locked
print spooler folders still require manual file deletion upon each restart after applying fix RRS feed

  • Question

  • 1) I am running a Windows 7 32-Bit Vista upgrade on a Dell Inspiron E1405 with a 1.66 GHz processor and 1GB RAM, with a basic HP Deskjet D1520 with the latest print drivers installed via the HP website.

    2) I checked spooler dependencies (making sure all are automatic), and tried command lines mentioned elsewhere in forum posts (command prompt as admin; sc config spooler depend= RPCSS; as well as sfc /scannow). 

    3) Unplugging the USB, deleting all files in these folders  - 

    C:\WINDOWS\system32\spool\printers, C:\WINDOWS\system32\spool\drivers, C:\WINDOWS\system32\spool\prtprocs,

    then replugging the USB did work (Windows located the drivers, installed them, and I could print), but every time I restart the computer, I must repeat this process or else the initial problem (the print spooler keeps stopping as viewed in services.msc which prevents printer installation and detection) persists.  Ideas? 

    Thanks in advance.

    Sunday, January 2, 2011 8:54 PM

Answers

  • you use a software from this vendor:

    http://www.pharos.com/

    Try to uninstall it from the Control panel.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Andre.Ziegler Tuesday, January 18, 2011 8:38 PM
    • Marked as answer by Miya Yao Friday, January 28, 2011 7:00 AM
    Sunday, January 16, 2011 4:35 PM

All replies

  • Hello Slustu,

    When you install a Printer Driver, many of them also install Print Processor and Print Monitor. In your case the Print Spooler is crashing everytime the Spooler is trying to install the Drivers from the DriverStore and in most of the Print Spooler crash it is these additional components which casues issues.

    You should be able to find the DLL responsible for the crash from the event logs. There should be an "Applicaiton Crash" Event in the Application event logs stating the Possible DLL file causing the crash. You can rename the DLL file and restart the Spooler service to resolve the issue.

    However, in some cases the DLL is shown as NTDLL.DLL which is responsible for Most Windows API functions. Since all applications loads this DLL for functioning on Windows you can ignore it

    Alternatively, uninstall the  HP Deskjet D1520 Printer Driver from the Computer Permenantly (Remove Driver and Driver Package) and install the HP Deskjet D1500 series Printer Driver which is shipped along with Windows 7 machine. 

    To uninstall a driver, First unplug the Printer from the USB Port

    • Open "Devices and Printers"
    • Delete your "HP Deskjet D1520" Printer.
    • Then select any Printer.
    • On the "Command Bar" (Found below Address Bar)
    • Select "Print Server Properties"
    • On the "Print Server Properties" dialog box, select the "Drivers" tab
    • From the Driver list, select "HP Deskjet D1520" Printer Driver and select "Remove..."
    • Moment you click "Remove...", You would prompted with "Do you want to remove the driver(s) only, or remove driver(s) and driver package(s) from your system?"
    • Select the Option "Remove Driver and Driver Package",  Click "OK" and then "Yes"

    Now, plug back the printer back, The Plug and Play Manager will try to locate the Driver. Since the driver is not available you should asked to install the driver, or select the option to install the driver Manually and from the Driver List, select the HP Deskjet D1500 Series Printer Driver

    Hope this Help's, Let me know if you have Questions.

     


    Shailesh Dadure Microsoft
    Monday, January 3, 2011 10:36 AM
  • Thanks for the reply.

    I'm attempting what I interpreted to be your first solution: using the event viewer to locate the DLL responsible for the crash: here's a couple of "error" notices which came up frequently . . .

    1) Error 1/6/2011 3:22:51 PM Application Error 1000 (100)

    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Application Error" />
      <EventID Qualifiers="0">1000</EventID>
      <Level>2</Level>
      <Task>100</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2011-01-06T21:22:51.000000000Z" />
      <EventRecordID>14038</EventRecordID>
      <Channel>Application</Channel>
      <Computer>Brett-PC</Computer>
      <Security />
      </System>
    - <EventData>
      <Data>spoolsv.exe</Data>
      <Data>6.1.7600.16661</Data>
      <Data>4c6f578f</Data>
      <Data>unknown</Data>
      <Data>0.0.0.0</Data>
      <Data>00000000</Data>
      <Data>c0000005</Data>
      <Data>00300032</Data>
      <Data>13a8</Data>
      <Data>01cbade7ceb67eaa</Data>
      <Data>C:\Windows\System32\spoolsv.exe</Data>
      <Data>unknown</Data>
      <Data>1d75874a-19db-11e0-a321-0015c576f576</Data>
      </EventData>
      </Event>
     
    2)  Error 1/1/2011 10:12:55 PM Application Error 1000 (100)
     
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Application Error" />
      <EventID Qualifiers="0">1000</EventID>
      <Level>2</Level>
      <Task>100</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2011-01-02T04:12:55.000000000Z" />
      <EventRecordID>13854</EventRecordID>
      <Channel>Application</Channel>
      <Computer>Brett-PC</Computer>
      <Security />
      </System>
    - <EventData>
      <Data>spoolsv.exe</Data>
      <Data>6.1.7600.16661</Data>
      <Data>4c6f578f</Data>
      <Data>unknown</Data>
      <Data>0.0.0.0</Data>
      <Data>00000000</Data>
      <Data>c0000005</Data>
      <Data>00300032</Data>
      <Data>11b8</Data>
      <Data>01cbaa334c136a0d</Data>
      <Data>C:\Windows\System32\spoolsv.exe</Data>
      <Data>unknown</Data>
      <Data>92b78da0-1626-11e0-b9fa-0015c576f576</Data>
      </EventData>
      </Event>
     
     Do these give any clues as to which DLL is responsible? 
    Thanks again
     
    Friday, January 7, 2011 6:12 AM
  • Hi slustu

    I had this problem on a print server. Its definately a driver thats causing the problem. Uninstall and reinstall is your best option and assuming you only have one printer connected thats the only one that will be causing the problem.

    To track the actual file responsible in my issue it was located in the description part of the error in the application log. Worth checking the log again it should say something like :

    description ; Faulting application spoolsv.exe, version 5.2.3790.4759, faulting module xrzwslbi.dll, version 1.0.709.21, fault address 0x0000b5a2.

    The faulting module being the culprit.

     


    www.mypchealth.co.uk
    Friday, January 7, 2011 9:22 AM
  •  Do these give any clues as to which DLL is responsible? 
    please download this reg file from my SkyDrive:

    http://cid-128fc518635be2dc.office.live.com/self.aspx/.Public/MS%20Foren/Registry/LocalDumps.reg

    and make a double click on the file to import it.

    When an application crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the spooler.exe dump (zip it first) to your public Skydrive [2] folder and post the link here. I take a look at the dump with the Debugger, maybe I can see the cause.

    André

    [1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
    [2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, January 7, 2011 1:28 PM
  • Hello Slustu,

    The error message states no DLL responsible for the crash, This is quite common to not get the Driver responsible in the Event logs.

    The error reports the DLL as unknown, however it is very much clear that the issue is because of a Access Violation (Crash) because you receive the error code c0000005

    Since you have already mentioned that the issue emerges after installing HP Deskjet D1520 Printer Driver, It sould one of the DLL Components which is installed with this driver causing the issue.

    You can proceed with uninstalling the driver, Or can have a Memory Dump of Spooler collected for Review.

    USERDUMP ACTION PLAN

    ================

    Please refer to the following article and download the tool Userdump and use it for Exception monitoring

    241215          How to use the Userdump.exe tool to create a dump file
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;241215

     

    To create a dump (.dmp) file for a process that shuts down with an exception

     

    1. Run the Setup.exe program for your processor.

     

    Notes:

    • By default, this Setup.exe program is included with the Userdump.exe tool in the C:\kktools\userdump8.0 folder.

    • This Setup.exe program installs a kernel-mode driver, installs the Userdump.sys file, and creates the Process Dump icon in Control Panel.

    • Unless you have a specific need, disable the "dump on process termination" feature when you run the Setup.exe program. 

     

    2. In Control Panel, double-click Process Dump.

    3. On the Exception Monitoring tab, click New, add the appropriate program name to the Monitor list, and then click OK. In your case it is SPOOLSV.EXE which is crashing.

    4. Click “Ok” again in the main Window, this will set the server to capture the new the application dump.

    5. In the Monitor box, click the program name that you added in step 3, and then click Rules. 

    6. Click to select “Use Custom Rules”, select the select the Access violation – (c0000005) error type in the Exception Monitor Section

    7. Click “OK”

    8. Click “Ok” again in the main Window, this will set the machine to capture the Spooler dump.

    9. When the troubleshooting is over please uninstall the user dump or remove the exception monitoring for the application we added in Step 3.

    Important: Default location for this dump is C:\Windows and would be saved as the “SPOOLSVXXXX.Dmp”. Where XXXX is the Process ID of SpoolSV.exe when it crashed.

    This dump would be in huge in Size. If you are pursuing this route... Please let me know the size of the dump after being compressed to a Zip file. Upload this to FTP or Skydrive location and share the link. I will review it and will update you.


    Shailesh Dadure Microsoft
    Friday, January 7, 2011 5:17 PM
  • At this point, I'll take the easiest route to a consistently functioning printer.  I checked into this userdump option and tried to download the program - upon install and launch of the x86 folder's userdump application, I continued to receive an error "wrong OS."  I then found a site which stated Windows 7 operates differently offering to "Create dump file" in the processes tab of the task manager as opposed to utilizing userdump:

     http://blogsai.wordpress.com/2010/06/01/enabling-user-dump-in-windows/

    In all, it's looking to be more trouble than it's worth.  So never mind; If reinstalling the driver is easiest, I'll go that route instead.

    Moving on to your uninstall option, I had no option to "Delete your 'HP Deskjet D1520' Printer" under my "Devices and Printers" tab.  I could only "Remove Printer" and I did so.  After this, there's nothing listed under "Printers."  The command bar (if I'm in the right place) only has options to "Add a device" or "Add a printer."  No choices similar to "Print Server Properties" are available, and I'm not sure where the driver is located in the "device manager" if it should even still be around after I chose to "Delete your 'HP Deskjet D1520' Printer." 

    So what to do next?  Again, thanks in advance for any help.

     

    Tuesday, January 11, 2011 2:48 AM
  • So what to do next?  Again, thanks in advance for any help.

    apply my reg file this generates crash dumps for all crashing apps.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, January 11, 2011 3:21 PM
  • I downloaded the file.  After choosing "run," and receiving several warning messages, the registry file was installed.  But I can't locate a C:\localdumps folder, so I can't upload the log you're requesting.  Where will it be located if I perform the steps correctly?  Also, the source of the problem isn't causing an application crash, when I plug in the usb for the printer, there is no response (no indication anything is installing) unless I first delete all contents of the folders mentioned above. 

    Thanks.

    Friday, January 14, 2011 10:43 AM
  • Did you have any new spooler service crashes? The folder is only created when you get a crash. Have you disabled the Windows Error Reporting service? In this case the dump creation doesn't work.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, January 14, 2011 12:56 PM
  • OK - yes - the spoolsv.exe is still malfunctioning; original problem remains:

    restarting in safe mode and deleting all folder contents in C:\Windows\System32\spool\drivers & \PRINTERS & \prntprocs, then restarting the system allows the computer to recognize the printer upon usb connection, download the appropriate drivers, and let the printer install and function. 

    But upon restart, the print spooler fails to start automatically, and stops when restarted manually from services.msc.  Result is of course that the printer doesn't work.

    (Hopefully) Location of dmp files:

    https://cid-00677d4c1eae89d7.office.live.com/browse.aspx/.Documents?uc=2

    Thanks

    Sunday, January 16, 2011 5:37 AM
  • (Hopefully) Location of dmp files:

    https://cid-00677d4c1eae89d7.office.live.com/browse.aspx/.Documents?uc=2

    Thanks

    the link doesn't work. We don't have the permissions to see the files.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Sunday, January 16, 2011 2:13 PM
  • I think changing the permissions to public made the links available?  Please try my folders again.
    Sunday, January 16, 2011 3:18 PM
  • You have a NX Bit issue:

    SOFTWARE_NX_FAULT_INVALID_c0000005_localspl.dll!FinalInitAfterRouterInitComplete

    0x300032
    localspl!FinalInitAfterRouterInitComplete+0x4f1
    localspl!FinalInitAfterRouterInitCompleteThread+0xb
    kernel32!BaseThreadInitThunk+0xe
    ntdll!__RtlUserThreadStart+0x70
    ntdll!_RtlUserThreadStart+0x1b

    becasue this is not helpful I looked what accours around localspl!FinalInitAfterRouterInitComplete

    0299f9f0  00000000
    0299f9f4  65f819d6 localspl!FinalInitAfterRouterInitComplete+0x4f1
    0299f9f8  000ec8b8
    0299fa30  015a9b00
    0299fa34  75b61857 kernel32!GetProcAddressStub
    0299fa38  021b3b68
    0299fa3c  0299fa48
    0299fa40  714823ff msvcr80!_unlock+0x13
    0299fa44  71513bf8 msvcr80!__app_type+0xc4
    0299fa48  0299fa84
    0299fa4c  00000001
    0299fa50  00000000
    0299fa54  00000001
    0299fa58  0299fab8
    0299fa5c  71521444 msxml6!_CRT_INIT+0x26d
    0299fa60  71520000 msxml6!_imp__LoadLibraryW <PERF> (msxml6+0x0)
    0299fa64  00000002
    0299fa68  7152147b msxml6!_CRT_INIT+0x3da
    0299fa6c  71c20242
    0:015> dds
    0299fa70  00000001
    0299fa74  0299fae8
    0299fa78  00000001
    0299fa7c  0230b503
    0299fa80  fffffffe
    0299fa84  71482da8 msvcr80!_initptd+0xb5
    0299fa88  714822f3 msvcr80!__p__winver+0x218
    0299fa8c  021b3b68
    0299fa90  71aa65c6
    0299fa94  0299fad4
    0299fa98  00000001
    0299fa9c  0299fb64
    0299faa0  003e43b8
    0299faa4  66515e2a hpzppw71!_CRT_INIT+0x263
    0299faa8  71aa6586
    0299faac  0299fb64
    0299fab0  0299fae8
    0299fab4  00000001
    0299fab8  00000001
    0299fabc  0299faa8
    0299fac0  0299fad4
    0299fac4  0299fb84
    0299fac8  66518660 hpzppw71!_except_handler4
    0299facc  15612aca
    0299fad0  fffffffe
    0299fad4  66515e2a hpzppw71!_CRT_INIT+0x263
    0299fad8  76e5afc4 ntdll!LdrpCallInitRoutine+0x14
    0299fadc  664f0000 hpzppw71 !_imp__CancelDC <PERF> (hpzppw71+0x0)
    0299fae0  00000002
    0299fae4  00000000
    0299fae8  00000001
    0299faec  0299fb64
    0:015> lmvm hpzppw71
    start    end        module name
    664f0000 66539000   hpzppw71   (pdb symbols)          c:\sym\dl\hpzppw71.pdb\37227F94C87B40BDA5EC1F72C88186C41\hpzppw71.pdb
        Loaded symbol image file: hpzppw71.dll
        Image path: C:\Windows\System32\spool\prtprocs\W32X86\hpzppw71.dll
        Image name: hpzppw71.dll
        Timestamp:        Tue Jul 14 03:06:07 2009 (4A5BD9FF)
        CheckSum:         00045D77
        ImageSize:        00049000
        File version:     0.3.7071.0
        Product version:  6.1.7071.0
        File flags:       0 (Mask 3F)
        File OS:          40004 NT Win32
        File type:        3.C Driver
        File date:        00000000.00000000
        Translations:     0409.04b0
        CompanyName:      Hewlett-Packard Corporation
        ProductName:      HP Print Processor
        InternalName:     hpzppw71.DLL
        OriginalFilename: hpzppw71.DLL
        ProductVersion:   61.073.245.00
        FileVersion:      61.073.245.00
        FileDescription:  HP Print Processor
        LegalCopyright:   Hewlett-Packard Co. Copyright (C) 1997-2008

    But this driver is the most recent version.

    But I can see from the dump that yo use old drivers/DLLs:

    msonpmon.dll Sat Nov 08 17:08:59 2008
    PSPC939B PSPC939B.DLL Fri Aug 18 03:17:10 2006 (44E51516)
    00d20000 00d61000   PSRC935D PSRC935D.DLL Fri Aug 18 03:18:13 2006 (44E51555)
    10000000 10006000   PSSC939D PSSC939D.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    008e0000 008e6000   PSSC93A2 PSSC93A2.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    00900000 00906000   PSSC93A5 PSSC93A5.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    00950000 00956000   PSSC93AA PSSC93AA.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    00960000 00966000   PSSC93AF PSSC93AF.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    009c0000 009c6000   PSSC93B2 PSSC93B2.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    00c50000 00c56000   PSSC93B4 PSSC93B4.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    00e10000 00e16000   PSSC93B6 PSSC93B6.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    01e50000 01e56000   PSSC93C0 PSSC93C0.DLL Fri Aug 18 03:16:06 2006 (44E514D6)
    01e40000 01e46000   PSSC93C2 PSSC93C2.DLL Fri Aug 18 03:16:06 2006 (44E514D6)

    What are those DLLs? Google doesn't give me any results?


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Andre.Ziegler Tuesday, January 18, 2011 8:38 PM
    Sunday, January 16, 2011 3:50 PM
  • I don't understand what you are asking - what is the next step as far as information you require from me to solve the problem, and how do I go about providing you with it?
    Sunday, January 16, 2011 4:04 PM
  • check the file versions of those old PSSC93 DLLs. What's the manufacture? What's the purpose of those DLLs? if you found the software to which the DLLs belong, remove the software and check if you still get crashes

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Sunday, January 16, 2011 4:06 PM
  • I uploaded bitmap images of a few of these DLL files' properties.  Maybe it will help you.
    Sunday, January 16, 2011 4:23 PM
  • you use a software from this vendor:

    http://www.pharos.com/

    Try to uninstall it from the Control panel.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Andre.Ziegler Tuesday, January 18, 2011 8:38 PM
    • Marked as answer by Miya Yao Friday, January 28, 2011 7:00 AM
    Sunday, January 16, 2011 4:35 PM
  • Even when I try in safe mode, get the following message:

     

    "Unable to get a list of ports: the RPC server is unavailable.  Pharos cannot be uninstalled."

    Tuesday, January 18, 2011 4:37 PM
  • the Microsoft installer can't be used in safe mode. boot into normal mode to remove the Pharos tool.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, January 18, 2011 4:51 PM
  • Yes I had received this error in normal mode first.  But when I tried again in normal Pharos was successfully deleted.  And I have restarted laptop twice and have been able to print without having to clear spooler folders.  Problem looks to be solved, but I'll definitely post again if something changes.  THANK YOU!!
    Tuesday, January 18, 2011 8:12 PM
  • Problem looks to be solved, but I'll definitely post again if something changes.  THANK YOU!!
    You're welcome :)

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, January 18, 2011 8:39 PM