none
Spooler SubSystem App has stopped working

    Question

  • Hi,

    I am running Windows Vista Business SP2 32-bit on a COMPAQ 6710B laptop.

    I am receiving the following Message in the Event Viewer, with the details, while trying to install a Printer.

    Faulting application spoolsv.exe, version 6.0.6002.18005, time stamp 0x49e02592, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000, process id 0x14ac, application start time 0x01cc8195153b0748.

     

    Log Name:      Application

    Source:        Application Error

    Date:          10/3/2011 11:54:20 AM

    Event ID:      1000

    Task Category: (100)

    Level:         Error

    Keywords:      Classic

    User:          N/A

    Computer:     

    Description:

    Faulting application spoolsv.exe, version 6.0.6002.18005, time stamp 0x49e02592, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000, process id 0x14ac, application start time 0x01cc8195153b0748.

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

      <System>

        <Provider Name="Application Error" />

        <EventID Qualifiers="0">1000</EventID>

        <Level>2</Level>

        <Task>100</Task>

        <Keywords>0x80000000000000</Keywords>

        <TimeCreated SystemTime="2011-10-03T06:24:20.000Z" />

        <EventRecordID>1281</EventRecordID>

        <Channel>Application</Channel>

        <Computer></Computer>

        <Security />

      </System>

      <EventData>

        <Data>spoolsv.exe</Data>

        <Data>6.0.6002.18005</Data>

        <Data>49e02592</Data>

        <Data>unknown</Data>

        <Data>0.0.0.0</Data>

        <Data>00000000</Data>

        <Data>c0000005</Data>

        <Data>00000000</Data>

        <Data>14ac</Data>

        <Data>01cc8195153b0748</Data>

      </EventData>

    </Event>

     

    I had re-installed (Clean Installation) Vista on this computer

    Actually this happened to me on another computer also where I had installed Vista newly. The common thing in both these installations was the Vista media which was a Vista with SP2 DVD. I downloaded this media from TechNet. By any chance could this be a problem? But both these machines had Vista Product Keys, that I used to activate them. I couldn't solve the problem on the other Vista machine that time and had to downgrade it to Windows XP. But I do not want to do this with this laptop.

     

    I am also copying here the information from the log file generated by the Installation Utility of the MFP M5035 which is a multifunctional product running fine in other Vista computers.

      

    10/3/2011 18:11:59 Starting HP Driver Installation Utility.
    10/3/2011 18:11:59 HP Driver Installation Utility version: 2.6.2.9
    10/3/2011 18:11:59 Command Line Arguments:-path "C:\HP_LJ_M5025_M5035MFP_PCL6_32bit" /showext /nolic

    10/3/2011 18:11:59 Loading settings file: hpdiu.settings from C:\HP_LJ_M5025_M5035MFP_PCL6_32bit\hpdiu.settings
    10/3/2011 18:11:59 ----------------------------------------
    10/3/2011 18:11:59 Driver Location (<drivers_path>): driver
    10/3/2011 18:11:59 Driver INF Filename (<driver_inf_file>):  hpc5035c.inf
    10/3/2011 18:11:59 WARNING: Unable to get Driver Type (<driver_type>) from settings file. Using default type Printer.
    10/3/2011 18:11:59 Converged IO Path (<dot4_path>): driver
    10/3/2011 18:11:59 Converged IO Inf (<dot4_inf>): hpzid413.inf
    10/3/2011 18:11:59 Converged IO Inf (<dot4_inf>): hpzipa13.inf
    10/3/2011 18:11:59 Converged IO Inf (<dot4_inf>): hpzipr13.inf
    10/3/2011 18:11:59 Converged IO Inf (<dot4_inf>): hpzius13.inf
    10/3/2011 18:11:59 Converged IO Inf (<dot4_inf>): hpzist13.inf
    10/3/2011 18:11:59 HP Standard Port Monitor path (<port_monitor_path>):  HP TCP Port Monitor
    10/3/2011 18:11:59 HP Standard Port Monitor msi name (<port_monitor_msi_name>):  HPTcpMon.msi
    10/3/2011 18:11:59 Device Model Name (<device_model_name>): HP LaserJet M5035 MFP
    10/3/2011 18:11:59 Driver Model Name (<driver_model_name>): HP LaserJet M5035 MFP PCL 6
    10/3/2011 18:11:59 Device Vid Pid (<vid_pid>): vid_03f0&PID_7217
    10/3/2011 18:11:59 WARNING : Unable to retrieve device name  (<device_name>) for model (<model>) element from settings file. Driver model name (<driver_model_name>) will be used to name the device during installation.
    10/3/2011 18:11:59 Device Model Name (<device_model_name>): HP LaserJet M5025 MFP
    10/3/2011 18:11:59 Driver Model Name (<driver_model_name>): HP LaserJet M5025 MFP PCL 6
    10/3/2011 18:11:59 Device Vid Pid (<vid_pid>): vid_03f0&PID_7917
    10/3/2011 18:11:59 WARNING : Unable to retrieve device name  (<device_name>) for model (<model>) element from settings file. Driver model name (<driver_model_name>) will be used to name the device during installation.
    10/3/2011 18:11:59 INFO: Unable to get Next Steps Application (<next_steps_application>) from settings file.
    10/3/2011 18:11:59 INFO: Unable to get NextSteps Command Line Arguments (<next_steps_cmdline>) from settings file.
    10/3/2011 18:11:59 INFO : Unable to retrieve display name (<display_name>) from settings file.
    10/3/2011 18:11:59 Display Name (<display_name>): HP LaserJet M5025 MFP PCL 6, HP LaserJet M5035 MFP PCL 6
    10/3/2011 18:11:59 INFO: Unable to get HPSIU Executable Path (<hpsiu_path>) from settings file.
    10/3/2011 18:11:59 ----------------------------------------

    10/3/2011 18:11:59 ERROR : Outer EnumPrinterDrivers failed getting size.
    10/3/2011 18:11:59 Driver to be Installed Version Timestamp : 06/01/2008
    10/3/2011 18:11:59 Driver to be Installed Version : 61.082.61.41
    10/3/2011 18:11:59 Found File inside the System32 Folder.
    Path : C:\Windows\system32\DriverStore\FileRepository\hpc5035c.inf_eae0b38e\hpc5035c.inf
    10/3/2011 18:11:59 Driver to be Installed Version Timestamp : 06/01/2008
    10/3/2011 18:11:59 Driver to be Installed Version : 61.082.61.41
    10/3/2011 18:11:59 Drivers for this Printer is Identical to one already Installed.

    10/3/2011 18:12:37 HPDIUNetwork Command Line Arguments: -x 293 -y 112 -s hpdiu.settings  -lang ENWW  -title "HP LaserJet M5025 MFP PCL 6, HP LaserJet M5035 MFP PCL 6"  -ipaddressvalidation "192.168.1.12" -modelname "HP LaserJet M5035 MFP|HP LaserJet M5025 MFP"
    10/3/2011 18:12:37 csIPAddress is this 192.168.1.12
    10/3/2011 18:12:37 m_IPAddr is not IPv6 address so ipaddress(IPv4) : 192.168.1.12
    10/3/2011 18:12:37 INFO: IPv6 communication is available.

    10/3/2011 18:12:37 Valid IP Address Passed.

    10/3/2011 18:12:39 Return Value of Network 010/3/2011 18:12:39 Installing HP TCP/IP Port Monitor....Successful.
    10/3/2011 18:12:46 Network Installation using IP Address Started.

    10/3/2011 18:12:46 HPDIUNetwork Command Line Arguments: -x 293 -y 112 -s hpdiu.settings  -lang ENWW  -title "HP LaserJet M5025 MFP PCL 6, HP LaserJet M5035 MFP PCL 6"  -ipaddress "192.168.1.12" -modelname "HP LaserJet M5035 MFP|HP LaserJet M5025 MFP"
    10/3/2011 18:12:46 csIPAddress is this 192.168.1.12
    10/3/2011 18:12:46 m_IPAddr is not IPv6 address so ipaddress(IPv4) : 192.168.1.12
    10/3/2011 18:12:46 INFO: IPv6 communication is available.

    10/3/2011 18:12:46 Valid IP Address Passed.
    10/3/2011 18:12:48 192.168.1.12 Network IP Found.
    10/3/2011 18:12:48 Model Name Access Successful. Model Name Obtained from Printer :HP LaserJet M5035 MFP
    10/3/2011 18:12:48 Model Name Obtained from Settings File :HP LaserJet M5035 MFP|HP LaserJet M5025 MFP
    10/3/2011 18:12:48 Model Names Obtained from Printer and Settings File match each Other.
    10/3/2011 18:12:48 HPDIU_192.168.1.12 Valid Port Syntax.
    10/3/2011 18:12:52 Unable to Create Port  HPDIU_192.168.1.12
    10/3/2011 18:12:52 Port Creation Failed
    10/3/2011 18:12:52 @@Entering WriteDataFile
    10/3/2011 18:12:52 Creating Empty Data File : C:\Users\...\AppData\Local\Temp\hpdiu2\HPDIU\hpdiu.data ... Successful.
    10/3/2011 18:12:52 @@Writing Data
    10/3/2011 18:12:52 @@Writing Elements
    10/3/2011 18:12:52 @@Getting Next Element
    10/3/2011 18:12:52 @@Element DeviceModelName:HP LaserJet M5035 MFP
    10/3/2011 18:12:52 @@Entering WriteElement
    10/3/2011 18:12:52 @@Opening xml data file
    10/3/2011 18:12:52 @@Adding child element
    10/3/2011 18:12:52 @@Saving XML file...@@Successful
    10/3/2011 18:12:52 @@Finished Writing Elements
    10/3/2011 18:12:52 @@Finished Writing Data
    10/3/2011 18:12:52 @@Exiting WriteDataFile

    10/3/2011 18:12:52 Return Value of Network 110/3/2011 18:12:52  ERROR : Network Evaluation Error.

     

    Please let me know if any other information provided by me could help to solve this issue....Unable to Print!

     

    Regards

    Yagyesh


    Monday, October 03, 2011 1:44 PM

Answers

  • Hi,

     

    You may refer to the Event ID 72 — Print Processor Availability to remove the printer driver and go to the following steps to check if the related files and subdirectories are deleted.

     

    Boot into safe mode, deleted files and subdirectories in the c:\windows\system32\spool\printers and the c:\windows\system32\spool\drivers\w32x.

     

    Before you modify the registry, please make a backup for your registry first, you can refer to the following link:

     

    Back up the registry

     

    Enter the Registry editor:

    Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environment\Windows NT x86

    There should only be the following keys:

    - Drivers

    - Print Processors

    If there are any other keys, export, and then delete.

     

    Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

    There should only be the following keys:

    BJ Language Monitor

    Local Port

    PJL Language Monitor

    Standard TCP/IP Port

    USB Monitor

    If there are any other keys, export, and then delete.

     

    Disconnected the printer.

    Reboot

     

    Connect the printer, follow manufacturers installation instructions and test.

     

    Regards,

     

    Sabrina


    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Yagyesh Sharma Thursday, October 13, 2011 5:22 AM
    Monday, October 10, 2011 5:53 AM
  • Hi,

    After my last post here, I again removed the Printer Drivers details from the Registry, as suggested by Sabrina.

    And this time after restarting the Computer, I checked and found the Spooler Service to be running.

    Then I downloaded the latest driver for the default printer HP MFP M5035x, and was able to install it without any problems. I have not tried installing any other printers at this point; just to observe for some time if the Spooler Service continue to run without any downtime. The Spooler Service is now running without any problems since yesterday and I am able to print.

    "So basically, I suspect one of the printer's driver to be the cause of problem with the Spooler Service."

    Another point I want to mention here is that I also selected LPD and LPR, and removed Internet Printing Client, as suggested here: http://social.technet.microsoft.com/Forums/en/itprovistaprinting/thread/460f297a-dd66-4476-a176-542e1519ca3e, in the course of troubleshooting this issue.

    Thanks

    Yagyesh 


    Thursday, October 13, 2011 5:21 AM

All replies

  • I Suggest you to try to Restart the Spooler Services By : s

     

    Start --> ( In Search Box ) Type Services --> Print Spooler --> Restart

     

    After Restart try to Print Any thing !!

     

    Regards,

     


    MCP | MCTS | MCITP
    Monday, October 03, 2011 1:49 PM
  • Hi,

     

    You may refer to the following articles to troubleshoot this issue:

     

    Printer problems in Windows

     

    Error message: Spooler subsystem app has encountered a problem and needs to close

     

    Regards,

     

    Sabrina


    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, October 05, 2011 4:58 AM
  • Hi,

     

    Go to Start / Run and type in "services.msc" without quotation marks, then press Enter or click OK.

    In the window that opens (Services) look for "Print Spooler" on the right

    Right-click "Print Spooler" and select "Properties".
    bl
    Click on the "Recovery" tab and change all 3 drop-down boxes to "Restart The Service".

    Make sure the 2 text boxes underneath say "1" in them.

    Click Ok until you are back at the Services window, close it and you're good to go.

    Go back into the properties of the "Print Spooler" tab and be sure to click Start to restart the Print Spooler service and it will restart the service immediately.

    The Print spooler depends on the Remote Procedure Call (RPC) service. Is this service disabled? Go to services.msc look for RPC. Check state: Automatic

    Wednesday, October 05, 2011 5:43 AM
  • Thanks to all for your responses. I shall be able to get back to you by Friday as there is a two day holiday in our place.

    Though I had tried doing what Rashid had suggested, and the following message popped up while trying to nstall the printer again: Spooler SubSystem App was closed
    To help protect your computer, Data Execution Prevention has closed Spooler SubSystem App. Click to learn more.

    And the following Event was logged.

    Log Name:      System
    Source:        Service Control Manager
    Date:          10/4/2011 4:41:52 PM
    Event ID:      7034
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:     
    Description:
    The Print Spooler service terminated unexpectedly.  It has done this 5 time(s).
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
        <EventID Qualifiers="49152">7034</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-10-04T11:11:52.000Z" />
        <EventRecordID>19123</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer> </Computer>
        <Security />
      </System>
      <EventData>
        <Data Name="param1">Print Spooler</Data>
        <Data Name="param2">5</Data>
      </EventData>
    </Event> 

    Thanks

    Yagyesh

    Wednesday, October 05, 2011 9:13 AM
  • Hi Thomas,  RPC was Automatic, and I did what you said. But then the message window with:  "Spooler SubSystem App was closed
    To help protect your computer, Data Execution Prevention has closed Spooler SubSystem App. Click to learn more." kept popping up continuously.

    Also I tried your suggestion, Sabrina. The "Fix it" program could not solve the problem though it ran and completed without any errors. Then I tried the manual instructions. And upon running the Printer Installation utility, it was able to cross one stage now, where it says "Create Ports" (earlier it was not completing this even!). But failed after that. And I am still not able to install a Printer.

    I checked the Windows Event Logs, and found this new log entry there.

    Log Name:      System
    Source:        Microsoft-Windows-PrintSpooler
    Date:          10/7/2011 6:31:51 PM
    Event ID:      72
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:     
    Description:
    Windows could not initialize printer HP LaserJet M5035 MFP PCL 6 because the print processor HPCPP6de could not be found. Please obtain and install a new version of the driver from the manufacturer (if available), or choose an alternate driver that works with this print device.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-PrintSpooler" Guid="{e4c60dfa-ecc5-4889-b406-e9ddd38463c8}" EventSourceName="Print" />
        <EventID Qualifiers="49152">72</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-10-07T13:01:51.000Z" />
        <EventRecordID>87123</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer></Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="param1">HP LaserJet M5035 MFP PCL 6</Data>
        <Data Name="param2">HPCPP6de</Data>
      </EventData>
    </Event>

    I also want to mention that there was a message from Error Reporting, and I have the files "hdmp" and "mdmp" files if these could be of any use in diagnosing the problem - how could I send these to yourself?

    Regards

    Yagyesh

     


    • Edited by Yagyesh Sharma Sunday, October 09, 2011 4:52 PM addition of details
    Sunday, October 09, 2011 4:50 PM
  • Hi,

     

    You may refer to the Event ID 72 — Print Processor Availability to remove the printer driver and go to the following steps to check if the related files and subdirectories are deleted.

     

    Boot into safe mode, deleted files and subdirectories in the c:\windows\system32\spool\printers and the c:\windows\system32\spool\drivers\w32x.

     

    Before you modify the registry, please make a backup for your registry first, you can refer to the following link:

     

    Back up the registry

     

    Enter the Registry editor:

    Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environment\Windows NT x86

    There should only be the following keys:

    - Drivers

    - Print Processors

    If there are any other keys, export, and then delete.

     

    Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

    There should only be the following keys:

    BJ Language Monitor

    Local Port

    PJL Language Monitor

    Standard TCP/IP Port

    USB Monitor

    If there are any other keys, export, and then delete.

     

    Disconnected the printer.

    Reboot

     

    Connect the printer, follow manufacturers installation instructions and test.

     

    Regards,

     

    Sabrina


    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Yagyesh Sharma Thursday, October 13, 2011 5:22 AM
    Monday, October 10, 2011 5:53 AM
  • Thanks Sabrina. I tried all what you had mentioned. Actually there were no Drivers, but I removed the Ports.

    I had an observation while working in the Registry that I want to bring to your notice. Though I had done what you said to do in the Registry, I was unable to Add/ Install a Printer before this action of mine: I found the "Print Processors" Key missing, and I just created one under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86. And to my surprise I was able to Install all the Printers :-)

    And then I restarted the computer, and all went back to where it started - the Spooler Service stopped running; the Data Execution Prevention message window started popping up again. And now I am again unable to install a printer at all. Although I went back to the registry to check if the "Print Processors" Key is still there or not. And yeah, it is there.

    Regards

    Yagyesh

    Monday, October 10, 2011 5:22 PM
  • Hi,

    After my last post here, I again removed the Printer Drivers details from the Registry, as suggested by Sabrina.

    And this time after restarting the Computer, I checked and found the Spooler Service to be running.

    Then I downloaded the latest driver for the default printer HP MFP M5035x, and was able to install it without any problems. I have not tried installing any other printers at this point; just to observe for some time if the Spooler Service continue to run without any downtime. The Spooler Service is now running without any problems since yesterday and I am able to print.

    "So basically, I suspect one of the printer's driver to be the cause of problem with the Spooler Service."

    Another point I want to mention here is that I also selected LPD and LPR, and removed Internet Printing Client, as suggested here: http://social.technet.microsoft.com/Forums/en/itprovistaprinting/thread/460f297a-dd66-4476-a176-542e1519ca3e, in the course of troubleshooting this issue.

    Thanks

    Yagyesh 


    Thursday, October 13, 2011 5:21 AM
  • None of these solutions worked for me.  I had stopped the spooler, cleaned out the files, restarted, made sure all drivers and windows update were current.

     

    Nothing worked.  Every time I started to print, I'd get an error.  I couldn't even delete my printer because the spooler wasn't running.  After restarting the spooler, it would die before I could delete my printer.

     

    So I stopped the spooler (as described elsewhere).  I went into regedit and started from the top.  I searched for my printer name and deleted every reference to the printer I could find.  I restarted my computer.   I downloaded a new copy of the printer driver and attempted an install.  I stopped that during install when it told me to attach the printer because my printer is a network printer.

    Then I told the Vista install wizard to add a network printer.  I stopped that, too, because on my network it can't find it by itself: I typed in the IP address of the printer on my LAN and told it to find that printer and install the (newly downloaded) driver.

     

    So far, so good.  For the first time in a whole lot of attempts.  Good luck!

    Tuesday, November 22, 2011 1:40 PM
  • Delete all files in the C:\Windows\System32\Spool\PRINTERS folder these files are causing spoolsv.exe (the windows service that handles print jobs) to crash. The printer cannot handle the file to be printed. Worked for me.



    • Edited by Michze Saturday, August 03, 2013 11:24 PM
    Saturday, August 03, 2013 11:22 PM