x01d07834faefc615
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32
tdll.dll
Report Id: fea9607e-e549-11e4-940f-00155d0c0502
Log Name: Application
Source: Windows Error Reporting
Date: 4/17/2015 2:38:07 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: APPSERVER.ourdomain.local
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: svchost.exe_TermService
P2: 6.2.9200.16420
P3: 505a9a4e
P4: ntdll.dll
P5: 6.2.9200.17046
P6: 53b4864c
P7: c0000005
P8: 0000000000006ff5
P9:
P10:
Analysis symbol:
Rechecking for solution: 0
Report Id: fea9607e-e549-11e4-940f-00155d0c0502
Report Status: 0
Hashed bucket:
- These events indicated that program(svchost.exe_TermService) stopped unexpectedly. Which causes the issue with the remote session.
- For further investigation checked the AppCrash dump file on the server and found below error:
PROCESS_NAME: svchost.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fb7c3f6ff5 (ntdll!RtlpHeapFindListLookupEntry+0x0000000000000129)
ExceptionCode: c0000005 (Access violation)
PRIMARY_PROBLEM_CLASS: HEAP_CORRUPTION
BUGCHECK_STR: APPLICATION_FAULT_HEAP_CORRUPTION_HEAP_CORRUPTION_INVALID_POINTER_READ_CONTEXT_MISMATCH.
Any ideas?

Hi Rick,
Firstly, please try to fully patch the terminal server, and disable third party software if there’s any installed.
If the issue persists, please check whether KB2984976 is installed, if yes, please remove it.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Similar Messages

  • Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c

    Hi,
    Good day!
    I'm having this issue when I just installed an application. I have been searching this kernelbase.dll thing but none of them have fix or any workaround. Hopefully with the great technical guys here can help me with this issue.
    The server is windows 2008 R2
    From the event viewer I got this
    Faulting application name: Tlc.LogManager.Svc.exe, version: 7.0.1.5108, time stamp: 0x51d1ee27
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
    Exception code: 0xe0434352
    Fault offset: 0x000000000000cacd
    Faulting process id: 0x1130
    Faulting application start time: 0x01cf6dbd862da5b1
    Faulting application path: D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
    Application: Tlc.LogManager.Svc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ArgumentNullException
    Stack:
       at Tlc.CapCollector.Common.CapPersistentStateManager..ctor(Tlc.Interfaces.BusinessObjects.IAssetBusinessObject, Tlc.PersistentState.IPersistentStateStore, Tlc.Interfaces.ApplicationLog.IApplicationLog, Int32, Tlc.CapCollector.AgentDiscovery.CapAgentAutoDiscovery)
       at Tlc.LogManager.Lib.ascMan.OnMessageBusStart(Tlc.Interfaces.MessageBus.IMessageBus, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog)
       at Tlc.MessageBus.ActiveMQMessageBus.Start()
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
       at System.Threading.ThreadHelper.ThreadStart()
    Fault bucket , type 0
    Event Name: CLR20r3
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: tlc.logmanager.svc.exe
    P2: 7.0.1.5108
    P3: 51d1ee27
    P4: Tlc.CapCollector
    P5: 7.0.1.5108
    P6: 51d1edf4
    P7: f2
    P8: 34
    P9: System.ArgumentNullException
    P10:
    Attached files:
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_tlc.logmanager.s_4d5cd055f698b9b7d9e989629dd2eb52d0be2b_1a6a145b
    Analysis symbol:
    Rechecking for solution: 0
    Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
    Version=1
    EventType=CLR20r3
    EventTime=130443543988233973
    ReportType=2
    Consent=1
    ReportIdentifier=8c35a7c6-d9a9-11e3-9578-5ef3fcdc0b9f
    IntegratorReportIdentifier=8c35a7c5-d9a9-11e3-9578-5ef3fcdc0b9f
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=tlc.logmanager.svc.exe
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=7.0.1.5108
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=51d1ee27
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=Tlc.CapCollector
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=7.0.1.5108
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=51d1edf4
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=f2
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=34
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=System.ArgumentNullException
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=18441
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=3ada
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=3adac3ca3b54f3f7659e16fb4fdadcbe
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=b033
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=b0336032f99007ec98baa22debc5fb25
    UI[2]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    UI[3]=Tlc.LogManager.Svc has stopped working
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Tlc.LogManager.Svc stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[6]=C:\Windows\system32\msvcrt.dll
    LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[8]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[9]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[10]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[11]=C:\Windows\system32\GDI32.dll
    LoadedModule[12]=C:\Windows\system32\USER32.dll
    LoadedModule[13]=C:\Windows\system32\LPK.dll
    LoadedModule[14]=C:\Windows\system32\USP10.dll
    LoadedModule[15]=C:\Windows\system32\IMM32.DLL
    LoadedModule[16]=C:\Windows\system32\MSCTF.dll
    LoadedModule[17]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    LoadedModule[18]=C:\Windows\system32\MSVCR100_CLR0400.dll
    LoadedModule[19]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\bc19222db4406c472d9aa1f8b6e0f470\mscorlib.ni.dll
    LoadedModule[20]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    LoadedModule[21]=C:\Windows\system32\ole32.dll
    LoadedModule[22]=C:\Windows\system32\CRYPTBASE.dll
    LoadedModule[23]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[24]=C:\Windows\system32\rsaenh.dll
    LoadedModule[25]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\0f8f78b729ce16dd078f5d5f734a1110\System.ni.dll
    LoadedModule[26]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\7b167f31f23d4aed19dfa65ad3d29480\System.ServiceProcess.ni.dll
    LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[29]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Zip.v5.1.dll
    LoadedModule[30]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.GZip.v5.1.dll
    LoadedModule[31]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Tar.v5.1.dll
    LoadedModule[32]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.Formats.v5.1.dll
    LoadedModule[33]=C:\Windows\system32\VERSION.dll
    LoadedModule[34]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Common.dll
    LoadedModule[35]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.FileSystem.v5.1.dll
    LoadedModule[36]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.v5.1.dll
    LoadedModule[37]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Lib.dll
    LoadedModule[38]=C:\Windows\assembly\GAC_MSIL\VistaDB.4\4.1.0.0__dfc935afe2125461\VistaDB.4.dll
    LoadedModule[39]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Interfaces.dll
    LoadedModule[40]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Enums.dll
    LoadedModule[41]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\7a93c267da35a5f16b6fa5a10482eb4e\System.Core.ni.dll
    LoadedModule[42]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\5a47dfd0b200a502a4d5d27ee99bcc3c\System.Data.ni.dll
    LoadedModule[43]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    LoadedModule[44]=C:\Windows\system32\WS2_32.dll
    LoadedModule[45]=C:\Windows\system32\NSI.dll
    LoadedModule[46]=C:\Windows\system32\CRYPT32.dll
    LoadedModule[47]=C:\Windows\system32\MSASN1.dll
    LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\5d9f385419332f14eaf937556199856f\System.Xml.ni.dll
    LoadedModule[49]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Client.dll
    LoadedModule[50]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\5ac492f703d6d741140f7cd45ef3c746\System.Data.Services.Client.ni.dll
    LoadedModule[51]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Local.dll
    LoadedModule[52]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\c41b30de7215a62c8ca5bfe6e04ea763\System.Data.Entity.ni.dll
    LoadedModule[53]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.DataAccess.Config.dll
    LoadedModule[54]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Log.dll
    LoadedModule[55]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Utils.dll
    LoadedModule[56]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogMessageClassifier.dll
    LoadedModule[57]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Wintellect.PowerCollections.dll
    LoadedModule[58]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorks.dll
    LoadedModule[59]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\11581b5eba4b3ff58441c638ab66c742\System.Configuration.ni.dll
    LoadedModule[60]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\7e5af1fdbcffeab8daffc7633f9c337a\System.Web.ni.dll
    LoadedModule[61]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1266d26c7b7843d308e2705cb8239d55\System.Drawing.ni.dll
    LoadedModule[62]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\f0acb5c0e7dc2c42c6c61f3aa1278338\System.Windows.Forms.ni.dll
    LoadedModule[63]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CommonAssemblyInfo.dll
    LoadedModule[64]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\gdiplus.dll
    LoadedModule[65]=C:\Windows\system32\WindowsCodecs.dll
    LoadedModule[66]=C:\Windows\system32\shell32.dll
    LoadedModule[67]=C:\Windows\system32\profapi.dll
    LoadedModule[68]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
    LoadedModule[69]=C:\Windows\system32\USERENV.dll
    LoadedModule[70]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[71]=C:\Windows\system32\urlmon.dll
    LoadedModule[72]=C:\Windows\system32\WININET.dll
    LoadedModule[73]=C:\Windows\system32\iertutil.dll
    LoadedModule[74]=C:\Windows\system32\SspiCli.dll
    LoadedModule[75]=C:\Windows\system32\shfolder.dll
    LoadedModule[76]=C:\Windows\system32\bcrypt.dll
    LoadedModule[77]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c080a9ed31f78466f2400bba623af2f8\System.Configuration.Install.ni.dll
    LoadedModule[78]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\6cd002594b56953e9c210581e7f3f3cd\System.Web.Services.ni.dll
    LoadedModule[79]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.PersistentState.dll
    LoadedModule[80]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Mitre.CommonEventExpression.dll
    LoadedModule[81]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.ClientServer.Communications.dll
    LoadedModule[82]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\215d813343ba0950ad6e148e2098018b\System.Numerics.ni.dll
    LoadedModule[83]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\da51604aa808b94c181181b37c727078\System.Management.ni.dll
    LoadedModule[84]=C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\af08f116e2c31d2c65bd492804fb2fef\Microsoft.VisualBasic.ni.dll
    LoadedModule[85]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[86]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\wminet_utils.dll
    LoadedModule[87]=C:\Windows\system32\CLBCatQ.DLL
    LoadedModule[88]=C:\Windows\system32\wbem\wmiutils.dll
    LoadedModule[89]=C:\Windows\system32\wbemcomn.dll
    LoadedModule[90]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[91]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[92]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[93]=C:\Windows\system32\NTDSAPI.dll
    LoadedModule[94]=C:\Windows\system32\mswsock.dll
    LoadedModule[95]=C:\Windows\System32\wshtcpip.dll
    LoadedModule[96]=C:\Windows\System32\wship6.dll
    LoadedModule[97]=C:\Windows\system32\DNSAPI.dll
    LoadedModule[98]=C:\Windows\system32\IPHLPAPI.DLL
    LoadedModule[99]=C:\Windows\system32\WINNSI.DLL
    LoadedModule[100]=C:\Windows\system32\rasadhlp.dll
    LoadedModule[101]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[102]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.MySql.dll
    LoadedModule[103]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\122cea70c5d0d591f9af1f4316848fd1\System.Transactions.ni.dll
    LoadedModule[104]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    LoadedModule[105]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.dll
    LoadedModule[106]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSL.dll
    LoadedModule[107]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\850abdea1c65b88ba24a77f0191caea8\System.Data.OracleClient.ni.dll
    LoadedModule[108]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    LoadedModule[109]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\9d14b7bc969452800c0456286309d41d\System.Xml.Linq.ni.dll
    LoadedModule[110]=C:\Windows\assembly\GAC_MSIL\VistaDB.Entities.4\4.1.0.0__dfc935afe2125461\VistaDB.Entities.4.dll
    LoadedModule[111]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.ni.dll
    LoadedModule[112]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.Wrapper.dll
    LoadedModule[113]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    LoadedModule[114]=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    LoadedModule[115]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\08fba6b56d838ad48b4451c82e5728d4\System.Runtime.Serialization.ni.dll
    LoadedModule[116]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.RuleEngine.dll
    LoadedModule[117]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.EventForwarder.dll
    LoadedModule[118]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Lucene.Net.dll
    LoadedModule[119]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\d072039db89cac96d9e0b1ae9b3a94f4\System.ServiceModel.ni.dll
    LoadedModule[120]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\43f892698b9de4d752c13cc2d91ff16d\System.ServiceModel.Web.ni.dll
    LoadedModule[121]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\ac74a156499a8303d5788ab299881d5d\SMDiagnostics.ni.dll
    LoadedModule[122]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\2f02efd9ddb7417ffd5c06cfe6e865ca\System.Runtime.DurableInstancing.ni.dll
    LoadedModule[123]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\33ac21194152cf9a89b82d9cd38b398d\System.IdentityModel.ni.dll
    LoadedModule[124]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\535e182d16212c61bc8b22e0309d3362\System.Xaml.ni.dll
    LoadedModule[125]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\84226b67f4623bd3b0dde9aa00c5c88d\System.Data.Services.ni.dll
    LoadedModule[126]=C:\Windows\system32\pcwum.DLL
    LoadedModule[127]=C:\Windows\system32\httpapi.dll
    LoadedModule[128]=C:\Windows\system32\cryptnet.dll
    LoadedModule[129]=C:\Windows\system32\WLDAP32.dll
    LoadedModule[130]=C:\Windows\system32\SensApi.dll
    LoadedModule[131]=C:\Windows\system32\dsrole.dll
    LoadedModule[132]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.MessageBus.dll
    LoadedModule[133]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.dll
    LoadedModule[134]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Google.ProtocolBuffers.dll
    LoadedModule[135]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSH.dll
    LoadedModule[136]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Reports.dll
    LoadedModule[137]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\SecureBlackbox.dll
    LoadedModule[138]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.GenericDbLogCollector.dll
    LoadedModule[139]=C:\Windows\system32\ntmarta.dll
    LoadedModule[140]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\perfcounter.dll
    LoadedModule[141]=C:\Windows\system32\pdh.dll
    LoadedModule[142]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.System.dll
    LoadedModule[143]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
    LoadedModule[144]=C:\Windows\system32\aspnet_counters.dll
    LoadedModule[145]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_perf.dll
    LoadedModule[146]=C:\Windows\system32\Secur32.dll
    LoadedModule[147]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[148]=C:\Windows\system32\security.dll
    LoadedModule[149]=C:\Windows\system32\credssp.dll
    LoadedModule[150]=C:\Windows\system32\schannel.DLL
    LoadedModule[151]=C:\Windows\system32\ncrypt.dll
    LoadedModule[152]=C:\Windows\system32\bcryptprimitives.dll
    LoadedModule[153]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSNMP.dll
    LoadedModule[154]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.ActiveMQ.dll
    LoadedModule[155]=C:\Windows\system32\NLAapi.dll
    LoadedModule[156]=C:\Windows\system32\napinsp.dll
    LoadedModule[157]=C:\Windows\System32\winrnr.dll
    LoadedModule[158]=C:\Windows\system32\rasman.dll
    LoadedModule[159]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapCollector.dll
    LoadedModule[160]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapIDL.dll
    LoadedModule[161]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dto.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Tlc.LogManager.Svc
    AppPath=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe

    Hi Ross Rene,
    Sorry for the delay.
    Please make sure the App is compatible with the .Net framework installed, please check the .net version.
    Best Regards,
    Anna

  • Faulting module name: AcroRd32.dll, version: 10.1.1.33, time stamp: 0x4e64f98b

    Hi,
    In a Win7 (32 bit) environment with IE8 and Acrobat Reader X (Version 10.1.1.33)  a number of our PC's and laptops get the following error messages on a fairly consistant basis:
    Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
    Faulting module name: AcroRd32.dll, version: 10.1.1.33, time stamp: 0x4e64f98b
    Exception code: 0xc0000005
    Fault offset: 0x000931d8
    Faulting process id: 0x1790
    Faulting application start time: 0x01cedee9854abf7a
    Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe
    Faulting module path: C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.dll
    Report Id: 49797133-4aea-11e3-b595-f4b7e2e6eb69
    Does anyone have any idea of how to fix this issue or what may be the cause of it? Is is solely related to Acrobat or do you think IE8 may be the cause? We use IE8 due to restrictions on some web based applications we use and cannot upgrade to a newer version of this.
    Thanks

    I don't know what is causing this, but the first thing I would try is to update Adobe Reader to version 10.1.8 (or 11.0.5).

  • Photoshop Elements has stopped working, Faulting module name: ntdll.dll

    I use windows 7, pse 9, I went to the application and log and this is the error message I get:
    Faulting application name: PhotoshopElementsEditor.exe, version: 9.0.0.0, time stamp: 0x4ca3884b
    Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b60
    Exception code: 0xc0000005
    Fault offset: 0x0001f8c4
    Faulting process id: 0xca8
    Faulting application start time: 0x01cd513a0df54fd0
    Faulting application path: C:\Program Files\Adobe\Photoshop Elements 9\PhotoshopElementsEditor.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: 7fee6f40-bd2d-11e1-9d1b-e0cb4eddc8b4
    The organizer works fine but editor has never worked for me and I just installed it a few days ago
    Message title was edited by: Brett N

    Thanks for the log info. We've seen instances of that "ntdll.dll" as the faulting module before, see if this Adobe document helps, even though it's for Acrobat:
    http://helpx.adobe.com/acrobat/kb/acrobat-8-crashes-error-cites.html
    Ken

  • Application Error - Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385

    Hi,
    we have one Visual C++ application and this application also using few external dlls. while exiting from application, getting following error. This
    is happened in Windows 7.
    Please help us to resolve this issue.
    Log Name:     
    Application
    Source:       
    Application Error
    Date:         
    28/07/2010 11:44:16 AM
    Event ID:     
    1000
    Task Category: (100)
    Level:        
    Error
    Keywords:     
    Classic
    User:         
    N/A
    Computer:     
    CRIWKS12.crillylaw.local
    Description:
    Faulting application name: WinTest.exe, version: 2.7.1.0, time stamp: 0x4b78d5b8
    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdaae
    Exception code: 0x0eedfade
    Fault offset: 0x00009617
    Faulting process id: 0x10b8
    Faulting application start time: 0x01cb2df647dfd847
    Faulting application path: C:\Program Files\xxx\xxx\xxx\ WinTest.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: a17377fd-99e9-11df-8941-90fba60d7539
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-07-28T01:44:16.000000000Z" />
    <EventRecordID>3773</EventRecordID>
    <Channel>Application</Channel>
    <Computer>CRIWKS12.crillylaw.local</Computer>
    <Security />
    </System>
    <EventData>
    <Data> WinTest.exe</Data>
    <Data>2.7.1.0</Data>
    <Data>4b78d5b8</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7600.16385</Data>
    <Data>4a5bdaae</Data>
    <Data>0eedfade</Data>
    <Data>00009617</Data>
    <Data>10b8</Data>
    <Data>01cb2df647dfd847</Data>
    <Data>C:\Program Files\xxx\xxx\xxx\ WinTest.exe</Data>
    <Data>C:\Windows\system32\KERNELBASE.dll</Data>
    <Data>a17377fd-99e9-11df-8941-90fba60d7539</Data>
    </EventData>
    </Event>
    PS. I apologise for not being able to provide the application's name.

    Hi Jesse ,
    I am pasting the entire module where the code fails:
    /// <summary>
    /// Pool the job execution status
    /// </summary>
    private void PoolJobExecutionStatus()
    int waitIndex = 0;
    while (true)
    try
    lock (this.lockingObject)
    this.ReOpenRegistryConnection();
    currentJob = SR.Job.Load(this.currentJobId, this.poolingConnection);
    JobStatusEventArgs jobStatusArg = (currentJob.Status == SR.JobStatus.Aborted) ?
    new JobStatusEventArgs(currentJob.Name, currentJob.Status, currentJob.ErrorMessage) :
    new JobStatusEventArgs(currentJob.Name, currentJob.Status);
    this.dispatcher.BeginInvoke(new EventHandler<JobStatusEventArgs>(RaiseUpdateStatus), DispatcherPriority.Normal, new object[] { this, jobStatusArg });
    if (currentJob.Status == JobStatus.Aborted || currentJob.Status == JobStatus.Completed)
    this.PoolJobThread.Abort();
    break;
    catch (ThreadAbortException)
    catch (ConnectionFailure ex)
    TridentErrorHandler.HandleUIException(ex);
    // If reconnection fails more than the max reconnection value then exit.
    if (this.connectionAttempts >= this.maxConnectionAttempts)
    break;
    this.connectionAttempts++;
    catch (BackendStorageException ex)
    TridentErrorHandler.HandleUIException(ex);
    // If reconnection fails 5 times then exit.
    if (this.connectionAttempts >= this.maxConnectionAttempts)
    break;
    this.connectionAttempts++;
    catch (Exception ex)
    TridentErrorHandler.HandleUIException(ex);
    break;
    try
    Thread.Sleep(500);
    // If job is in waiting state, every 3 min show the user retry message.
    // (waitIndex == 360) Specifes 3 min.
    if (currentJob.Status == JobStatus.Waiting && waitIndex == 360)
    waitIndex = 0;
    JobStatusEventArgs jobStatusArg = new JobStatusEventArgs(this.currentJob.Name, this.currentJob.Status, TridentResourceManager.GetString("JobTerminatedByUserMessage"));
    this.dispatcher.BeginInvoke(new EventHandler<JobStatusEventArgs>(RaiseUpdateStatus), DispatcherPriority.Normal, new object[] { this, jobStatusArg });
    catch (Exception ex)
    TridentErrorHandler.HandleUIException(ex);
    waitIndex++;
    public void StartDataProductService(Guid jobId, Connection poolConnection)
    this.currentJobId = jobId;
    this.poolingConnection = poolConnection;
    this.ClearTempData();
    this.HaltService();
    this.PoolJobThread = new Thread(this.PoolJobExecutionStatus);
    this.PoolJobThread.Start();
    Hope this helps
    Regards,
    Rahul

  • Faulting module name: HsAddin.dll, version: 9.3.8366.0 in Excel

    Hi,
    Whenever i open Excel 2007 a while later it will Hang and crash. Below information was show on Event Log.
    Faulting application name: EXCEL.EXE, version: 12.0.6425.1000, time stamp: 0x49d64dd6
    Faulting module name: HsAddin.dll, version: 9.3.8366.0, time stamp: 0x495c20df
    Exception code: 0xc0000005
    Fault offset: 0x00259a7a
    Faulting process id: 0x11f4
    Faulting application start time: 0x01cbe474afba145d
    Faulting application path: C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE
    Faulting module path: C:\Hyperion\SmartView\Bin\HsAddin.dll
    Report Id: bdaab14d-5068-11e0-9606-002186c3c2c2
    Any one can help this?
    Thanks

    Some entries might still be hanging out there.
    You will have to search through the registry for the word - smartview or smart view
    Please take a backup of the registry before making any changes.
    HTH-
    Jasmine.

  • I use msn internet browser and it constantly crashes with the info from event viewer: Faulting application name: msn.exe, version: 10.50.19.1000, time stamp: 0x51ddb7de this can happen numerous times in a single day help please

    Log Name:      Application
    Source:        Application Error
    Date:          2/26/2014 2:16:26 PM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      SuperFlyXPS
    Description:
    Faulting application name: msn.exe, version: 10.50.19.1000, time stamp: 0x51ddb7de
    Faulting module name: MSHTML.dll, version: 11.0.9600.16518, time stamp: 0x52f365cb
    Exception code: 0xc0000005
    Fault offset: 0x00175363
    Faulting process id: 0x1260
    Faulting application start time: 0x01cf32a011d4aeb4
    Faulting application path: C:\Program Files (x86)\MSN\MSNCoreFiles\msn.exe
    Faulting module path: C:\Windows\system32\MSHTML.dll
    Report Id: a1704306-9f33-11e3-acde-782bcbac25e5
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-02-26T22:16:26.000000000Z" />
        <EventRecordID>80997</EventRecordID>
        <Channel>Application</Channel>
        <Computer>SuperFlyXPS</Computer>
        <Security />
      </System>
      <EventData>
        <Data>msn.exe</Data>
        <Data>10.50.19.1000</Data>
        <Data>51ddb7de</Data>
        <Data>MSHTML.dll</Data>
        <Data>11.0.9600.16518</Data>
        <Data>52f365cb</Data>
        <Data>c0000005</Data>
        <Data>00175363</Data>
        <Data>1260</Data>
        <Data>01cf32a011d4aeb4</Data>
        <Data>C:\Program Files (x86)\MSN\MSNCoreFiles\msn.exe</Data>
        <Data>C:\Windows\system32\MSHTML.dll</Data>
        <Data>a1704306-9f33-11e3-acde-782bcbac25e5</Data>
      </EventData>
    </Event>
    need help with . . .

    Hi,
    I found a useful link:
    MSN has encountered a problem needs to close or MSN is not responding Error
    https://answers.msn.com/solution.aspx?solutionid=11abae39-d906-4113-bb4e-ecfaa81798f0
    Please take a look of this part
    (Common Faulty Module on MSN
    Mshtml.dll)
    *Instead of MSN, here is a another software called Skype, just instroduce it to you, hope you can enjoy it.*
    Yolanda Zhu
    TechNet Community Support

  • Please help to solve this Faulting application name: Explorer.EXE, version: 6.3.9600.16441, time stamp: 0x5265dec8

    Faulting application name: Explorer.EXE, version: 6.3.9600.16441, time stamp: 0x5265dec8
    Faulting module name: verifier.dll, version: 6.3.9600.16384, time stamp: 0x5215f8f7
    Exception code: 0x80000003
    Fault offset: 0x000000000000abd4
    Faulting process id: 0x13fc
    Faulting application start time: 0x01cf2a60ac1727ab
    Faulting application path: C:\WINDOWS\Explorer.EXE
    Faulting module path: C:\WINDOWS\system32\verifier.dll
    Report Id: d489ba61-9655-11e3-bf26-f82fa8e6dde2
    Faulting package full name: 
    Faulting package-relative application ID: 

    Hi,
    Try to run sfc /scannow command to repair the corrupted system file:
    Use the System File Checker tool to repair missing or corrupted system files
    http://support.microsoft.com/kb/929833
    Also we could a easier way system restore to roll back to a time when everything works fine:
    How to  refresh, reset, or restore your PC
    http://windows.microsoft.com/en-IN/windows-8/restore-refresh-reset-pc
    Karen Hu
    TechNet Community Support

  • Crash due to Faulting application firefox.exe, version 1.9.2.3888, time stamp 0x4c745229, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03824, exception code 0xc0000005

    Uploaded latest version yesterday. On Vista.
    Crashes in google, united, not Craigslist.
    tried troubleshooting : allowed Firefox in firewall, disabled plug ins, when started in safe mode still same problem
    Couldn't fine container.exe to allow it
    Crash report last one showing was in August.
    data from the Event Log
    Crash due to Faulting application firefox.exe, version 1.9.2.3888, time stamp 0x4c745229, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03824, exception code 0xc0000005, fault offset 0x00031d62, process id 0x1328, application start time 0x01cb52a1a20e0726.

    Uploaded latest version yesterday. On Vista.
    Crashes in google, united, not Craigslist.
    tried troubleshooting : allowed Firefox in firewall, disabled plug ins, when started in safe mode still same problem
    Couldn't fine container.exe to allow it
    Crash report last one showing was in August.
    data from the Event Log
    Crash due to Faulting application firefox.exe, version 1.9.2.3888, time stamp 0x4c745229, faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03824, exception code 0xc0000005, fault offset 0x00031d62, process id 0x1328, application start time 0x01cb52a1a20e0726.

  • Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588

    Hi, I'm running Windows 8.1 Pro, and having problems where explorer will crash every couple of hours.  
    here's the event viewer log info:
    Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x0000000000000000
    Faulting process id: 0x2dfc
    Faulting application start time: 0x01cf7e970bd1516c
    Faulting application path: C:\windows\explorer.exe
    Faulting module path: unknown
    Report Id: a2e8b887-ea95-11e3-8265-0050b66098e2
    Faulting package full name: 
    Faulting package-relative application ID: 
    I opened up the dump file, and i'm having a hard time making out what the issue might be.  Any assistance would be appreciated.   Thank you!
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*C:\SYMBOLS*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*C:\SYMBOLS*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 8 Version 9600 MP (4 procs) Free x64
    Product: WinNt, suite: SingleUserTS
    Built by: 6.3.9600.17031 (winblue_gdr.140221-1952)
    Machine Name:
    Debug session time: Mon Jun  2 12:15:42.000 2014 (UTC - 7:00)
    System Uptime: not available
    Process Uptime: 0 days 0:07:27.000
    Loading unloaded module list
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (2230.9d4): Access violation - code c0000005 (first/second chance not available)
    ntdll!NtWaitForMultipleObjects+0xa:
    00007ffc`20b2b13a c3              ret
    0:054> !analyze -v
    *                        Exception Analysis                                   *
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for sppc.dll - 
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for dlumd11.dll - 
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for ClassicStartMenuDLL.dll - 
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for ClassicExplorer64.dll - 
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for GROOVEEX.DLL - 
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for msvcr90.dll - 
    FAULTING_IP: 
    +50951de2c52b
    00000000`00000000 ??              ???
    EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 0000000000000000
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000008
       Parameter[1]: 0000000000000000
    Attempt to execute non-executable address 0000000000000000
    CONTEXT:  0000000000000000 -- (.cxr 0x0;r)
    rax=00000000066e0000 rbx=0000000000000003 rcx=00000000066e0000
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000003
    rip=00007ffc20b2b13a rsp=000000000980d428 rbp=000000000980dee0
     r8=0000000000001000  r9=0000000000000000 r10=0000000000000040
    r11=0000000000000286 r12=0000000000000010 r13=000000000980d840
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
    ntdll!NtWaitForMultipleObjects+0xa:
    00007ffc`20b2b13a c3              ret
    PROCESS_NAME:  explorer.exe
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_PARAMETER1:  0000000000000008
    EXCEPTION_PARAMETER2:  0000000000000000
    WRITE_ADDRESS:  0000000000000000 
    FOLLOWUP_IP: 
    propsys!PSPropertyBag_WriteInt+3c
    00007ffc`19a2945c 488b4c2438      mov     rcx,qword ptr [rsp+38h]
    FAILED_INSTRUCTION_ADDRESS: 
    +3c
    00000000`00000000 ??              ???
    NTGLOBALFLAG:  0
    APPLICATION_VERIFIER_FLAGS:  0
    APP:  explorer.exe
    ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
    FAULTING_THREAD:  00000000000009d4
    BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL
    PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT_NULL
    DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT_NULL
    LAST_CONTROL_TRANSFER:  from 00007ffc19a2945c to 0000000000000000
    STACK_TEXT:  
    00000000`0980ed68 00007ffc`19a2945c : 00000000`1edc55b0 00000000`1edc55b0 00000000`00000000 00007ffc`1c581762 : 0x0
    00000000`0980ed70 00007ffc`08848361 : 00000000`183c3ad0 00000000`1edc55b0 00000000`1edc55b0 00000000`00000000 : propsys!PSPropertyBag_WriteInt+0x3c
    00000000`0980edc0 00007ffc`088482c4 : 00000000`00000000 00000000`00000425 00007ffc`16461240 00000000`00000425 : explorerframe!CShellBrowser::_OnFrameStateChanged+0x81
    00000000`0980ee10 00007ffc`087ef021 : 00000000`00000001 00000000`00000425 00000000`00000425 00000000`00000033 : explorerframe!CShellBrowser::WndProcBS+0x8aa
    00000000`0980f0b0 00007ffc`1ff62434 : 00000000`00000001 00000000`0980f360 00000000`00000000 00000002`00000030 : explorerframe!IEFrameWndProc+0x7d
    00000000`0980f100 00007ffc`1ff63fe2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : user32!UserCallWinProcCheckWow+0x140
    00000000`0980f1c0 00007ffc`1ff6409d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : user32!DispatchClientMessage+0xa2
    00000000`0980f220 00007ffc`20b2c99f : 00000000`18215570 00007ffc`087ffd50 00000000`18215570 00000000`0980f310 : user32!_fnDWORD+0x2d
    00000000`0980f280 00007ffc`1ff61fea : 00007ffc`1ff6341d 00000000`00000064 00000000`00000000 00000000`0980f3a0 : ntdll!KiUserCallbackDispatcherContinue
    00000000`0980f308 00007ffc`1ff6341d : 00000000`00000064 00000000`00000000 00000000`0980f3a0 00007ffc`087f0dab : user32!NtUserMessageCall+0xa
    00000000`0980f310 00007ffc`1ff65191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00abecc0 : user32!SendMessageWorker+0x118
    00000000`0980f3a0 00007ffc`087f736c : 00000000`183111e0 00000000`17e90f80 00000000`00020732 00000000`00000000 : user32!SendMessageW+0x105
    00000000`0980f400 00007ffc`088479bb : 00000000`0000000c 00000000`183111e0 00000000`00000000 00000000`00000000 : explorerframe!CBrowserHost::ForwardMessageToBrowser+0x1c
    00000000`0980f430 00007ffc`088484e1 : 00000000`17e90ef8 00000000`00020732 00000000`00000000 00000000`17e90f80 : explorerframe!CExplorerFrame::OnBrowserCreated+0xcb
    00000000`0980f480 00007ffc`08847dcb : 00000000`203caba8 00000000`1edc55b0 00000000`17e90ee0 00000000`16237630 : explorerframe!CBrowserHost::OnBrowserCreated+0xb5
    00000000`0980f4c0 00007ffc`08843133 : 00000000`16237630 00000000`16237630 00000000`16237630 00000000`1edc55b0 : explorerframe!CShellBrowser::AfterWindowCreated+0xc7
    00000000`0980f500 00007ffc`08842f80 : 00000000`16237630 00000000`0980f730 00000000`00000003 00000000`18311140 : explorerframe!CBrowserHost::Initialize+0xef
    00000000`0980f530 00007ffc`087f9bc0 : 00000000`18311140 00000000`00200000 00000000`0980f730 00000000`00000003 : explorerframe!CExplorerFrame::Initialize+0x3c
    00000000`0980f560 00007ffc`087fb3b6 : 00000000`18311140 00000000`16237630 00000000`00200000 00007ffc`1e102d9d : explorerframe!BrowserThreadProc+0x50
    00000000`0980f5a0 00007ffc`087fb366 : 18bc0f9b`000047ae 00000000`15ff61e0 00000000`00000000 00007ffc`1ff62f2f : explorerframe!BrowserNewThreadProc+0x3a
    00000000`0980f5d0 00007ffc`087f8549 : 00000000`00002230 00000000`000009d4 00000000`0000000f 00000000`0000000b : explorerframe!CExplorerTask::InternalResumeRT+0x12
    00000000`0980f600 00007ffc`1ebde4fc : 00000000`00000000 00000000`00000000 ffffffff`fffffffe 00000000`00200000 : explorerframe!CRunnableTask::Run+0xc9
    00000000`0980f630 00007ffc`1ebde6df : 00000000`10605f50 00000000`10605f50 00000000`00000000 00000000`00000010 : shell32!CShellTaskThread::ThreadProc+0x284
    00000000`0980f780 00007ffc`1c588023 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`00000000 : shell32!CShellTaskThread::s_ThreadProc+0x2f
    00000000`0980f7b0 00007ffc`200e16ad : 00000000`0040e300 00000000`00000000 00000000`80004005 00000000`00000000 : SHCore!Microsoft::WRL::FtmBase::MarshalInterface+0x17b
    00000000`0980f8d0 00007ffc`20b04629 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
    00000000`0980f900 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
    SYMBOL_STACK_INDEX:  1
    SYMBOL_NAME:  propsys!PSPropertyBag_WriteInt+3c
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: propsys
    IMAGE_NAME:  propsys.dll
    DEBUG_FLR_IMAGE_TIMESTAMP:  53511853
    STACK_COMMAND:  ~54s; .ecxr ; kb
    FAILURE_BUCKET_ID:  SOFTWARE_NX_FAULT_NULL_c0000005_propsys.dll!PSPropertyBag_WriteInt
    BUCKET_ID:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_NULL_IP_propsys!PSPropertyBag_WriteInt+3c
    ANALYSIS_SOURCE:  UM
    FAILURE_ID_HASH_STRING:  um:software_nx_fault_null_c0000005_propsys.dll!pspropertybag_writeint
    FAILURE_ID_HASH:  {a6c58e48-fd4e-59a9-7e83-f1b082937554}
    Followup: MachineOwner

    Hi，
    Please upload the dump file to a public folder such as OneDrive, then paste the download link here for further analyzing.
    Have you installed any third party tool which might be related with Explorer in your system? if you have, please uninstalled it as a test.
    Windows Explorer crashes are mostly caused by an incompatible Shell Extension.
    You can run tool ShellExView to find the culprit, in the pane sort the entries with manufacturers. Disable all non-Microsoft *.dll files, and check the result. If the issue does not occur, one of the files can be the culprit. We could narrow down it one by
    one.
    For download link and user guide, please see this link (ShellExView is included in it)
    http://technet.microsoft.com/en-us/magazine/2009.06.toolbox.aspx
    Yolanda Zhu
    TechNet Community Support

  • Problem Event Name:     APPCRASH   Application Name:     iTunes.exe   Application Version:     10.2.2.14   Application Timestamp:     4db7cd2f   Fault Module Name:     ntdll.dll   Fault Module Version:     6.1.7600.16695   Fault Module Timestamp:     4cc7

    Please help me solve this problem.

    I get the appcrash when i pause my the downloding apps...and i cant really understand why everytime i open my itunes the music files video and app were missing and i have to insert them over and over again when i want to sync my ipad..this problem actually happened before i got my ipad2 that time im using my ipod touch..i hope u can help me solving this problem :)

  • Event 1000, Application Error (Faulting application name: w3wp.exe - Faulting module name: KERNELBASE.dll)

    Hello Guys,
    While running a web application am getting an error like: Remote server not responding. Below are the details of event viewers which been captured at the same time when this error happened:
    Event 1000, Application Error
    Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb
    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16850, time stamp: 0x4e211da1
    Exception code: 0xe053534f
    Fault offset: 0x000000000000a88d
    Faulting process id: 0x%9
    Faulting application start time: 0x%10
    Faulting application path: %11
    Faulting module path: %12
    Report Id: %13
    Event 1001, Windows Error Reporting
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: w3wp.exe
    P2: 7.5.7600.16385
    P3: 4a5bd0eb
    P4: KERNELBASE.dll
    P5: 6.1.7600.16850
    P6: 4e211da1
    P7: e053534f
    P8: 000000000000a88d
    P9: 
    P10: 
    Attached files:
    C:\Windows\Temp\WERC9CD.tmp.WERInternalMetadata.xml
    C:\Windows\Temp\WERC9CE.tmp.hdmp
    C:\Windows\Temp\WEREE30.tmp.mdmp
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_30877924d6b2c607fe88a8718915f25fb79093_cab_e905f2b0
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d46a6849-8f6a-11e1-98af-00215e6e4855
    Report Status: 4
    This is an priority issue which we are facing in IIS. IIS is configured for Framework 2.0 and underlying OS is - Windows
    Server 2008 R2 Standard.This issue is replicable and occurring frequently Please suggest how to resolve it. Any input related to above issue is appreciable.

    Please refer similar discussions and see if they help
    Faulting application name: w3wp.exe 
    http://telligent.com/support/communityserver/community_server_2008/f/288/t/1067447.aspx 
    Event ID: 1000, Faulting application w3wp.exe, faulting module unknown, 
    http://social.msdn.microsoft.com/forums/en-US/clr/thread/9be88a2f-c8cc-4a73-9371-45ab73982123
    For IIS related queries, please post them in IIS forum - http://forums.iis.net/
    A UNIVERSE without WINDOWS is CHAOS !
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
    About Me !!!

  • Windows Forms Application Crashes Out with "Faulting module name: clr.dll"

    OS: Windows 7
    Framework: 4.5
    Windows Form Application crashes while invoking printer settings method "printersettings.sethdevmode()"
    Application: DHSDEVASystem.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.AccessViolationException
    Stack:
       at System.Runtime.InteropServices.Marshal.CopyToManaged(IntPtr, System.Object, Int32, Int32)
       at System.Runtime.InteropServices.Marshal.Copy(IntPtr, Byte[], Int32, Int32)
       at System.Drawing.Printing.PrinterSettings.SetHdevmode(IntPtr)
       at DHSPresentationLayer.Logic.PrinterAPI.OpenPrinterPropertiesDialog(System.Drawing.Printing.PrinterSettings, System.Windows.Forms.Form)
       at DHSPresentationLayer.Logic.PrinterAPI.SendFileToPrinter(DHSPresentationLayer.Logic.PrinterInfo, System.String, System.Windows.Forms.Form)
       at DHSPresentationLayer.Logic.PrinterAPI.PrintLabel(System.String, System.String, System.Data.DataTable, System.Func`2<System.String,System.String>, System.String, System.String, Int32, System.Windows.Forms.Form)
       at DHSPresentationLayer.MRPFR130.showSSReport()
       at DHSPresentationLayer.MRPFR130.confirmCancelCloseButton_Confirm()
       at MINDBaseFormLibrary.BaseScreenReports.confirmCancelCloseControl1_EventButtonClicked(System.Object, DHSControlLibrary.MyEventArgs)
       at DHSControlLibrary.ConfirmCancelCloseControl.OnEventButtonClicked(DHSControlLibrary.MyEventArgs)
       at DHSControlLibrary.ConfirmCancelCloseControl.cmdConfirm_Click(System.Object, System.EventArgs)
       at System.Windows.Forms.Control.OnClick(System.EventArgs)
       at Infragistics.Win.Misc.UltraButtonBase.OnClick(System.EventArgs)
       at Infragistics.Win.Misc.UltraButton.OnMouseUp(System.Windows.Forms.MouseEventArgs)
       at System.Windows.Forms.Control.WmMouseUp(System.Windows.Forms.Message ByRef, System.Windows.Forms.MouseButtons, Int32)
       at System.Windows.Forms.Control.WndProc(System.Windows.Forms.Message ByRef)
       at System.Windows.Forms.Control+ControlNativeWindow.OnMessage(System.Windows.Forms.Message ByRef)
       at System.Windows.Forms.Control+ControlNativeWindow.WndProc(System.Windows.Forms.Message ByRef)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
       at System.Windows.Forms.NativeWindow.DefWndProc(System.Windows.Forms.Message ByRef)
       at Infragistics.Win.UIAutomation.UiaProviderControlNativeWindow.WndProc(System.Windows.Forms.Message ByRef)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
       at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG ByRef)
       at System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr, Int32, Int32)
       at System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
       at System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
       at System.Windows.Forms.Application.Run(System.Windows.Forms.Form)
       at DHSPresentationLayer.Program.Main()
    then 1 second after :
    Faulting application name: DHSDEVASystem.exe, version: 7.8.0.4, time stamp: 0x54c8f680
    Faulting module name: MSVCR110_CLR0400.dll, version: 11.0.50709.17929, time stamp: 0x4ffa580c
    Exception code: 0xc0000005
    Fault offset: 0x0000156e
    Faulting process id: 0x8ec
    Faulting application start time: 0x01d046916142e1e3
    Faulting application path: C:\Users\savaa\AppData\Local\Apps\2.0\DR9VMJ96.MZ3\DP07HVCX.MDB\dhsd..tion_0000000000000000_0007.0008_cfa90b0813b3f063\DHSDEVASystem.exe
    Faulting module path: C:\Windows\system32\MSVCR110_CLR0400.dll
    Report Id: 38cf9363-b285-11e4-b29f-0023242a2561
    The PC is on windows 7 32 bits with .net 4.5 installed.

    Hello,
    Based on the exception message, I found that your project is build with .NET 4.0, you could consider changing it to .NET 4.5.
    If you want to keep it built with .NET 4.0, then you could consider the following fix.
    FIX: "Faulting module name: clr.dll" error message when you run a Microsoft .NET Framework 4-based application
    Regards,
    Carl
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Faulting module name: MSVCR100.dll

    Hi I am using Lightroom 4 and it has just crashed on me during using the adjustment brush.  Here is the info from crash:-
    Faulting application name: lightroom.exe, version: 4.0.0.10, time stamp: 0x4f45dc57
    Faulting module name: MSVCR100.dll, version: 10.0.30319.1, time stamp: 0x4ba1dbbe
    Exception code: 0xc0000005
    Fault offset: 0x000026df
    Faulting process id: 0x1630
    Faulting application start time: 0x01ccfc68da3b53b6
    Faulting application path: C:\Program Files\Adobe\Adobe Photoshop Lightroom 4\lightroom.exe
    Faulting module path: C:\Windows\system32\MSVCR100.dll
    Report Id: 47c3d226-6866-11e1-a3c1-001cc4d232ad
    Can anyone help on this. I'm using win 7.

    Hi,
    According to your description, I understand that the issue happens to several PCs with Outlook 2010.
    I noticed that you have done several troubleshooting about the Outlook crash issue. I suggest we can install Outlook 2013 in a new computer and check whether the issue happens in Outlook 2013.
    If the issue doesn’t happen in Outlook 2013, please update your Outlook 2010 to the latest patches and service packs and check whether the issue persists.
    Regards,
    Winnie Liang
    TechNet Community Support

  • I continually get this: Application Error 1000_(100)_"Faulting application name: MyAppName.exe Faulting module name: MSVBVM60.DLL

    I have a VB6 application which connects to a SQL Server.  I am running my exe on a Windows Server Terminal Server.  I frequently have my EXE crash and close at random.  My EXE doesn't log any error because the crash occurred outside of my
    application. 
    Here is the Windows event error:
    07/17/14 4:59:49 PM    Application Error    1000    (100)    "Faulting application name: MyApp.exe, version: 8.0.0.0, time stamp: 0x53adc042
    Faulting module name: MSVBVM60.DLL, version: 6.0.98.15, time stamp: 0x4a5bda6c
    Exception code: 0xc0000006
    Fault offset: 0x00054948
    Faulting process id: 0x24d4
    Faulting application start time: 0x01cfa1fe336df3db
    Faulting application path: N:\MyApp\MyApp.exe
    Faulting module path: C:\Windows\system32\MSVBVM60.DLL
    Report Id: 498ee913-0df5-11e4-a940-000c29a03ae8"
    I have tried to search the internet but I have yet to find a solution.  Any help or explanation would be greatly appreciated.

    Hello,
    Thank you for your post.
    I’m afraid that it is not the correct forum for this issue, since this forum is to
    discusses the usage of Visual Studio IDE such as
    WPF & SL designer, Visual Studio Guidance Automation Toolkit,
    Developer Documentation and Help System and
    Visual Studio Editor.
    Since you are working with VB6 application, I suggest that you can consult on these popular third-party forums which support Visual Basic 6for better solutions:
    VB Forums
    VB City
    Best regards,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

Maybe you are looking for

  • SPOOL DIALOG DOES NOT APPEAR WHEN NO_DIALOG = SPACE

    The control parameters that allow the spool dialog popup to appear work when executing directly from MB90, but when executing from MIGO, the spool dialog popup does not appear.  The print output is occurring without giving user option to change spool

  • Can we install both PI and CE in the same instance ?

    Hi, I have requirement to use EAI and BPM tools in SAP, as i know the tools will be PI and CE, but then to reduce the total cost of the hardware we need to put both PI and CE into the same box. is that possible to install both application in the same

  • Could someone help with question about PNG export from Illustrator?

    I am having issues with PNG exports from Illustrator not opening up once exported.

  • Wrong time when adding two dates

    Hi I'm trying to add two Date-objects by adding milliseconds they represent, and convert back to a Date-object. More specific, I have a Date representing midnight on a given day, and another Date representing a time offset on this day, and I want to

  • Cant start up

    I have had my pb for 3- 4 years now and recently I have been experiencing some power issues similarly discussed by other users. The PB if not plugged in just goes dead ( to black) at about 75% power. Now I can live with this as I have kept it plugged