locked
The application was unable to start correctly (0xC0000142). - ref "Shortcuts stop working until re-boot" RRS feed

  • Question

  • see http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/3a3e9488-aa54-456e-b183-d9d3acf609c0

     

    I am getting the same symptoms, i.e., 0xC0000142 error and some other message about 'not enough memory' that displays a box with a list of things that Windows has been doing.  The "out of resource" idea sounds like it's what's happening.  I'll create another user and use Task Manager with the Handles, USER Objects, and GDI Objects columns displayed.  If no problem occurs, I will try to find an autostarting program that is causing problems.  Any other thoughts would be greatly appreciated!

     

    I am running a year-old installation of Windows 7 Home Premium on a Dell Studio XPS with an i7 920 @2.67 GHz, 6 GB RAM, and 350 GB free space on the hard disk.  I am also running a 1 GB thumb drive and using ReadyBoost on it.

     

    I am running the All-CPU gadget that shows RAM usage and CPU usage.  After the machine has gone all night, when I get these symptoms in the morning, the RAM usage on the gadget is below 3 GB and it's showing free ram up to 6 GB.  Of course, that doesn't mean anything...

     

    Thanks,

    Steve

     

    p.s. svchost.exe is now using 96,824 K bytes and has the most bytes displaying in Task Explorer. I've seen this already too. I know it's doing a lot of stuff, but I've seen it get up to 125,000 K bytes. sg

    • Edited by sgrog Monday, December 13, 2010 3:17 PM
    Monday, December 13, 2010 2:50 PM

Answers

  • I can assume that unless I get more symptoms, the IOBit program (Security 360?) was the problem.
    Yes, this was the cause.
    Thanks a lot for your guidance and help in digging this one out. Best wishes, Steve

    You're welcome.

    best regards
    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by sgrog Tuesday, December 21, 2010 2:50 PM
    Monday, December 20, 2010 3:02 PM

All replies

  • //
    // MessageId: STATUS_DLL_INIT_FAILED
    //
    // MessageText:
    //
    // {DLL Initialization Failed}
    // Initialization of the dynamic link library %hs failed. The process is terminating abnormally.
    //
    #define STATUS_DLL_INIT_FAILED           ((NTSTATUS)0xC0000142 L) 

    Follow this guide:

    Analyze application failures the easier way with Dependency Walker

    http://blogs.technet.com/b/askperf/archive/2010/06/25/analyze-application-failures-the-easier-way-with-dependency-walker.aspx

    to see which DLL is the cause of the failure.

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, December 13, 2010 3:00 PM
  • Hi Andre, I checked my mail checker program which has had some questionable activity and found that a dll is missing. I plan to re-install it, but I have the .dwi file zipped in case you want to look at it. I just don't know where to upload it and it looks like I can't upload attachments to this message. Thank you, Steve
    Monday, December 13, 2010 5:18 PM
  • I re-installed pop peeper and it got the same error in Dependency Walker (on ieshim.dll or something) - missing, but now the private memory working set in Task Manager for pop peeper is down to 16,000 KB and so looks good to me. I'll see tomorrow morning if the same problems recur. Steve
    Monday, December 13, 2010 7:07 PM
  • The DLL should be here:

    "C:\Program Files\Internet Explorer\IEShims.dll"

    and 125MB for the svchost.exe maybe ok. The exe hosts several services. Use ProcessExplroer and hover over the svchost.exe to see which services are hosted by the svchost.exe.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, December 13, 2010 9:43 PM
  • I did a search for the dll (ieshims.dll) and found it in 4 places including the Internet Explorer folder. I was tempted to copy it into the pop peeper folder, but nah, didn't sound like a good idea. Ok about svchost.exe. Status: This morning the problem still exists, but the machine is maybe a little less tight for some reason. I got the "We're sorry" crash error from Firefox, which is better than before, and I was able to re-boot with normal response, as opposed to yesterday morning. Memory used had risen, but nowhere near total memory. I didn't get figures for handles, GDI objects, etc. - have to wait until tomorrow am. Same number of processes. I seriously wonder if Windows hasn't run out of one of the types of resource besides memory and disk space. Steve
    Tuesday, December 14, 2010 2:43 PM
  • When you have high Memory usage run RAMMap from Sysinternals to see what is the cause.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, December 14, 2010 2:52 PM
  • I'll get rammap. Also, I found another thread (below), and the answer as you can see is to disable startups and 3rd party services to see if one or more of them are causing problems. http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/551bd051-f9d4-4375-9e8a-d099126c5731/33ad4b91-f44b-4111-b232-c4162126aa3e/reply
    Tuesday, December 14, 2010 4:34 PM
  • The professional way is to get the PFN Data by a dump or RAMMap. clean boot is more a trial and error way.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, December 14, 2010 4:36 PM
  • I got RAMMap but it's a little beyond me to tell what would help me track down an offending process. Would you be inclined to go into it a little?
    Wednesday, December 15, 2010 1:17 AM
  • I got RAMMap but it's a little beyond me to tell what would help me track down an offending process. Would you be inclined to go into it a little?

    I would try the Help and Support utility "Performance Troubleshooter". Type that into the help search line for a link to it.
    Rating posts helps other users
    Mark L. Ferguson MS-MVP
    Wednesday, December 15, 2010 1:02 PM
  • Save the data in RAMMap as a RMP file. Zip the RMP file and upload the zip to your SkyDrive [1] and post a link here.

    André


    [1] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Wednesday, December 15, 2010 1:53 PM
  • I got RAMMap but it's a little beyond me to tell what would help me track down an offending process. Would you be inclined to go into it a little?

    I would try the Help and Support utility "Performance Troubleshooter". Type that into the help search line for a link to it.
    Rating posts helps other users
    Mark L. Ferguson MS-MVP
    Mark, thanks for taking a look at this. I ran the troubleshooter but the only issue that was present was programs set to run automatically when Windows starts. Thanks anyway.
    Wednesday, December 15, 2010 8:42 PM
  • Ok, here's the file: https://cid-f8e58c9beb624ba8.office.live.com/self.aspx/.Documents/this.zip Around 6 hours of uptime. Thanks!!
    Wednesday, December 15, 2010 9:12 PM
  • the link doesn't work. put the file into your Public folder.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Wednesday, December 15, 2010 10:52 PM
  • Sorry about that. Here's the new URL: http://cid-f8e58c9beb624ba8.office.live.com/self.aspx/Public/this.zip
    Thursday, December 16, 2010 4:06 AM
  • the memory usage of the Kernel pools is too high.

    • Download poolmon3vbs.zip from here
    • Extract this zip file to C:\Poolmon3
    • Double click C:\Poolmon3\_LogPool-as-a-service.cmd to start logging

    This should start a cmd prompt and start dumping log files to C:\Poolmon3. Let this run for some time until you get the high memory usage again, and then run C:\Poolmon3\_RemovePoolmon3service.cmd to stop the logging. Zip and upload the contents of C:\Poolmon3 so I can take a look at the data to see what's happening.

    best regards
    André

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, December 16, 2010 2:03 PM
  • the memory usage of the Kernel pools is too high.

    • Download poolmon3vbs.zip from here
    • Extract this zip file to C:\Poolmon3
    • Double click C:\Poolmon3\_LogPool-as-a-service.cmd to start logging

    This should start a cmd prompt and start dumping log files to C:\Poolmon3. Let this run for some time until you get the high memory usage again, and then run C:\Poolmon3\_RemovePoolmon3service.cmd to stop the logging. Zip and upload the contents of C:\Poolmon3 so I can take a look at the data to see what's happening.

    best regards
    André

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Hi and thanks. A little news: I have been running with startups and non-Microsoft(r) services disabled and I'm not seeing the the problem behaviors. I guess I'll have to re-enable those things to run your Kernel pools log program overnight. Btw, can you tell me how to create a link in one of these posts? Can't seem to do it by dragging. Thanks, Steve
    Thursday, December 16, 2010 3:12 PM
  • when you reply here you have a chain icon in the toolbar, click on it and enter the link and the text.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, December 16, 2010 3:40 PM
  • ok, poolmon is running. Handles are 25680 memory paged: 226, non-paged 66.
    Thursday, December 16, 2010 5:02 PM
  • Ok, here's the zipfile: http://uqrduq.bay.livefilestore.com/y1pZzztP7BKUB3kld4xWrnv7jCxjvLzaN2_kLj--qg8mXqw5qJFEC_l7zzRX0CTtezaGJ2LD7CRT2ep58FJ5JCvUG0WrB0nFxox/Poolmon3.zip?download&psid=1 If that doesn't work: http://cid-f8e58c9beb624ba8.office.live.com/self.aspx/Public/Poolmon3.zip Looks better.
    Friday, December 17, 2010 12:05 AM
  • paged and nonpaged memory doesn't grow too much. The tags which sue most Memory are from MS (CM31, CM25, MmSt). This can't be changed.

    The handles are too high (over 50.000). Run Process Explorer and show the handles for the processes and look which process uses a lot of handles.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, December 17, 2010 11:59 AM
  • I zipped a couple of shots of Process Explorer (pe pics.zip) showing Core Temp.exe with a lot of i/o (other) activity.  I'll send you one sorted by number of handles.

    The link to the current zip is: http://cid-f8e58c9beb624ba8.office.live.com/self.aspx/Public/pe%20pics.zip

    Friday, December 17, 2010 9:36 PM
  • activate in the PE options to display the handle count in the statusbar. The picture shows nothing wrong. When the handle count is again over 50.000 look which program has most handles open.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Saturday, December 18, 2010 1:48 PM
  • Handles look ok. The highest count this morning besides the System process is 1,301 , AVG Watchdog Service, part of the AVG anti-virus program. I guess I forgot to re-enable some of the startup programs and Windows is running ok. What I have to do is re-enable all of the startups and leave the machine running all day. The All-CPU gadget in the sidebar is doing a lot of "other I/O" reads - a whole lot, to the tune of 83,000,000 total. It doesn't take much CPU time but I'm going to stop running it. It seems hugely disproportionate to other "other" reads. I'll write again this pm.
    Saturday, December 18, 2010 2:21 PM
  • Good morning. Ran Windows all night and left pe running. This morning I was unable to load the screenshot program ("not enough resources") to take shots, but pe was responsive. After closing pe, I was able to re-boot from the start menu. A process, the service for the is360 anti-spyware, had 73,237 handles and a working set of memory of 15,784 K. The handles figure seems quite high and I'm guessing that it is the problem. Would you say to disable is360 and run again?
    Sunday, December 19, 2010 2:10 PM
  • Yes, remove it. IObit Security 360 is known for such handle leaks which caused other users to have BSODs. Remove it and your PC should work fine again.


    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Sunday, December 19, 2010 2:14 PM
  • Thanks. Thanks for going through this process with me. I hope there's nothing else. I'll find out tomorrow morning or possibly this evening.
    Sunday, December 19, 2010 2:34 PM
  • A status post - with 3-4 hours uptime, there is no process with more handles than the System process at 1,844. Memory of that process is about 115,000 K. I think things are looking well, although I'm a little worried about all that memory in the System process. I really think that it will take tomorrow morning's behaveior to satisfy me that I can go into relaxed mode. This was good news, though.
    Sunday, December 19, 2010 6:16 PM
  • although I'm a little worried about all that memory in the System process.
    Why? Which issue do you have with the system process?

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Sunday, December 19, 2010 8:39 PM
  • With uptime at least 16 hours right now, the computer is behaving normally. :) However, the svchost.exe has 120,884 K in working memory. The one with a lot of services. Doesn't seem to be growing, though. I'm sure I'm worrying unnecessarily. I wouldn't expect any weird behavior from a central Windows 7 process. The System process has 115,128 K but it's the System process. I'm ready to pronounce this one solved. I can assume that unless I get more symptoms, the IOBit program (Security 360?) was the problem. Thanks a lot for your guidance and help in digging this one out. Best wishes, Steve
    Monday, December 20, 2010 7:59 AM
  • I can assume that unless I get more symptoms, the IOBit program (Security 360?) was the problem.
    Yes, this was the cause.
    Thanks a lot for your guidance and help in digging this one out. Best wishes, Steve

    You're welcome.

    best regards
    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by sgrog Tuesday, December 21, 2010 2:50 PM
    Monday, December 20, 2010 3:02 PM
  • Hi André. The computer is running fine with no problems or symptoms like I had before. So, problem solved! Thank you. Steve
    Tuesday, December 21, 2010 2:55 PM
  • One thing that I didn't know - when you get an "application was unable to load" error, sometimes this has nothing to do with the "application". In this case, the application (windows explorer, for example, or something else) couldn't load because there were no handles left in the system to use, a situation caused by a different application already running, IOBit Security 360. Steve
    Tuesday, December 21, 2010 3:05 PM
  • Ok, nice to hear that it is fixed now. The "application was unable to load" error should be caused by  IOBit. Never use such tools in feature. If you want to speedup the PC and especially the boot, follow my guide here:

    http://www.msfn.org/board/index.php?showtopic=140262


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, December 21, 2010 3:13 PM