Skype 6.18 APPCRASH KERNELBASE.DLL

Hello,
Skype will no longer start on my Windows 7 machine. I would be most grateful if anyone has the solution to this problem:
Problem signature:
Problem Event Name: APPCRASH
Application Name: Skype.exe
Application Version: 6.18.60.106
Application Timestamp: 53d154b0
Fault Module Name: KERNELBASE.dll
Fault Module Version: 6.1.7601.18409
Fault Module Timestamp: 53159a86
Exception Code: c06d007f
Exception Offset: 0000c42d
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 2057
Additional Information 1: c3c3
Additional Information 2: c3c3b9dc1858d65407ab6f51cc417a3c
Additional Information 3: 87b2
Additional Information 4: 87b2210c1c9696aafaf7609596af9dab
Many Thanks,
Paul
Solved!
Go to Solution.

Please,  run the DirectX diagnostics tool.
Go to Windows Start and in the Run box type dxdiag.exe and press the OK button. This will start the DirectX diagnostics program. Run this diagnostics and save the results to a file. Please, attach this file to your post.
Be aware that you will have to zip this file before attaching it here.

Similar Messages

  • APPCRASH KERNELBASE.dll error

    Hi there,
    Some of my Toshiba applications like Toshiba bulletin board, toshiba reeltime, toshiba blu-ray disc player and more have stopped working...
    here what it says
    <?xml version="1.0" encoding="UTF-16"?>
    -<WERReportMetadata> -<OSVersionInformation> <WindowsNTVersion>6.1</WindowsNTVersion> <Build>7601 Service Pack 1</Build> <Product>(0x3): Windows 7 Home Premium</Product> <Edition>HomePremium</Edition> <BuildString>7601.17835.amd64fre.win7sp1_gdr.120503-2030</BuildString> <Revision>1130</Revision> <Flavor>Multiprocessor Free</Flavor> <Architecture>X64</Architecture> <LCID>1033</LCID> </OSVersionInformation> -<ParentProcessInformation> <ParentProcessId>4600</ParentProcessId> <ParentProcessPath>C:\Windows\System32\wscript.exe</ParentProcessPath> <ParentProcessCmdLine>"C:\windows\System32\WScript.exe" "BDPlayerSetup.vbs" </ParentProcessCmdLine> </ParentProcessInformation> -<ProblemSignatures> <EventType>APPCRASH</EventType> <Parameter0>SMIPlayerSetup.exe</Parameter0> <Parameter1>1.0.0.0</Parameter1> <Parameter2>4d91350c</Parameter2> <Parameter3>KERNELBASE.dll</Parameter3> <Parameter4>6.1.7601.17651</Parameter4> <Parameter5>4e21213c</Parameter5> <Parameter6>e0434f4d</Parameter6> <Parameter7>000000000000cacd</Parameter7> </ProblemSignatures> -<DynamicSignatures> <Parameter1>6.1.7601.2.1.0.768.3</Parameter1> <Parameter2>1033</Parameter2> </DynamicSignatures> -<SystemInformation> <MID>DA47475B-D863-44CB-A0B8-F15FD9CF7ADD</MID> <MarkerFile>1179_TOSHIBA_na_Qosmio_F750_TI30785300B</MarkerFile> <SystemManufacturer>TOSHIBA</SystemManufacturer> <SystemProductName>Qosmio F750</SystemProductName> <BIOSVersion>Version 2.00</BIOSVersion> </SystemInformation> </WERReportMetadata>
    Please help me anyone... it's a new laptop and I need it to watch 3D with my toshiba blu-ray disc player
    Thanks.

    All of those applications have problems? Do you know what triggered this? What model number is it?
    - Peter

  • APPCRASH - KERNELBASE.dll

    Hi, just wondering how to solve this problem in DI API library. I've created a windows services that imports data from XML to SAP. Everytime the transactions complete. The services crash and its really frustrating. I've created the windows services using Visual Studio 2012 (VB.NET) 4.5 framework. This is not microsoft problem I think. Just wondering also, where did they create the SAPBobCOM.DLL? Is it .NET?

    Hi Eric,
         The memory leak is not the problem. Because this services read a folder which contain the XML file. So if there's no XML file. The function will return, it will not go to the DIAPI code. This is what I'm trying to say :
            Try
                If Directory.GetFiles(oPath, "" & fName & "*.xml", SearchOption.TopDirectoryOnly).Count = 0 Then
                    'oWriteText(oForm.lsViewLog, Now & " - " & "No file(s) found... on " & oPath, Color.Red)
                    Return
                End If
            Catch ex As Exception
                Return
            End Try
              If Not oConnectDI() Then Return
    Here's the exact error from event viewer :
    Application: SAP-BARTER Services.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: exception code e06d7363, exception address 76CA1D4D
    Faulting application name: SAP-BARTER Services.exe, version: 1.0.0.1, time stamp: 0x53d072da
    Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532943a3
    Exception code: 0xe06d7363
    Fault offset: 0x00011d4d
    Faulting process id: 0x2550
    Faulting application start time: 0x01cfa70467236c08
    Faulting application path: C:\Test_Services\SAP-BARTER Services.exe
    Faulting module path: C:\WINDOWS\SYSTEM32\KERNELBASE.dll
    Report Id: 3d86915c-12f8-11e4-bed6-0021ccd35b5e
    Faulting package full name:
    Faulting package-relative application ID:
    When you say specific program, means stand alone application?

  • APPCRASH iTunes.exe KERNELBASE.dll 6.1.7601.18015

    Dear All,
    APPCRASH iTunes.exe KERNELBASE.dll 6.1.7601.18015
    Problem Event Name:
    APPCRASH
      Application Name:
    iTunes.exe
      Application Version:
    11.0.5.5
      Application Timestamp:
    520e4d27
      Fault Module Name:
    KERNELBASE.dll
      Fault Module Version:
    6.1.7601.18015
      Fault Module Timestamp:
    50b83c8a
      Exception Code:
    c06d007e
      Exception Offset:
    0000c41f
      OS Version:
    6.1.7601.2.1.0.256.48
      Locale ID:
    16393
      Additional Information 1:
    0a9e
      Additional Information 2:
    0a9e372d3b4ad19135b953a78882e789
      Additional Information 3:
    0a9e
      Additional Information 4:
    0a9e372d3b4ad19135b953a78882e789
    when i connect to Itune stores

    Hi Ravishankys,
    If you are having an issue with iTunes unexpectedly quitting when you connect to the iTunes Store, you may find the following article helpful:
    iTunes for Windows Vista or Windows 7: Troubleshooting unexpected quits, freezes, or launch issues
    http://support.apple.com/kb/ts1717
    Regards,
    - Brenden

  • Premiere Appcrash with Kernelbase.dll as faulty module still the problem

    Hi everyone,
    After updating drivers related (Matrox, NVidia) to the problem and checking the hardware this problem persists:
    Problem signature:
    Problem Event Name: APPCRASH
    Application Name: Adobe Premiere Pro.exe
    Application Version: 5.0.3.0
    Application Timestamp: 4ce382d1
    Fault Module Name: KERNELBASE.dll
    Fault Module Version: 6.1.7601.17651
    Fault Module Timestamp: 4e21213c
    Exception Code: c0000005
    Exception Offset: 000000000000cacd
    OS Version: 6.1.7601.2.1.0.256.48
    Locale ID: 1043
    Additional Information 1: 30ea
    Additional Information 2: 30ea564650b9f04e24c8d0b10bbe1000
    Additional Information 3: 895c
    Additional Information 4: 895c2477ff9dd3b158f6107ec9f936c4
    What does kernelbase.dll do anyway? It seems to fail on particular Matrox HD clips, but only when I play them Premiere. It happens when I click the source window first and then the timeline and then start jogging or scrubbing in the timeline. It's the toggling between source and program in Premiere that triggers the appcrash for sure.
    So what does Premiere actually do when you switch from source to program monitor in the application itself? I did notice on my HDMI connected video monitor that when switching like mentioned, the monitor loses input signal and is scanning again. So I guess this switching is more complicated for Premiere than one could think.
    Any ideas yet? Nothing I tried really made a difference. I starting to panic a little now.
    Specs: Windows 7 64 bit, Matrox MX02 LE, NVidia Quadro 4000, 24 GB RAM, 2,66 dual sixcore CPU, mirrored video and OS disks.
    Using standard HD Matrox codec for Premiere.
    Any help much appreciated.

    Hi Eric,
    Thanks for replying. I found out about this version confusion, and I tried the 275.89 version, to no avail. I tried the latest one you mentioned (funny to find that one in the beta/archive category of drivers), the 285.58, also to no avail.
    In the meanwhile I decided to downgrade the NVidia drivers to version 266.45, which probably was the version installed on my system when I started to work with it in February 2011. I downgraded the Matrox Utilities to the earliest version for Premiere 5.0.3. This made a difference: only ONE project now gives me problems, and that is the same one the trouble all started with.
    So I considered the fact I could also be dealing with a corrupt project somehow. To experiment with this, I printed the EDLs of the sequences contained in the mentioned project and started to rebuild them from scratch in a fresh project, in fresh sequences.
    So far, there has been no appcrash of any kind. (?)
    My new theory is now that either a conflicting Windows update or an automatic NVidia driver update caused the problem in the first place, thereby leaving some kind of traces in the project I was working on at that moment. Consequently, this project seems to be corrupted now.
    Because of the NVidia driver issue I consider your answer to be the right one. After all, downgrading solved the problem for all other projects, and even working speed seems a tiny little bit faster (especially switching between source and program monitor). It makes one wonder what the use of automatic updates is anyway... but whatever.
    On the other hand I could be back on this forum anytime; my confidence in the Premiere/Matrox combination decreased significantly. Maybe the issue will be back tomorrow... if not today.
    Thanks for everything!

  • Hello friends, my itunes has stopped working. and the problem report stated the following: Fault Module Name:     KERNELBASE.dll   Fault Module Version:     6.1.7601.17514.................. please can anybody help me?hello friends, my itunes has stopped w

    Hello everybody> my itunes has stopped working and the problem report stated the following:
    Problem signature:
      Problem Event Name:    APPCRASH
      Application Name:    iTunes.exe
      Application Version:    10.5.3.3
      Application Timestamp:    4f14cc3d
      Fault Module Name:    KERNELBASE.dll
      Fault Module Version:    6.1.7601.17514
      Fault Module Timestamp:    4ce7b8f0
      Exception Code:    80000003
      Exception Offset:    0003381b
      OS Version:    6.1.7601.2.1.0.256.1
      Locale ID:    1033
      Additional Information 1:    0a9e
      Additional Information 2:    0a9e372d3b4ad19135b953a78882e789
      Additional Information 3:    0a9e
      Additional Information 4:    0a9e372d3b4ad19135b953a78882e789
    can anybody help me?

    Are you seeing a similar message when launching QuickTime Player?
    What security software is installed on the computer? Have you tried testing in an admin account or after uninstalling tthe security software?
    Use one of the following articles to guide you through removing iTunes and the related QuickTime files.
    Removing and Reinstalling iTunes, QuickTime, and other software components for Windows XP
    Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7

  • Itunes crashing on startup - Fault Module Name: KERNELBASE.dll

    Itunes keeps crashing 3 seconds after i open it and displays this message.
    I use windows seven and did not have this problem until 15 minutes ago. Any idea on how to fix this? i have updated to the latest itunes and no fix.
    thank you!!
    Problem signature:
      Problem Event Name:          APPCRASH
      Application Name:          iTunes.exe
      Application Version:          10.4.1.10
      Application Timestamp:          4e4e1904
      Fault Module Name:          KERNELBASE.dll
      Fault Module Version:          6.1.7600.16850
      Fault Module Timestamp:          4e21132b
      Exception Code:          80000003
      Exception Offset:          00031f66
      OS Version:          6.1.7600.2.0.0.256.1
      Locale ID:          1033
      Additional Information 1:          0a9e
      Additional Information 2:          0a9e372d3b4ad19135b953a78882e789
      Additional Information 3:          0a9e
      Additional Information 4:          0a9e372d3b4ad19135b953a78882e789

    I'm researching this now. I have the same problem. Here is what I'm comming up with. Is that there is a corruptioin in the registry (I know... big surprise with WIndows). And/or/related is that there is some corruption with the user profile. I'm not an IT guy so take my assesment with a grain of salt but this is how it's looking to me.
    Solution that might work:
    Launch into the command prompt as an administrator and run "sfc /scannow". for windows 8
    Russ

  • Event 1000, Application Error (Faulting application name: w3wp.exe - Faulting module name: KERNELBASE.dll)

    Hello Guys,
    While running a web application am getting an error like: Remote server not responding. Below are the details of event viewers which been captured at the same time when this error happened:
    Event 1000, Application Error
    Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb
    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16850, time stamp: 0x4e211da1
    Exception code: 0xe053534f
    Fault offset: 0x000000000000a88d
    Faulting process id: 0x%9
    Faulting application start time: 0x%10
    Faulting application path: %11
    Faulting module path: %12
    Report Id: %13
    Event 1001, Windows Error Reporting
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: w3wp.exe
    P2: 7.5.7600.16385
    P3: 4a5bd0eb
    P4: KERNELBASE.dll
    P5: 6.1.7600.16850
    P6: 4e211da1
    P7: e053534f
    P8: 000000000000a88d
    P9: 
    P10: 
    Attached files:
    C:\Windows\Temp\WERC9CD.tmp.WERInternalMetadata.xml
    C:\Windows\Temp\WERC9CE.tmp.hdmp
    C:\Windows\Temp\WEREE30.tmp.mdmp
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_30877924d6b2c607fe88a8718915f25fb79093_cab_e905f2b0
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d46a6849-8f6a-11e1-98af-00215e6e4855
    Report Status: 4
    This is an priority issue which we are facing in IIS. IIS is configured for Framework 2.0 and underlying OS is - Windows
    Server 2008 R2 Standard.This issue is replicable and occurring frequently Please suggest how to resolve it. Any input related to above issue is appreciable.

    Please refer similar discussions and see if they help
    Faulting application name: w3wp.exe 
    http://telligent.com/support/communityserver/community_server_2008/f/288/t/1067447.aspx 
    Event ID: 1000, Faulting application w3wp.exe, faulting module unknown, 
    http://social.msdn.microsoft.com/forums/en-US/clr/thread/9be88a2f-c8cc-4a73-9371-45ab73982123
    For IIS related queries, please post them in IIS forum - http://forums.iis.net/
    A UNIVERSE without WINDOWS is CHAOS !
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
    About Me !!!

  • Faulting application name: w3wp.exe - and Faulting module path: C:\Windows\system32\KERNELBASE.dll

    The environment is aSharepoint2010 and ProjectServer2010we hadlast nighta crach ofapplication poolwithan error on thew3wpandkernelbase.
    We canrevivetheappbutthe firstaccess to the sitewe have thew3wpcrash.
    we did adumpand here are thedetails.
    Information 12/08/2014 15:28:45 Windows Error Reporting 1001 None
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: w3wp.exe
    P2: 7.5.7601.17514
    P3: 4ce7afa2
    P4: KERNELBASE.dll
    P5: 6.1.7601.18409
    P6: 5315a05a
    P7: c06d007e
    P8: 000000000000940d
    P9:
    P10:
    Attached files:
    These files may be available here:
    Analysis symbol:
    Rechecking for solution: 0
    Report Id: 9561bd5d-2224-11e4-9566-0050569a0110
    Report Status: 0
    Error 12/08/2014 15:28:46 Application Error 1000 (100)
    Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp:
    0x4ce7afa2
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x5315a05a
    Exception code: 0xc06d007e
    Fault offset: 0x000000000000940d
    Faulting process id: 0x15d0
    Faulting application start time: 0x01cfb6315831ebbb
    Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: 95eaafc7-2224-11e4-9566-0050569a0110
    Warning 12/08/2014 15:28:51 WAS 5011 None
    A process serving application pool 'SharePoint Central Administration v4'
    suffered a fatal communication error with the Windows Process Activation
    Service. The process id was '2448'. The data field contains the error number
    Error 12/08/2014 15:28:51 WAS 5002 None
    Application pool 'SharePoint Central Administration v4' is being automatically
    disabled due to a series of failures in the process(es) serving that
    application pool.
    Le dump du crach donne les informations suivantes
    (990.fb4): Unknown exception - code c06d007e (first/second chance not
    available)
    KERNELBASE!RaiseException+0x39:
    000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
    0:004> .loadby sos clr
    Unable to find module 'clr'
    0:004> .loadby sos clr
    Unable to find module 'clr'
    0:004> !analyze -v
    * Exception Analysis *
    GetPageUrlData failed, server returned HTTP status 404
    URL requested:
    http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
    FAULTING_IP:
    KERNELBASE!RaiseException+39
    000007fe`fda5940d 4881c4c8000000 add rsp,0C8h
    EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 000007fefda5940d (KERNELBASE!RaiseException+0x0000000000000039)
    ExceptionCode: c06d007e
    ExceptionFlags: 00000000
    NumberParameters: 1
    Parameter[0]: 000000000092e820
    DEFAULT_BUCKET_ID: APPLICATION_FAULT
    PROCESS_NAME: w3wp.exe
    ERROR_CODE: (NTSTATUS) 0xc06d007e -
    <unable code="" error="" get="" text="" to="">
    EXCEPTION_CODE: (NTSTATUS) 0xc06d007e -
    <unable code="" error="" get="" text="" to="">
    EXCEPTION_PARAMETER1: 000000000092e820
    MOD_LIST:
    <analysis>
    NTGLOBALFLAG: 0
    APPLICATION_VERIFIER_FLAGS: 0
    MANAGED_STACK: !dumpstack -EE
    OS Thread Id: 0xfb4 (4)
    Child-SP RetAddr Call Site
    FAULTING_THREAD: 0000000000000fb4
    PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT
    BUGCHECK_STR: APPLICATION_FAULT_APPLICATION_FAULT
    LAST_CONTROL_TRANSFER: from 000007fee99ed41d to 000007fefda5940d
    STACK_TEXT:
    00000000`0092e730 000007fe`e99ed41d : 00000000`00000000 00000000`00000000
    00000000`00000391 000007fe`e9b40cd0 : KERNELBASE!RaiseException+0x39
    00000000`0092e800 000007fe`e996d57f : 000007fe`e9c78e70 00000000`0092e820
    00000000`00000000 00000000`00000000 : OWSSVR!DllCanUnloadNow+0x8cfad
    00000000`0092e8b0 000007fe`e96c5244 : 00000000`0000000d 00000000`010dd4f0
    0000000f`001d000b 00000010`001a000c : OWSSVR!DllCanUnloadNow+0xd10f
    00000000`0092e920 000007fe`e96c5313 : 00000000`00000000 00000000`00328ad0
    00000000`778d4564 000007fe`e9c78e28 : OWSSVR!TerminateExtension+0x158
    00000000`0092eaa0 000007fe`e96c5379 : 00000000`0128fcd0 00000000`000000a4
    00000000`00000024 000007fe`faf11827 : OWSSVR!TerminateExtension+0x227
    00000000`0092ebf0 000007fe`e96c18d8 : 00000000`00000000 00000000`00000000
    00000000`01290840 00000000`00000021 : OWSSVR!TerminateExtension+0x28d
    00000000`0092ec20 000007fe`cf5cf94a : 00000000`00000000 00000000`01290840
    00000000`01290840 00000000`0128f800 : OWSSVR!RegisterModule+0x1c
    00000000`0092ec50 000007fe`cf5d9aa4 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : iiscore!VIRTUAL_MODULE::RegisterModule+0x2a
    00000000`0092ec80 000007fe`cf5daeeb : 00000000`00000078 000007fe`cf5ba944
    00000000`0128f800 000007fe`cf5e87b8 :
    iiscore!W3_SERVER::LoadModulesFromConfig+0x394
    00000000`0092eda0 000007fe`cf5dc2ff : 00000000`0128f800 000007fe`cf5e87b8
    00000000`00000000 00000000`0121fb10 :
    iiscore!W3_SERVER::InitializeGlobalModules+0x3b
    00000000`0092ede0 000007fe`cf5e234d : 00000000`0128f800 00000000`00000002
    00000000`0121fb10 00000000`0000017c : iiscore!W3_SERVER::Initialize+0xaaf
    00000000`0092f040 000007fe`cf5e2405 : 00000000`0128f6b0 00000000`00000000
    00000000`00000000 00000000`0000000c :
    iiscore!IISCORE_PROTOCOL_MANAGER::InitializeGlobals+0x1fd
    00000000`0092f2e0 000007fe`e27a9316 : 00000000`00000000 00000000`00000000
    00000000`005fa7e0 00000000`00000000 :
    iiscore!IISCORE_PROTOCOL_MANAGER::PreloadApplication+0x45
    00000000`0092f320 000007fe`e27a7dd2 : 00000000`005ff4b0 00000000`77997ef5
    00000000`0128f6b0 00000000`0021f070 :
    w3wphost!WP_IPM::HandlePreloadApplications+0xc2
    00000000`0092f370 000007fe`faf141f3 : 00000000`005ff508 00000000`00000000
    00000000`00000000 00000000`00000000 : w3wphost!WP_IPM::AcceptMessage+0x16e
    00000000`0092f3b0 00000000`77bbc251 : 00000000`00000000 00000000`003b3bf0
    00000000`00000000 00000000`0000000c : iisutil!IPM_MESSAGE_PIPE::MessagePipeCompletion+0x44f
    00000000`0092f430 00000000`77bc658c : 00000000`003b3b40 00000000`003693f0
    00000000`0092f5e8 00000000`00000000 : ntdll!RtlpTpWaitCallback+0x92
    00000000`0092f480 00000000`77bd0c56 : 00000000`0035d110 00000000`77cb45e8 00000000`00000000
    00000000`77cb4610 : ntdll!TppWaitpExecuteCallback+0x10c
    00000000`0092f4e0 00000000`779a59ed : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x5ff
    00000000`0092f7e0 00000000`77bdc541 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
    00000000`0092f810 00000000`00000000 : 00000000`00000000 00000000`00000000
    00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
    STACK_COMMAND: ~4s; .ecxr ; kb
    FOLLOWUP_IP:
    OWSSVR!DllCanUnloadNow+8cfad
    000007fe`e99ed41d 488b442458 mov rax,qword ptr [rsp+58h]
    SYMBOL_STACK_INDEX: 1
    SYMBOL_NAME: owssvr!DllCanUnloadNow+8cfad
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: OWSSVR
    IMAGE_NAME: OWSSVR.DLL
    DEBUG_FLR_IMAGE_TIMESTAMP: 51c91cf5
    FAILURE_BUCKET_ID: APPLICATION_FAULT_c06d007e_OWSSVR.DLL!DllCanUnloadNow
    BUCKET_ID: X64_APPLICATION_FAULT_APPLICATION_FAULT_owssvr!DllCanUnloadNow+8cfad
    WATSON_STAGEONE_URL:
    http://watson.microsoft.com/StageOne/w3wp_exe/7_5_7601_17514/4ce7afa2/KERNELBASE_dll/6_1_7601_18409/5315a05a/c06d007e/0000940d.htm?Retriage=1
    Followup: MachineOwner </analysis></unable></unable>

    Hello Roland_Zeki,
    Can you check System in the Windows Log of Event Viewer? Maybe you have some logon failure for one of the services, like in this blog:
    http://www.shareesblog.com/?p=363
    - Dennis | Netherlands | Blog |
    Twitter
    Yes I have verify this point I suspected to be the origine of the problem. But no, the accounts have fixed password and are not locked. I test this point with a valide login on the server, and I reenter the login password for each app pool.

  • Resource Hosting Subsystem process crashes from KERNELBASE.dll

    Hi,
    I have 2 2013 Exchange servers in a DAG configuration. The passive member (I'll refer to it as EX02) is experiencing an issue where the Cluster Service crashes almost immediately after it is started. I've experienced this with this particular DAG before
    and ultimately ended up rebuilding the entire DAG from scratch to fix the issue, however it seems to have returned and now need a root cause analysis and fix. I've attached 4 Event Logs that have allowed me to drill down to the problem component but am at
    a loss on how to proceed next.  Initially, when checking the cluster using Failover Cluster Manager, the EX02 node goes back and forth between "Joining" and "Down". This is a result of the Cluster Service constantly crashing and restarting
    since it is set to auto restart after an unexpected termination.  
    Looking at the 1146 Event ID, I saw this points to the Resource Hosting Subsystem as part of the issue and that this process experienced an issue with a .dll it's using.  I then discovered this was the KERNELBASE.dll via the various other log entries
    I've included below. I haven't been able to find anyone else that's ran into this particular scenario and am not sure what needs to be done to correct this behavior. If anyone has any insight to this issue, it would be greatly appreciated. If any additional
    information is needed from me, please let me know as well. 
     Log Name:      System
    Source:        Microsoft-Windows-FailoverClustering
    Date:          3/3/2015 2:34:59 PM
    Event ID:      1146
    Task Category: Resource Control Manager
    Level:         Critical
    Keywords:      
    User:          SYSTEM
    Computer:      ****-EX02.****.com
    Description:
    The cluster Resource Hosting Subsystem (RHS) process was terminated and will be restarted. This is typically associated with cluster health detection and recovery of a resource. Refer to the System event log to determine which resource and resource DLL is causing the issue.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-FailoverClustering" Guid="{BAF908EA-3421-4CA9-9B84-6689B8C6F85F}" />
        <EventID>1146</EventID>
        <Version>0</Version>
        <Level>1</Level>
        <Task>3</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:34:59.261068900Z" />
        <EventRecordID>286364</EventRecordID>
        <Correlation />
        <Execution ProcessID="4716" ThreadID="4996" />
        <Channel>System</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="NodeName">****-EX02</Data>
      </EventData>
    </Event>    
    Log Name:      Application
    Source:        Application Error
    Date:          3/3/2015 2:36:13 PM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      ****-EX02.****.com
    Description:
    Faulting application name: clussvc.exe, version: 6.3.9600.17396, time stamp: 0x5434db7b
    Faulting module name: KERNELBASE.dll, version: 6.3.9600.17415, time stamp: 0x54505737
    Exception code: 0x80000003
    Fault offset: 0x00000000000de002
    Faulting process id: 0x31c8
    Faulting application start time: 0x01d055f1a860f6f2
    Faulting application path: C:\Windows\Cluster\clussvc.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: ee64313c-c1e4-11e4-80da-005056010d14
    Faulting package full name: 
    Faulting package-relative application ID: 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:36:13.000000000Z" />
        <EventRecordID>264219</EventRecordID>
        <Channel>Application</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>clussvc.exe</Data>
        <Data>6.3.9600.17396</Data>
        <Data>5434db7b</Data>
        <Data>KERNELBASE.dll</Data>
        <Data>6.3.9600.17415</Data>
        <Data>54505737</Data>
        <Data>80000003</Data>
        <Data>00000000000de002</Data>
        <Data>31c8</Data>
        <Data>01d055f1a860f6f2</Data>
        <Data>C:\Windows\Cluster\clussvc.exe</Data>
        <Data>C:\Windows\system32\KERNELBASE.dll</Data>
        <Data>ee64313c-c1e4-11e4-80da-005056010d14</Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          3/3/2015 2:36:14 PM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      ****-EX02.****.com
    Description:
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: clussvc.exe
    P2: 6.3.9600.17396
    P3: 5434db7b
    P4: KERNELBASE.dll
    P5: 6.3.9600.17415
    P6: 54505737
    P7: 80000003
    P8: 00000000000de002
    P9: 
    P10: 
    Attached files:
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_clussvc.exe_fcdf2bbcddca922c916880dbb49ce3cd5175efef_f6feed2e_3a22d925
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: ee64313c-c1e4-11e4-80da-005056010d14
    Report Status: 4100
    Hashed bucket: 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2015-03-03T20:36:14.000000000Z" />
        <EventRecordID>264220</EventRecordID>
        <Channel>Application</Channel>
        <Computer>****-EX02.****.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>APPCRASH</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>clussvc.exe</Data>
        <Data>6.3.9600.17396</Data>
        <Data>5434db7b</Data>
        <Data>KERNELBASE.dll</Data>
        <Data>6.3.9600.17415</Data>
        <Data>54505737</Data>
        <Data>80000003</Data>
        <Data>00000000000de002</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_clussvc.exe_fcdf2bbcddca922c916880dbb49ce3cd5175efef_f6feed2e_3a22d925</Data>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>ee64313c-c1e4-11e4-80da-005056010d14</Data>
        <Data>4100</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Version=1
    EventType=APPCRASH
    EventTime=130698881964369580
    ReportType=2
    Consent=1
    ReportIdentifier=0d8e824c-c1e4-11e4-80da-005056010d14
    IntegratorReportIdentifier=0d8e824b-c1e4-11e4-80da-005056010d14
    NsAppName=clussvc.exe
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=clussvc.exe
    Sig[1].Name=Application Version
    Sig[1].Value=6.3.9600.17396
    Sig[2].Name=Application Timestamp
    Sig[2].Value=5434db7b
    Sig[3].Name=Fault Module Name
    Sig[3].Value=KERNELBASE.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=6.3.9600.17415
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=54505737
    Sig[6].Name=Exception Code
    Sig[6].Value=80000003
    Sig[7].Name=Exception Offset
    Sig[7].Value=00000000000de002
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.3.9600.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=a80b
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=a80b5d7481362c8eeb76a77903fa82d6
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=a1f8
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=a1f83374660c205ca4489043b9691b2f
    UI[2]=C:\Windows\Cluster\clussvc.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Microsoft Failover Cluster Service stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\Cluster\clussvc.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\system32\KERNEL32.DLL
    LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\system32\msvcrt.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[6]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[7]=C:\Windows\SYSTEM32\CLUSAPI.dll
    LoadedModule[8]=C:\Windows\system32\CRYPT32.dll
    LoadedModule[9]=C:\Windows\SYSTEM32\dhcpcsvc.DLL
    LoadedModule[10]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[11]=C:\Windows\SYSTEM32\NTDSAPI.dll
    LoadedModule[12]=C:\Windows\system32\ole32.dll
    LoadedModule[13]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[14]=C:\Windows\SYSTEM32\RESUTILS.dll
    LoadedModule[15]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[16]=C:\Windows\SYSTEM32\SspiCli.dll
    LoadedModule[17]=C:\Windows\SYSTEM32\sscore.dll
    LoadedModule[18]=C:\Windows\system32\USER32.dll
    LoadedModule[19]=C:\Windows\SYSTEM32\VSSAPI.DLL
    LoadedModule[20]=C:\Windows\SYSTEM32\wevtapi.dll
    LoadedModule[21]=C:\Windows\system32\WS2_32.dll
    LoadedModule[22]=C:\Windows\system32\NSI.dll
    LoadedModule[23]=C:\Windows\SYSTEM32\WINNSI.DLL
    LoadedModule[24]=C:\Windows\SYSTEM32\FirewallAPI.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\bcrypt.dll
    LoadedModule[26]=C:\Windows\SYSTEM32\NETAPI32.dll
    LoadedModule[27]=C:\Windows\SYSTEM32\FLTLIB.DLL
    LoadedModule[28]=C:\Windows\system32\SETUPAPI.dll
    LoadedModule[29]=C:\Windows\SYSTEM32\DEVOBJ.dll
    LoadedModule[30]=C:\Windows\SYSTEM32\fwpuclnt.dll
    LoadedModule[31]=C:\Windows\SYSTEM32\VirtDisk.dll
    LoadedModule[32]=C:\Windows\SYSTEM32\clfsw32.dll
    LoadedModule[33]=C:\Windows\SYSTEM32\DSPARSE.dll
    LoadedModule[34]=C:\Windows\SYSTEM32\cryptdll.dll
    LoadedModule[35]=C:\Windows\system32\MSASN1.dll
    LoadedModule[36]=C:\Windows\SYSTEM32\combase.dll
    LoadedModule[37]=C:\Windows\system32\GDI32.dll
    LoadedModule[38]=C:\Windows\SYSTEM32\VssTrace.DLL
    LoadedModule[39]=C:\Windows\SYSTEM32\DSROLE.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\bcd.dll
    LoadedModule[41]=C:\Windows\SYSTEM32\netutils.dll
    LoadedModule[42]=C:\Windows\SYSTEM32\srvcli.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\wkscli.dll
    LoadedModule[44]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[45]=C:\Windows\SYSTEM32\DPAPI.DLL
    LoadedModule[46]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[47]=C:\Windows\SYSTEM32\SAMCLI.DLL
    LoadedModule[48]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
    LoadedModule[49]=C:\Windows\SYSTEM32\sscoreext.dll
    LoadedModule[50]=C:\Windows\SYSTEM32\mi.dll
    LoadedModule[51]=C:\Windows\SYSTEM32\miutils.dll
    LoadedModule[52]=C:\Windows\system32\wmidcom.dll
    LoadedModule[53]=C:\Windows\SYSTEM32\kernel.appcore.dll
    LoadedModule[54]=C:\Windows\SYSTEM32\ntmarta.dll
    LoadedModule[55]=C:\Windows\SYSTEM32\dhcpcsvc6.DLL
    LoadedModule[56]=C:\Windows\SYSTEM32\clbcatq.dll
    LoadedModule[57]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[58]=C:\Windows\SYSTEM32\wbemcomn.dll
    LoadedModule[59]=C:\Windows\SYSTEM32\CRYPTSP.dll
    LoadedModule[60]=C:\Windows\system32\rsaenh.dll
    LoadedModule[61]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[62]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[63]=C:\Windows\SYSTEM32\pcwum.dll
    LoadedModule[64]=C:\Windows\system32\mswsock.dll
    LoadedModule[65]=C:\Windows\system32\WINTRUST.dll
    LoadedModule[66]=C:\Windows\SYSTEM32\logoncli.dll
    LoadedModule[67]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[68]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[69]=C:\Windows\system32\kerberos.DLL
    LoadedModule[70]=C:\Windows\SYSTEM32\SAMLIB.dll
    LoadedModule[71]=C:\Windows\system32\es.dll
    LoadedModule[72]=C:\Windows\system32\PROPSYS.dll
    LoadedModule[73]=C:\Windows\SYSTEM32\profapi.dll
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=Microsoft Failover Cluster Service
    AppPath=C:\Windows\Cluster\clussvc.exe
    NsPartner=windows
    NsGroup=windows8
    ApplicationIdentity=78F1110F74732BD871C9A3C553A667E4

    Got a window to reboot the EX02 machine and this seems to have solved the issue. Cluster Service is stable again and DAG is healthy. This issue can be marked as answered.
    I have this same issue, and it appears to manifest whenever there is a network disruption.  After network is restored, the cluster service repeatedly crashes until a reboot.  I'm not sure if a reboot is a real fix.  I'm curious whether
    yours returns if you unplug the network cable and plug it back in on your server, like mine.

  • Application Error - Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385

    Hi,
    we have one Visual C++ application and this application also using few external dlls. while exiting from application, getting following error. This
    is happened in Windows 7.
    Please help us to resolve this issue.
    Log Name:     
    Application
    Source:       
    Application Error
    Date:         
    28/07/2010 11:44:16 AM
    Event ID:     
    1000
    Task Category: (100)
    Level:        
    Error
    Keywords:     
    Classic
    User:         
    N/A
    Computer:     
    CRIWKS12.crillylaw.local
    Description:
    Faulting application name: WinTest.exe, version: 2.7.1.0, time stamp: 0x4b78d5b8
    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdaae
    Exception code: 0x0eedfade
    Fault offset: 0x00009617
    Faulting process id: 0x10b8
    Faulting application start time: 0x01cb2df647dfd847
    Faulting application path: C:\Program Files\xxx\xxx\xxx\ WinTest.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: a17377fd-99e9-11df-8941-90fba60d7539
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-07-28T01:44:16.000000000Z" />
    <EventRecordID>3773</EventRecordID>
    <Channel>Application</Channel>
    <Computer>CRIWKS12.crillylaw.local</Computer>
    <Security />
    </System>
    <EventData>
    <Data> WinTest.exe</Data>
    <Data>2.7.1.0</Data>
    <Data>4b78d5b8</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.1.7600.16385</Data>
    <Data>4a5bdaae</Data>
    <Data>0eedfade</Data>
    <Data>00009617</Data>
    <Data>10b8</Data>
    <Data>01cb2df647dfd847</Data>
    <Data>C:\Program Files\xxx\xxx\xxx\ WinTest.exe</Data>
    <Data>C:\Windows\system32\KERNELBASE.dll</Data>
    <Data>a17377fd-99e9-11df-8941-90fba60d7539</Data>
    </EventData>
    </Event>
    PS. I apologise for not being able to provide the application's name.

    Hi Jesse ,
    I am pasting the entire module where the code fails:
    /// <summary>
    /// Pool the job execution status
    /// </summary>
    private void PoolJobExecutionStatus()
    int waitIndex = 0;
    while (true)
    try
    lock (this.lockingObject)
    this.ReOpenRegistryConnection();
    currentJob = SR.Job.Load(this.currentJobId, this.poolingConnection);
    JobStatusEventArgs jobStatusArg = (currentJob.Status == SR.JobStatus.Aborted) ?
    new JobStatusEventArgs(currentJob.Name, currentJob.Status, currentJob.ErrorMessage) :
    new JobStatusEventArgs(currentJob.Name, currentJob.Status);
    this.dispatcher.BeginInvoke(new EventHandler<JobStatusEventArgs>(RaiseUpdateStatus), DispatcherPriority.Normal, new object[] { this, jobStatusArg });
    if (currentJob.Status == JobStatus.Aborted || currentJob.Status == JobStatus.Completed)
    this.PoolJobThread.Abort();
    break;
    catch (ThreadAbortException)
    catch (ConnectionFailure ex)
    TridentErrorHandler.HandleUIException(ex);
    // If reconnection fails more than the max reconnection value then exit.
    if (this.connectionAttempts >= this.maxConnectionAttempts)
    break;
    this.connectionAttempts++;
    catch (BackendStorageException ex)
    TridentErrorHandler.HandleUIException(ex);
    // If reconnection fails 5 times then exit.
    if (this.connectionAttempts >= this.maxConnectionAttempts)
    break;
    this.connectionAttempts++;
    catch (Exception ex)
    TridentErrorHandler.HandleUIException(ex);
    break;
    try
    Thread.Sleep(500);
    // If job is in waiting state, every 3 min show the user retry message.
    // (waitIndex == 360) Specifes 3 min.
    if (currentJob.Status == JobStatus.Waiting && waitIndex == 360)
    waitIndex = 0;
    JobStatusEventArgs jobStatusArg = new JobStatusEventArgs(this.currentJob.Name, this.currentJob.Status, TridentResourceManager.GetString("JobTerminatedByUserMessage"));
    this.dispatcher.BeginInvoke(new EventHandler<JobStatusEventArgs>(RaiseUpdateStatus), DispatcherPriority.Normal, new object[] { this, jobStatusArg });
    catch (Exception ex)
    TridentErrorHandler.HandleUIException(ex);
    waitIndex++;
    public void StartDataProductService(Guid jobId, Connection poolConnection)
    this.currentJobId = jobId;
    this.poolingConnection = poolConnection;
    this.ClearTempData();
    this.HaltService();
    this.PoolJobThread = new Thread(this.PoolJobExecutionStatus);
    this.PoolJobThread.Start();
    Hope this helps
    Regards,
    Rahul

  • Server 2008 R2 Terminal Server c0000005 and c0000006 errors with KERNELBASE.dll error in RDP sessions.

    We installed a new Server 2008 R2 server this spring. It is configured as a Terminal Server with 16 Wyse t10 thin clients connecting with RDP. We are a small resort so we run Springer Miller Host and SpaSoft. Ever since moving from PCs to the thin clients
    and TS we have been seeing SpaSoft randomly crash with KERNELBASE.dll errors and also a lot of c0000005 and c0000006 errors. Springer Miller support says its a Microsoft Networking issue so no help there. The company we worked with to install this has no clue
    so I hope to reach out to this community to solve this. I can also open support case with Microsoft Support but I am not sure if they will be of any help. Here are some examples of the errors:
    "Event 1000
    Faulting application name: SpaWin.exe, version: 3.4.0.0, time stamp: 0x2a425e19
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
    Exception code: 0x0eedfade
    Fault offset: 0x0000c42d
    Faulting process id: 0x3718
    Faulting application start time: 0x01cf9ac7922487e9
    Faulting application path: \\spasoft\spaapps\TermServ\SpaWin.exe
    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
    Report Id: cfdcf9a9-06ba-11e4-a5af-000c298d9aa5"
    Also:
    "Faulting application name: VH.EXE, version: 18.80.430.0, time stamp: 0x3f73b447
    Faulting module name: VFP8R.DLL, version: 8.0.0.3117, time stamp: 0x3f73c232
    Exception code: 0xc0000006
    Fault offset: 0x0001d598
    Faulting process id: 0x2bc8
    Faulting application start time: 0x01cf99297ee1742f
    Faulting application path: J:\HOSTPLUS\fxp32\VH.EXE
    Faulting module path: J:\HOSTPLUS\fxp32\VFP8R.DLL
    Report Id: 5fbc65c4-055c-11e4-a5af-000c298d9aa5"
    And:
    "Faulting application name: SpaWin.exe, version: 3.4.0.0, time stamp: 0x2a425e19
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x00000000
    Faulting process id: 0x2aa0
    Faulting application start time: 0x01cf988e6770e619
    Faulting application path: \\spasoft\spaapps\TermServ\SpaWin.exe
    Faulting module path: unknown
    Report Id: 01029179-04b9-11e4-a5af-000c298d9aa5"
    There are no network specific errors in any of the logs. I am thinking that SpaSoft needs to be run as an administrator but I am not sure how to do that in this environment. We have disabled DEP for all but essential Windows processes. All of the firewall
    and AV has been completely disabled, and still getting these errors. Is there a way to run these applications as admin without the user actually being an admin? Should I go ahead and open a Microsoft support case? Thanks

    Hi,
    Thank you for posting in Windows Server Forum.
    Explanation
    The indicated program stopped unexpectedly. The message contains details on which program and module stopped. A matching event with Event ID 1001 might also appear in the event log. This matching event displays information about the specific error that occurred.
    User Action
    If an error report was generated for this error, you might be able to obtain more information about the error by sending the report to Microsoft for analysis.
    Yeah, you can open a support case with Microsoft as they will help and guide you for proper solution. You can go through
    this source article.
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c

    Hi,
    Good day!
    I'm having this issue when I just installed an application. I have been searching this kernelbase.dll thing but none of them have fix or any workaround. Hopefully with the great technical guys here can help me with this issue.
    The server is windows 2008 R2
    From the event viewer I got this
    Faulting application name: Tlc.LogManager.Svc.exe, version: 7.0.1.5108, time stamp: 0x51d1ee27
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c
    Exception code: 0xe0434352
    Fault offset: 0x000000000000cacd
    Faulting process id: 0x1130
    Faulting application start time: 0x01cf6dbd862da5b1
    Faulting application path: D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
    Application: Tlc.LogManager.Svc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ArgumentNullException
    Stack:
       at Tlc.CapCollector.Common.CapPersistentStateManager..ctor(Tlc.Interfaces.BusinessObjects.IAssetBusinessObject, Tlc.PersistentState.IPersistentStateStore, Tlc.Interfaces.ApplicationLog.IApplicationLog, Int32, Tlc.CapCollector.AgentDiscovery.CapAgentAutoDiscovery)
       at Tlc.LogManager.Lib.ascMan.OnMessageBusStart(Tlc.Interfaces.MessageBus.IMessageBus, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog, Tlc.Interfaces.ApplicationLog.IApplicationLog)
       at Tlc.MessageBus.ActiveMQMessageBus.Start()
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
       at System.Threading.ThreadHelper.ThreadStart()
    Fault bucket , type 0
    Event Name: CLR20r3
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: tlc.logmanager.svc.exe
    P2: 7.0.1.5108
    P3: 51d1ee27
    P4: Tlc.CapCollector
    P5: 7.0.1.5108
    P6: 51d1edf4
    P7: f2
    P8: 34
    P9: System.ArgumentNullException
    P10:
    Attached files:
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_tlc.logmanager.s_4d5cd055f698b9b7d9e989629dd2eb52d0be2b_1a6a145b
    Analysis symbol:
    Rechecking for solution: 0
    Report Id: fefb5c84-d9b0-11e3-9578-5ef3fcdc0b9f
    Version=1
    EventType=CLR20r3
    EventTime=130443543988233973
    ReportType=2
    Consent=1
    ReportIdentifier=8c35a7c6-d9a9-11e3-9578-5ef3fcdc0b9f
    IntegratorReportIdentifier=8c35a7c5-d9a9-11e3-9578-5ef3fcdc0b9f
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=tlc.logmanager.svc.exe
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=7.0.1.5108
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=51d1ee27
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=Tlc.CapCollector
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=7.0.1.5108
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=51d1edf4
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=f2
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=34
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=System.ArgumentNullException
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=18441
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=3ada
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=3adac3ca3b54f3f7659e16fb4fdadcbe
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=b033
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=b0336032f99007ec98baa22debc5fb25
    UI[2]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    UI[3]=Tlc.LogManager.Svc has stopped working
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Tlc.LogManager.Svc stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[6]=C:\Windows\system32\msvcrt.dll
    LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[8]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[9]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[10]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[11]=C:\Windows\system32\GDI32.dll
    LoadedModule[12]=C:\Windows\system32\USER32.dll
    LoadedModule[13]=C:\Windows\system32\LPK.dll
    LoadedModule[14]=C:\Windows\system32\USP10.dll
    LoadedModule[15]=C:\Windows\system32\IMM32.DLL
    LoadedModule[16]=C:\Windows\system32\MSCTF.dll
    LoadedModule[17]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    LoadedModule[18]=C:\Windows\system32\MSVCR100_CLR0400.dll
    LoadedModule[19]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\bc19222db4406c472d9aa1f8b6e0f470\mscorlib.ni.dll
    LoadedModule[20]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    LoadedModule[21]=C:\Windows\system32\ole32.dll
    LoadedModule[22]=C:\Windows\system32\CRYPTBASE.dll
    LoadedModule[23]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[24]=C:\Windows\system32\rsaenh.dll
    LoadedModule[25]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\0f8f78b729ce16dd078f5d5f734a1110\System.ni.dll
    LoadedModule[26]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\7b167f31f23d4aed19dfa65ad3d29480\System.ServiceProcess.ni.dll
    LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[29]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Zip.v5.1.dll
    LoadedModule[30]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.GZip.v5.1.dll
    LoadedModule[31]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Tar.v5.1.dll
    LoadedModule[32]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.Formats.v5.1.dll
    LoadedModule[33]=C:\Windows\system32\VERSION.dll
    LoadedModule[34]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Common.dll
    LoadedModule[35]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.FileSystem.v5.1.dll
    LoadedModule[36]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Xceed.Compression.v5.1.dll
    LoadedModule[37]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Lib.dll
    LoadedModule[38]=C:\Windows\assembly\GAC_MSIL\VistaDB.4\4.1.0.0__dfc935afe2125461\VistaDB.4.dll
    LoadedModule[39]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Interfaces.dll
    LoadedModule[40]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Enums.dll
    LoadedModule[41]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\7a93c267da35a5f16b6fa5a10482eb4e\System.Core.ni.dll
    LoadedModule[42]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\5a47dfd0b200a502a4d5d27ee99bcc3c\System.Data.ni.dll
    LoadedModule[43]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    LoadedModule[44]=C:\Windows\system32\WS2_32.dll
    LoadedModule[45]=C:\Windows\system32\NSI.dll
    LoadedModule[46]=C:\Windows\system32\CRYPT32.dll
    LoadedModule[47]=C:\Windows\system32\MSASN1.dll
    LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\5d9f385419332f14eaf937556199856f\System.Xml.ni.dll
    LoadedModule[49]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Client.dll
    LoadedModule[50]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\5ac492f703d6d741140f7cd45ef3c746\System.Data.Services.Client.ni.dll
    LoadedModule[51]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dal.LogManager.Local.dll
    LoadedModule[52]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\c41b30de7215a62c8ca5bfe6e04ea763\System.Data.Entity.ni.dll
    LoadedModule[53]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.DataAccess.Config.dll
    LoadedModule[54]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Log.dll
    LoadedModule[55]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Utils.dll
    LoadedModule[56]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogMessageClassifier.dll
    LoadedModule[57]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Wintellect.PowerCollections.dll
    LoadedModule[58]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorks.dll
    LoadedModule[59]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\11581b5eba4b3ff58441c638ab66c742\System.Configuration.ni.dll
    LoadedModule[60]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\7e5af1fdbcffeab8daffc7633f9c337a\System.Web.ni.dll
    LoadedModule[61]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1266d26c7b7843d308e2705cb8239d55\System.Drawing.ni.dll
    LoadedModule[62]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\f0acb5c0e7dc2c42c6c61f3aa1278338\System.Windows.Forms.ni.dll
    LoadedModule[63]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CommonAssemblyInfo.dll
    LoadedModule[64]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\gdiplus.dll
    LoadedModule[65]=C:\Windows\system32\WindowsCodecs.dll
    LoadedModule[66]=C:\Windows\system32\shell32.dll
    LoadedModule[67]=C:\Windows\system32\profapi.dll
    LoadedModule[68]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
    LoadedModule[69]=C:\Windows\system32\USERENV.dll
    LoadedModule[70]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[71]=C:\Windows\system32\urlmon.dll
    LoadedModule[72]=C:\Windows\system32\WININET.dll
    LoadedModule[73]=C:\Windows\system32\iertutil.dll
    LoadedModule[74]=C:\Windows\system32\SspiCli.dll
    LoadedModule[75]=C:\Windows\system32\shfolder.dll
    LoadedModule[76]=C:\Windows\system32\bcrypt.dll
    LoadedModule[77]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c080a9ed31f78466f2400bba623af2f8\System.Configuration.Install.ni.dll
    LoadedModule[78]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\6cd002594b56953e9c210581e7f3f3cd\System.Web.Services.ni.dll
    LoadedModule[79]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.PersistentState.dll
    LoadedModule[80]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Mitre.CommonEventExpression.dll
    LoadedModule[81]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.ClientServer.Communications.dll
    LoadedModule[82]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\215d813343ba0950ad6e148e2098018b\System.Numerics.ni.dll
    LoadedModule[83]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\da51604aa808b94c181181b37c727078\System.Management.ni.dll
    LoadedModule[84]=C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\af08f116e2c31d2c65bd492804fb2fef\Microsoft.VisualBasic.ni.dll
    LoadedModule[85]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[86]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\wminet_utils.dll
    LoadedModule[87]=C:\Windows\system32\CLBCatQ.DLL
    LoadedModule[88]=C:\Windows\system32\wbem\wmiutils.dll
    LoadedModule[89]=C:\Windows\system32\wbemcomn.dll
    LoadedModule[90]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[91]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[92]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[93]=C:\Windows\system32\NTDSAPI.dll
    LoadedModule[94]=C:\Windows\system32\mswsock.dll
    LoadedModule[95]=C:\Windows\System32\wshtcpip.dll
    LoadedModule[96]=C:\Windows\System32\wship6.dll
    LoadedModule[97]=C:\Windows\system32\DNSAPI.dll
    LoadedModule[98]=C:\Windows\system32\IPHLPAPI.DLL
    LoadedModule[99]=C:\Windows\system32\WINNSI.DLL
    LoadedModule[100]=C:\Windows\system32\rasadhlp.dll
    LoadedModule[101]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[102]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.MySql.dll
    LoadedModule[103]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\122cea70c5d0d591f9af1f4316848fd1\System.Transactions.ni.dll
    LoadedModule[104]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    LoadedModule[105]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Devart.Data.dll
    LoadedModule[106]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSL.dll
    LoadedModule[107]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\850abdea1c65b88ba24a77f0191caea8\System.Data.OracleClient.ni.dll
    LoadedModule[108]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    LoadedModule[109]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\9d14b7bc969452800c0456286309d41d\System.Xml.Linq.ni.dll
    LoadedModule[110]=C:\Windows\assembly\GAC_MSIL\VistaDB.Entities.4\4.1.0.0__dfc935afe2125461\VistaDB.Entities.4.dll
    LoadedModule[111]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.ni.dll
    LoadedModule[112]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\48264d6ad04173a3a82cc06b70c5cd28\System.EnterpriseServices.Wrapper.dll
    LoadedModule[113]=C:\Windows\Microsoft.Net\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    LoadedModule[114]=C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    LoadedModule[115]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\08fba6b56d838ad48b4451c82e5728d4\System.Runtime.Serialization.ni.dll
    LoadedModule[116]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.RuleEngine.dll
    LoadedModule[117]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.EventForwarder.dll
    LoadedModule[118]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Lucene.Net.dll
    LoadedModule[119]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\d072039db89cac96d9e0b1ae9b3a94f4\System.ServiceModel.ni.dll
    LoadedModule[120]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\43f892698b9de4d752c13cc2d91ff16d\System.ServiceModel.Web.ni.dll
    LoadedModule[121]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\ac74a156499a8303d5788ab299881d5d\SMDiagnostics.ni.dll
    LoadedModule[122]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\2f02efd9ddb7417ffd5c06cfe6e865ca\System.Runtime.DurableInstancing.ni.dll
    LoadedModule[123]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\33ac21194152cf9a89b82d9cd38b398d\System.IdentityModel.ni.dll
    LoadedModule[124]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\535e182d16212c61bc8b22e0309d3362\System.Xaml.ni.dll
    LoadedModule[125]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\84226b67f4623bd3b0dde9aa00c5c88d\System.Data.Services.ni.dll
    LoadedModule[126]=C:\Windows\system32\pcwum.DLL
    LoadedModule[127]=C:\Windows\system32\httpapi.dll
    LoadedModule[128]=C:\Windows\system32\cryptnet.dll
    LoadedModule[129]=C:\Windows\system32\WLDAP32.dll
    LoadedModule[130]=C:\Windows\system32\SensApi.dll
    LoadedModule[131]=C:\Windows\system32\dsrole.dll
    LoadedModule[132]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.MessageBus.dll
    LoadedModule[133]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.dll
    LoadedModule[134]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Google.ProtocolBuffers.dll
    LoadedModule[135]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSH.dll
    LoadedModule[136]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Reports.dll
    LoadedModule[137]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\SecureBlackbox.dll
    LoadedModule[138]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.GenericDbLogCollector.dll
    LoadedModule[139]=C:\Windows\system32\ntmarta.dll
    LoadedModule[140]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\perfcounter.dll
    LoadedModule[141]=C:\Windows\system32\pdh.dll
    LoadedModule[142]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.System.dll
    LoadedModule[143]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
    LoadedModule[144]=C:\Windows\system32\aspnet_counters.dll
    LoadedModule[145]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_perf.dll
    LoadedModule[146]=C:\Windows\system32\Secur32.dll
    LoadedModule[147]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[148]=C:\Windows\system32\security.dll
    LoadedModule[149]=C:\Windows\system32\credssp.dll
    LoadedModule[150]=C:\Windows\system32\schannel.DLL
    LoadedModule[151]=C:\Windows\system32\ncrypt.dll
    LoadedModule[152]=C:\Windows\system32\bcryptprimitives.dll
    LoadedModule[153]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\nsoftware.IPWorksSSNMP.dll
    LoadedModule[154]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Apache.NMS.ActiveMQ.dll
    LoadedModule[155]=C:\Windows\system32\NLAapi.dll
    LoadedModule[156]=C:\Windows\system32\napinsp.dll
    LoadedModule[157]=C:\Windows\System32\winrnr.dll
    LoadedModule[158]=C:\Windows\system32\rasman.dll
    LoadedModule[159]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapCollector.dll
    LoadedModule[160]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.CapIDL.dll
    LoadedModule[161]=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.Dto.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Tlc.LogManager.Svc
    AppPath=D:\Program Files (x86)\Tripwire\Tripwire Log Center Manager\Tlc.LogManager.Svc.exe

    Hi Ross Rene,
    Sorry for the delay.
    Please make sure the App is compatible with the .Net framework installed, please check the .net version.
    Best Regards,
    Anna

  • ScanEngineTest.exe and KERNELBASE.dll Errors

    I have a new install of Exchange 2013 (SP1, CU6) and I am receiving errors every 30 minutes. They appear to be happening when Exchange tries to test the scan engine update.  Here are the errors: Any suggestions would be appreciated!
    Chris
    Log Name:      Application
    Source:        Application Error
    Date:          9/22/2014 11:03:43 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      removed
    Description:
    Faulting application name: ScanEngineTest.exe, version: 15.0.995.21, time stamp: 0x53d065d3
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.17046, time stamp: 0x53b4864c
    Exception code: 0xc0000142
    Fault offset: 0x00000000000e2000
    Faulting process id: 0x3b2c
    Faulting application start time: 0x01cfd67ec8a828c8
    Faulting application path: C:\Program Files\Microsoft\Exchange Server\V15\FIP-FS\Bin\ScanEngineTest.exe
    Faulting module path: KERNELBASE.dll
    Report Id: 0667c791-4272-11e4-93f9-00155d641207
    Faulting package full name: 
    Faulting package-relative application ID:
    Log Name:      Application
    Source:        Microsoft-Filtering-FIPFS
    Date:          9/22/2014 11:03:44 AM
    Event ID:      6035
    Task Category: None
    Level:         Warning
    Keywords:      
    User:          NETWORK SERVICE
    Computer:      vm-vhex.vbartlett.org
    Description:
    MS Filtering Engine Update process was unsuccessful in testing an engine update. 
     Engine: Microsoft
     LastCheckedTime:‎2014‎-‎09‎-‎22T16:03:44.000Z

    Hi
    Try disabling/re-enabling the malware scanning component.
    Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Kernelbase.dll crash

    Hi Everyone,
    A Labview application I recently wrote crashed due to an error (code e0434352) in Kernelbase.dll. It had been running for several weeks, so the error really isn’t reproducible, but the application is meant to run without any human intervention so the crash is a pretty big deal for my customer.
    After a bit of googling I discovered that the particular error code was associated with the .NET CLR, so now I’m trying to figure out how my program caused it.
    My application is implemented using the actor framework and is running on a Windows 7 machine. It interacts with 2 spectrometers, a cDAQ with a DIO module, and a thermistor which I’m talking to with VISA USB RAW. The application also saves and loads various data and settings files. To my knowledge, Labview is implemented in C and shouldn’t run Microsoft’s CLR in any way. The only piece of my program I know of that needs it is the driver for the spectrometers (which calls a .NET wrapper from the device manufacturer).
    Right now I’m spending all of my effort investigating the spectrometer driver. However I wanted to check with the forum to make sure that there’s nothing I’m overlooking. Does anyone know of any other facets of Labview that are built on or rely on .NET? Or better yet, has anyone encountered a Kernelbase.dll failure before?
    Thanks for your help,
    -Gary

    Hello Gary117,
    I wasn't able to dig up any information linking LabVIEW and this Kernelbase error. e0434352 seems to be a very general error and doesn't really shed any light on the issue. I agree that the driver which calls the .NET wrapper is the most likely culprit. 
    Jonathan L.
    Applications Engineer
    National Instruments

Maybe you are looking for