WinDriver Release Notes |
WinDriver Release Notes
Skip directly to
select version…Version 12.2.1Version 12.2.0Version 12.1.0Version 12.0.0Version 11.9.0Version 11.8.0Version 11.7.0Version 11.6.0Version 11.5.0Version 11.4.0Version 11.3.0Version 11.2.0Version 11.1.0Version 11.0.0Version 10.4.0Version 10.3.1Version 10.3.0Version 10.2.1Version 10.2.0Version 10.1.1Version 10.1.0Version 10.0.2Version 10.0.1Version 10.0.0Version 9.2.1Version 9.2.0Version 9.1.0Version 9.0.1Version 9.0.0Version 8.1.1Version 8.1.0 for Windows and Windows CEVersion 8.0.2Version 8.0.1Version 8.0.0Version 7.0.2Version 7.0.1Version 7.0.0 for WindowsVersion 7.0.0 for LinuxVersion 6.2.3Version 6.2.2 for Windows CEVersion 6.2.2Version 6.2.1Version 6.2.0Version 6.0.3Version 6.0.2Version 6.0.1Version 6.0.0Version 5.2.2Version 5.2.1Version 5.2.0Version 5.0.5bVersion 5.0.5Version 5.0.4Version 5.0.3Version 5.0.2Version 5.0.1Version 5.0.0Version 4.3.3Version 4.3.2Version 4.3.1Version 4.3.0Version 4.2.0Version 4.1.4Version 4.1.0–4.1.2Version 4.0Version 3.0.3Version 3.0.2Version 3.0.1Version 3.0.0Version 2.1.2Version 2.1.1Version 2.1.0[SOLVED] ntdll.dll Issues - Tech Support Forum
Remember Me?
Show Threads
Show Posts
[SOLVED] ntdll.dll Issues
This is a discussion on [SOLVED] ntdll.dll Issues within the BSOD, App Crashes And Hangs forums, part of the Tech Support Forum category. Everyone needs help at some point
I have been experiencing random crashes from Firefox and WMP, but mostly Firefox blaming
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
Everyone needs help at some point
I have been experiencing random crashes from Firefox and WMP, but mostly Firefox blaming [b]ntdll.dll[/d] as the cause. It can't possibly be my antiviru I'm using Microsoft Security Essentials and I've been getting the crashes long before even having any antivirus installed. The exception thrown is 0xc0000005, full event here:
Faulting application name: wmplayer.exe, version: 12.0., time stamp: 0x4a98b600
Faulting module name: ntdll.dll, version: 6.1., time stamp: 0x4ba9b802
Exception code: 0xc0000005
Fault offset: 0xcf54
Faulting process id: 0x2cc
Faulting application start time: 0x01cb433f
Faulting application path: C:\Program Files\Windows Media Player\wmplayer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: d6d36500-af32-11df-c00008
Does anyone else have an idea? I've been stumped for months.
__________________
A+ Certified Technician
Advertisement
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
Try to capture a dump:
Maybe uninstall all codecs and then reinstall?
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
Thanks John.
Where exactly does the dump file go? I can't seem to find it, even with a search. I did however find many other dumps that I didn't even know were getting created. I've attached them below. They seem to point to xul.dll, so I'm working on that now.
I've also noticed that the crashes occur much more when JavaScript is enabled, but it does still happen occasionally when it's not.
Attached Files
(1.52 MB, 775 views)
__________________
A+ Certified Technician
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
I haven't tried this myself, but it should be:
- in the folder that the process runs from (wmplayer.exe)
- in the folder that the adplus.vbs runs from
I'm willing to bet that the dumps that you posted are from the process that creates dump files from crashing processes (?DrWatson?)
It sure shows the crash in ntdll.dll!
To fix xul.dll errors (and a host of other issues), completely remove Firefox (to include removing the user profile data) - and ensure that xul.dll isn't loading/trying to load at startup (use Autoruns)
Do you have Chrome installed also?
If so, there's issues with nspr4.dll that may be a concern/conflict.
Try removing Chrome also.
Also, if Firefox is your default browser, try switching the default back to Internet Explorer temporarily.
If this stops the issues in wmplayer.exe, then you'll be able to attribute the errors entirely to Firefox.
Did you try SFC.EXE /SCANNOW ?
That'll rule out issues with the ntdll.dll file.
The top part of this report was cutoff when running it through the debugging scripts, so I've included my results here.
It hints at 3 components of the browser (nspr4.dll, xul.dll, and mozcrt19.dll):
Microsoft (R) Windows Debugger Version 6.12. AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\FUBAR\_jcgriff2_\dbug\__Kernel__\0a0-4203-aca1-2c241dd02b3d.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: SRV*c:\symbols*/download/symbols
Executable search path is:
Windows 7 Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sun Sep 12 16:01:20.000 2010 (UTC - 4:00)
System Uptime: not available
Process Uptime: 0 days 0:00:05.000
................................................................
..........................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(644.8b0): Unknown exception - code c000070a (first/second chance not available)
ntdll!ZwWaitForSingleObject+0x15:
0:012& !analyze -v;r;..q
*******************************************************************************
Exception Analysis
*******************************************************************************
*** WARNING: Unable to verify timestamp for nspr4.dll
*** ERROR: Module load completed but symbols could not be loaded for nspr4.dll
*** WARNING: Unable to verify timestamp for xul.dll
*** ERROR: Module load completed but symbols could not be loaded for xul.dll
*** WARNING: Unable to verify timestamp for mozcrt19.dll
*** ERROR: Module load completed but symbols could not be loaded for mozcrt19.dll
FAULTING_IP:
EXCEPTION_RECORD:
ffffffff -- (.exr 0xffffffffffffffff)
.exr 0xffffffffffffffff
ExceptionAddress:
(ntdll!TppWaiterpThread+0x)
ExceptionCode: c000070a
ExceptionFlags:
NumberParameters: 5
Parameter[0]: c0000008
Parameter[1]: 0ba1ccdc
Parameter[2]:
Parameter[3]:
Parameter[4]: 6b13729c
DEFAULT_BUCKET_ID:
APPLICATION_FAULT
PROCESS_NAME:
firefox.exe
ERROR_CODE: (NTSTATUS) 0xc000070a - Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
EXCEPTION_CODE: (NTSTATUS) 0xc000070a - Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
EXCEPTION_PARAMETER1:
EXCEPTION_PARAMETER2:
EXCEPTION_PARAMETER3:
EXCEPTION_PARAMETER4: 2838228
HANDLE: 0ba1ccdc (!handle 0ba1ccdc)
THREADPOOL_WAITER: !tp wait 2899938
!tp wait 2899938
Unable to read ${$ntdllsym}!_TPP_CLEANUP_GROUP_MEMBER at 0x
MOD_LIST: &ANALYSIS/&
FAULTING_THREAD:
PRIMARY_PROBLEM_CLASS:
APPLICATION_FAULT
BUGCHECK_STR:
APPLICATION_FAULT_APPLICATION_FAULT
LAST_CONTROL_TRANSFER:
from 770a3677 to
STACK_TEXT:
ab 0563fee4 77929d42 ntdll!TppWaiterpThread+0x632
0563fea4 d779
kernel32!BaseThreadInitThunk+0xe
0563fee4 51c66 00000 ntdll!__RtlUserThreadStart+0x70
0563fefc 51c66 00000 ntdll!_RtlUserThreadStart+0x1b
FOLLOWUP_IP:
ntdll!TppWaiterpThread+632
dword ptr [ebp-1Ch]
SYMBOL_STACK_INDEX:
SYMBOL_NAME:
ntdll!TppWaiterpThread+632
FOLLOWUP_NAME:
MachineOwner
MODULE_NAME: ntdll
IMAGE_NAME:
DEBUG_FLR_IMAGE_TIMESTAMP:
STACK_COMMAND:
~12s; . kb
FAILURE_BUCKET_ID:
APPLICATION_FAULT_c000070a_ntdll.dll!TppWaiterpThread
BUCKET_ID:
APPLICATION_FAULT_APPLICATION_FAULT_ntdll!TppWaiterpThread+632
WATSON_IBUCKET:
WATSON_IBUCKETTABLE:
WATSON_STAGEONE_URL:
/StageOne/firefox_exe/2_0_0_c52e3/ntdll_dll/6_1_/4ba9b29c/c09c405.htm?Retriage=1
Followup: MachineOwner
eax= ebx= ecx=7796826b edx= esi=000000ec edi=
eip= esp= ebp=0563f79c iopl=0
nv up ei pl zr na pe nc
ntdll!ZwWaitForSingleObject+0x15:
ChildEBP RetAddr
Args to Child
ceec 00000 ntdll!ZwWaitForSingleObject+0x15 (FPO: [3,0,0])
0aec ffffffff
KERNELBASE!WaitForSingleObjectEx+0x98 (FPO: [Non-Fpo])
770aec ffffffff
kernel32!WaitForSingleObjectExImplementation+0x75 (FPO: [Non-Fpo])
6aee07ec 000000ec ffffffff
kernel32!WaitForSingleObject+0x12 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
06fa0 xul+0x5207ec
3f8e8 3f8e8 kernel32!UnhandledExceptionFilter+0x127 (FPO: [Non-Fpo])
00000 ntdll!TppExceptionFilter+0x60 (FPO: [Non-Fpo])
ntdll!TppWaiterpOuterExceptionFilter+0x11 (FPO: [Non-Fpo])
ntdll!TppWaiterpThread+0x717 (FPO: [SEH])
ntdll!_EH4_CallFilterFunc+0x12 (FPO: [Uses EBP] [0,0,4])
fffffffe 3fa38 ntdll!_except_handler4+0x8e (FPO: [Non-Fpo])
f9e8 3fa38 ntdll!ExecuteHandler2+0x26
63f9e8 3f9e8 ntdll!ExecuteHandler+0x24
3f9e8 3f9e8 ntdll!KiUserExceptionDispatcher+0xf (FPO: [2,0,0]) (CONTEXT @ 0563fa38)
ab 0563fee4 77929d42 ntdll!TppWaiterpThread+0x632 (FPO: [Non-Fpo])
0563fea4 d779
kernel32!BaseThreadInitThunk+0xe (FPO: [Non-Fpo])
0563fee4 51c66 00000 ntdll!__RtlUserThreadStart+0x70 (FPO: [Non-Fpo])
0563fefc 51c66 00000 ntdll!_RtlUserThreadStart+0x1b (FPO: [Non-Fpo])
module name
firefox.exe
Wed Aug 18 17:38:43 C52E3)
NPSWF32.dll
Wed Jul 28 03:12:39 FD867)
freebl3.dll
Wed Aug 18 16:04:00 C3CB0)
Wed Aug 18 17:35:12 C5210)
pnrpnsp.dll
Mon Jul 13 21:10:14 BDAF6)
NapiNSP.dll
Mon Jul 13 21:07:57 BDA6D)
6cb60000 6cbb0000
nssckbi.dll
Wed Aug 18 16:05:09 C3CF5)
6cbb0000 6cbc8000
nssdbm3.dll
Wed Aug 18 16:04:07 C3CB7)
Mon Jul 13 21:06:13 BDA05)
6cc90000 6cdff000
explorerframe explorerframe.dll Mon Jul 13 21:07:33 BDA55)
GrooveIntlResource GrooveIntlResource.dll Wed Mar 24 23:53:07 2010 (4BAADE23)
GROOVEEX GROOVEEX.DLL Thu Mar 25 13:20:38 2010 (4BAB9B66)
OFFICE.ODF
Sat Jan 30 04:36:47 FDAF)
winrnr.dll
Mon Jul 13 21:11:32 BDB44)
6fc90000 6fca0000
nlaapi.dll
Mon Jul 13 21:08:12 BDA7C)
6fca0000 6fcc5000
mdnsNSP.dll
Tue May 18 19:30:55 32F)
6fcd0000 6fcf6000
softokn3 softokn3.dll Wed Aug 18 16:04:04 C3CB4)
Mon Jul 13 21:06:14 BDA06)
6fd30000 6fda9000
Mon Jul 13 21:07:51 BDA67)
ntshrui.dll
Mon Jul 13 21:10:03 BDAEB)
rasadhlp rasadhlp.dll Mon Jul 13 21:09:42 BDAD6)
feclient feclient.dll Mon Jul 13 21:05:46 BD9EA)
linkinfo linkinfo.dll Mon Jul 13 21:06:20 BDA0C)
Mon Jul 13 21:06:02 BD9FA)
6fe90000 6fec1000
EhStorShell EhStorShell.dll Mon Jul 13 21:05:39 BD9E3)
6fed0000 6feda000
Mon Jul 13 21:10:37 BDB0D)
Sat Jul 11 22:38:06 C8E)
WindowsCodecs WindowsCodecs.dll Mon Jul 13 21:11:22 BDB3A)
t2embed.dll
Mon Oct 19 10:07:41 2009 (4ADC72AD)
browsercomps browsercomps.dll Wed Aug 18 17:38:37 C52DD)
propsys.dll
Mon Jul 13 21:09:31 BDACB)
dbghelp.dll
Mon Jul 13 21:04:50 BD9B2)
mozcpp19 mozcpp19.dll Wed Aug 18 15:27:51 C3437)
Wed Aug 18 16:04:55 C3CE7)
Wed Aug 18 16:04:46 C3CDE)
mozcrt19 mozcrt19.dll Wed Aug 18 15:27:42 C342E)
cscapi.dll
Mon Jul 13 19:14:25 BBFD1)
Wed Aug 18 17:36:24 C5258)
msimg32.dll
Mon Jul 13 21:08:48 BDAA0)
mozalloc mozalloc.dll Wed Aug 18 16:26:46 C4206)
Wed Aug 18 15:29:33 C349D)
nssutil3 nssutil3.dll Wed Aug 18 16:03:52 C3CA8)
mozsqlite3 mozsqlite3.dll Wed Aug 18 16:32:06 C4346)
msvcp90.dll
Fri May 22 20:31:01 3C5)
msvcr90.dll
Fri May 22 20:30:57 3C1)
winspool winspool.drv Mon Jul 13 21:11:39 BDB4B)
Mon Jul 13 21:11:30 BDB42)
Wed Aug 18 15:29:37 C34A1)
FWPUCLNT FWPUCLNT.DLL Mon Jul 13 21:06:15 BDA07)
apphelp.dll
Mon Jul 13 21:04:54 BD9B6)
Wed Aug 18 15:29:34 C349E)
smime3.dll
Wed Aug 18 16:05:01 C3CED)
uxtheme.dll
Mon Jul 13 21:11:24 BDB3C)
72d30000 72ece000
comctl32 comctl32.dll Mon Jul 13 21:03:50 BD976)
dnsapi.dll
Mon Jul 13 21:05:29 BD9D9)
wship6.dll
Mon Jul 13 21:11:50 BDB56)
rsaenh.dll
Mon Jul 13 21:09:52 BDAE0)
cryptsp.dll
Mon Jul 13 21:07:09 BDA3D)
dwmapi.dll
Mon Jul 13 21:06:15 BDA07)
powrprof powrprof.dll Mon Jul 13 21:10:36 BDB0C)
WSHTCPIP WSHTCPIP.DLL Mon Jul 13 21:11:54 BDB5A)
mswsock.dll
Mon Jul 13 21:08:07 BDA77)
srvcli.dll
Mon Jul 13 21:11:19 BDB37)
winnsi.dll
Mon Jul 13 21:11:31 BDB43)
IPHLPAPI IPHLPAPI.DLL Mon Jul 13 21:06:35 BDA1B)
ntmarta.dll
Mon Jul 13 21:10:01 BDAE9)
wsock32.dll
Mon Jul 13 21:12:03 BDB63)
73bf0000 73bfe000
RpcRtRemote RpcRtRemote.dll Mon Jul 13 19:43:47 BC6B3)
profapi.dll
Mon Jul 13 19:12:01 BBF41)
userenv.dll
Mon Jul 13 21:11:13 BDB31)
version.dll
Mon Jul 13 21:11:07 BDB2B)
dsound.dll
Mon Jul 13 21:06:05 BD9FD)
CRYPTBASE CRYPTBASE.dll Mon Jul 13 19:12:01 BBF41)
sspicli.dll
Fri Dec 11 02:36:33 F681)
setupapi setupapi.dll Mon Jul 13 21:10:22 BDAFE)
cfgmgr32 cfgmgr32.dll Mon Jul 13 21:04:38 BD9A6)
crypt32.dll
Mon Jul 13 21:07:05 BDA39)
comdlg32 comdlg32.dll Mon Jul 13 21:06:45 BDA25)
ws2_32.dll
Mon Jul 13 21:11:38 BDB4A)
Mon Jul 13 21:11:23 BDB3B)
shlwapi.dll
Mon Jul 13 21:10:29 BDB05)
iertutil iertutil.dll Mon Jul 13 21:06:20 BDA0C)
rpcrt4.dll
Mon Jul 13 21:11:23 BDB3B)
Mon Jul 13 21:09:45 BDAD9)
Mon Jul 13 21:11:21 BDB39)
shell32.dll
Tue Jul 27 09:57:01 EE5AD)
msasn1.dll
Sat Aug 29 02:52:40 D038)
clbcatq.dll
Mon Jul 13 21:04:49 BD9B1)
normaliz normaliz.dll Mon Jul 13 21:09:40 BDAD4)
Mon Jul 13 21:09:27 BDAC7)
msvcrt.dll
Mon Jul 13 21:07:59 BDA6F)
76c40000 76ccf000
oleaut32 oleaut32.dll Wed Apr 07 03:07:41 2010 (4BBC2F3D)
KERNELBASE KERNELBASE.dll Mon Jul 13 21:14:07 BDBDF)
wininet.dll
Wed Jun 30 02:17:57 AE195)
Wldap32.dll
Mon Jul 13 21:12:02 BDB62)
devobj.dll
Mon Jul 13 21:05:09 BD9C5)
sechost.dll
Mon Jul 13 21:10:28 BDB04)
urlmon.dll
Wed Jun 30 02:17:37 AE181)
advapi32 advapi32.dll Mon Jul 13 21:03:58 BD97E)
kernel32 kernel32.dll Mon Jul 13 21:14:06 BDBDE)
Mon Jul 13 21:11:20 BDB38)
Mon Jul 13 21:07:53 BDA69)
Mon Jul 13 21:11:14 BDB32)
user32.dll
Mon Jul 13 21:11:24 BDB3C)
Mon Jul 13 21:09:34 BDACE)
Wed Mar 24 02:35:08 B29C)
module name
advapi32 advapi32.dll Mon Jul 13 21:03:58 BD97E)
apphelp.dll
Mon Jul 13 21:04:54 BD9B6)
Sat Jul 11 22:38:06 C8E)
browsercomps browsercomps.dll Wed Aug 18 17:38:37 C52DD)
cfgmgr32 cfgmgr32.dll Mon Jul 13 21:04:38 BD9A6)
clbcatq.dll
Mon Jul 13 21:04:49 BD9B1)
72d30000 72ece000
comctl32 comctl32.dll Mon Jul 13 21:03:50 BD976)
comdlg32 comdlg32.dll Mon Jul 13 21:06:45 BDA25)
crypt32.dll
Mon Jul 13 21:07:05 BDA39)
CRYPTBASE CRYPTBASE.dll Mon Jul 13 19:12:01 BBF41)
cryptsp.dll
Mon Jul 13 21:07:09 BDA3D)
cscapi.dll
Mon Jul 13 19:14:25 BBFD1)
dbghelp.dll
Mon Jul 13 21:04:50 BD9B2)
devobj.dll
Mon Jul 13 21:05:09 BD9C5)
dnsapi.dll
Mon Jul 13 21:05:29 BD9D9)
dsound.dll
Mon Jul 13 21:06:05 BD9FD)
Mon Jul 13 21:06:13 BDA05)
Mon Jul 13 21:06:14 BDA06)
dwmapi.dll
Mon Jul 13 21:06:15 BDA07)
6fe90000 6fec1000
EhStorShell EhStorShell.dll Mon Jul 13 21:05:39 BD9E3)
6cc90000 6cdff000
explorerframe explorerframe.dll Mon Jul 13 21:07:33 BDA55)
feclient feclient.dll Mon Jul 13 21:05:46 BD9EA)
firefox.exe
Wed Aug 18 17:38:43 C52E3)
freebl3.dll
Wed Aug 18 16:04:00 C3CB0)
FWPUCLNT FWPUCLNT.DLL Mon Jul 13 21:06:15 BDA07)
Mon Jul 13 21:11:20 BDB38)
GROOVEEX GROOVEEX.DLL Thu Mar 25 13:20:38 2010 (4BAB9B66)
GrooveIntlResource GrooveIntlResource.dll Wed Mar 24 23:53:07 2010 (4BAADE23)
Mon Jul 13 21:06:02 BD9FA)
iertutil iertutil.dll Mon Jul 13 21:06:20 BDA0C)
Mon Jul 13 21:11:21 BDB39)
IPHLPAPI IPHLPAPI.DLL Mon Jul 13 21:06:35 BDA1B)
kernel32 kernel32.dll Mon Jul 13 21:14:06 BDBDE)
KERNELBASE KERNELBASE.dll Mon Jul 13 21:14:07 BDBDF)
linkinfo linkinfo.dll Mon Jul 13 21:06:20 BDA0C)
Mon Jul 13 21:11:23 BDB3B)
6fca0000 6fcc5000
mdnsNSP.dll
Tue May 18 19:30:55 32F)
mozalloc mozalloc.dll Wed Aug 18 16:26:46 C4206)
mozcpp19 mozcpp19.dll Wed Aug 18 15:27:51 C3437)
mozcrt19 mozcrt19.dll Wed Aug 18 15:27:42 C342E)
mozsqlite3 mozsqlite3.dll Wed Aug 18 16:32:06 C4346)
msasn1.dll
Sat Aug 29 02:52:40 D038)
6fd30000 6fda9000
Mon Jul 13 21:07:51 BDA67)
Mon Jul 13 21:07:53 BDA69)
msimg32.dll
Mon Jul 13 21:08:48 BDAA0)
msvcp90.dll
Fri May 22 20:31:01 3C5)
msvcr90.dll
Fri May 22 20:30:57 3C1)
msvcrt.dll
Mon Jul 13 21:07:59 BDA6F)
mswsock.dll
Mon Jul 13 21:08:07 BDA77)
NapiNSP.dll
Mon Jul 13 21:07:57 BDA6D)
6fc90000 6fca0000
nlaapi.dll
Mon Jul 13 21:08:12 BDA7C)
normaliz normaliz.dll Mon Jul 13 21:09:40 BDAD4)
NPSWF32.dll
Wed Jul 28 03:12:39 FD867)
Mon Jul 13 21:09:45 BDAD9)
Wed Aug 18 15:29:33 C349D)
Wed Aug 18 16:04:46 C3CDE)
6cb60000 6cbb0000
nssckbi.dll
Wed Aug 18 16:05:09 C3CF5)
6cbb0000 6cbc8000
nssdbm3.dll
Wed Aug 18 16:04:07 C3CB7)
nssutil3 nssutil3.dll Wed Aug 18 16:03:52 C3CA8)
Wed Mar 24 02:35:08 B29C)
ntmarta.dll
Mon Jul 13 21:10:01 BDAE9)
ntshrui.dll
Mon Jul 13 21:10:03 BDAEB)
OFFICE.ODF
Sat Jan 30 04:36:47 FDAF)
Mon Jul 13 21:09:27 BDAC7)
76c40000 76ccf000
oleaut32 oleaut32.dll Wed Apr 07 03:07:41 2010 (4BBC2F3D)
Wed Aug 18 15:29:37 C34A1)
Wed Aug 18 15:29:34 C349E)
pnrpnsp.dll
Mon Jul 13 21:10:14 BDAF6)
powrprof powrprof.dll Mon Jul 13 21:10:36 BDB0C)
profapi.dll
Mon Jul 13 19:12:01 BBF41)
propsys.dll
Mon Jul 13 21:09:31 BDACB)
Mon Jul 13 21:09:34 BDACE)
rasadhlp rasadhlp.dll Mon Jul 13 21:09:42 BDAD6)
rpcrt4.dll
Mon Jul 13 21:11:23 BDB3B)
73bf0000 73bfe000
RpcRtRemote RpcRtRemote.dll Mon Jul 13 19:43:47 BC6B3)
rsaenh.dll
Mon Jul 13 21:09:52 BDAE0)
sechost.dll
Mon Jul 13 21:10:28 BDB04)
setupapi setupapi.dll Mon Jul 13 21:10:22 BDAFE)
shell32.dll
Tue Jul 27 09:57:01 EE5AD)
shlwapi.dll
Mon Jul 13 21:10:29 BDB05)
6fed0000 6feda000
Mon Jul 13 21:10:37 BDB0D)
smime3.dll
Wed Aug 18 16:05:01 C3CED)
6fcd0000 6fcf6000
softokn3 softokn3.dll Wed Aug 18 16:04:04 C3CB4)
srvcli.dll
Mon Jul 13 21:11:19 BDB37)
Wed Aug 18 16:04:55 C3CE7)
sspicli.dll
Fri Dec 11 02:36:33 F681)
t2embed.dll
Mon Oct 19 10:07:41 2009 (4ADC72AD)
urlmon.dll
Wed Jun 30 02:17:37 AE181)
user32.dll
Mon Jul 13 21:11:24 BDB3C)
userenv.dll
Mon Jul 13 21:11:13 BDB31)
Mon Jul 13 21:11:14 BDB32)
uxtheme.dll
Mon Jul 13 21:11:24 BDB3C)
version.dll
Mon Jul 13 21:11:07 BDB2B)
WindowsCodecs WindowsCodecs.dll Mon Jul 13 21:11:22 BDB3A)
wininet.dll
Wed Jun 30 02:17:57 AE195)
Mon Jul 13 21:11:30 BDB42)
winnsi.dll
Mon Jul 13 21:11:31 BDB43)
winrnr.dll
Mon Jul 13 21:11:32 BDB44)
winspool winspool.drv Mon Jul 13 21:11:39 BDB4B)
Wldap32.dll
Mon Jul 13 21:12:02 BDB62)
ws2_32.dll
Mon Jul 13 21:11:38 BDB4A)
wship6.dll
Mon Jul 13 21:11:50 BDB56)
WSHTCPIP WSHTCPIP.DLL Mon Jul 13 21:11:54 BDB5A)
wsock32.dll
Mon Jul 13 21:12:03 BDB63)
Wed Aug 18 17:36:24 C5258)
Wed Aug 18 17:35:12 C5210)
^ Syntax error in '!analyze -v;r;..q'
0:012& !analyze -v
*******************************************************************************
Exception Analysis
*******************************************************************************
FAULTING_IP:
EXCEPTION_RECORD:
ffffffff -- (.exr 0xffffffffffffffff)
.exr 0xffffffffffffffff
ExceptionAddress:
(ntdll!TppWaiterpThread+0x)
ExceptionCode: c000070a
ExceptionFlags:
NumberParameters: 5
Parameter[0]: c0000008
Parameter[1]: 0ba1ccdc
Parameter[2]:
Parameter[3]:
Parameter[4]: 6b13729c
DEFAULT_BUCKET_ID:
APPLICATION_FAULT
PROCESS_NAME:
firefox.exe
ERROR_CODE: (NTSTATUS) 0xc000070a - Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
EXCEPTION_CODE: (NTSTATUS) 0xc000070a - Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
EXCEPTION_PARAMETER1:
EXCEPTION_PARAMETER2:
EXCEPTION_PARAMETER3:
EXCEPTION_PARAMETER4: 2838228
HANDLE: 0ba1ccdc (!handle 0ba1ccdc)
THREADPOOL_WAITER: !tp wait 2899938
!tp wait 2899938
Unable to read ${$ntdllsym}!_TPP_CLEANUP_GROUP_MEMBER at 0x
MOD_LIST: &ANALYSIS/&
FAULTING_THREAD:
PRIMARY_PROBLEM_CLASS:
APPLICATION_FAULT
BUGCHECK_STR:
APPLICATION_FAULT_APPLICATION_FAULT
LAST_CONTROL_TRANSFER:
from 770a3677 to
STACK_TEXT:
ab 0563fee4 77929d42 ntdll!TppWaiterpThread+0x632
0563fea4 d779
kernel32!BaseThreadInitThunk+0xe
0563fee4 51c66 00000 ntdll!__RtlUserThreadStart+0x70
0563fefc 51c66 00000 ntdll!_RtlUserThreadStart+0x1b
FOLLOWUP_IP:
ntdll!TppWaiterpThread+632
dword ptr [ebp-1Ch]
SYMBOL_STACK_INDEX:
SYMBOL_NAME:
ntdll!TppWaiterpThread+632
FOLLOWUP_NAME:
MachineOwner
MODULE_NAME: ntdll
IMAGE_NAME:
DEBUG_FLR_IMAGE_TIMESTAMP:
STACK_COMMAND:
~12s; . kb
FAILURE_BUCKET_ID:
APPLICATION_FAULT_c000070a_ntdll.dll!TppWaiterpThread
BUCKET_ID:
APPLICATION_FAULT_APPLICATION_FAULT_ntdll!TppWaiterpThread+632
WATSON_IBUCKET:
WATSON_IBUCKETTABLE:
WATSON_STAGEONE_URL:
/StageOne/firefox_exe/2_0_0_c52e3/ntdll_dll/6_1_/4ba9b29c/c09c405.htm?Retriage=1
Followup: MachineOwner
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
I do have both browsers installed. I'll try uninstalling them both. Thanks for helping, John.
__________________
A+ Certified Technician
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
Glad to help!
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
Removing Chrome and Firefox has seemed to improved overall system stability. I'd really like to get Firefox working if possible though, I prefer it quite a bit over Internet Explorer. Any suggestions?
Thanks again.
__________________
A+ Certified Technician
Team Manager, Microsoft SupportBSOD Kernel Dump Expert
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 33,296
OS: Windows 10, 8.1, 7 + Windbg :)
Have you tried just FFox - no Chrome?
I see a lock occuring in the dumps.
If WMP network sharing service running - disable.
Regards. . .
__________________
Microsoft MVP
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
Does WMP still have issues?
If not, then it's likely a problem with the FF/Chrome.
Install the latest version of Firefox and don't add any extensions/add-ons yet.
See if it remains stable.
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
I haven't seen any issues with Windows Media Player since I uninstalled them. I tried reinstalling Firefox and crashed on the second or third page I went to.
__________________
A+ Certified Technician
Team Manager, Microsoft SupportBSOD Kernel Dump Expert
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 33,296
OS: Windows 10, 8.1, 7 + Windbg :)
What does Problem Reports say?
Event Viewer?
If all 0xc0000005, rogue driver or RAM involved.
Driver Verifier..?
__________________
Microsoft MVP
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
It's somewhat depressing that I didn't think about that before... Turning the Verifier on. I'll upload the first dump I get (if any).
__________________
A+ Certified Technician
Team Manager, Microsoft SupportBSOD Kernel Dump Expert
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 33,296
OS: Windows 10, 8.1, 7 + Windbg :)
You should have seen me when my Windows 7 x64 system BSOD'd to death here ~ 2 months ago.
I reached out for help.
__________________
Microsoft MVP
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
It happens to all of us at one time or another.
I did it most recently with my bad motherboard and hard drive failures about a month ago.
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
Sure enough, the Verifier 0xC2 pointing to nvcwfcpo.sys - my school's VPN client. It wouldn't surprise me at all, but I just set up the VPN around two weeks ago but I've had this problem for months, and when I got the BSOD itself flagged ndis.sys.
Also, Internet Explorer has started to crash with the same error. It must be related one way or another to ndis.sys. I've created a dump from the process.
I've attached the old Firefox minidump, Internet Explorer's dump and the Verifier-enabled BSOD dump.
Much appreciated.
Attached Files
(1.13 MB, 185 views)
__________________
A+ Certified Technician
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
It's possible that these are a stack of problems.
And that fixing the nvcwfpco.sys issue can reveal another problem.
Although the Driver Verifier dump points to nvcwfpco.sys, it's really just saying that the error occurred in nvcwfpco.sys - not that nvcwfpco.sys is at fault (although it's most likely to blame).
For example (from the stack text), it's possible (but not as likely) that the ndis.sys driver is corrupted and when nvcwfpco.sys accesses it, it spits out an error.
And it's possible (but even less likely) that ntkrnlmp.exe is corrupted and an access by ndis.sys causes the error to spit out.
In short, we fix the nvcwfpco.sys error - and then work on the next thing that comes up.
Also, the 2 user level dumps are spitting errors in wow64.dll
Have you tried testing with the 64 bit version of IE?
Have you run SFC.EXE /SCANNOW from an elevated (Run as administrator) Command Prompt?
The errors can be in ndis.sys and how it interfaces with the VPN driver
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
I agree completely that it could be a bunch of nested problems. I have tried sfc /scannow and it didn't come up with any issues. I haven't tried 64-bit IE, I'll test it later on as well as uninstall the VPN software once I'm done using it.
__________________
A+ Certified Technician
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
IE x64 did in fact just crash.
__________________
A+ Certified Technician
TSF Team EmeritusMicrosoft MVP
Join Date: Apr 2009
Location: Southeastern CT, USA
Posts: 7,483
Do you have the dump from the x64 crash?
If not, try this to generate a dump for a crashing process:
__________________
, Microsoft MVP - Windows Expert - Consumer
TSF Team EmeritusVisiting Expert | Microsoft Support Team
Join Date: Jun 2009
Location: C:\Windows
Posts: 4,026
OS: Windows 7 SP1 (x64), XP Home (x32), Ubuntu 10.10, Fedora 14
I've created and attach an IE x64 dump.
Attached Files
(234.4 KB, 183 views)
__________________
A+ Certified Technician
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
code is on
HTML code is Off are Off
& Recent Discussions
& Site Navigation
& && && &&& &&& &&& &&&
All times are GMT -7. The time now is .
vBulletin Security provided by
Copyright & 2016 DragonByte Technologies Ltd.Copyright 2001 -
2015, Tech Support Forum
Partially Powered By Products Found At