Mmc.exe crash - Kernelbase.dll

Hello,
Reliability monitor reports frequet crash of mmc.exe
Faulting application name: mmc.exe, version: 6.3.9600.16384, time stamp: 0x5215ef8f
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17278, time stamp: 0x53eebf2e
Exception code: 0xe0434352
Fault offset: 0x000000000000606c
Faulting process id: 0xa04
Faulting application start time: 0x01d05cbe538c385b
Faulting application path: C:\WINDOWS\system32\mmc.exe
Faulting module path: C:\WINDOWS\system32\KERNELBASE.dll
Report Id: 788536ea-cbab-11e4-82ae-402cf46ee7fe
Faulting package full name:
Faulting package-relative application ID:
How can I investigate further to find what causes the crash ?
Regards,
Michel

if you are upgraded your OS from windows 7 or Windows 8. I suggest just run windows update and check
if you are not upgraded your OS try (SFC) & DISM as
ZigZag3143x , or simply do system restore (using restore point before this issue happen) and if still not working, in place upgrade will be another option
http://www.eightforums.com/tutorials/26095-repair-install-windows-8-a.html
Yes, this is an upgrade from Windows 7. I've run the Windows update (instead of SCCM software updates) and the KB3000850 (November 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 ) was missing from my computer.
This update installs an updated version of kernelbase DLL (6.3.9600.17415).I'll will wait a couple of days to check if it helps

Similar Messages

  • Anonymous Level Security Token Error combined with DECOMCNFG errors and finishing big with mmc.exe crash

    Hello
    I'm running on  a brand new system Windows 7 Home Premium 64-Bit.
    I have a problem with Internet Explorer 8. When a javascript tries to open a link into a new window I get the error message: Message: Cannot open an anonymous level security token.
    The solution to this is to go to dcomcnfg -> Expand Componenet Services -> Computers
    Select My Computer -> right click My Computer and select Properties.
    On the Default Properties tab set the Default Authentication level and Default Impersonation level.
    Here is the problem: These values can not be set. There are multiple problems with the DCOMCNFG interface.
    1.  There are no values present in the drop down window. 
    2.  The first time one selects properties from my computer to access the default properties tab, I get only a 2 tab page consisting only of COM Security and MSDTC.  I have to select the properties option a second time to get the correct page to
    pop up containing the additional 4 tabs that include the default Properties. (strange, but I have actually seen this behavior reported elsewhere on the net by a developer)
    3. On the default properties tab, the "enable Distributed COM on this computer" is unchecked, even though registry values indicate DCOM is enabled.
    4. The drop down windows for "Default Authetication Level" and "Default Inpersonation Level" do not populate with any options when I check the "Enable Distributed COM" box.  Registry values appear to have these settings correctly set.
    5.  Regardless of whether I modify any entries or not on the Default Properties tab, every time I close the Default Properties tab by selecting "OK", mmc.exe crashes and an error is generated. No crash if I select "cancel."  Error info below:
    Problem Event Name: APPCRASH
    Application Name: mmc.exe
    Application Version: 6.1.7600.16385
    Application Timestamp: 4a5bc808
    Fault Module Name: comuid.dll
    Fault Module Version: 2001.12.8530.16385
    Fault Module Timestamp: 4a5bdf82
    Exception Code: c000041d
    Exception Offset: 0000000000027eb4
    OS Version: 6.1.7600.2.0.0.768.3
    Locale ID: 1033
    Additional Information 1: c04d
    Additional Information 2: c04dc172367dd59f9f2c3be375fb3e80
    Additional Information 3: ab1b
    Additional Information 4: ab1bd07e62aa9dd1521e9b185bfe43fc
    What have I done to try to remedy the problem?
    Ran fsc scannow and chkdsk with no change. 
    What would I like?
    To eliminate the anonymous level security token  error in IE8, and I assume the DCOMCNFG problem may be the cause.
    Thanks, Jim

    I have the EXACT signature of symptoms as described here, but with Windows XP: 
    [Quote]
    Multiple problems with the DCOMCNFG interface.
    1.  There are no values present in the drop down window. 
    2.  The first time one selects properties from my computer to access the default properties tab, I get only a 2 tab page consisting only of COM Security and MSDTC.  I have to select the properties option a second time to get the correct page to
    pop up containing the additional 4 tabs that include the default Properties. (strange, but I have actually seen this behavior reported elsewhere on the net by a developer)
    3. On the default properties tab, the "enable Distributed COM on this computer" is unchecked, even though registry values indicate DCOM is enabled.
    4. The drop down windows for "Default Authetication Level" and "Default Inpersonation Level" do not populate with any options when I check the "Enable Distributed COM" box.  Registry values appear to have these settings correctly set.
    5.  Regardless of whether I modify any entries or not on the Default Properties tab, every time I close the Default Properties tab by selecting "OK", mmc.exe crashes and an error is generated. No crash if I select "cancel." 
    [/QUOTE]
    I tried the COMFIX tool suggested by Jim Bacon - it does not complete for me however
    (there is no "run as admin" option in Windows XP, just double clicked to run it. 
    Otherwise followed as described (no Norton Ghost) 
    It errors out: 
    In the Command Window, it says Open Service Fail 1060
    Specific Service does not exist as installed service 
    And a Windows Script Host Window that reports error "the system cannot find the file specified" - code:80070002
    Is this because it is XP? 
    Is there something similar I can use for XP, or do I have some other limitation? 
    Appreciate assistance - I was happy to find this issue reported here so pleased that at least I am not unique in that! 

  • Device Manager crashing: mmc.exe crashes with faulting mgr of devmgr.dll

    Hello
    I am unable to load device manager (either directly from control panel, or within the Computer Management MMC console. Everytime i attempt to do so, it crashes. An adminstrative event is raised on each occassion with the following:
    Faulting application name: mmc.exe, version: 6.3.9600.16384, time stamp: 0x5215ef8f
    Faulting module name: devmgr.dll, version: 6.3.9600.16384, time stamp: 0x5215ebc8
    Exception code: 0xc00000fd
    Fault offset: 0x000000000000e3a2
    Faulting process id: 0x1c1c
    Faulting application start time: 0x01ceff2006f4b512
    Faulting application path: C:\WINDOWS\system32\mmc.exe
    Faulting module path: C:\WINDOWS\System32\devmgr.dll
    Report Id: 5ead3eb8-6b13-11e3-bec8-14dae9031ab6
    Faulting package full name: 
    Faulting package-relative application ID: 
    There are a few similiar reports i've come across on the web, most centering around the .NET frameworks in use, invalid configs etc., but i've been unable to pinpoint anything specifically wrong. 
    Can anyone help? 
    Thanks!

    I was really trying to avoid a full OS reinstall, but I can't find a solution to either situation.
    An Answers poster recently had an
    apparent problem with DISM.exe being corrupted. Evidently an sfc /scannow   either didn't notice it or try to fix it.  I wondered about trying sfc /scanfile= on it. If you are about to rebuild it surely could not hurt to perform that experiment
    with your two devmgmt.msc files first?
    You could check them for length using a modification of the Powershell pipeline we used...
    PS C:\windows> dir -Filter "devmgmt.msc" -Recurse -ErrorAction:SilentlyContinue | ft Length, FullName -AutoSize -HideTableHeaders
    145640 C:\windows\System32\devmgmt.msc
    145640 C:\windows\System32\en-US\devmgmt.msc
    145640 C:\windows\SysWOW64\devmgmt.msc
    145640 C:\windows\SysWOW64\en-US\devmgmt.msc
    145640 C:\windows\WinSxS\amd64_microsoft-windows-p..cemanager.resources_31bf3856ad364e35_6.3.9600.16384_en-us_9242636cfac1b5ec\devmgmt.msc
    145640 C:\windows\WinSxS\amd64_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.3.9600.16384_none_0494fa7cf377bf21\devmgmt.msc
    145640 C:\windows\WinSxS\wow64_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.3.9600.16384_none_0ee9a4cf27d8811c\devmgmt.msc
    145640 C:\windows\WinSxS\x86_microsoft-windows-p..cemanager.resources_31bf3856ad364e35_6.3.9600.16384_en-us_3623c7e9426444b6\devmgmt.msc
    Whoa.  I wasn't expecting that.  All the same size?  Looks like the first pipeline we used which ended with  fl  *  would be more useful.  There are only 8 items so it wouldn't be too much output.
    Also, that shows there might be another copy that you could use anyway (e.g. which might not be corrupted as much as the one you were getting by default.)
    C.f.
    http://answers.microsoft.com/en-us/windows/forum/windows8_1-windows_update/issue-with-installing-updates-on-windows-81/24b91da6-fdbe-42dd-96c6-3cc91062054b?page=4 
    HTH
    Robert Aldwinckle

  • ScanEngineTest.exe and KERNELBASE.dll Errors

    I have a new install of Exchange 2013 (SP1, CU6) and I am receiving errors every 30 minutes. They appear to be happening when Exchange tries to test the scan engine update.  Here are the errors: Any suggestions would be appreciated!
    Chris
    Log Name:      Application
    Source:        Application Error
    Date:          9/22/2014 11:03:43 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      removed
    Description:
    Faulting application name: ScanEngineTest.exe, version: 15.0.995.21, time stamp: 0x53d065d3
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c
    Exception code: 0xc0000142
    Fault offset: 0x00000000000e2000
    Faulting process id: 0x3b2c
    Faulting application start time: 0x01cfd67ec8a828c8
    Faulting application path: C:\Program Files\Microsoft\Exchange Server\V15\FIP-FS\Bin\ScanEngineTest.exe
    Faulting module path: KERNELBASE.dll
    Report Id: 0667c791-4272-11e4-93f9-00155d641207
    Faulting package full name: 
    Faulting package-relative application ID:
    Log Name:      Application
    Source:        Microsoft-Filtering-FIPFS
    Date:          9/22/2014 11:03:44 AM
    Event ID:      6035
    Task Category: None
    Level:         Warning
    Keywords:      
    User:          NETWORK SERVICE
    Computer:      vm-vhex.vbartlett.org
    Description:
    MS Filtering Engine Update process was unsuccessful in testing an engine update. 
     Engine: Microsoft
     LastCheckedTime:‎2014‎-‎09‎-‎22T16:03:44.000Z

    Hi
    Try disabling/re-enabling the malware scanning component.
    Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Explorer.exe crashing - twinui.dll?

    With some relative frequency (several times an hour) explorer.exe is faulting and restarting.  I only noticed because the system tray repaints.  I am not sure if this is related to the applications I have installed, or is unrelated. 
    Has anyone else encountered this?  Any ideas as to what is going on?
    Below are the event log details:
    Faulting application name: explorer.exe, version: 6.2.9200.16384, time stamp: 0x50107dbc
    Faulting module name: twinui.dll, version: 6.2.9200.16384, time stamp: 0x50109442
    Exception code: 0xc0000005
    Fault offset: 0x0000000000340849
    Faulting process id: 0x1584
    Faulting application start time: 0x01cd7c8733f184a6
    Faulting application path: C:\Windows\explorer.exe
    Faulting module path: C:\Windows\System32\twinui.dll
    Report Id: 50dc242a-e87b-11e1-be6f-6c626ddcca27
    Faulting package full name:
    Faulting package-relative application ID:
    I do not have a lot of applications installed at the moment, so if it is application-related, then at least there is a short list of possible causes.
    AMD Catalyst Install Manager (and Catalyst Control Center)
    AuthenTec WinBio Fingerprint Software x64
    EventGhost 0.4.1.r1572
    LastPass x64
    RealTek High Definition Audio Driver
    Microsoft Visual C++ 2010 x64 Distributable 10.0.30319
    SharpKeys

    please download this reg file from my SkyDrive:
    http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg
    and make a double click on the file to import it. If you can't do this, run regedit.exe and import the registry file there!
    When the Windows Explorer crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the created file (cmpressed as 7z or RAR) to your public Skydrive [2] folder and post the link here. I take a look at the dump with
    the Debugger, maybe I can see the cause.
    André
    [1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
    [2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
    "A programmer is just a tool which converts caffeine into code"

  • Explorer.exe crash, twinui.dll

    For a couple of weeks, everytime i login into my account, explorer.exe keeps crashing and restarting.During this loop, the system is laggy and it only shows the taskbar, without the icons i put on it.
    Here is the report from event viewer:
    Faulting application name: explorer.exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
    Faulting module name: twinui.dll, version: 6.3.9600.17324, time stamp: 0x53f822bf
    Exception code: 0xc0000006
    Fault offset: 0x00000000000e87c7
    Faulting process id: 0xb20
    Faulting application start time: 0x01d06eb0d68fe96f
    Faulting application path: C:\WINDOWS\explorer.exe
    Faulting module path: C:\WINDOWS\system32\twinui.dll
    Report Id: 19f958ba-daa4-11e4-82aa-448a5bcfcd05
    Faulting package full name:
    Faulting package-relative application ID:
    I also downloaded autoruns from sysinternals, there are some dll's, but only from winrar and poweriso, which i deactivated.I ran sfc /scannow and chkdsk /f, no changes.The system runs fine in safe mode, without any crashes.

    Hello Retegan Andrei (Andrew),
    As this issue doesn’t exist in the safe mode, it is caused by driver or third-party software.
    Please try to perform a clean boot in Windows.
    https://support.microsoft.com/en-us/kb/929135
    If this issue doesn’t occur in clean boot, it is caused by third-party drivers.
    If this issue occurs in clean boot too, it is cuased by drivers, please update drivers from the manufacturer website.
    Best regards,
    Fangzhou CHEN
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • BSOD csrss.exe crash (sxs.dll cause)

    We're having random BSOD's from our computers.  Only user dump files are created.  Here's a snippet of the file, I'm wondering if anyone has any ideas what might be the cause?
    PROCESS_NAME:  csrss.exe
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_PARAMETER1:  0000000000000000
    EXCEPTION_PARAMETER2:  00000000027be0b8
    READ_ADDRESS:  00000000027be0b8
    FOLLOWUP_IP:
    sxs!BufferedStream::getLineBuf+1f
    000007fe`fcc41b2f 410fb702        movzx   eax,word ptr [r10]
    NTGLOBALFLAG:  0
    APPLICATION_VERIFIER_FLAGS:  0
    APP:  csrss.exe
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    FAULTING_THREAD:  0000000000001170
    BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ_STACK_POINTER_MISMATCH
    PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ_STACK_POINTER_MISMATCH
    DEFAULT_BUCKET_ID:  INVALID_POINTER_READ_STACK_POINTER_MISMATCH
    LAST_CONTROL_TRANSFER:  from 000007fefcc41aea to 000007fefcc41b2f
    SYMBOL_STACK_INDEX:  0
    SYMBOL_NAME:  sxs!BufferedStream::getLineBuf+1f
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: sxs
    IMAGE_NAME:  sxs.dll
    DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7c9cc
    FAILURE_BUCKET_ID:  INVALID_POINTER_READ_STACK_POINTER_MISMATCH_c0000005_sxs.dll!BufferedStream::getLineBuf
    BUCKET_ID:  X64_APPLICATION_FAULT_INVALID_POINTER_READ_STACK_POINTER_MISMATCH_sxs!BufferedStream::getLineBuf+1f
    ANALYSIS_SOURCE:  UM
    FAILURE_ID_HASH_STRING:  um:invalid_pointer_read_stack_pointer_mismatch_c0000005_sxs.dll!bufferedstream::getlinebuf
    FAILURE_ID_HASH:  {558625b4-41c0-b4dc-930c-c09d8e328e35}

    This is what I got so far and you can get the dump file from %windir%\system32\config\systemprofile\appdata\local\crashdumps
    - Event Type : Stopped working (APPCRASH)
          Application Name: Client Server Runtime Process
          Path:             C:\windows\system32\csrss.exe
          Event Time      : 03/20/2014 12:30:24 AM
              Application Name: csrss.exe
              Application Version: 6.1.7600.16385
              Application Timestamp: 4a5bc115
              Fault Module Name: sxs.dll
              Fault Module Version: 6.1.7601.17514
              Fault Module Timestamp: 4ce7c9cc
              Exception Code: c0000005
              Exception Offset: 0000000000011b2f
          Memory dump     : Not created

  • Mmc is getting crashed with error Faulting module name: KERNELBASE.dll on windows server 2012 r2

    I am facing issue with BizTalk admin console, getting below error, 
    i  thought it will be due to sql server or WMI so restarted sql services as well WMIS services but no luck. restarted Distributed transaction services as well as restarted machine but it did not solve.
    also when i tried with other MMC's i am getting below error in event viewer,
    Faulting application name: mmc.exe, version: 6.3.9600.16384, time stamp: 0x52158765
    Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532943a3
    Exception code: 0xe0434352
    Fault offset: 0x00011d4d
    Faulting process id: 0x215c
    Faulting application start time: 0x01d004a6e0c31506
    Faulting application path: C:\windows\SysWOW64\mmc.exe
    Faulting module path: C:\windows\SYSTEM32\KERNELBASE.dll
    Report Id: 3d994be7-709f-11e4-80ee-00505689506c
    Faulting package full name: 
    Faulting package-relative application ID:
    Application: mmc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.Reflection.TargetInvocationException
    Stack:
       at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.OnThreadException(System.Object,
    System.Threading.ThreadExceptionEventArgs)
       at System.Windows.Forms.Application+ThreadContext.OnThreadException(System.Exception)
       at System.Windows.Forms.Control.WndProcException(System.Exception)
       at System.Windows.Forms.Control+ControlNativeWindow.OnThreadException(System.Exception)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
       at System.Windows.Forms.UnsafeNativeMethods.IntDestroyWindow(System.Runtime.InteropServices.HandleRef)
       at System.Windows.Forms.UnsafeNativeMethods.DestroyWindow(System.Runtime.InteropServices.HandleRef)
       at System.Windows.Forms.NativeWindow.DestroyHandle()
       at System.Windows.Forms.Control.DestroyHandle()
       at System.Windows.Forms.Control.Dispose(Boolean)
       at Microsoft.BizTalk.Administration.SnapIn.Forms.GroupHub.OperationsCtrl.Dispose(Boolean)
       at System.ComponentModel.Component.Dispose()
       at Microsoft.ManagementConsole.FormView.InternalShutdown()
       at Microsoft.ManagementConsole.View.HandleShutdownRequest(Microsoft.ManagementConsole.Internal.IRequestStatus)
       at Microsoft.ManagementConsole.View.ProcessRequest(Microsoft.ManagementConsole.Internal.Request)
       at Microsoft.ManagementConsole.ViewMessageClient.ProcessRequest(Microsoft.ManagementConsole.Internal.Request)
       at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessRequest(Microsoft.ManagementConsole.Internal.Request)
       at Microsoft.ManagementConsole.Executive.RequestStatus.BeginRequest(Microsoft.ManagementConsole.Internal.IMessageClient,
    Microsoft.ManagementConsole.Internal.RequestInfo)
       at Microsoft.ManagementConsole.Executive.SnapInRequestOperation.ProcessRequest()
       at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(Microsoft.ManagementConsole.Executive.SimpleOperationCallback)
       at System.RuntimeMethodHandle.InvokeMethod(System.Object, System.Object[], System.Signature,
    Boolean)
       at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(System.Object, System.Object[], System.Object[])
       at System.Reflection.RuntimeMethodInfo.UnsafeInvoke(System.Object, System.Reflection.BindingFlags,
    System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)
       at System.Delegate.DynamicInvokeImpl(System.Object[])
       at Microsoft.ManagementConsole.Executive.DelegateMessage.OnExecute()
       at Microsoft.ManagementConsole.Executive.Message.Execute()
       at Microsoft.ManagementConsole.Executive.SnapInThread.DispatchPendingSnapInMessages()
       at Microsoft.ManagementConsole.Executive.SnapInThread.OnDataReadyAsync(System.Object, System.EventArgs)
       at Microsoft.ManagementConsole.Executive.MmcThreadMessageWindow.WndProc(System.Windows.Forms.Message
    ByRef)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr, Int32, IntPtr, IntPtr)
       at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG ByRef)
       at System.Windows.Forms.Application+ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr,
    Int32, Int32)
       at System.Windows.Forms.Application+ThreadContext.RunMessageLoopInner(Int32, System.Windows.Forms.ApplicationContext)
       at System.Windows.Forms.Application+ThreadContext.RunMessageLoop(Int32, System.Windows.Forms.ApplicationContext)
       at System.Windows.Forms.Application.Run()
       at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
       at Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
       at Microsoft.ManagementConsole.Executive.SnapInThread.OnThreadStart()
       at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback,
    System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback,
    System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback,
    System.Object)
       at System.Threading.ThreadHelper.ThreadStart()
    does any one face similar issue if yes can you please help me to solve this?
    Regards,
    Amit
    Regards, Amit More

    If its only this MMC might try them over here.
    https://social.msdn.microsoft.com/Forums/en-US/home?forum=biztalkgeneral
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Itunes crashing on startup - Fault Module Name: KERNELBASE.dll

    Itunes keeps crashing 3 seconds after i open it and displays this message.
    I use windows seven and did not have this problem until 15 minutes ago. Any idea on how to fix this? i have updated to the latest itunes and no fix.
    thank you!!
    Problem signature:
      Problem Event Name:          APPCRASH
      Application Name:          iTunes.exe
      Application Version:          10.4.1.10
      Application Timestamp:          4e4e1904
      Fault Module Name:          KERNELBASE.dll
      Fault Module Version:          6.1.7600.16850
      Fault Module Timestamp:          4e21132b
      Exception Code:          80000003
      Exception Offset:          00031f66
      OS Version:          6.1.7600.2.0.0.256.1
      Locale ID:          1033
      Additional Information 1:          0a9e
      Additional Information 2:          0a9e372d3b4ad19135b953a78882e789
      Additional Information 3:          0a9e
      Additional Information 4:          0a9e372d3b4ad19135b953a78882e789

    I'm researching this now. I have the same problem. Here is what I'm comming up with. Is that there is a corruptioin in the registry (I know... big surprise with WIndows). And/or/related is that there is some corruption with the user profile. I'm not an IT guy so take my assesment with a grain of salt but this is how it's looking to me.
    Solution that might work:
    Launch into the command prompt as an administrator and run "sfc /scannow". for windows 8
    Russ

  • MMC.exe random crashes AD users & computers

    We are experiencing issues when editing users & computers on a newly installed Server 2012 R2.
    The MMC randomly crashes when creating a new user. Sometimes we can enter 10-20 users flawlessly and sometimes it crashes every 2-3 users. In the logs we can find the following error (in Dutch - sorry):
    Naam van toepassing met fout: mmc.exe, versie: 6.3.9600.16384, tijdstempel: 0x5215ef8f
    Naam van module met fout: ntdll.dll, versie: 6.3.9600.17114, tijdstempel: 0x53649e73
    Uitzonderingscode: 0xc0000374
    Foutmarge: 0x00000000000f87a8
    Id van proces met fout: 0xfdc
    Starttijd van toepassing met fout: 0x01cfac99667c332f
    Pad naar toepassing met fout: C:\Windows\system32\mmc.exe
    Pad naar module met fout: C:\Windows\SYSTEM32\ntdll.dll
    Rapport-id: 3085a3b0-188d-11e4-80ba-0050568b4b6a
    Volledige pakketnaam met fout:
    Relatieve toepassings-id van pakket met fout:

    We might have found the problem. It probably isn't a windows problem but a problem in de VMWare esxi version we are using. We are using 5.1 which apparently doesn't support windows server 2012 R2 yet. We will soon upgrade to version 5.5 and I'll
    post the test results here.

  • Resource Hosting Subsystem process crashes from KERNELBASE.dll

    Hi,
    I have 2 2013 Exchange servers in a DAG configuration. The passive member (I'll refer to it as EX02) is experiencing an issue where the Cluster Service crashes almost immediately after it is started. I've experienced this with this particular DAG before
    and ultimately ended up rebuilding the entire DAG from scratch to fix the issue, however it seems to have returned and now need a root cause analysis and fix. I've attached 4 Event Logs that have allowed me to drill down to the problem component but am at
    a loss on how to proceed next.  Initially, when checking the cluster using Failover Cluster Manager, the EX02 node goes back and forth between "Joining" and "Down". This is a result of the Cluster Service constantly crashing and restarting
    since it is set to auto restart after an unexpected termination.  
    Looking at the 1146 Event ID, I saw this points to the Resource Hosting Subsystem as part of the issue and that this process experienced an issue with a .dll it's using.  I then discovered this was the KERNELBASE.dll via the various other log entries
    I've included below. I haven't been able to find anyone else that's ran into this particular scenario and am not sure what needs to be done to correct this behavior. If anyone has any insight to this issue, it would be greatly appreciated. If any additional
    information is needed from me, please let me know as well. 
     Log Name:      System
    Source:        Microsoft-Windows-FailoverClustering
    Date:          3/3/2015 2:34:59 PM
    Event ID:      1146
    Task Category: Resource Control Manager
    Level:         Critical
    Keywords:      
    User:          SYSTEM
    Computer:      ****-EX02.****.com
    Description:
    The cluster Resource Hosting Subsystem (RHS) process was terminated and will be restarted. This is typically associated with cluster health detection and recovery of a resource. Refer to the System event log to determine which resource and resource DLL is causing the issue.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-FailoverClustering" Guid="{BAF908EA-3421-4CA9-9B84-6689B8C6F85F}" />
        <EventID>1146</EventID>
        <Version>0</Version>
        <Level>1</Level>
        <Task>3</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:34:59.261068900Z" />
        <EventRecordID>286364</EventRecordID>
        <Correlation />
        <Execution ProcessID="4716" ThreadID="4996" />
        <Channel>System</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="NodeName">****-EX02</Data>
      </EventData>
    </Event>    
    Log Name:      Application
    Source:        Application Error
    Date:          3/3/2015 2:36:13 PM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      ****-EX02.****.com
    Description:
    Faulting application name: clussvc.exe, version: 6.3.9600.17396, time stamp: 0x5434db7b
    Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54505737
    Exception code: 0x80000003
    Fault offset: 0x00000000000de002
    Faulting process id: 0x31c8
    Faulting application start time: 0x01d055f1a860f6f2
    Faulting application path: C:\Windows\Cluster\clussvc.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: ee64313c-c1e4-11e4-80da-005056010d14
    Faulting package full name: 
    Faulting package-relative application ID: 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:36:13.000000000Z" />
        <EventRecordID>264219</EventRecordID>
        <Channel>Application</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>clussvc.exe</Data>
        <Data>6.3.9600.17396</Data>
        <Data>5434db7b</Data>
        <Data>KERNELBASE.dll</Data>
        <Data>6.3.9600.17415</Data>
        <Data>54505737</Data>
        <Data>80000003</Data>
        <Data>00000000000de002</Data>
        <Data>31c8</Data>
        <Data>01d055f1a860f6f2</Data>
        <Data>C:\Windows\Cluster\clussvc.exe</Data>
        <Data>C:\Windows\system32\KERNELBASE.dll</Data>
        <Data>ee64313c-c1e4-11e4-80da-005056010d14</Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          3/3/2015 2:36:14 PM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      ****-EX02.****.com
    Description:
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: clussvc.exe
    P2: 6.3.9600.17396
    P3: 5434db7b
    P4: KERNELBASE.dll
    P5: 6.3.9600.17415
    P6: 54505737
    P7: 80000003
    P8: 00000000000de002
    P9: 
    P10: 
    Attached files:
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_clussvc.exe_fcdf2bbcddca922c916880dbb49ce3cd5175efef_f6feed2e_3a22d925
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: ee64313c-c1e4-11e4-80da-005056010d14
    Report Status: 4100
    Hashed bucket: 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:36:14.000000000Z" />
        <EventRecordID>264220</EventRecordID>
        <Channel>Application</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>APPCRASH</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>clussvc.exe</Data>
        <Data>6.3.9600.17396</Data>
        <Data>5434db7b</Data>
        <Data>KERNELBASE.dll</Data>
        <Data>6.3.9600.17415</Data>
        <Data>54505737</Data>
        <Data>80000003</Data>
        <Data>00000000000de002</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_clussvc.exe_fcdf2bbcddca922c916880dbb49ce3cd5175efef_f6feed2e_3a22d925</Data>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>ee64313c-c1e4-11e4-80da-005056010d14</Data>
        <Data>4100</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Version=1
    EventType=APPCRASH
    EventTime=130698881964369580
    ReportType=2
    Consent=1
    ReportIdentifier=0d8e824c-c1e4-11e4-80da-005056010d14
    IntegratorReportIdentifier=0d8e824b-c1e4-11e4-80da-005056010d14
    NsAppName=clussvc.exe
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=clussvc.exe
    Sig[1].Name=Application Version
    Sig[1].Value=6.3.9600.17396
    Sig[2].Name=Application Timestamp
    Sig[2].Value=5434db7b
    Sig[3].Name=Fault Module Name
    Sig[3].Value=KERNELBASE.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=6.3.9600.17415
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=54505737
    Sig[6].Name=Exception Code
    Sig[6].Value=80000003
    Sig[7].Name=Exception Offset
    Sig[7].Value=00000000000de002
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.3.9600.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=a80b
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=a80b5d7481362c8eeb76a77903fa82d6
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=a1f8
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=a1f83374660c205ca4489043b9691b2f
    UI[2]=C:\Windows\Cluster\clussvc.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Microsoft Failover Cluster Service stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\Cluster\clussvc.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\system32\KERNEL32.DLL
    LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\system32\msvcrt.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[6]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[7]=C:\Windows\SYSTEM32\CLUSAPI.dll
    LoadedModule[8]=C:\Windows\system32\CRYPT32.dll
    LoadedModule[9]=C:\Windows\SYSTEM32\dhcpcsvc.DLL
    LoadedModule[10]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[11]=C:\Windows\SYSTEM32\NTDSAPI.dll
    LoadedModule[12]=C:\Windows\system32\ole32.dll
    LoadedModule[13]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[14]=C:\Windows\SYSTEM32\RESUTILS.dll
    LoadedModule[15]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[16]=C:\Windows\SYSTEM32\SspiCli.dll
    LoadedModule[17]=C:\Windows\SYSTEM32\sscore.dll
    LoadedModule[18]=C:\Windows\system32\USER32.dll
    LoadedModule[19]=C:\Windows\SYSTEM32\VSSAPI.DLL
    LoadedModule[20]=C:\Windows\SYSTEM32\wevtapi.dll
    LoadedModule[21]=C:\Windows\system32\WS2_32.dll
    LoadedModule[22]=C:\Windows\system32\NSI.dll
    LoadedModule[23]=C:\Windows\SYSTEM32\WINNSI.DLL
    LoadedModule[24]=C:\Windows\SYSTEM32\FirewallAPI.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\bcrypt.dll
    LoadedModule[26]=C:\Windows\SYSTEM32\NETAPI32.dll
    LoadedModule[27]=C:\Windows\SYSTEM32\FLTLIB.DLL
    LoadedModule[28]=C:\Windows\system32\SETUPAPI.dll
    LoadedModule[29]=C:\Windows\SYSTEM32\DEVOBJ.dll
    LoadedModule[30]=C:\Windows\SYSTEM32\fwpuclnt.dll
    LoadedModule[31]=C:\Windows\SYSTEM32\VirtDisk.dll
    LoadedModule[32]=C:\Windows\SYSTEM32\clfsw32.dll
    LoadedModule[33]=C:\Windows\SYSTEM32\DSPARSE.dll
    LoadedModule[34]=C:\Windows\SYSTEM32\cryptdll.dll
    LoadedModule[35]=C:\Windows\system32\MSASN1.dll
    LoadedModule[36]=C:\Windows\SYSTEM32\combase.dll
    LoadedModule[37]=C:\Windows\system32\GDI32.dll
    LoadedModule[38]=C:\Windows\SYSTEM32\VssTrace.DLL
    LoadedModule[39]=C:\Windows\SYSTEM32\DSROLE.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\bcd.dll
    LoadedModule[41]=C:\Windows\SYSTEM32\netutils.dll
    LoadedModule[42]=C:\Windows\SYSTEM32\srvcli.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\wkscli.dll
    LoadedModule[44]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[45]=C:\Windows\SYSTEM32\DPAPI.DLL
    LoadedModule[46]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[47]=C:\Windows\SYSTEM32\SAMCLI.DLL
    LoadedModule[48]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
    LoadedModule[49]=C:\Windows\SYSTEM32\sscoreext.dll
    LoadedModule[50]=C:\Windows\SYSTEM32\mi.dll
    LoadedModule[51]=C:\Windows\SYSTEM32\miutils.dll
    LoadedModule[52]=C:\Windows\system32\wmidcom.dll
    LoadedModule[53]=C:\Windows\SYSTEM32\kernel.appcore.dll
    LoadedModule[54]=C:\Windows\SYSTEM32\ntmarta.dll
    LoadedModule[55]=C:\Windows\SYSTEM32\dhcpcsvc6.DLL
    LoadedModule[56]=C:\Windows\SYSTEM32\clbcatq.dll
    LoadedModule[57]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[58]=C:\Windows\SYSTEM32\wbemcomn.dll
    LoadedModule[59]=C:\Windows\SYSTEM32\CRYPTSP.dll
    LoadedModule[60]=C:\Windows\system32\rsaenh.dll
    LoadedModule[61]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[62]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[63]=C:\Windows\SYSTEM32\pcwum.dll
    LoadedModule[64]=C:\Windows\system32\mswsock.dll
    LoadedModule[65]=C:\Windows\system32\WINTRUST.dll
    LoadedModule[66]=C:\Windows\SYSTEM32\logoncli.dll
    LoadedModule[67]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[68]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[69]=C:\Windows\system32\kerberos.DLL
    LoadedModule[70]=C:\Windows\SYSTEM32\SAMLIB.dll
    LoadedModule[71]=C:\Windows\system32\es.dll
    LoadedModule[72]=C:\Windows\system32\PROPSYS.dll
    LoadedModule[73]=C:\Windows\SYSTEM32\profapi.dll
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=Microsoft Failover Cluster Service
    AppPath=C:\Windows\Cluster\clussvc.exe
    NsPartner=windows
    NsGroup=windows8
    ApplicationIdentity=78F1110F74732BD871C9A3C553A667E4

    Got a window to reboot the EX02 machine and this seems to have solved the issue. Cluster Service is stable again and DAG is healthy. This issue can be marked as answered.
    I have this same issue, and it appears to manifest whenever there is a network disruption.  After network is restored, the cluster service repeatedly crashes until a reboot.  I'm not sure if a reboot is a real fix.  I'm curious whether
    yours returns if you unplug the network cable and plug it back in on your server, like mine.

  • APPCRASH iTunes.exe KERNELBASE.dll 6.1.7601.18015

    Dear All,
    APPCRASH iTunes.exe KERNELBASE.dll 6.1.7601.18015
    Problem Event Name:
    APPCRASH
      Application Name:
    iTunes.exe
      Application Version:
    11.0.5.5
      Application Timestamp:
    520e4d27
      Fault Module Name:
    KERNELBASE.dll
      Fault Module Version:
    6.1.7601.18015
      Fault Module Timestamp:
    50b83c8a
      Exception Code:
    c06d007e
      Exception Offset:
    0000c41f
      OS Version:
    6.1.7601.2.1.0.256.48
      Locale ID:
    16393
      Additional Information 1:
    0a9e
      Additional Information 2:
    0a9e372d3b4ad19135b953a78882e789
      Additional Information 3:
    0a9e
      Additional Information 4:
    0a9e372d3b4ad19135b953a78882e789
    when i connect to Itune stores

    Hi Ravishankys,
    If you are having an issue with iTunes unexpectedly quitting when you connect to the iTunes Store, you may find the following article helpful:
    iTunes for Windows Vista or Windows 7: Troubleshooting unexpected quits, freezes, or launch issues
    http://support.apple.com/kb/ts1717
    Regards,
    - Brenden

  • Event 1000, Application Error (Faulting application name: w3wp.exe - Faulting module name: KERNELBASE.dll)

    Hello Guys,
    While running a web application am getting an error like: Remote server not responding. Below are the details of event viewers which been captured at the same time when this error happened:
    Event 1000, Application Error
    Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb
    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16850, time stamp: 0x4e211da1
    Exception code: 0xe053534f
    Fault offset: 0x000000000000a88d
    Faulting process id: 0x%9
    Faulting application start time: 0x%10
    Faulting application path: %11
    Faulting module path: %12
    Report Id: %13
    Event 1001, Windows Error Reporting
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: w3wp.exe
    P2: 7.5.7600.16385
    P3: 4a5bd0eb
    P4: KERNELBASE.dll
    P5: 6.1.7600.16850
    P6: 4e211da1
    P7: e053534f
    P8: 000000000000a88d
    P9: 
    P10: 
    Attached files:
    C:\Windows\Temp\WERC9CD.tmp.WERInternalMetadata.xml
    C:\Windows\Temp\WERC9CE.tmp.hdmp
    C:\Windows\Temp\WEREE30.tmp.mdmp
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_30877924d6b2c607fe88a8718915f25fb79093_cab_e905f2b0
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d46a6849-8f6a-11e1-98af-00215e6e4855
    Report Status: 4
    This is an priority issue which we are facing in IIS. IIS is configured for Framework 2.0 and underlying OS is - Windows
    Server 2008 R2 Standard.This issue is replicable and occurring frequently Please suggest how to resolve it. Any input related to above issue is appreciable.

    Please refer similar discussions and see if they help
    Faulting application name: w3wp.exe 
    http://telligent.com/support/communityserver/community_server_2008/f/288/t/1067447.aspx 
    Event ID: 1000, Faulting application w3wp.exe, faulting module unknown, 
    http://social.msdn.microsoft.com/forums/en-US/clr/thread/9be88a2f-c8cc-4a73-9371-45ab73982123
    For IIS related queries, please post them in IIS forum - http://forums.iis.net/
    A UNIVERSE without WINDOWS is CHAOS !
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
    About Me !!!

  • Faulting application name: w3wp.exe - and Faulting module path: C:\Windows\system32\KERNELBASE.dll

    The environment is aSharepoint2010 and ProjectServer2010we hadlast nighta crach ofapplication poolwithan error on thew3wpandkernelbase.
    We canrevivetheappbutthe firstaccess to the sitewe have thew3wpcrash.
    we did adumpand here are thedetails.
    Information 12/08/2014 15:28:45 Windows Error Reporting 1001 None
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: w3wp.exe
    P2: 7.5.7601.17514
    P3: 4ce7afa2
    P4: KERNELBASE.dll
    P5: 6.1.7601.18409
    P6: 5315a05a
    P7: c06d007e
    P8: 000000000000940d
    P9:
    P10:
    Attached files:
    These files may be available here:
    Analysis symbol:
    Rechecking for solution: 0
    Report Id: 9561bd5d-2224-11e4-9566-0050569a0110
    Report Status: 0
    Error 12/08/2014 15:28:46 Application Error 1000 (100)
    Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp:
    0x4ce7afa2
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x5315a05a
    Exception code: 0xc06d007e
    Fault offset: 0x000000000000940d
    Faulting process id: 0x15d0
    Faulting application start time: 0x01cfb6315831ebbb
    Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: 95eaafc7-2224-11e4-9566-0050569a0110
    Warning 12/08/2014 15:28:51 WAS 5011 None
    A process serving application pool 'SharePoint Central Administration v4'
    suffered a fatal communication error with the Windows Process Activation
    Service. The process id was '2448'. The data field contains the error number
    Error 12/08/2014 15:28:51 WAS 5002 None
    Application pool 'SharePoint Central Administration v4' is being automatically
    disabled due to a series of failures in the process(es) serving that
    application pool.
    Le dump du crach donne les informations suivantes
    (990.fb4): Unknown exception - code c06d007e (first/second chance not
    available)
    KERNELBASE!RaiseException+0x39:
    000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
    0:004> .loadby sos clr
    Unable to find module 'clr'
    0:004> .loadby sos clr
    Unable to find module 'clr'
    0:004> !analyze -v
    * Exception Analysis *
    GetPageUrlData failed, server returned HTTP status 404
    URL requested:
    http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
    FAULTING_IP:
    KERNELBASE!RaiseException+39
    000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
    EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 000007fefda5940d (KERNELBASE!RaiseException+0x0000000000000039)
    ExceptionCode: c06d007e
    ExceptionFlags: 00000000
    NumberParameters: 1
    Parameter[0]: 000000000092e820
    DEFAULT_BUCKET_ID: APPLICATION_FAULT
    PROCESS_NAME: w3wp.exe
    ERROR_CODE: (NTSTATUS) 0xc06d007e -
    <unable code="" error="" get="" text="" to="">
    EXCEPTION_CODE: (NTSTATUS) 0xc06d007e -
    <unable code="" error="" get="" text="" to="">
    EXCEPTION_PARAMETER1: 000000000092e820
    MOD_LIST:
    <analysis>
    NTGLOBALFLAG: 0
    APPLICATION_VERIFIER_FLAGS: 0
    MANAGED_STACK: !dumpstack -EE
    OS Thread Id: 0xfb4 (4)
    Child-SP RetAddr Call Site
    FAULTING_THREAD: 0000000000000fb4
    PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
    BUGCHECK_STR: APPLICATION_FAULT_APPLICATION_FAULT
    LAST_CONTROL_TRANSFER: from 000007fee99ed41d to 000007fefda5940d
    STACK_TEXT:
    00000000`0092e730 000007fe`e99ed41d : 00000000`00000000 00000000`00000000
    00000000`00000391 000007fe`e9b40cd0 : KERNELBASE!RaiseException+0x39
    00000000`0092e800 000007fe`e996d57f : 000007fe`e9c78e70 00000000`0092e820
    00000000`00000000 00000000`00000000 : OWSSVR!DllCanUnloadNow+0x8cfad
    00000000`0092e8b0 000007fe`e96c5244 : 00000000`0000000d 00000000`010dd4f0
    0000000f`001d000b 00000010`001a000c : OWSSVR!DllCanUnloadNow+0xd10f
    00000000`0092e920 000007fe`e96c5313 : 00000000`00000000 00000000`00328ad0
    00000000`778d4564 000007fe`e9c78e28 : OWSSVR!TerminateExtension+0x158
    00000000`0092eaa0 000007fe`e96c5379 : 00000000`0128fcd0 00000000`000000a4
    00000000`00000024 000007fe`faf11827 : OWSSVR!TerminateExtension+0x227
    00000000`0092ebf0 000007fe`e96c18d8 : 00000000`00000000 00000000`00000000
    00000000`01290840 00000000`00000021 : OWSSVR!TerminateExtension+0x28d
    00000000`0092ec20 000007fe`cf5cf94a : 00000000`00000000 00000000`01290840
    00000000`01290840 00000000`0128f800 : OWSSVR!RegisterModule+0x1c
    00000000`0092ec50 000007fe`cf5d9aa4 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : iiscore!VIRTUAL_MODULE::RegisterModule+0x2a
    00000000`0092ec80 000007fe`cf5daeeb : 00000000`00000078 000007fe`cf5ba944
    00000000`0128f800 000007fe`cf5e87b8 :
    iiscore!W3_SERVER::LoadModulesFromConfig+0x394
    00000000`0092eda0 000007fe`cf5dc2ff : 00000000`0128f800 000007fe`cf5e87b8
    00000000`00000000 00000000`0121fb10 :
    iiscore!W3_SERVER::InitializeGlobalModules+0x3b
    00000000`0092ede0 000007fe`cf5e234d : 00000000`0128f800 00000000`00000002
    00000000`0121fb10 00000000`0000017c : iiscore!W3_SERVER::Initialize+0xaaf
    00000000`0092f040 000007fe`cf5e2405 : 00000000`0128f6b0 00000000`00000000
    00000000`00000000 00000000`0000000c :
    iiscore!IISCORE_PROTOCOL_MANAGER::InitializeGlobals+0x1fd
    00000000`0092f2e0 000007fe`e27a9316 : 00000000`00000000 00000000`00000000
    00000000`005fa7e0 00000000`00000000 :
    iiscore!IISCORE_PROTOCOL_MANAGER::PreloadApplication+0x45
    00000000`0092f320 000007fe`e27a7dd2 : 00000000`005ff4b0 00000000`77997ef5
    00000000`0128f6b0 00000000`0021f070 :
    w3wphost!WP_IPM::HandlePreloadApplications+0xc2
    00000000`0092f370 000007fe`faf141f3 : 00000000`005ff508 00000000`00000000
    00000000`00000000 00000000`00000000 : w3wphost!WP_IPM::AcceptMessage+0x16e
    00000000`0092f3b0 00000000`77bbc251 : 00000000`00000000 00000000`003b3bf0
    00000000`00000000 00000000`0000000c : iisutil!IPM_MESSAGE_PIPE::MessagePipeCompletion+0x44f
    00000000`0092f430 00000000`77bc658c : 00000000`003b3b40 00000000`003693f0
    00000000`0092f5e8 00000000`00000000 : ntdll!RtlpTpWaitCallback+0x92
    00000000`0092f480 00000000`77bd0c56 : 00000000`0035d110 00000000`77cb45e8 00000000`00000000
    00000000`77cb4610 : ntdll!TppWaitpExecuteCallback+0x10c
    00000000`0092f4e0 00000000`779a59ed : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x5ff
    00000000`0092f7e0 00000000`77bdc541 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
    00000000`0092f810 00000000`00000000 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
    STACK_COMMAND: ~4s; .ecxr ; kb
    FOLLOWUP_IP:
    OWSSVR!DllCanUnloadNow+8cfad
    000007fe`e99ed41d 488b442458 mov rax,qword ptr [rsp+58h]
    SYMBOL_STACK_INDEX: 1
    SYMBOL_NAME: owssvr!DllCanUnloadNow+8cfad
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: OWSSVR
    IMAGE_NAME: OWSSVR.DLL
    DEBUG_FLR_IMAGE_TIMESTAMP: 51c91cf5
    FAILURE_BUCKET_ID: APPLICATION_FAULT_c06d007e_OWSSVR.DLL!DllCanUnloadNow
    BUCKET_ID: X64_APPLICATION_FAULT_APPLICATION_FAULT_owssvr!DllCanUnloadNow+8cfad
    WATSON_STAGEONE_URL:
    http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
    Followup: MachineOwner </analysis></unable></unable>

    Hello Roland_Zeki,
    Can you check System in the Windows Log of Event Viewer? Maybe you have some logon failure for one of the services, like in this blog:
    http://www.shareesblog.com/?p=363
    - Dennis | Netherlands | Blog |
    Twitter
    Yes I have verify this point I suspected to be the origine of the problem. But no, the accounts have fixed password and are not locked. I test this point with a valide login on the server, and I reenter the login password for each app pool.

  • Kernelbase.dll crash

    Hi Everyone,
    A Labview application I recently wrote crashed due to an error (code e0434352) in Kernelbase.dll. It had been running for several weeks, so the error really isn’t reproducible, but the application is meant to run without any human intervention so the crash is a pretty big deal for my customer.
    After a bit of googling I discovered that the particular error code was associated with the .NET CLR, so now I’m trying to figure out how my program caused it.
    My application is implemented using the actor framework and is running on a Windows 7 machine. It interacts with 2 spectrometers, a cDAQ with a DIO module, and a thermistor which I’m talking to with VISA USB RAW. The application also saves and loads various data and settings files. To my knowledge, Labview is implemented in C and shouldn’t run Microsoft’s CLR in any way. The only piece of my program I know of that needs it is the driver for the spectrometers (which calls a .NET wrapper from the device manufacturer).
    Right now I’m spending all of my effort investigating the spectrometer driver. However I wanted to check with the forum to make sure that there’s nothing I’m overlooking. Does anyone know of any other facets of Labview that are built on or rely on .NET? Or better yet, has anyone encountered a Kernelbase.dll failure before?
    Thanks for your help,
    -Gary

    Hello Gary117,
    I wasn't able to dig up any information linking LabVIEW and this Kernelbase error. e0434352 seems to be a very general error and doesn't really shed any light on the issue. I agree that the driver which calls the .NET wrapper is the most likely culprit. 
    Jonathan L.
    Applications Engineer
    National Instruments

Maybe you are looking for

  • Error while integrating Business rules (decision service) in BPEL

    hi' from some time I am struggling to integrate Business Rules with BPEL, I was successfully able to integrate it also. however now once again the same error has started coming. If it try to deploy the BPEL process it will give built failed but the B

  • How to determine the text on a given Mouse Location

    Hi friends, Can you people guide me with this feature? I'm using JTextPane & want to determine the text on a given Mouse Location on Mouse Click event. I consulted the docs but could'nt make out any methods providing this feature. Thanx in advance. A

  • Object Level Security,Data Level Security&Row level Security

    can anyone explain main difference between "Object Level Security,Data Level Security & Row Level Security " and how to implement. Thanks in advance, Kumar

  • Remove Control from Memory

    I've written a VI using VI Scripting that creates an Enum based on an array of Names.  For example, if I have an array with "Initialize", "Process", "Exit", I can create a control "State.ctl" consisting of an Enum with these values. The trouble comes

  • Help changing text fields background

    Hello, I need help changing the field text background color. In some forms I use read only field texts, and I would like those ones to have a different color (like gray) so it is easy to see they are read only.. How can I do that?? Thanks for your he