How to determine cause of rundll access violation during startup?

J

Joe

I'm getting a rundll32 access violation (Exception number: c0000005)
during system startup (win2k pro sp4). This is a new install that is
pretty stable otherwise. Have been installing all the most recent
versions of all drivers, applications (Office 2003 Beta 3, Front Page
2003 beta 2, etc). Video card is ATI Radeon 7500, motherboard is
GigaByte GA-8KNXP. 1 gb of ram.

I've looked at the entry in Dr. Watson and there is no information I
can see that will tell me what application is the source of this
error. I've disabled a number of services that I don't think I need
(based on their description) but I still get the error.

Would it help to post the drwatson log entry here? There are no
symbols in the dump.

By the way, under system information it says "Number of processors: 2"
and a few lines down it says "Current Type: Multiprocessor Free".
What does that mean? I have only 1 CPU (Intel P-4 2.6 ghz).

Here is part of the error log:

Application exception occurred:
App: rundll32.exe (pid=740)
Exception number: c0000005 (access violation)

*----> System Information <----*
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free

*----> Task List <----*
0 Idle.exe
8 System.exe
156 SMSS.exe
180 CSRSS.exe
176 WINLOGON.exe
228 SERVICES.exe
240 LSASS.exe
396 svchost.exe
424 spoolsv.exe
456 svchost.exe
504 mstask.exe
592 WinMgmt.exe
724 explorer.exe
780 atiptaxx.exe
832 Desk95.exe
840 SOUNDMAN.exe
852 LaunchPd.exe
872 ATIRW.exe
880 CTFMON.exe
740 rundll32.exe
608 DRWTSN32.exe
576 DRWTSN32.exe
0 _Total.exe

function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:00b49c7b=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:10b74bae=??
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:0115d9e2=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44
(77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00ad9ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FDB8 7C4F1B1B 000000F8 FFFFFFFF 00000000 100590BB
ntdll!ZwWaitForSingleObject
0006FE0C 10033A31 000000DE 00000004 100B3FB8 00000000
kernel32!WaitForSingleObject
0006FE24 100351B7 0006FE8C 0006FE90 100B418C 100B3FB8 !<nosymbols>
0006FE80 10034FFA 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FEB8 10033C07 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FF18 010016EB 000100C4 01000000 00076770 0000000A !EntryPoint
0006FF60 010011F6 01000000 00000000 00020662 0000000A
rundll32!<nosymbols>
0006FFC0 7C4E87F5 00000200 004EF0F4 7FFDF000 FFFFFFFF
rundll32!<nosymbols>
0006FFF0 00000000 01001171 00000000 000000C8 00000100
kernel32!DosDateTimeToFileTime
 
G

George Hester

What are:

1) atiptaxx
2) Desk95
3) SOUNDMAN.EXE?

--
George Hester
__________________________________
Joe said:
I'm getting a rundll32 access violation (Exception number: c0000005)
during system startup (win2k pro sp4). This is a new install that is
pretty stable otherwise. Have been installing all the most recent
versions of all drivers, applications (Office 2003 Beta 3, Front Page
2003 beta 2, etc). Video card is ATI Radeon 7500, motherboard is
GigaByte GA-8KNXP. 1 gb of ram.

I've looked at the entry in Dr. Watson and there is no information I
can see that will tell me what application is the source of this
error. I've disabled a number of services that I don't think I need
(based on their description) but I still get the error.

Would it help to post the drwatson log entry here? There are no
symbols in the dump.

By the way, under system information it says "Number of processors: 2"
and a few lines down it says "Current Type: Multiprocessor Free".
What does that mean? I have only 1 CPU (Intel P-4 2.6 ghz).

Here is part of the error log:

Application exception occurred:
App: rundll32.exe (pid=740)
Exception number: c0000005 (access violation)

*----> System Information <----*
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free

*----> Task List <----*
0 Idle.exe
8 System.exe
156 SMSS.exe
180 CSRSS.exe
176 WINLOGON.exe
228 SERVICES.exe
240 LSASS.exe
396 svchost.exe
424 spoolsv.exe
456 svchost.exe
504 mstask.exe
592 WinMgmt.exe
724 explorer.exe
780 atiptaxx.exe
832 Desk95.exe
840 SOUNDMAN.exe
852 LaunchPd.exe
872 ATIRW.exe
880 CTFMON.exe
740 rundll32.exe
608 DRWTSN32.exe
576 DRWTSN32.exe
0 _Total.exe

function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:00b49c7b=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:10b74bae=??
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:0115d9e2=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44
(77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00ad9ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FDB8 7C4F1B1B 000000F8 FFFFFFFF 00000000 100590BB
ntdll!ZwWaitForSingleObject
0006FE0C 10033A31 000000DE 00000004 100B3FB8 00000000
kernel32!WaitForSingleObject
0006FE24 100351B7 0006FE8C 0006FE90 100B418C 100B3FB8 !<nosymbols>
0006FE80 10034FFA 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FEB8 10033C07 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FF18 010016EB 000100C4 01000000 00076770 0000000A !EntryPoint
0006FF60 010011F6 01000000 00000000 00020662 0000000A
rundll32!<nosymbols>
0006FFC0 7C4E87F5 00000200 004EF0F4 7FFDF000 FFFFFFFF
rundll32!<nosymbols>
0006FFF0 00000000 01001171 00000000 000000C8 00000100
kernel32!DosDateTimeToFileTime
Click to expand...
 
D

dcdon

Hi George,


Do you have Avance sound (I do and have SOUND.EXE running)
http://www.reger24.de/prozesse/atiptaxx.exe.html
http://www.driverguide.com/
Desk95 - Do you have an ATI video card?
http://www.cs.yorku.ca/~dfiguero/tech/faq.html

good computing,
don
-------------
Gotta change this. Gettin old
8:)




What are:

1) atiptaxx
2) Desk95
3) SOUNDMAN.EXE?

--
George Hester
__________________________________
Joe said:
I'm getting a rundll32 access violation (Exception number: c0000005)
during system startup (win2k pro sp4). This is a new install that is
pretty stable otherwise. Have been installing all the most recent
versions of all drivers, applications (Office 2003 Beta 3, Front Page
2003 beta 2, etc). Video card is ATI Radeon 7500, motherboard is
GigaByte GA-8KNXP. 1 gb of ram.

I've looked at the entry in Dr. Watson and there is no information I
can see that will tell me what application is the source of this
error. I've disabled a number of services that I don't think I need
(based on their description) but I still get the error.

Would it help to post the drwatson log entry here? There are no
symbols in the dump.

By the way, under system information it says "Number of processors: 2"
and a few lines down it says "Current Type: Multiprocessor Free".
What does that mean? I have only 1 CPU (Intel P-4 2.6 ghz).

Here is part of the error log:

Application exception occurred:
App: rundll32.exe (pid=740)
Exception number: c0000005 (access violation)

*----> System Information <----*
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free

*----> Task List <----*
0 Idle.exe
8 System.exe
156 SMSS.exe
180 CSRSS.exe
176 WINLOGON.exe
228 SERVICES.exe
240 LSASS.exe
396 svchost.exe
424 spoolsv.exe
456 svchost.exe
504 mstask.exe
592 WinMgmt.exe
724 explorer.exe
780 atiptaxx.exe
832 Desk95.exe
840 SOUNDMAN.exe
852 LaunchPd.exe
872 ATIRW.exe
880 CTFMON.exe
740 rundll32.exe
608 DRWTSN32.exe
576 DRWTSN32.exe
0 _Total.exe

function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:00b49c7b=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:10b74bae=??
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:0115d9e2=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44
(77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00ad9ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FDB8 7C4F1B1B 000000F8 FFFFFFFF 00000000 100590BB
ntdll!ZwWaitForSingleObject
0006FE0C 10033A31 000000DE 00000004 100B3FB8 00000000
kernel32!WaitForSingleObject
0006FE24 100351B7 0006FE8C 0006FE90 100B418C 100B3FB8 !<nosymbols>
0006FE80 10034FFA 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FEB8 10033C07 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FF18 010016EB 000100C4 01000000 00076770 0000000A !EntryPoint
0006FF60 010011F6 01000000 00000000 00020662 0000000A
rundll32!<nosymbols>
0006FFC0 7C4E87F5 00000200 004EF0F4 7FFDF000 FFFFFFFF
rundll32!<nosymbols>
0006FFF0 00000000 01001171 00000000 000000C8 00000100
kernel32!DosDateTimeToFileTime
Click to expand...
 
G

George Hester

I have an ATI TV Tuner All Wonder card. The ability to use this card to its full capacity is not supported in Windows 2000. If I used the TV Tuner part of it then I get very discouraging behavior. Haven't tried that for over two years. I gave up on it. Furthermiore I do not upgrade my video drivers. The ones's on the Windows 2000 CD-ROM are sufficient and hassle-free. And I have no ATI processes running.

--
George Hester
__________________________________
dcdon said:
Hi George,


Do you have Avance sound (I do and have SOUND.EXE running)
http://www.reger24.de/prozesse/atiptaxx.exe.html
http://www.driverguide.com/
Desk95 - Do you have an ATI video card?
http://www.cs.yorku.ca/~dfiguero/tech/faq.html

good computing,
don
-------------
Gotta change this. Gettin old
8:)




What are:

1) atiptaxx
2) Desk95
3) SOUNDMAN.EXE?

--
George Hester
__________________________________
Joe said:
I'm getting a rundll32 access violation (Exception number: c0000005)
during system startup (win2k pro sp4). This is a new install that is
pretty stable otherwise. Have been installing all the most recent
versions of all drivers, applications (Office 2003 Beta 3, Front Page
2003 beta 2, etc). Video card is ATI Radeon 7500, motherboard is
GigaByte GA-8KNXP. 1 gb of ram.

I've looked at the entry in Dr. Watson and there is no information I
can see that will tell me what application is the source of this
error. I've disabled a number of services that I don't think I need
(based on their description) but I still get the error.

Would it help to post the drwatson log entry here? There are no
symbols in the dump.

By the way, under system information it says "Number of processors: 2"
and a few lines down it says "Current Type: Multiprocessor Free".
What does that mean? I have only 1 CPU (Intel P-4 2.6 ghz).

Here is part of the error log:

Application exception occurred:
App: rundll32.exe (pid=740)
Exception number: c0000005 (access violation)

*----> System Information <----*
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free

*----> Task List <----*
0 Idle.exe
8 System.exe
156 SMSS.exe
180 CSRSS.exe
176 WINLOGON.exe
228 SERVICES.exe
240 LSASS.exe
396 svchost.exe
424 spoolsv.exe
456 svchost.exe
504 mstask.exe
592 WinMgmt.exe
724 explorer.exe
780 atiptaxx.exe
832 Desk95.exe
840 SOUNDMAN.exe
852 LaunchPd.exe
872 ATIRW.exe
880 CTFMON.exe
740 rundll32.exe
608 DRWTSN32.exe
576 DRWTSN32.exe
0 _Total.exe

function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:00b49c7b=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:10b74bae=??
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:0115d9e2=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44
(77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00ad9ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FDB8 7C4F1B1B 000000F8 FFFFFFFF 00000000 100590BB
ntdll!ZwWaitForSingleObject
0006FE0C 10033A31 000000DE 00000004 100B3FB8 00000000
kernel32!WaitForSingleObject
0006FE24 100351B7 0006FE8C 0006FE90 100B418C 100B3FB8 !<nosymbols>
0006FE80 10034FFA 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FEB8 10033C07 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FF18 010016EB 000100C4 01000000 00076770 0000000A !EntryPoint
0006FF60 010011F6 01000000 00000000 00020662 0000000A
rundll32!<nosymbols>
0006FFC0 7C4E87F5 00000200 004EF0F4 7FFDF000 FFFFFFFF
rundll32!<nosymbols>
0006FFF0 00000000 01001171 00000000 000000C8 00000100
kernel32!DosDateTimeToFileTime
Click to expand...
Click to expand...
 
D

dcdon

George,
I hope you aren't as paranoid as me. The atiptaxx is from your video, my SOUND
comes from my Avance sound, and Desk95 has something to do with Hydravision
Desktop Manager if you have an ATI video card.

8:)
don
----------
going to bed, good night

I have an ATI TV Tuner All Wonder card. The ability to use this card to its full
capacity is not supported in Windows 2000. If I used the TV Tuner part of it then
I get very discouraging behavior. Haven't tried that for over two years. I gave
up on it. Furthermiore I do not upgrade my video drivers. The ones's on the
Windows 2000 CD-ROM are sufficient and hassle-free. And I have no ATI processes
running.

--
George Hester
__________________________________
dcdon said:
Hi George,


Do you have Avance sound (I do and have SOUND.EXE running)
http://www.reger24.de/prozesse/atiptaxx.exe.html
http://www.driverguide.com/
Desk95 - Do you have an ATI video card?
http://www.cs.yorku.ca/~dfiguero/tech/faq.html

good computing,
don
-------------
Gotta change this. Gettin old
8:)




What are:

1) atiptaxx
2) Desk95
3) SOUNDMAN.EXE?

--
George Hester
__________________________________
Joe said:
I'm getting a rundll32 access violation (Exception number: c0000005)
during system startup (win2k pro sp4). This is a new install that is
pretty stable otherwise. Have been installing all the most recent
versions of all drivers, applications (Office 2003 Beta 3, Front Page
2003 beta 2, etc). Video card is ATI Radeon 7500, motherboard is
GigaByte GA-8KNXP. 1 gb of ram.

I've looked at the entry in Dr. Watson and there is no information I
can see that will tell me what application is the source of this
error. I've disabled a number of services that I don't think I need
(based on their description) but I still get the error.

Would it help to post the drwatson log entry here? There are no
symbols in the dump.

By the way, under system information it says "Number of processors: 2"
and a few lines down it says "Current Type: Multiprocessor Free".
What does that mean? I have only 1 CPU (Intel P-4 2.6 ghz).

Here is part of the error log:

Application exception occurred:
App: rundll32.exe (pid=740)
Exception number: c0000005 (access violation)

*----> System Information <----*
User Name: Administrator
Number of Processors: 2
Processor Type: x86 Family 15 Model 2 Stepping 9
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Multiprocessor Free

*----> Task List <----*
0 Idle.exe
8 System.exe
156 SMSS.exe
180 CSRSS.exe
176 WINLOGON.exe
228 SERVICES.exe
240 LSASS.exe
396 svchost.exe
424 spoolsv.exe
456 svchost.exe
504 mstask.exe
592 WinMgmt.exe
724 explorer.exe
780 atiptaxx.exe
832 Desk95.exe
840 SOUNDMAN.exe
852 LaunchPd.exe
872 ATIRW.exe
880 CTFMON.exe
740 rundll32.exe
608 DRWTSN32.exe
576 DRWTSN32.exe
0 _Total.exe

function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4]
ss:00b49c7b=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1]
ds:10b74bae=??
77f94097 3a5101 cmp dl,[ecx+0x1]
ds:0115d9e2=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44
(77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31
(77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff]
ds:00ad9ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e
(77fa50b8)
77f940b4 b001 mov al,0x1

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0006FDB8 7C4F1B1B 000000F8 FFFFFFFF 00000000 100590BB
ntdll!ZwWaitForSingleObject
0006FE0C 10033A31 000000DE 00000004 100B3FB8 00000000
kernel32!WaitForSingleObject
0006FE24 100351B7 0006FE8C 0006FE90 100B418C 100B3FB8 !<nosymbols>
0006FE80 10034FFA 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FEB8 10033C07 00000000 7C4FC100 0006FF01 01001600 !<nosymbols>
0006FF18 010016EB 000100C4 01000000 00076770 0000000A !EntryPoint
0006FF60 010011F6 01000000 00000000 00020662 0000000A
rundll32!<nosymbols>
0006FFC0 7C4E87F5 00000200 004EF0F4 7FFDF000 FFFFFFFF
rundll32!<nosymbols>
0006FFF0 00000000 01001171 00000000 000000C8 00000100
kernel32!DosDateTimeToFileTime
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Dr. Watson error 0
Termsrv.exe and ICAAPI.dll 0
Exception number: c0000005 (access violation) explorer keeps crashing 0
Dr.Watson entry - what does it mean? 1
svchost.exe error 1
DR WATSON 32 ERROR HELP ME!!! 1
Application Exception occurred in Explorer.exe 1
WinMgmt drwatson program error 1

Top