Iniciar sesión
 
InicioBibliotecaAprendizajeDescargaSoporteComunidadForos
Recursos para Profesionales de TI >
> 
> 
Application Error in Xp sp3

Unanswered Application Error in Xp sp3

  • jueves, 17 de marzo de 2011 19:18
     
     
    Inicie sesión para votar
    1

    Hi,

      We have around 300 and recently most of users faced some application related issue in their computers. Here I mentioned the some event ids

    Source : Application

    Event ID : 1000

    category : (100)

    Description : Faulting application spoolsv.exe version 5.1.2600.6024,faulty module unknown version 0.0.0.0, faulting address 0x004e0044

    Source : Application

    Event ID : 1000

    category : (100)

    Description : Faulting application drwtsn32.exe version 5.1.2600.0,faulty module dbghelp.dll version 5.1.2600.5512, faulting address 0x0001295d

     

    Source : Application

    Event ID : 1000

    category : None

    Description : Faulting application explorer.exe version 6.0.2900.5512,faulting module ntdll.dll version 5.1.2600.5755, faulty address 0x000108f3

    Source : Application

    Event ID : 1000

    category : None

    Description : Faulty application .winword.exe version 11.0.6359,stamp,faulting module zsdnt5ui.dll,version 0.3.1404.0,stamp 47a7b4e3, debug?0,faulty address 0x0000328e

    Among these errors the spoolersv,exe and Ms word are create more headache. 

    All are XP client with sp3 and antivirus also upto date.

    I have doubt that is it may virus activity also. For that reason we call logged to symantec and they confirmed that there is no virus issue in our org.

    We except permanent solution as well as root cause.

     

    Can anyone help

     

    Regards,

    Mani S

     

    Thanks & Regards, Mani S
     

Todas las respuestas

  • jueves, 17 de marzo de 2011 23:45
     
     
    Inicie sesión para votar
    0
    i suggest a complete windows update and finally download and run MicrosoftMSRT (malicious software removal tool) or trojan remover 
    Tunde Abagun MCP,MCSA,MCTS,MCITP en p "for the love of Computers"
     
  • lunes, 16 de julio de 2012 8:49
     
     
    Inicie sesión para votar
    0

    Confirm the problem for the latest XP prof SP3 (+ last windows updates):

    (edited, not necessarily, now it has consistently appears  ) <del> -problem for multi-users logon (without domain, only home machines, stable error on my PC):- </del>

    ("Send error reports" have been sent for last months, MS ignores this problem or may be it's Canon error (latest driver Canon i-sensys LBP5000) ?)

    ErrorText=This error occurred on 16.07.2012 at 11:53:41

    HeaderText=Spooler SubSystem App encountered a problem and needed to close.

    Stage1URL=/StageOne/spoolsv_exe/5_1_2600_6024/rpcrt4_dll/5_1_2600_6022/000068b6.htm
    Stage2URL=
    Stage2URL=/dw/stagetwo.asp?szAppName=spoolsv.exe&szAppVer=5.1.2600.6024&szModName=rpcrt4.dll&szModVer=5.1.2600.6022&offset=000068b6

    <MATCHING_FILE NAME="rpcrt4.dll" SIZE="590848" CHECKSUM="0x28AE8A0C"...>

    <MATCHING_FILE NAME="ntdll.dll" SIZE="718336" CHECKSUM="0x912EFCE4"...>

    <MATCHING_FILE NAME="user32.dll" SIZE="578560" CHECKSUM="0x6280E825"...>

    ----------------------------------

    02.07.2012 19:19 Application Error

    Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module rpcrt4.dll, version 5.1.2600.6022, fault address 0x000068b6

    02.07.2012 19:23 Application Error Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module ntdll.dll, version 5.1.2600.6055, fault address 0x000113c0.&#x000d;&#x000a;
    02.07.2012 19:27 Application Error Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module ntdll.dll, version 5.1.2600.6055, fault address 0x000113c0.&#x000d;&#x000a;
    02.07.2012 21:23 Application Error Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module rpcrt4.dll, version 5.1.2600.6022, fault address 0x000068b6.&#x000d;&#x000a;
    02.07.2012 21:23 Application Error Fault bucket 2059677587.&#x000d;&#x000a;
    02.07.2012 21:27 Application Error Faulting application spoolsv.exe, version 5.1.2600.6024, faulting module ntdll.dll, version 5.1.2600.6055, fault address 0x0001168b.&#x000d;&#x000a;
    02.07.2012 21:27 Application Error Fault bucket -1991050956.&#x000d;&#x000a;

    spoolsv.exe 5.1.2600.6024 - rpcrt4.dll 5.1.2600.6022 fault address 0x000068b6
    Fault bucket 2059677587 DrWatson : c0000005 at address 77E768B6 (RPCRT4!I_RpcBCacheFree)

    *----> State Dump for Thread Id 0xa9c <----*

    eax=0351bef8 ebx=00000000 ecx=00094d30 edx=00690071 esi=000c1c28 edi=0009bb70
    eip=77e768b6 esp=00aafda4 ebp=00aafdb0 iopl=0         nv up ei pl nz na pe nc
    cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202

    function: RPCRT4!I_RpcBCacheFree
            77e76877 90               nop
            77e76878 8bff             mov     edi,edi
            77e7687a 55               push    ebp
            77e7687b 8bec             mov     ebp,esp
            77e7687d 56               push    esi
            77e7687e 8b7508           mov     esi,[ebp+0x8]
            77e76881 83c6f8           add     esi,0xfffffff8
            77e76884 8b16             mov     edx,[esi]
            77e76886 4a               dec     edx
            77e76887 57               push    edi
            77e76888 0f88467e0100   js RPCRT4!RpcBindingInqAuthClientExA+0x2a8 (77e8e6d4)
            77e7688e 833dd4c2ef7700   cmp     dword ptr [RPCRT4+0x8c2d4 (77efc2d4)],0x0
            77e76895 0f85447e0100  jne RPCRT4!RpcBindingInqAuthClientExA+0x2b3 (77e8e6df)
            77e7689b 64a118000000     mov     eax,fs:[00000018]
            77e768a1 8b801c0f0000     mov     eax,[eax+0xf1c]
            77e768a7 85c0             test    eax,eax
            77e768a9 0f84307e0100   je RPCRT4!RpcBindingInqAuthClientExA+0x2b3 (77e8e6df)
            77e768af 8d7818           lea     edi,[eax+0x18]
            77e768b2 8d04d7           lea     eax,[edi+edx*8]
            77e768b5 53               push    ebx
    FAULT ->77e768b6 8b18             mov     ebx,[eax]         ds:0023:0351bef8=????????
            77e768b8 891e             mov     [esi],ebx
            77e768ba ff4004           inc     dword ptr [eax+0x4]
            77e768bd 8930             mov     [eax],esi
            77e768bf 8b1dd8c2ef77     mov     ebx,[RPCRT4+0x8c2d8 (77efc2d8)]
            77e768c5 8b4004           mov     eax,[eax+0x4]
            77e768c8 8d3452           lea     esi,[edx+edx*2]
            77e768cb 3b44b304         cmp     eax,[ebx+esi*4+0x4]
            77e768cf 5b               pop     ebx
            77e768d0 0f83b6060000     jnb     RPCRT4!I_RpcBCacheFree+0x8f9 (77e76f8c)
            77e768d6 5f               pop     edi
            77e768d7 5e               pop     esi
            77e768d8 5d               pop     ebp
            77e768d9 c20400           ret     0x4
            77e768dc 90               nop
            77e768dd 90               nop
            77e768de 90               nop
            77e768df 90               nop
            77e768e0 90               nop
            77e768e1 8bff             mov     edi,edi
            77e768e3 56               push    esi

    PS

    Checked:

    Windows-KB890830-V4.10.exe - OK

    MicrosoftFixit.Printing.Run.exe - OK











    • Editado Valera_ martes, 06 de noviembre de 2012 21:05
    •  
     
  • viernes, 17 de agosto de 2012 17:42
     
     
    Inicie sesión para votar
    0

    i suggest a complete windows update and finally download and run MicrosoftMSRT (malicious software removal tool) or trojan remover 

    but not in this case ;)

    • Editado Valera_ viernes, 17 de agosto de 2012 20:34
    •  
     
  • sábado, 15 de septiembre de 2012 17:33
     
     
    Inicie sesión para votar
    0

    continue....

    Today I sent about 100 reports to MS ;)

    In XP SP2 no problems. Canon drivers/service may be not good, but MS service crashed in sp3!!

    (Without Canon drivers - no crashes)

    ( i couldn't install Windows 7/8 on old machine, because of none video card drivers.)

    PS Reference http://social.technet.microsoft.com/Forums/en-US/itproxpsp/thread/f289fac8-3235-48f2-8ff5-a184a368a4d8/




    • Editado Valera_ domingo, 16 de septiembre de 2012 8:00
    •