I use msn internet browser and it constantly crashes with the info from event viewer: Faulting application name: msn.exe, version: 10.50.19.1000, time stamp: 0x51ddb7de this can happen numerous times in a single day help please
Log Name: Application
Source: Application Error
Date: 2/26/2014 2:16:26 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: SuperFlyXPS
Description:
Faulting application name: msn.exe, version: 10.50.19.1000, time stamp: 0x51ddb7de
Faulting module name: MSHTML.dll, version: 11.0.9600.16518, time stamp: 0x52f365cb
Exception code: 0xc0000005
Fault offset: 0x00175363
Faulting process id: 0x1260
Faulting application start time: 0x01cf32a011d4aeb4
Faulting application path: C:\Program Files (x86)\MSN\MSNCoreFiles\msn.exe
Faulting module path: C:\Windows\system32\MSHTML.dll
Report Id: a1704306-9f33-11e3-acde-782bcbac25e5
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-02-26T22:16:26.000000000Z" />
<EventRecordID>80997</EventRecordID>
<Channel>Application</Channel>
<Computer>SuperFlyXPS</Computer>
<Security />
</System>
<EventData>
<Data>msn.exe</Data>
<Data>10.50.19.1000</Data>
<Data>51ddb7de</Data>
<Data>MSHTML.dll</Data>
<Data>11.0.9600.16518</Data>
<Data>52f365cb</Data>
<Data>c0000005</Data>
<Data>00175363</Data>
<Data>1260</Data>
<Data>01cf32a011d4aeb4</Data>
<Data>C:\Program Files (x86)\MSN\MSNCoreFiles\msn.exe</Data>
<Data>C:\Windows\system32\MSHTML.dll</Data>
<Data>a1704306-9f33-11e3-acde-782bcbac25e5</Data>
</EventData>
</Event>
need help with . . .
Hi,
I found a useful link:
MSN has encountered a problem needs to close or MSN is not responding Error
https://answers.msn.com/solution.aspx?solutionid=11abae39-d906-4113-bb4e-ecfaa81798f0
Please take a look of this part
(Common Faulty Module on MSN
Mshtml.dll)
*Instead of MSN, here is a another software called Skype, just instroduce it to you, hope you can enjoy it.*
Yolanda Zhu
TechNet Community Support
Similar Messages
-
Faulting application name: Explorer.EXE, version: 6.3.9600.16441, time stamp: 0x5265dec8
Faulting module name: verifier.dll, version: 6.3.9600.16384, time stamp: 0x5215f8f7
Exception code: 0x80000003
Fault offset: 0x000000000000abd4
Faulting process id: 0x13fc
Faulting application start time: 0x01cf2a60ac1727ab
Faulting application path: C:\WINDOWS\Explorer.EXE
Faulting module path: C:\WINDOWS\system32\verifier.dll
Report Id: d489ba61-9655-11e3-bf26-f82fa8e6dde2
Faulting package full name:
Faulting package-relative application ID:Hi,
Try to run sfc /scannow command to repair the corrupted system file:
Use the System File Checker tool to repair missing or corrupted system files
http://support.microsoft.com/kb/929833
Also we could a easier way system restore to roll back to a time when everything works fine:
How to refresh, reset, or restore your PC
http://windows.microsoft.com/en-IN/windows-8/restore-refresh-reset-pc
Karen Hu
TechNet Community Support -
Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588
Hi, I'm running Windows 8.1 Pro, and having problems where explorer will crash every couple of hours.
here's the event viewer log info:
Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000000000000000
Faulting process id: 0x2dfc
Faulting application start time: 0x01cf7e970bd1516c
Faulting application path: C:\windows\explorer.exe
Faulting module path: unknown
Report Id: a2e8b887-ea95-11e3-8265-0050b66098e2
Faulting package full name:
Faulting package-relative application ID:
I opened up the dump file, and i'm having a hard time making out what the issue might be. Any assistance would be appreciated. Thank you!
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:\SYMBOLS*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\SYMBOLS*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Version 9600 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Built by: 6.3.9600.17031 (winblue_gdr.140221-1952)
Machine Name:
Debug session time: Mon Jun 2 12:15:42.000 2014 (UTC - 7:00)
System Uptime: not available
Process Uptime: 0 days 0:07:27.000
Loading unloaded module list
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(2230.9d4): Access violation - code c0000005 (first/second chance not available)
ntdll!NtWaitForMultipleObjects+0xa:
00007ffc`20b2b13a c3 ret
0:054> !analyze -v
* Exception Analysis *
*** ERROR: Symbol file could not be found. Defaulted to export symbols for sppc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for dlumd11.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ClassicStartMenuDLL.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ClassicExplorer64.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for GROOVEEX.DLL -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msvcr90.dll -
FAULTING_IP:
+50951de2c52b
00000000`00000000 ?? ???
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0000000000000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000008
Parameter[1]: 0000000000000000
Attempt to execute non-executable address 0000000000000000
CONTEXT: 0000000000000000 -- (.cxr 0x0;r)
rax=00000000066e0000 rbx=0000000000000003 rcx=00000000066e0000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000003
rip=00007ffc20b2b13a rsp=000000000980d428 rbp=000000000980dee0
r8=0000000000001000 r9=0000000000000000 r10=0000000000000040
r11=0000000000000286 r12=0000000000000010 r13=000000000980d840
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246
ntdll!NtWaitForMultipleObjects+0xa:
00007ffc`20b2b13a c3 ret
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000008
EXCEPTION_PARAMETER2: 0000000000000000
WRITE_ADDRESS: 0000000000000000
FOLLOWUP_IP:
propsys!PSPropertyBag_WriteInt+3c
00007ffc`19a2945c 488b4c2438 mov rcx,qword ptr [rsp+38h]
FAILED_INSTRUCTION_ADDRESS:
+3c
00000000`00000000 ?? ???
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: explorer.exe
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
FAULTING_THREAD: 00000000000009d4
BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL
PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT_NULL
DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT_NULL
LAST_CONTROL_TRANSFER: from 00007ffc19a2945c to 0000000000000000
STACK_TEXT:
00000000`0980ed68 00007ffc`19a2945c : 00000000`1edc55b0 00000000`1edc55b0 00000000`00000000 00007ffc`1c581762 : 0x0
00000000`0980ed70 00007ffc`08848361 : 00000000`183c3ad0 00000000`1edc55b0 00000000`1edc55b0 00000000`00000000 : propsys!PSPropertyBag_WriteInt+0x3c
00000000`0980edc0 00007ffc`088482c4 : 00000000`00000000 00000000`00000425 00007ffc`16461240 00000000`00000425 : explorerframe!CShellBrowser::_OnFrameStateChanged+0x81
00000000`0980ee10 00007ffc`087ef021 : 00000000`00000001 00000000`00000425 00000000`00000425 00000000`00000033 : explorerframe!CShellBrowser::WndProcBS+0x8aa
00000000`0980f0b0 00007ffc`1ff62434 : 00000000`00000001 00000000`0980f360 00000000`00000000 00000002`00000030 : explorerframe!IEFrameWndProc+0x7d
00000000`0980f100 00007ffc`1ff63fe2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : user32!UserCallWinProcCheckWow+0x140
00000000`0980f1c0 00007ffc`1ff6409d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : user32!DispatchClientMessage+0xa2
00000000`0980f220 00007ffc`20b2c99f : 00000000`18215570 00007ffc`087ffd50 00000000`18215570 00000000`0980f310 : user32!_fnDWORD+0x2d
00000000`0980f280 00007ffc`1ff61fea : 00007ffc`1ff6341d 00000000`00000064 00000000`00000000 00000000`0980f3a0 : ntdll!KiUserCallbackDispatcherContinue
00000000`0980f308 00007ffc`1ff6341d : 00000000`00000064 00000000`00000000 00000000`0980f3a0 00007ffc`087f0dab : user32!NtUserMessageCall+0xa
00000000`0980f310 00007ffc`1ff65191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00abecc0 : user32!SendMessageWorker+0x118
00000000`0980f3a0 00007ffc`087f736c : 00000000`183111e0 00000000`17e90f80 00000000`00020732 00000000`00000000 : user32!SendMessageW+0x105
00000000`0980f400 00007ffc`088479bb : 00000000`0000000c 00000000`183111e0 00000000`00000000 00000000`00000000 : explorerframe!CBrowserHost::ForwardMessageToBrowser+0x1c
00000000`0980f430 00007ffc`088484e1 : 00000000`17e90ef8 00000000`00020732 00000000`00000000 00000000`17e90f80 : explorerframe!CExplorerFrame::OnBrowserCreated+0xcb
00000000`0980f480 00007ffc`08847dcb : 00000000`203caba8 00000000`1edc55b0 00000000`17e90ee0 00000000`16237630 : explorerframe!CBrowserHost::OnBrowserCreated+0xb5
00000000`0980f4c0 00007ffc`08843133 : 00000000`16237630 00000000`16237630 00000000`16237630 00000000`1edc55b0 : explorerframe!CShellBrowser::AfterWindowCreated+0xc7
00000000`0980f500 00007ffc`08842f80 : 00000000`16237630 00000000`0980f730 00000000`00000003 00000000`18311140 : explorerframe!CBrowserHost::Initialize+0xef
00000000`0980f530 00007ffc`087f9bc0 : 00000000`18311140 00000000`00200000 00000000`0980f730 00000000`00000003 : explorerframe!CExplorerFrame::Initialize+0x3c
00000000`0980f560 00007ffc`087fb3b6 : 00000000`18311140 00000000`16237630 00000000`00200000 00007ffc`1e102d9d : explorerframe!BrowserThreadProc+0x50
00000000`0980f5a0 00007ffc`087fb366 : 18bc0f9b`000047ae 00000000`15ff61e0 00000000`00000000 00007ffc`1ff62f2f : explorerframe!BrowserNewThreadProc+0x3a
00000000`0980f5d0 00007ffc`087f8549 : 00000000`00002230 00000000`000009d4 00000000`0000000f 00000000`0000000b : explorerframe!CExplorerTask::InternalResumeRT+0x12
00000000`0980f600 00007ffc`1ebde4fc : 00000000`00000000 00000000`00000000 ffffffff`fffffffe 00000000`00200000 : explorerframe!CRunnableTask::Run+0xc9
00000000`0980f630 00007ffc`1ebde6df : 00000000`10605f50 00000000`10605f50 00000000`00000000 00000000`00000010 : shell32!CShellTaskThread::ThreadProc+0x284
00000000`0980f780 00007ffc`1c588023 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`00000000 : shell32!CShellTaskThread::s_ThreadProc+0x2f
00000000`0980f7b0 00007ffc`200e16ad : 00000000`0040e300 00000000`00000000 00000000`80004005 00000000`00000000 : SHCore!Microsoft::WRL::FtmBase::MarshalInterface+0x17b
00000000`0980f8d0 00007ffc`20b04629 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0980f900 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: propsys!PSPropertyBag_WriteInt+3c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: propsys
IMAGE_NAME: propsys.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 53511853
STACK_COMMAND: ~54s; .ecxr ; kb
FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_NULL_c0000005_propsys.dll!PSPropertyBag_WriteInt
BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_NULL_NULL_IP_propsys!PSPropertyBag_WriteInt+3c
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:software_nx_fault_null_c0000005_propsys.dll!pspropertybag_writeint
FAILURE_ID_HASH: {a6c58e48-fd4e-59a9-7e83-f1b082937554}
Followup: MachineOwnerHi，
Please upload the dump file to a public folder such as OneDrive, then paste the download link here for further analyzing.
Have you installed any third party tool which might be related with Explorer in your system? if you have, please uninstalled it as a test.
Windows Explorer crashes are mostly caused by an incompatible Shell Extension.
You can run tool ShellExView to find the culprit, in the pane sort the entries with manufacturers. Disable all non-Microsoft *.dll files, and check the result. If the issue does not occur, one of the files can be the culprit. We could narrow down it one by
one.
For download link and user guide, please see this link (ShellExView is included in it)
http://technet.microsoft.com/en-us/magazine/2009.06.toolbox.aspx
Yolanda Zhu
TechNet Community Support -
Event 1000 and event 1026 Faulting application name: DistributedCacheService.exe
I have 2 WFE, 1 App, all 3 Distributed Cache in Services On Server of CA are started, but only 2 AppFabricCachingService are started on 3 server Services. When I go to notable server which AppFabricCachingService not started, found
the application event log 1000 and 1026.
Event 1000:
Faulting application name: DistributedCacheService.exe, version: 1.0.4632.0, time stamp: 0x4eafeccf
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c78c
Exception code: 0xe0434352
Fault offset: 0x000000000000a49d
Faulting process id: 0x3ff0
Faulting application start time: 0x01cf5e97bc497df8
Faulting application path: C:\Program Files\AppFabric 1.1 for Windows Server\DistributedCacheService.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 1bb07d62-ca8c-11e3-a299-005056b837e0
Event 1026:
Application: DistributedCacheService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: Microsoft.ApplicationServer.Caching.DataCacheException
Stack:
at Microsoft.ApplicationServer.Caching.VelocityWindowsService.StartServiceCallback(System.Object)
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
at System.Threading.ThreadPoolWorkQueue.Dispatch()
I tried many times and many method, sometimes it is WFE1, sometimes it is WFE2, now it is APP server.
Don't know why.
Thanks in advance.
AwenStop it on all servers then start on App servers, if it is stable then you can add another server and more.
But it is not recommended to run the DC on all servers in farm, but in your case you have 3 servers.here MSFT position.
"On a farm with four or more servers, you must not start the Distributed Cache service on all servers on the farm. If you configure all
servers as cache hosts, you may experience reliability and performance problems in the farm."
Are all of your server in the farm have the same memory, if not then that's your problem.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog -
Faulting module name: AcroRd32.dll, version: 10.1.1.33, time stamp: 0x4e64f98b
Hi,
In a Win7 (32 bit) environment with IE8 and Acrobat Reader X (Version 10.1.1.33) a number of our PC's and laptops get the following error messages on a fairly consistant basis:
Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: AcroRd32.dll, version: 10.1.1.33, time stamp: 0x4e64f98b
Exception code: 0xc0000005
Fault offset: 0x000931d8
Faulting process id: 0x1790
Faulting application start time: 0x01cedee9854abf7a
Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe
Faulting module path: C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.dll
Report Id: 49797133-4aea-11e3-b595-f4b7e2e6eb69
Does anyone have any idea of how to fix this issue or what may be the cause of it? Is is solely related to Acrobat or do you think IE8 may be the cause? We use IE8 due to restrictions on some web based applications we use and cannot upgrade to a newer version of this.
ThanksI don't know what is causing this, but the first thing I would try is to update Adobe Reader to version 10.1.8 (or 11.0.5).
-
Faulting application name: w3wp.exe - and Faulting module path: C:\Windows\system32\KERNELBASE.dll
The environment is aSharepoint2010 and ProjectServer2010we hadlast nighta crach ofapplication poolwithan error on thew3wpandkernelbase.
We canrevivetheappbutthe firstaccess to the sitewe have thew3wpcrash.
we did adumpand here are thedetails.
Information 12/08/2014 15:28:45 Windows Error Reporting 1001 None
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: w3wp.exe
P2: 7.5.7601.17514
P3: 4ce7afa2
P4: KERNELBASE.dll
P5: 6.1.7601.18409
P6: 5315a05a
P7: c06d007e
P8: 000000000000940d
P9:
P10:
Attached files:
These files may be available here:
Analysis symbol:
Rechecking for solution: 0
Report Id: 9561bd5d-2224-11e4-9566-0050569a0110
Report Status: 0
Error 12/08/2014 15:28:46 Application Error 1000 (100)
Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp:
0x4ce7afa2
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x5315a05a
Exception code: 0xc06d007e
Fault offset: 0x000000000000940d
Faulting process id: 0x15d0
Faulting application start time: 0x01cfb6315831ebbb
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 95eaafc7-2224-11e4-9566-0050569a0110
Warning 12/08/2014 15:28:51 WAS 5011 None
A process serving application pool 'SharePoint Central Administration v4'
suffered a fatal communication error with the Windows Process Activation
Service. The process id was '2448'. The data field contains the error number
Error 12/08/2014 15:28:51 WAS 5002 None
Application pool 'SharePoint Central Administration v4' is being automatically
disabled due to a series of failures in the process(es) serving that
application pool.
Le dump du crach donne les informations suivantes
(990.fb4): Unknown exception - code c06d007e (first/second chance not
available)
KERNELBASE!RaiseException+0x39:
000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
0:004> .loadby sos clr
Unable to find module 'clr'
0:004> .loadby sos clr
Unable to find module 'clr'
0:004> !analyze -v
* Exception Analysis *
GetPageUrlData failed, server returned HTTP status 404
URL requested:
http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
FAULTING_IP:
KERNELBASE!RaiseException+39
000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fefda5940d (KERNELBASE!RaiseException+0x0000000000000039)
ExceptionCode: c06d007e
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: 000000000092e820
DEFAULT_BUCKET_ID: APPLICATION_FAULT
PROCESS_NAME: w3wp.exe
ERROR_CODE: (NTSTATUS) 0xc06d007e -
<unable code="" error="" get="" text="" to="">
EXCEPTION_CODE: (NTSTATUS) 0xc06d007e -
<unable code="" error="" get="" text="" to="">
EXCEPTION_PARAMETER1: 000000000092e820
MOD_LIST:
<analysis>
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
MANAGED_STACK: !dumpstack -EE
OS Thread Id: 0xfb4 (4)
Child-SP RetAddr Call Site
FAULTING_THREAD: 0000000000000fb4
PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
BUGCHECK_STR: APPLICATION_FAULT_APPLICATION_FAULT
LAST_CONTROL_TRANSFER: from 000007fee99ed41d to 000007fefda5940d
STACK_TEXT:
00000000`0092e730 000007fe`e99ed41d : 00000000`00000000 00000000`00000000
00000000`00000391 000007fe`e9b40cd0 : KERNELBASE!RaiseException+0x39
00000000`0092e800 000007fe`e996d57f : 000007fe`e9c78e70 00000000`0092e820
00000000`00000000 00000000`00000000 : OWSSVR!DllCanUnloadNow+0x8cfad
00000000`0092e8b0 000007fe`e96c5244 : 00000000`0000000d 00000000`010dd4f0
0000000f`001d000b 00000010`001a000c : OWSSVR!DllCanUnloadNow+0xd10f
00000000`0092e920 000007fe`e96c5313 : 00000000`00000000 00000000`00328ad0
00000000`778d4564 000007fe`e9c78e28 : OWSSVR!TerminateExtension+0x158
00000000`0092eaa0 000007fe`e96c5379 : 00000000`0128fcd0 00000000`000000a4
00000000`00000024 000007fe`faf11827 : OWSSVR!TerminateExtension+0x227
00000000`0092ebf0 000007fe`e96c18d8 : 00000000`00000000 00000000`00000000
00000000`01290840 00000000`00000021 : OWSSVR!TerminateExtension+0x28d
00000000`0092ec20 000007fe`cf5cf94a : 00000000`00000000 00000000`01290840
00000000`01290840 00000000`0128f800 : OWSSVR!RegisterModule+0x1c
00000000`0092ec50 000007fe`cf5d9aa4 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : iiscore!VIRTUAL_MODULE::RegisterModule+0x2a
00000000`0092ec80 000007fe`cf5daeeb : 00000000`00000078 000007fe`cf5ba944
00000000`0128f800 000007fe`cf5e87b8 :
iiscore!W3_SERVER::LoadModulesFromConfig+0x394
00000000`0092eda0 000007fe`cf5dc2ff : 00000000`0128f800 000007fe`cf5e87b8
00000000`00000000 00000000`0121fb10 :
iiscore!W3_SERVER::InitializeGlobalModules+0x3b
00000000`0092ede0 000007fe`cf5e234d : 00000000`0128f800 00000000`00000002
00000000`0121fb10 00000000`0000017c : iiscore!W3_SERVER::Initialize+0xaaf
00000000`0092f040 000007fe`cf5e2405 : 00000000`0128f6b0 00000000`00000000
00000000`00000000 00000000`0000000c :
iiscore!IISCORE_PROTOCOL_MANAGER::InitializeGlobals+0x1fd
00000000`0092f2e0 000007fe`e27a9316 : 00000000`00000000 00000000`00000000
00000000`005fa7e0 00000000`00000000 :
iiscore!IISCORE_PROTOCOL_MANAGER::PreloadApplication+0x45
00000000`0092f320 000007fe`e27a7dd2 : 00000000`005ff4b0 00000000`77997ef5
00000000`0128f6b0 00000000`0021f070 :
w3wphost!WP_IPM::HandlePreloadApplications+0xc2
00000000`0092f370 000007fe`faf141f3 : 00000000`005ff508 00000000`00000000
00000000`00000000 00000000`00000000 : w3wphost!WP_IPM::AcceptMessage+0x16e
00000000`0092f3b0 00000000`77bbc251 : 00000000`00000000 00000000`003b3bf0
00000000`00000000 00000000`0000000c : iisutil!IPM_MESSAGE_PIPE::MessagePipeCompletion+0x44f
00000000`0092f430 00000000`77bc658c : 00000000`003b3b40 00000000`003693f0
00000000`0092f5e8 00000000`00000000 : ntdll!RtlpTpWaitCallback+0x92
00000000`0092f480 00000000`77bd0c56 : 00000000`0035d110 00000000`77cb45e8 00000000`00000000
00000000`77cb4610 : ntdll!TppWaitpExecuteCallback+0x10c
00000000`0092f4e0 00000000`779a59ed : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x5ff
00000000`0092f7e0 00000000`77bdc541 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0092f810 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
STACK_COMMAND: ~4s; .ecxr ; kb
FOLLOWUP_IP:
OWSSVR!DllCanUnloadNow+8cfad
000007fe`e99ed41d 488b442458 mov rax,qword ptr [rsp+58h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: owssvr!DllCanUnloadNow+8cfad
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: OWSSVR
IMAGE_NAME: OWSSVR.DLL
DEBUG_FLR_IMAGE_TIMESTAMP: 51c91cf5
FAILURE_BUCKET_ID: APPLICATION_FAULT_c06d007e_OWSSVR.DLL!DllCanUnloadNow
BUCKET_ID: X64_APPLICATION_FAULT_APPLICATION_FAULT_owssvr!DllCanUnloadNow+8cfad
WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
Followup: MachineOwner </analysis></unable></unable>Hello Roland_Zeki,
Can you check System in the Windows Log of Event Viewer? Maybe you have some logon failure for one of the services, like in this blog:
http://www.shareesblog.com/?p=363
- Dennis | Netherlands | Blog |
Twitter
Yes I have verify this point I suspected to be the origine of the problem. But no, the accounts have fixed password and are not locked. I test this point with a valide login on the server, and I reenter the login password for each app pool. -
Faulting module name: ntdll.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c
We are having somewhat regular crashes (every couple of weeks) of RDS. Our analysis shows heap corruption. RAM tests okay.
Log Name: Application
Source: Application Error
Date: 4/17/2015 2:37:50 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: APPSERVER.ourdomain.local
Description:
Faulting application name: svchost.exe_TermService, version: 6.2.9200.16420, time stamp: 0x505a9a4e
Faulting module name: ntdll.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c
Exception code: 0xc0000005
Fault offset: 0x0000000000006ff5
Faulting process id: 0x250
Faulting application start time: 0x01d07834faefc615
Faulting application path: C:\Windows\System32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32
tdll.dll
Report Id: fea9607e-e549-11e4-940f-00155d0c0502
Log Name: Application
Source: Windows Error Reporting
Date: 4/17/2015 2:38:07 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: APPSERVER.ourdomain.local
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: svchost.exe_TermService
P2: 6.2.9200.16420
P3: 505a9a4e
P4: ntdll.dll
P5: 6.2.9200.17046
P6: 53b4864c
P7: c0000005
P8: 0000000000006ff5
P9:
P10:
Analysis symbol:
Rechecking for solution: 0
Report Id: fea9607e-e549-11e4-940f-00155d0c0502
Report Status: 0
Hashed bucket:
- These events indicated that program(svchost.exe_TermService) stopped unexpectedly. Which causes the issue with the remote session.
- For further investigation checked the AppCrash dump file on the server and found below error:
PROCESS_NAME: svchost.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fb7c3f6ff5 (ntdll!RtlpHeapFindListLookupEntry+0x0000000000000129)
ExceptionCode: c0000005 (Access violation)
PRIMARY_PROBLEM_CLASS: HEAP_CORRUPTION
BUGCHECK_STR: APPLICATION_FAULT_HEAP_CORRUPTION_HEAP_CORRUPTION_INVALID_POINTER_READ_CONTEXT_MISMATCH.
Any ideas?Hi Rick,
Firstly, please try to fully patch the terminal server, and disable third party software if there’s any installed.
If the issue persists, please check whether KB2984976 is installed, if yes, please remove it.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] -
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
Hi,
Good day!
I'm having this issue when I just installed an application. I have been searching this kernelbase.dll thing but none of them have fix or any workaround. Hopefully with the great technical guys here can help me with this issue.
The server is windows 2008 R2
From the event viewer I got this
Faulting application name: Tlc.LogManager.Svc.exe, version: 7.0.1.5108, time stamp: 0x51d1ee27
Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
Exception code: 0xe0434352
Fault offset: 0x000000000000cacd
Faulting process id: 0x1130
Faulting application start time: 0x01cf6dbd862da5b1
Faulting application path: D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
Application: Tlc.LogManager.Svc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ArgumentNullException
Stack:
at Tlc.CapCollector.Common.CapPersistentStateManager..ctor(Tlc.Interfaces.BusinessObjects.IAssetBusinessObject, Tlc.PersistentState.IPersistentStateStore, Tlc.Interfaces.ApplicationLog.IApplicationLog, Int32, Tlc.CapCollector.AgentDiscovery.CapAgentAutoDiscovery)
at Tlc.LogManager.Lib.ascMan.OnMessageBusStart(Tlc.Interfaces.MessageBus.IMessageBus, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog)
at Tlc.MessageBus.ActiveMQMessageBus.Start()
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0
Problem signature:
P1: tlc.logmanager.svc.exe
P2: 7.0.1.5108
P3: 51d1ee27
P4: Tlc.CapCollector
P5: 7.0.1.5108
P6: 51d1edf4
P7: f2
P8: 34
P9: System.ArgumentNullException
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_tlc.logmanager.s_4d5cd055f698b9b7d9e989629dd2eb52d0be2b_1a6a145b
Analysis symbol:
Rechecking for solution: 0
Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
Version=1
EventType=CLR20r3
EventTime=130443543988233973
ReportType=2
Consent=1
ReportIdentifier=8c35a7c6-d9a9-11e3-9578-5ef3fcdc0b9f
IntegratorReportIdentifier=8c35a7c5-d9a9-11e3-9578-5ef3fcdc0b9f
Response.type=4
Sig[0].Name=Problem Signature 01
Sig[0].Value=tlc.logmanager.svc.exe
Sig[1].Name=Problem Signature 02
Sig[1].Value=7.0.1.5108
Sig[2].Name=Problem Signature 03
Sig[2].Value=51d1ee27
Sig[3].Name=Problem Signature 04
Sig[3].Value=Tlc.CapCollector
Sig[4].Name=Problem Signature 05
Sig[4].Value=7.0.1.5108
Sig[5].Name=Problem Signature 06
Sig[5].Value=51d1edf4
Sig[6].Name=Problem Signature 07
Sig[6].Value=f2
Sig[7].Name=Problem Signature 08
Sig[7].Value=34
Sig[8].Name=Problem Signature 09
Sig[8].Value=System.ArgumentNullException
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7601.2.1.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=18441
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=3ada
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=3adac3ca3b54f3f7659e16fb4fdadcbe
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=b033
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=b0336032f99007ec98baa22debc5fb25
UI[2]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
UI[3]=Tlc.LogManager.Svc has stopped working
UI[4]=Windows can check online for a solution to the problem.
UI[5]=Check online for a solution (recommended)
UI[6]=Check for a solution later (recommended)
UI[7]=Close
UI[8]=Tlc.LogManager.Svc stopped working and was closed
UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
UI[10]=&Close
LoadedModule[0]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll
LoadedModule[6]=C:\Windows\system32\msvcrt.dll
LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[8]=C:\Windows\system32\RPCRT4.dll
LoadedModule[9]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
LoadedModule[10]=C:\Windows\system32\SHLWAPI.dll
LoadedModule[11]=C:\Windows\system32\GDI32.dll
LoadedModule[12]=C:\Windows\system32\USER32.dll
LoadedModule[13]=C:\Windows\system32\LPK.dll
LoadedModule[14]=C:\Windows\system32\USP10.dll
LoadedModule[15]=C:\Windows\system32\IMM32.DLL
LoadedModule[16]=C:\Windows\system32\MSCTF.dll
LoadedModule[17]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
LoadedModule[18]=C:\Windows\system32\MSVCR100_CLR0400.dll
LoadedModule[19]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\bc19222db4406c472d9aa1f8b6e0f470\mscorlib.ni.dll
LoadedModule[20]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
LoadedModule[21]=C:\Windows\system32\ole32.dll
LoadedModule[22]=C:\Windows\system32\CRYPTBASE.dll
LoadedModule[23]=C:\Windows\system32\CRYPTSP.dll
LoadedModule[24]=C:\Windows\system32\rsaenh.dll
LoadedModule[25]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\0f8f78b729ce16dd078f5d5f734a1110\System.ni.dll
LoadedModule[26]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\7b167f31f23d4aed19dfa65ad3d29480\System.ServiceProcess.ni.dll
LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
LoadedModule[29]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Zip.v5.1.dll
LoadedModule[30]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.GZip.v5.1.dll
LoadedModule[31]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Tar.v5.1.dll
LoadedModule[32]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.Formats.v5.1.dll
LoadedModule[33]=C:\Windows\system32\VERSION.dll
LoadedModule[34]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Common.dll
LoadedModule[35]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.FileSystem.v5.1.dll
LoadedModule[36]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.v5.1.dll
LoadedModule[37]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Lib.dll
LoadedModule[38]=C:\Windows\assembly\GAC_MSIL\VistaDB.4\4.1.0.0__dfc935afe2125461\VistaDB.4.dll
LoadedModule[39]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Interfaces.dll
LoadedModule[40]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Enums.dll
LoadedModule[41]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\7a93c267da35a5f16b6fa5a10482eb4e\System.Core.ni.dll
LoadedModule[42]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\5a47dfd0b200a502a4d5d27ee99bcc3c\System.Data.ni.dll
LoadedModule[43]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
LoadedModule[44]=C:\Windows\system32\WS2_32.dll
LoadedModule[45]=C:\Windows\system32\NSI.dll
LoadedModule[46]=C:\Windows\system32\CRYPT32.dll
LoadedModule[47]=C:\Windows\system32\MSASN1.dll
LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\5d9f385419332f14eaf937556199856f\System.Xml.ni.dll
LoadedModule[49]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Client.dll
LoadedModule[50]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\5ac492f703d6d741140f7cd45ef3c746\System.Data.Services.Client.ni.dll
LoadedModule[51]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Local.dll
LoadedModule[52]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\c41b30de7215a62c8ca5bfe6e04ea763\System.Data.Entity.ni.dll
LoadedModule[53]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.DataAccess.Config.dll
LoadedModule[54]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Log.dll
LoadedModule[55]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Utils.dll
LoadedModule[56]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogMessageClassifier.dll
LoadedModule[57]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Wintellect.PowerCollections.dll
LoadedModule[58]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorks.dll
LoadedModule[59]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\11581b5eba4b3ff58441c638ab66c742\System.Configuration.ni.dll
LoadedModule[60]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\7e5af1fdbcffeab8daffc7633f9c337a\System.Web.ni.dll
LoadedModule[61]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1266d26c7b7843d308e2705cb8239d55\System.Drawing.ni.dll
LoadedModule[62]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\f0acb5c0e7dc2c42c6c61f3aa1278338\System.Windows.Forms.ni.dll
LoadedModule[63]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CommonAssemblyInfo.dll
LoadedModule[64]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\gdiplus.dll
LoadedModule[65]=C:\Windows\system32\WindowsCodecs.dll
LoadedModule[66]=C:\Windows\system32\shell32.dll
LoadedModule[67]=C:\Windows\system32\profapi.dll
LoadedModule[68]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
LoadedModule[69]=C:\Windows\system32\USERENV.dll
LoadedModule[70]=C:\Windows\system32\PSAPI.DLL
LoadedModule[71]=C:\Windows\system32\urlmon.dll
LoadedModule[72]=C:\Windows\system32\WININET.dll
LoadedModule[73]=C:\Windows\system32\iertutil.dll
LoadedModule[74]=C:\Windows\system32\SspiCli.dll
LoadedModule[75]=C:\Windows\system32\shfolder.dll
LoadedModule[76]=C:\Windows\system32\bcrypt.dll
LoadedModule[77]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c080a9ed31f78466f2400bba623af2f8\System.Configuration.Install.ni.dll
LoadedModule[78]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\6cd002594b56953e9c210581e7f3f3cd\System.Web.Services.ni.dll
LoadedModule[79]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.PersistentState.dll
LoadedModule[80]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Mitre.CommonEventExpression.dll
LoadedModule[81]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.ClientServer.Communications.dll
LoadedModule[82]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\215d813343ba0950ad6e148e2098018b\System.Numerics.ni.dll
LoadedModule[83]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\da51604aa808b94c181181b37c727078\System.Management.ni.dll
LoadedModule[84]=C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\af08f116e2c31d2c65bd492804fb2fef\Microsoft.VisualBasic.ni.dll
LoadedModule[85]=C:\Windows\system32\RpcRtRemote.dll
LoadedModule[86]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\wminet_utils.dll
LoadedModule[87]=C:\Windows\system32\CLBCatQ.DLL
LoadedModule[88]=C:\Windows\system32\wbem\wmiutils.dll
LoadedModule[89]=C:\Windows\system32\wbemcomn.dll
LoadedModule[90]=C:\Windows\system32\wbem\wbemprox.dll
LoadedModule[91]=C:\Windows\system32\wbem\wbemsvc.dll
LoadedModule[92]=C:\Windows\system32\wbem\fastprox.dll
LoadedModule[93]=C:\Windows\system32\NTDSAPI.dll
LoadedModule[94]=C:\Windows\system32\mswsock.dll
LoadedModule[95]=C:\Windows\System32\wshtcpip.dll
LoadedModule[96]=C:\Windows\System32\wship6.dll
LoadedModule[97]=C:\Windows\system32\DNSAPI.dll
LoadedModule[98]=C:\Windows\system32\IPHLPAPI.DLL
LoadedModule[99]=C:\Windows\system32\WINNSI.DLL
LoadedModule[100]=C:\Windows\system32\rasadhlp.dll
LoadedModule[101]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[102]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.MySql.dll
LoadedModule[103]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\122cea70c5d0d591f9af1f4316848fd1\System.Transactions.ni.dll
LoadedModule[104]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
LoadedModule[105]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.dll
LoadedModule[106]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSL.dll
LoadedModule[107]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\850abdea1c65b88ba24a77f0191caea8\System.Data.OracleClient.ni.dll
LoadedModule[108]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
LoadedModule[109]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\9d14b7bc969452800c0456286309d41d\System.Xml.Linq.ni.dll
LoadedModule[110]=C:\Windows\assembly\GAC_MSIL\VistaDB.Entities.4\4.1.0.0__dfc935afe2125461\VistaDB.Entities.4.dll
LoadedModule[111]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.ni.dll
LoadedModule[112]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.Wrapper.dll
LoadedModule[113]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
LoadedModule[114]=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
LoadedModule[115]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\08fba6b56d838ad48b4451c82e5728d4\System.Runtime.Serialization.ni.dll
LoadedModule[116]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.RuleEngine.dll
LoadedModule[117]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.EventForwarder.dll
LoadedModule[118]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Lucene.Net.dll
LoadedModule[119]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\d072039db89cac96d9e0b1ae9b3a94f4\System.ServiceModel.ni.dll
LoadedModule[120]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\43f892698b9de4d752c13cc2d91ff16d\System.ServiceModel.Web.ni.dll
LoadedModule[121]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\ac74a156499a8303d5788ab299881d5d\SMDiagnostics.ni.dll
LoadedModule[122]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\2f02efd9ddb7417ffd5c06cfe6e865ca\System.Runtime.DurableInstancing.ni.dll
LoadedModule[123]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\33ac21194152cf9a89b82d9cd38b398d\System.IdentityModel.ni.dll
LoadedModule[124]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\535e182d16212c61bc8b22e0309d3362\System.Xaml.ni.dll
LoadedModule[125]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\84226b67f4623bd3b0dde9aa00c5c88d\System.Data.Services.ni.dll
LoadedModule[126]=C:\Windows\system32\pcwum.DLL
LoadedModule[127]=C:\Windows\system32\httpapi.dll
LoadedModule[128]=C:\Windows\system32\cryptnet.dll
LoadedModule[129]=C:\Windows\system32\WLDAP32.dll
LoadedModule[130]=C:\Windows\system32\SensApi.dll
LoadedModule[131]=C:\Windows\system32\dsrole.dll
LoadedModule[132]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.MessageBus.dll
LoadedModule[133]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.dll
LoadedModule[134]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Google.ProtocolBuffers.dll
LoadedModule[135]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSH.dll
LoadedModule[136]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Reports.dll
LoadedModule[137]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\SecureBlackbox.dll
LoadedModule[138]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.GenericDbLogCollector.dll
LoadedModule[139]=C:\Windows\system32\ntmarta.dll
LoadedModule[140]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\perfcounter.dll
LoadedModule[141]=C:\Windows\system32\pdh.dll
LoadedModule[142]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.System.dll
LoadedModule[143]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
LoadedModule[144]=C:\Windows\system32\aspnet_counters.dll
LoadedModule[145]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_perf.dll
LoadedModule[146]=C:\Windows\system32\Secur32.dll
LoadedModule[147]=C:\Windows\system32\CFGMGR32.dll
LoadedModule[148]=C:\Windows\system32\security.dll
LoadedModule[149]=C:\Windows\system32\credssp.dll
LoadedModule[150]=C:\Windows\system32\schannel.DLL
LoadedModule[151]=C:\Windows\system32\ncrypt.dll
LoadedModule[152]=C:\Windows\system32\bcryptprimitives.dll
LoadedModule[153]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSNMP.dll
LoadedModule[154]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.ActiveMQ.dll
LoadedModule[155]=C:\Windows\system32\NLAapi.dll
LoadedModule[156]=C:\Windows\system32\napinsp.dll
LoadedModule[157]=C:\Windows\System32\winrnr.dll
LoadedModule[158]=C:\Windows\system32\rasman.dll
LoadedModule[159]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapCollector.dll
LoadedModule[160]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapIDL.dll
LoadedModule[161]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dto.dll
FriendlyEventName=Stopped working
ConsentKey=CLR20r3
AppName=Tlc.LogManager.Svc
AppPath=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exeHi Ross Rene,
Sorry for the delay.
Please make sure the App is compatible with the .Net framework installed, please check the .net version.
Best Regards,
Anna -
ever since i updated software on my macbook pro, yahoo mail new version is constantly crashing with the spinning ball of death. any ideas?
What is the exact spec of the clips that cause the problem?
(Open one of the files with QuickTime and press Cmd+i to open the Inspector - then report back with the what it says).
Andy -
I want to replace address book and keychain and safari with the info from my old system.
In the old days of Leopard and Snow Leopard, replacing your address book with one from another computer or another user was quite easy. Likewise with Safari and Keychain, but now with Lion I can't see how to do it.
Do you still have the old system running?
Then you can export your old Address Book as archiv
Address Book -> Export -> Address Book Archive
Transfer this archive file to the new computer, delete all adresses in the address Book and import your archive.
Your Safari Bookmarks can also be exported
Safari -> File -> Export Bookmaks
and reimported on the new System. -
As noted in my question, FF4.0 continually hangs (Not responding) even on your website.
http://support.mozilla.com/en-US/kb/Installing+a+previous+version+of+Firefox
http://www.mozilla.com/en-US/firefox/all-older.html -
Application error happening at least twice a day. Faulting applicaiton name: wmiprvse.exe
We're experiencing an issue with one of our Windows Server 2008R2 Standard Edition SP1 servers where an Application error occurs at least twice, and sometimes up to 5 or 6 times per day. The following error is what we see. Any help would be greatly
appreciated, and I'll be checking back frequently to check for updates and provide more info whenever needed. Thanks!
General:
Faulting application name: wmiprvse.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d42
Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c8f9
Exception code: 0xc0000374
Fault offset: 0x00000000000c40f2
Faulting process id: 0x1bbc
Faulting application start time: 0x01cd5d65dbeb2e7c
Faulting application path: C:\Windows\system32\wbem\wmiprvse.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Details:
System
Provider
[ Name]
Application Error
EventID
1000
[ Qualifiers]
0
Level
2
Task
100
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2012-07-09T08:34:39.000000000Z
EventRecordID
6812
Channel
Application
Computer
{FQDN}
Security
EventData
wmiprvse.exe
6.1.7601.17514
4ce79d42
ntdll.dll
6.1.7601.17514
4ce7c8f9
c0000374
00000000000c40f2
1bbc
01cd5d65dbeb2e7c
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\SYSTEM32\ntdll.dll
ebe1621c-c9a0-11e1-a1d4-5cf3fce8cef6
ETA: I also ran the wmidiag.exe tool from Microsoft. I saw it as a suggestion on another forum and ran it. I don't know if it has any bearing here, but this is the log in case it's helpful
show
06604 14:51:25 (0) ** WMIDiag v2.1 started on Tuesday, July 10, 2012 at 14:40.
06605 14:51:25 (0) **
06606 14:51:25 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
06607 14:51:25 (0) **
06608 14:51:25 (0) ** This script is not supported under any Microsoft standard support program or service.
06609 14:51:25 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
06610 14:51:25 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
06611 14:51:25 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
06612 14:51:25 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
06613 14:51:25 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
06614 14:51:25 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
06615 14:51:25 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
06616 14:51:25 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
06617 14:51:25 (0) ** of the possibility of such damages.
06618 14:51:25 (0) **
06619 14:51:25 (0) **
06620 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06621 14:51:25 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
06622 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06623 14:51:25 (0) **
06624 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06625 14:51:25 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601) - User {Username} on computer {ComputerName}.
06626 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06627 14:51:25 (0) ** Environment: ........................................................................................................ OK.
06628 14:51:25 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #1).
06629 14:51:25 (0) ** Drive type: ......................................................................................................... SCSI (IBM ServeRAID M5015 SCSI Disk Device).
06630 14:51:25 (0) ** There are no missing WMI system files: .............................................................................. OK.
06631 14:51:25 (0) ** There are no missing WMI repository files: .......................................................................... OK.
06632 14:51:25 (0) ** WMI repository state: ............................................................................................... CONSISTENT.
06633 14:51:25 (0) ** AFTER running WMIDiag:
06634 14:51:25 (0) ** The WMI repository has a size of: ................................................................................... 90 MB.
06635 14:51:25 (0) ** - Disk free space on 'C:': .......................................................................................... 75295 MB.
06636 14:51:25 (0) ** - INDEX.BTR, 15818752 bytes, 7/10/2012 2:38:58 PM
06637 14:51:25 (0) ** - MAPPING1.MAP, 242388 bytes, 7/10/2012 2:33:33 PM
06638 14:51:25 (0) ** - MAPPING2.MAP, 242388 bytes, 7/10/2012 2:38:58 PM
06639 14:51:25 (0) ** - OBJECTS.DATA, 77570048 bytes, 7/10/2012 2:38:58 PM
06640 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06641 14:51:25 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
06642 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06643 14:51:25 (0) ** DCOM Status: ........................................................................................................ OK.
06644 14:51:25 (0) ** WMI registry setup: ................................................................................................. OK.
06645 14:51:25 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
06646 14:51:25 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
06647 14:51:25 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
06648 14:51:25 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
06649 14:51:25 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
06650 14:51:25 (0) ** this can prevent the service/application to work as expected.
06651 14:51:25 (0) **
06652 14:51:25 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
06653 14:51:25 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
06654 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06655 14:51:25 (0) ** WMI service DCOM setup: ............................................................................................. OK.
06656 14:51:25 (0) ** WMI components DCOM registrations: .................................................................................. OK.
06657 14:51:25 (0) ** WMI ProgID registrations: ........................................................................................... OK.
06658 14:51:25 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
06659 14:51:25 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
06660 14:51:25 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
06661 14:51:25 (2) !! WARNING: Some WMI providers EXE/DLL file(s) are missing: ............................................................ 18 WARNING(S)!
06662 14:51:25 (0) ** - ROOT/QLOGIC_CMPI, QLogic_NIC_Provider, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{28A5F598-F699-4A6B-B9F9-8C7EB9B7359F}:QLogic_NIC_Provider
06663 14:51:25 (0) ** - ROOT/QLOGIC_CMPI, QLogic_FCHBA_Provider, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{0AE588DD-D2E9-41EB-BCD1-8BF474187EC5}:QLogic_FCHBA_Provider
06664 14:51:25 (0) ** - ROOT/IBMSD, ADPT_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{B007445E-6AF0-4CBD-9009-809F071FCE69}:ADPT_Module
06665 14:51:25 (0) ** - ROOT/IBMSD, IBM_PA_Providers, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{2244E0FA-D37A-4F6E-82FB-92F1DB78716D}:IBM_PA_Providers
06666 14:51:25 (0) ** - ROOT/IBMSD, EndpointRegistrationProviderModule, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{BF833E81-33AA-40ED-B74A-329F006DB4F8}:EndpointRegistrationProviderModule
06667 14:51:25 (0) ** - ROOT/CIMV2, SBLIM_Data_Gatherer, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{0D03AF80-A160-44EF-9E8B-318201F41693}:SBLIM_Data_Gatherer
06668 14:51:25 (0) ** - ROOT/ADPT, ADPT_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{B007445E-6AF0-4CBD-9009-809F071FCE69}:ADPT_Module
06669 14:51:25 (0) ** - ROOT/PG_INTEROP, SBLIM_Data_Gatherer, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{0D03AF80-A160-44EF-9E8B-318201F41693}:SBLIM_Data_Gatherer
06670 14:51:25 (0) ** - ROOT/PG_INTEROP, LSIESG_SMIS13_HHR_ProviderModule, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{E21064DD-757A-4F2D-B798-81CDFF03B48C}:LSIESG_SMIS13_HHR_ProviderModule
06671 14:51:25 (0) ** - ROOT/PG_INTEROP, emulex_fc_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{27734403-1E6C-4BC7-B97D-1FE9657B35EC}:emulex_fc_provider_Module
06672 14:51:25 (0) ** - ROOT/PG_INTEROP, emulex_ucna_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{68D3C192-F517-41CC-B852-BA74A8D05A85}:emulex_ucna_provider_Module
06673 14:51:25 (0) ** - ROOT/IBMSE, emulex_fc_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{27734403-1E6C-4BC7-B97D-1FE9657B35EC}:emulex_fc_provider_Module
06674 14:51:25 (0) ** - ROOT/IBMSE, IBM_PA_Providers, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{2244E0FA-D37A-4F6E-82FB-92F1DB78716D}:IBM_PA_Providers
06675 14:51:25 (0) ** - ROOT/IBMSE, emulex_ucna_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{68D3C192-F517-41CC-B852-BA74A8D05A85}:emulex_ucna_provider_Module
06676 14:51:25 (0) ** - ROOT/LSI_MR_1_3_0, LSIESG_SMIS13_HHR_ProviderModule, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{E21064DD-757A-4F2D-B798-81CDFF03B48C}:LSIESG_SMIS13_HHR_ProviderModule
06677 14:51:25 (0) ** - ROOT/EMULEX, emulex_fc_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{27734403-1E6C-4BC7-B97D-1FE9657B35EC}:emulex_fc_provider_Module
06678 14:51:25 (0) ** - ROOT/EMULEX, emulex_ucna_provider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{68D3C192-F517-41CC-B852-BA74A8D05A85}:emulex_ucna_provider_Module
06679 14:51:25 (0) ** - ROOT/BROCADE, brcdprovider_Module, C:\Program Files (x86)\Common Files\IBM\icc\cimom\bin\wmicpa.exe /G{48898EFD-0F9A-4657-B03D-FF400A7D2CDE}:brcdprovider_Module
06680 14:51:25 (0) ** => This will make any operations related to the WMI class supported by the provider(s) to fail.
06681 14:51:25 (0) ** This can be due to:
06682 14:51:25 (0) ** - the de-installation of the software.
06683 14:51:25 (0) ** - the deletion of some files.
06684 14:51:25 (0) ** => If the software has been de-installed intentionally, then this information must be
06685 14:51:25 (0) ** removed from the WMI repository. You can use the 'WMIC.EXE' command to remove
06686 14:51:25 (0) ** the provider registration data.
06687 14:51:25 (0) ** i.e. 'WMIC.EXE /NAMESPACE:\\ROOT\BROCADE path __Win32Provider Where Name='brcdprovider_Module' DELETE'
06688 14:51:25 (0) ** => If not, you must restore a copy of the missing provider EXE/DLL file(s) as indicated by the path.
06689 14:51:25 (0) ** You can retrieve the missing file from:
06690 14:51:25 (0) ** - A backup.
06691 14:51:25 (0) ** - The Windows CD.
06692 14:51:25 (0) ** - Another Windows installation using the same version and service pack level of the examined system.
06693 14:51:25 (0) ** - The original CD or software package installing this WMI provider.
06694 14:51:25 (0) **
06695 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06696 14:51:25 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
06697 14:51:25 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
06698 14:51:25 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
06699 14:51:25 (0) ** privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
06700 14:51:25 (0) ** to ensure that administrative privileges are granted. If a Local User account is used for remote
06701 14:51:25 (0) ** accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
06702 14:51:25 (0) **
06703 14:51:25 (0) ** Overall DCOM security status: ....................................................................................... OK.
06704 14:51:25 (0) ** Overall WMI security status: ........................................................................................ OK.
06705 14:51:25 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
06706 14:51:25 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
06707 14:51:25 (0) ** - ROOT/SUBSCRIPTION, CommandLineEventConsumer.Name="BVTConsumer".
06708 14:51:25 (0) ** 'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99'
06709 14:51:25 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".
06710 14:51:25 (0) ** 'select * from MSFT_SCMEventLogEvent'
06711 14:51:25 (0) **
06712 14:51:25 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
06713 14:51:25 (0) ** INFO: WMI namespace(s) requiring PACKET PRIVACY: .................................................................... 3 NAMESPACE(S)!
06714 14:51:25 (0) ** - ROOT/CIMV2/SECURITY/MICROSOFTTPM.
06715 14:51:25 (0) ** - ROOT/CIMV2/TERMINALSERVICES.
06716 14:51:25 (0) ** - ROOT/SERVICEMODEL.
06717 14:51:25 (0) ** => When remotely connecting, the namespace(s) listed require(s) the WMI client to
06718 14:51:25 (0) ** use an encrypted connection by specifying the PACKET PRIVACY authentication level.
06719 14:51:25 (0) ** (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
06720 14:51:25 (0) ** i.e. 'WMIC.EXE /NODE:"{ComputerName}" /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\SERVICEMODEL Class __SystemSecurity'
06721 14:51:25 (0) **
06722 14:51:25 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
06723 14:51:25 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
06724 14:51:25 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 30 ERROR(S)!
06725 14:51:25 (0) ** - Root/CIMV2, MSFT_NetInvalidDriverDependency, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06726 14:51:25 (0) ** MOF Registration: ''
06727 14:51:25 (0) ** - Root/CIMV2, Win32_OsBaselineProvider, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06728 14:51:25 (0) ** MOF Registration: ''
06729 14:51:25 (0) ** - Root/CIMV2, Win32_OsBaseline, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06730 14:51:25 (0) ** MOF Registration: ''
06731 14:51:25 (0) ** - Root/CIMV2, Win32_DriverVXD, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06732 14:51:25 (0) ** MOF Registration: ''
06733 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_GenericIKEandAuthIP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06734 14:51:25 (0) ** MOF Registration: ''
06735 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_GenericIKEandAuthIP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06736 14:51:25 (0) ** MOF Registration: ''
06737 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06738 14:51:25 (0) ** MOF Registration: ''
06739 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06740 14:51:25 (0) ** MOF Registration: ''
06741 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06742 14:51:25 (0) ** MOF Registration: ''
06743 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06744 14:51:25 (0) ** MOF Registration: ''
06745 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06746 14:51:25 (0) ** MOF Registration: ''
06747 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06748 14:51:25 (0) ** MOF Registration: ''
06749 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06750 14:51:25 (0) ** MOF Registration: ''
06751 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06752 14:51:25 (0) ** MOF Registration: ''
06753 14:51:25 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServices, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06754 14:51:25 (0) ** MOF Registration: ''
06755 14:51:25 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServices, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06756 14:51:25 (0) ** MOF Registration: ''
06757 14:51:25 (0) ** - Root/WMI, ReserveDisjoinThread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06758 14:51:25 (0) ** MOF Registration: ''
06759 14:51:25 (0) ** - Root/WMI, ReserveLateCount, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06760 14:51:25 (0) ** MOF Registration: ''
06761 14:51:25 (0) ** - Root/WMI, ReserveJoinThread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06762 14:51:25 (0) ** MOF Registration: ''
06763 14:51:25 (0) ** - Root/WMI, ReserveDelete, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06764 14:51:25 (0) ** MOF Registration: ''
06765 14:51:25 (0) ** - Root/WMI, ReserveBandwidth, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06766 14:51:25 (0) ** MOF Registration: ''
06767 14:51:25 (0) ** - Root/WMI, ReserveCreate, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06768 14:51:25 (0) ** MOF Registration: ''
06769 14:51:25 (0) ** - Root/WMI, SystemConfig_PhyDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06770 14:51:25 (0) ** MOF Registration: ''
06771 14:51:25 (0) ** - Root/WMI, SystemConfig_Video, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06772 14:51:25 (0) ** MOF Registration: ''
06773 14:51:25 (0) ** - Root/WMI, SystemConfig_IDEChannel, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06774 14:51:25 (0) ** MOF Registration: ''
06775 14:51:25 (0) ** - Root/WMI, SystemConfig_NIC, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06776 14:51:25 (0) ** MOF Registration: ''
06777 14:51:25 (0) ** - Root/WMI, SystemConfig_Network, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06778 14:51:25 (0) ** MOF Registration: ''
06779 14:51:25 (0) ** - Root/WMI, SystemConfig_CPU, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06780 14:51:25 (0) ** MOF Registration: ''
06781 14:51:25 (0) ** - Root/WMI, SystemConfig_LogDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06782 14:51:25 (0) ** MOF Registration: ''
06783 14:51:25 (0) ** - Root/WMI, SystemConfig_Power, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
06784 14:51:25 (0) ** MOF Registration: ''
06785 14:51:25 (0) ** => When a WMI performance class is missing (i.e. 'Win32_PerfRawData_TermService_TerminalServices'), it is generally due to
06786 14:51:25 (0) ** a lack of buffer refresh of the WMI class provider exposing the WMI performance counters.
06787 14:51:25 (0) ** You can refresh the WMI class provider buffer with the following command:
06788 14:51:25 (0) **
06789 14:51:25 (0) ** i.e. 'WINMGMT.EXE /SYNCPERF'
06790 14:51:25 (0) **
06791 14:51:25 (0) ** WMI MOF representations: ............................................................................................ OK.
06792 14:51:25 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
06793 14:51:25 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
06794 14:51:25 (2) !! WARNING: WMI EXECQUERY operation errors reported: ................................................................... 2 WARNING(S)!
06795 14:51:25 (0) ** - Root/CIMV2, 'Select * From Win32_PointingDevice WHERE Status = "OK"' did not return any instance while AT LEAST 1 instance is expected.
06796 14:51:25 (0) ** - Root/CIMV2, 'Select * From Win32_Keyboard' did not return any instance while AT LEAST 1 instance is expected.
06797 14:51:25 (0) **
06798 14:51:25 (2) !! WARNING: WMI GET VALUE operation errors reported: ................................................................... 5 WARNING(S)!
06799 14:51:25 (0) ** - Root, Instance: __EventConsumerProviderCacheControl=@, Property: ClearAfter='00000000000030.000000:000' (Expected default='00000000000500.000000:000').
06800 14:51:25 (0) ** - Root, Instance: __EventProviderCacheControl=@, Property: ClearAfter='00000000000030.000000:000' (Expected default='00000000000500.000000:000').
06801 14:51:25 (0) ** - Root, Instance: __EventSinkCacheControl=@, Property: ClearAfter='00000000000015.000000:000' (Expected default='00000000000230.000000:000').
06802 14:51:25 (0) ** - Root, Instance: __ObjectProviderCacheControl=@, Property: ClearAfter='00000000000030.000000:000' (Expected default='00000000000500.000000:000').
06803 14:51:25 (0) ** - Root, Instance: __PropertyProviderCacheControl=@, Property: ClearAfter='00000000000030.000000:000' (Expected default='00000000000500.000000:000').
06804 14:51:25 (0) **
06805 14:51:25 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
06806 14:51:25 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
06807 14:51:25 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
06808 14:51:25 (0) ** WMI static instances retrieved: ..................................................................................... 2072.
06809 14:51:25 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
06810 14:51:25 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 1.
06811 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06812 14:51:25 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
06813 14:51:25 (0) ** DCOM: ............................................................................................................. 0.
06814 14:51:25 (0) ** WINMGMT: .......................................................................................................... 0.
06815 14:51:25 (0) ** WMIADAPTER: ....................................................................................................... 0.
06816 14:51:25 (0) **
06817 14:51:25 (0) ** # of additional Event Log events AFTER WMIDiag execution:
06818 14:51:25 (0) ** DCOM: ............................................................................................................. 0.
06819 14:51:25 (0) ** WINMGMT: .......................................................................................................... 0.
06820 14:51:25 (0) ** WMIADAPTER: ....................................................................................................... 0.
06821 14:51:25 (0) **
06822 14:51:25 (0) ** 30 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
06823 14:51:25 (0) ** => This error is typically a WMI error. This WMI error is due to:
06824 14:51:25 (0) ** - a missing WMI class definition or object.
06825 14:51:25 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
06826 14:51:25 (0) ** You can correct the missing class definitions by:
06827 14:51:25 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
06828 14:51:25 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
06829 14:51:25 (0) ** (This list can be built on a similar and working WMI Windows installation)
06830 14:51:25 (0) ** The following command line must be used:
06831 14:51:25 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
06832 14:51:25 (0) ** Note: When a WMI performance class is missing, you can manually resynchronize performance counters
06833 14:51:25 (0) ** with WMI by starting the ADAP process.
06834 14:51:25 (0) ** - a WMI repository corruption.
06835 14:51:25 (0) ** In such a case, you must rerun WMIDiag with 'WriteInRepository' parameter
06836 14:51:25 (0) ** to validate the WMI repository operations.
06837 14:51:25 (0) ** Note: ENSURE you are an administrator with FULL access to WMI EVERY namespaces of the computer before
06838 14:51:25 (0) ** executing the WriteInRepository command. To write temporary data from the Root namespace, use:
06839 14:51:25 (0) ** i.e. 'WMIDiag WriteInRepository=Root'
06840 14:51:25 (0) ** - If the WriteInRepository command fails, while being an Administrator with ALL accesses to ALL namespaces
06841 14:51:25 (0) ** the WMI repository must be reconstructed.
06842 14:51:25 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
06843 14:51:25 (0) ** otherwise some applications may fail after the reconstruction.
06844 14:51:25 (0) ** This can be achieved with the following command:
06845 14:51:25 (0) ** i.e. 'WMIDiag ShowMOFErrors'
06846 14:51:25 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
06847 14:51:25 (0) ** ALL fixes previously mentioned.
06848 14:51:25 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
06849 14:51:25 (0) **
06850 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06851 14:51:25 (0) ** Unexpected, wrong or missing registry key values: ................................................................... 1 KEY(S)!
06852 14:51:25 (0) ** INFO: Unexpected registry key value:
06853 14:51:25 (0) ** - Current: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ) -> 0
06854 14:51:25 (0) ** - Expected: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ) -> 1
06855 14:51:25 (0) ** From the command line, the registry configuration can be corrected with the following command:
06856 14:51:25 (0) ** i.e. 'REG.EXE Add "HKLM\SOFTWARE\Microsoft\WBEM\CIMOM" /v "Logging" /t "REG_SZ" /d "1" /f'
06857 14:51:25 (0) **
06858 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06859 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06860 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06861 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06862 14:51:25 (0) **
06863 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06864 14:51:25 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
06865 14:51:25 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
06866 14:51:25 (0) **
06867 14:51:25 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\USERS\{Username}\APPDATA\LOCAL\TEMP\WMIDIAG-V2.1_2K8R2.SRV.SP1.64_{ComputerName}_2012.07.10_14.40.25.LOG' for details.
06868 14:51:25 (0) **
06869 14:51:25 (0) ** WMIDiag v2.1 ended on Tuesday, July 10, 2012 at 14:51 (W:103 E:51 S:1).Following might help
A Wmiprvse.exe process crashes in Windows Server 2008 R2 when you use the WMI interface to query the hardware status on a computer that supports the IPMI standard
http://support.microsoft.com/kb/2280777
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
I saw this in my googling. Listed as the cause on the hotfix page is the following: "This
problem occurs because the Ipmiprv.dll module leads the Wmiprvse.exe process to crash. This behavior depends on certain hardware sensor types when the sensor is enumerated." The
faulting module for that hotfix is ipmiprv.dll, and our faulting module is ntdll.dll. I'm thinking that this hotfix isn't applicable, but I'm open to hearing why I'm incorrect if I am.
Seth Johnson -
I was not familiar with the system and the first ID and password with the information required to retrieve forgotten ! Old ID pops up when trying to do Updates for Certain programs and it will not go away I do not remember how to access that particular ID and can't. Get rid of it or perform updates for Cretan things...! Help anyone?
iTunes and Mac App Store content is forever tied to the Apple ID that bought it. Apple does not transfer content from one ID to another and Apple does not merge Apple IDs. The only way that you can redownload content, update content and authorize the content's use on Macs, PCs and iOS devices is with the Apple ID used to buy it.
You can throw away free content and buy it again with your new Apple ID if the content is still available. But to keep using free content no longer available in the iTunes and Mac App Stores, as well as, the paid content, you will need to rehabilitate the Apple ID that was used to buy it.
Use one of these methods to contact the Account Security Team for help resurrecting the old Apple ID.
Apple ID Security -
Telephone Apple Care for your country and ask for the Account Security Team, then request help.
Or use this link for contact by internet-
http://www.apple.com/support/appleid/contact/
Choose Other Apple ID Topics and then Apple ID Account Security -
I've installed the Adobe Reader Plug In. Yet every time I click to see a PDF, it opens another browser and it is blank. The Browser reads about:blank. How can I fix this so that PDF's open in the browser?
Check your settings in Options > Applications: https://support.mozilla.com/en-US/kb/Opening%20PDF%20files%20within%20Firefox#w_check-firefox-settings
Also see:
*https://support.mozilla.com/en-US/kb/Using%20the%20Adobe%20Reader%20plugin%20with%20Firefox
*http://kb.mozillazine.org/File_types_and_download_actions
'''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''
Not related to your question, but...
You need to update some plug-ins:
*Plug-in check: https://www-trunk.stage.mozilla.com/en-US/plugincheck/
*Shockwave Flash (Adobe Flash or Flash): [https://support.mozilla.com/en-US/kb/Managing%20the%20Flash%20plugin#w_updating-flash Updating Flash in Firefox] -
when i start up i tunes i get the message,"The registry settings used by the i Tunes drivers for importing and burning CD's and DVD's are missing. This can happen as a result of installing other CD burning software. Please reinstall i Tunes." I tried reinstalling and still get the same message. when I ran the i Tunes diagnostics is says that the high and low filters are missing.
when i was having trouble with my optical drive(before Dell sent me a new one) the dell tech support representative had me delete some reg. files to try to fix the problem. I was told this would not affect the new drive when i install it or any of my existing programs. here is what he had me do....
Agent (CLKsmb_RyanJose_224427): "Click on Start
Click on Run
Type in REGEDIT
Click on OK
Click on the plus sign next to HKEY_LOCAL_MACHINE
Click on the plus sign next to SYSTEM
Click on the plus sign next to CurrentControlSet
Click on the plus sign next to Control"
Click on the plus sign next to Class
Click on the plus sign next to {4D36E965-E325-11CE-BFC1-08002BE10318}
On the right pane, click to highlight Upperfilters
Right click on Upperfilters
Click on Delete
Click on OK
On the right pane, click t
o highlight Lowerfilters
Right click on Lowerfilters
Click on Delete
Click on OK
Right click on Silent Install
Click on Delete
Click on OK
Close the Registry Editor
Reboot the computer
how can i get this message box to stop poping up every time i open i tunes? otherwise i tunes works fine. it still rips cd's. I just keep getting this message even after reinstalling i tines.
thanks,
chrisRefer to this article to fix:
iTunes for Windows: "Registry settings" warning when opening iTunes
http://support.apple.com/kb/TS3299
Maybe you are looking for
-
Is it possible to do a 100 minute edit and then export to mpeg 2 or h264.
I'm having difficulty with a long edit - 100 minutes or so. It keeps quitting during the export. Have now cut it down to two separate files but having difficulty opening the mpeg 2 file. Any suggestions? Thanks, Jo
-
Getting error while opening reports in EHS on portal
Hi, I have deployed EHS Business package on portal. In the Industrial hygiene and safety role there is an iview "Standard Operating procedures". I am getting error "Portal Runtime Error An exception occurred while processing a request for : iView : N
-
Internal Drives Disappeared- Help
G4/1.0 DP MDD with four drives filling the internal bays. The two in the upper bay, one with the OS, show up fine. The two in the lower bay, under the DVD drive, which were showing up fine after installing 10.4.7 about ten days ago have suddenly disa
-
Acrobat 9: Selected text and Table
Hi all expert, I am new to Acrobat plug-in development. can anybody tell me, how to check selected text is in table? plz help! Thanks.
-
Tiles and run-time expressions
I use an in-house developed library similar to Struts Tiles. Consider this line <put name='header' value='header.jsp'/>. At run-time it will send header.jsp to web browser. I need to select a specific .jsp using a flag like <put name='header' value='