Jump to content

Dr. Watson crash on RUNDLL32.EXE, Control Panel icon, other apps too

Guest Thee Chicago Wolf

By Guest Thee Chicago Wolf
in Windows XP

 Share

Recommended Posts

Guest Thee Chicago Wolf

Guest Thee Chicago Wolf

Posted
Posted

The log file shows a crash at RUNDLL32.EXE. System was perfectly

stable yesterday. The only thing I changed within the last 24 hrs was

to update Ad-Aware 2007 to the latest patches. Does anyone speak

crash-dump? Any help would be tops.

 

 

 

 

Microsoft ® DrWtsn32

Copyright © 1985-2001 Microsoft Corp. All rights reserved.

 

Application exception occurred:

App: C:\WINDOWS\system32\rundll32.exe (pid=1764)

When: 08/29/2007 @ 07:01:31.578

Exception number: c0000005 (access violation)

 

*----> System Information <----*

Terminal Session Id: 0

Number of Processors: 1

Processor Type: x86 Family 6 Model 10 Stepping 0

Windows Version: 5.1

Current Build: 2600

Service Pack: 2

Current Type: Multiprocessor Free

Registered Organization: Multiprocessor Free

Registered Owner: Multiprocessor Free

 

*----> Task List <----*

0 System Process

4 System

348 smss.exe

444 csrss.exe

492 winlogon.exe

568 services.exe

580 lsass.exe

780 svchost.exe

860 svchost.exe

944 svchost.exe

972 svchost.exe

1100 spoolsv.exe

1160 sched.exe

1180 avguard.exe

1224 svchost.exe

1744 Explorer.EXE

200 avgnt.exe

208 MBM5.EXE

644 wuauclt.exe

984 wmiprvse.exe

1448 explorer.exe

1764 rundll32.exe

1184 drwtsn32.exe

 

*----> Module List <----*

(0000000001000000 - 000000000100b000: C:\WINDOWS\system32\rundll32.exe

(0000000020000000 - 00000000202c5000: C:\WINDOWS\system32\xpsp2res.dll

(0000000047d60000 - 0000000047db2000: C:\WINDOWS\system32\sysdm.cpl

(00000000508e0000 - 0000000050916000: C:\WINDOWS\system32\wuaucpl.cpl

(000000005ad70000 - 000000005ada8000: C:\WINDOWS\system32\UxTheme.dll

(000000005b860000 - 000000005b8b5000: C:\WINDOWS\system32\NETAPI32.dll

(000000005c020000 - 000000005c05f000: C:\WINDOWS\system32\srrstr.dll

(000000005c060000 - 000000005c073000: C:\WINDOWS\system32\srclient.dll

(000000005cb70000 - 000000005cb96000: C:\WINDOWS\system32\ShimEng.dll

(000000005d090000 - 000000005d12a000: C:\WINDOWS\system32\comctl32.dll

(000000005da30000 - 000000005da42000: C:\WINDOWS\system32\remotepg.dll

(000000005f660000 - 000000005f685000: C:\WINDOWS\system32\netid.dll

(00000000692c0000 - 00000000692f0000:

C:\WINDOWS\System32\Wbem\framedyn.dll

(000000006f880000 - 000000006fa4a000: C:\WINDOWS\AppPatch\AcGenral.DLL

(0000000071aa0000 - 0000000071aa8000: C:\WINDOWS\system32\WS2HELP.dll

(0000000071ab0000 - 0000000071ac7000: C:\WINDOWS\system32\WS2_32.dll

(0000000071bf0000 - 0000000071c03000: C:\WINDOWS\system32\SAMLIB.dll

(0000000074d90000 - 0000000074dfb000: C:\WINDOWS\system32\USP10.dll

(0000000074ed0000 - 0000000074ede000:

C:\WINDOWS\system32\wbem\wbemsvc.dll

(0000000074ef0000 - 0000000074ef8000:

C:\WINDOWS\system32\wbem\wbemprox.dll

(0000000075150000 - 0000000075164000: C:\WINDOWS\system32\Cabinet.dll

(0000000075290000 - 00000000752c7000:

C:\WINDOWS\system32\wbem\wbemcomn.dll

(0000000075690000 - 0000000075706000:

C:\WINDOWS\system32\wbem\fastprox.dll

(0000000076080000 - 00000000760e5000: C:\WINDOWS\system32\MSVCP60.dll

(0000000076360000 - 0000000076370000: C:\WINDOWS\system32\WINSTA.dll

(0000000076380000 - 0000000076385000: C:\WINDOWS\system32\MSIMG32.dll

(0000000076390000 - 00000000763ad000: C:\WINDOWS\system32\IMM32.dll

(00000000763b0000 - 00000000763f9000: C:\WINDOWS\system32\comdlg32.dll

(00000000767a0000 - 00000000767b3000: C:\WINDOWS\system32\NTDSAPI.dll

(00000000769c0000 - 0000000076a74000: C:\WINDOWS\system32\USERENV.dll

(0000000076b40000 - 0000000076b6d000: C:\WINDOWS\system32\WINMM.dll

(0000000076c00000 - 0000000076c2e000: C:\WINDOWS\system32\credui.dll

(0000000076c30000 - 0000000076c5e000: C:\WINDOWS\system32\WINTRUST.dll

(0000000076c90000 - 0000000076cb8000: C:\WINDOWS\system32\IMAGEHLP.dll

(0000000076f20000 - 0000000076f47000: C:\WINDOWS\system32\DNSAPI.dll

(0000000076f60000 - 0000000076f8c000: C:\WINDOWS\system32\WLDAP32.dll

(0000000076fd0000 - 000000007704f000: C:\WINDOWS\system32\CLBCATQ.DLL

(0000000077050000 - 0000000077115000: C:\WINDOWS\system32\COMRes.dll

(0000000077120000 - 00000000771ab000: C:\WINDOWS\system32\OLEAUT32.dll

(00000000773d0000 - 00000000774d3000:

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll

(00000000774e0000 - 000000007761d000: C:\WINDOWS\system32\ole32.dll

(0000000077920000 - 0000000077a13000: C:\WINDOWS\system32\SETUPAPI.dll

(0000000077a80000 - 0000000077b15000: C:\WINDOWS\system32\CRYPT32.dll

(0000000077b20000 - 0000000077b32000: C:\WINDOWS\system32\MSASN1.dll

(0000000077b40000 - 0000000077b62000: C:\WINDOWS\system32\appHelp.dll

(0000000077be0000 - 0000000077bf5000: C:\WINDOWS\system32\MSACM32.dll

(0000000077c00000 - 0000000077c08000: C:\WINDOWS\system32\VERSION.dll

(0000000077c10000 - 0000000077c68000: C:\WINDOWS\system32\msvcrt.dll

(0000000077dd0000 - 0000000077e6b000: C:\WINDOWS\system32\ADVAPI32.dll

(0000000077e70000 - 0000000077f01000: C:\WINDOWS\system32\RPCRT4.dll

(0000000077f10000 - 0000000077f57000: C:\WINDOWS\system32\GDI32.dll

(0000000077f60000 - 0000000077fd6000: C:\WINDOWS\system32\SHLWAPI.dll

(0000000077fe0000 - 0000000077ff1000: C:\WINDOWS\system32\Secur32.dll

(000000007c800000 - 000000007c8f5000: C:\WINDOWS\system32\kernel32.dll

(000000007c900000 - 000000007c9af000: C:\WINDOWS\system32\ntdll.dll

(000000007c9c0000 - 000000007d1d6000: C:\WINDOWS\system32\SHELL32.dll

(000000007e410000 - 000000007e4a0000: C:\WINDOWS\system32\USER32.dll

 

*----> State Dump for Thread Id 0x624 <----*

 

eax=00000000 ebx=00000000 ecx=00000000 edx=7c90e4f4 esi=0007f0f0

edi=000a0768

eip=7c90e4f4 esp=0007f0b0 ebp=0007f0cc iopl=0 nv up ei pl zr

na po nc

cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246

 

*** ERROR: Symbol file could not be found. Defaulted to export

symbols for C:\WINDOWS\system32\ntdll.dll -

function: ntdll!KiFastSystemCallRet

7c90e470 6a00 push 0x0

7c90e472 51 push ecx

7c90e473 e8c8ebffff call ntdll!NtContinue (7c90d040)

7c90e478 eb0b jmp

ntdll!KiUserExceptionDispatcher+0x29 (7c90e485)

7c90e47a 5b pop ebx

7c90e47b 59 pop ecx

7c90e47c 6a00 push 0x0

7c90e47e 51 push ecx

7c90e47f 53 push ebx

7c90e480 e80bf5ffff call ntdll!NtRaiseException

(7c90d990)

7c90e485 83c4ec add esp,0xffffffec

7c90e488 890424 mov [esp],eax

7c90e48b c744240401000000 mov dword ptr [esp+0x4],0x1

7c90e493 895c2408 mov [esp+0x8],ebx

7c90e497 c744241000000000 mov dword ptr [esp+0x10],0x0

7c90e49f 54 push esp

7c90e4a0 e863000000 call ntdll!RtlRaiseException

(7c90e508)

7c90e4a5 c20800 ret 0x8

ntdll!KiRaiseUserExceptionDispatcher:

7c90e4a8 55 push ebp

7c90e4a9 8bec mov ebp,esp

7c90e4ab 83ec50 sub esp,0x50

7c90e4ae 8944240c mov [esp+0xc],eax

7c90e4b2 64a118000000 mov eax,fs:[00000018]

7c90e4b8 8b80a4010000 mov eax,[eax+0x1a4]

7c90e4be 890424 mov [esp],eax

7c90e4c1 c744240400000000 mov dword ptr [esp+0x4],0x0

7c90e4c9 c744240800000000 mov dword ptr [esp+0x8],0x0

7c90e4d1 c744241000000000 mov dword ptr [esp+0x10],0x0

7c90e4d9 54 push esp

7c90e4da e829000000 call ntdll!RtlRaiseException

(7c90e508)

7c90e4df 8b0424 mov eax,[esp]

7c90e4e2 8be5 mov esp,ebp

7c90e4e4 5d pop ebp

7c90e4e5 c3 ret

7c90e4e6 8da42400000000 lea esp,[esp]

7c90e4ed 8d4900 lea ecx,[ecx]

ntdll!KiFastSystemCall:

7c90e4f0 8bd4 mov edx,esp

7c90e4f2 0f34 sysenter

ntdll!KiFastSystemCallRet:

7c90e4f4 c3 ret

7c90e4f5 8da42400000000 lea esp,[esp]

7c90e4fc 8d642400 lea esp,[esp]

ntdll!KiIntSystemCall:

7c90e500 8d542408 lea edx,[esp+0x8]

7c90e504 cd2e int 2e

7c90e506 c3 ret

7c90e507 90 nop

ntdll!RtlRaiseException:

7c90e508 55 push ebp

7c90e509 8bec mov ebp,esp

7c90e50b 9c pushfd

7c90e50c 81ecd0020000 sub esp,0x2d0

7c90e512 8985dcfdffff mov [ebp-0x224],eax

7c90e518 898dd8fdffff mov [ebp-0x228],ecx

7c90e51e 8b4508 mov eax,[ebp+0x8]

7c90e521 8b4d04 mov ecx,[ebp+0x4]

7c90e524 89480c mov [eax+0xc],ecx

7c90e527 8d852cfdffff lea eax,[ebp-0x2d4]

7c90e52d 8988b8000000 mov [eax+0xb8],ecx

7c90e533 8998a4000000 mov [eax+0xa4],ebx

7c90e539 8990a8000000 mov [eax+0xa8],edx

7c90e53f 89b0a0000000 mov [eax+0xa0],esi

7c90e545 89b89c000000 mov [eax+0x9c],edi

7c90e54b 8d4d0c lea ecx,[ebp+0xc]

7c90e54e 8988c4000000 mov [eax+0xc4],ecx

7c90e554 8b4d00 mov ecx,[ebp]

7c90e557 8988b4000000 mov [eax+0xb4],ecx

7c90e55d 8b4dfc mov ecx,[ebp-0x4]

7c90e560 8988c0000000 mov [eax+0xc0],ecx

7c90e566 8c88bc000000 mov [eax+0xbc],cs

7c90e56c 8c9898000000 mov [eax+0x98],ds

7c90e572 8c8094000000 mov [eax+0x94],es

7c90e578 8ca090000000 mov [eax+0x90],fs

7c90e57e 8ca88c000000 mov [eax+0x8c],gs

7c90e584 8c90c8000000 mov [eax+0xc8],ss

7c90e58a c70007000100 mov dword ptr [eax],0x10007

7c90e590 6a01 push 0x1

7c90e592 50 push eax

7c90e593 ff7508 push dword ptr [ebp+0x8]

7c90e596 e8f5f3ffff call ntdll!NtRaiseException

(7c90d990)

 

*----> Stack Back Trace <----*

 

- Thee Chicago Wolf

  • Replies 2
  • Created
  • Last Reply

Popular Days

Popular Days

Guest Jim

Guest Jim

Posted
Posted

Re: Dr. Watson crash on RUNDLL32.EXE, Control Panel icon, other apps too

 

 

"Thee Chicago Wolf" <.@.> wrote in message

news:b2oad3l52etvir5pfr4fn4essoq977sje3@4ax.com...

> The log file shows a crash at RUNDLL32.EXE. System was perfectly

> stable yesterday. The only thing I changed within the last 24 hrs was

> to update Ad-Aware 2007 to the latest patches. Does anyone speak

> crash-dump? Any help would be tops.

>

<snip crash dump>

 

Somebody at MS might. The access violation was probably the cause of the

crash. In short, such a violation

happens when a program attempts to access memory which it does not have the

right to access.

Jim

Guest Thee Chicago Wolf

Guest Thee Chicago Wolf

Posted
Posted

Re: Dr. Watson crash on RUNDLL32.EXE, Control Panel icon, other apps too

 

>"Thee Chicago Wolf" <.@.> wrote in message

>news:b2oad3l52etvir5pfr4fn4essoq977sje3@4ax.com...

>> The log file shows a crash at RUNDLL32.EXE. System was perfectly

>> stable yesterday. The only thing I changed within the last 24 hrs was

>> to update Ad-Aware 2007 to the latest patches. Does anyone speak

>> crash-dump? Any help would be tops.

>>

><snip crash dump>

>

>Somebody at MS might. The access violation was probably the cause of the

>crash. In short, such a violation

>happens when a program attempts to access memory which it does not have the

>right to access.

>Jim

 

Cheers Jim.

 

- Thee Chicago Wolf

 Share
Go to topic listing
×
×
  • Create New...