Crashing spooler on client desktops

E

Eric S

I'm looking for some advice on how to deal with spoolers that somewhat
randomly blow up on client desktops. The server is Windows Server 2003 R2,
it's sole purpose is printing... roughly 500 queues of different makes and
models, primarily HP based but some other manufacturers as well. I've seen
the problem occur on either XP or Vista (0x00006be anyone?) desktops.

The spooler service will crash on the client desktop when the user is
installing the print driver. I would assume that this means a bad print
driver, however, the problem is not consistent. For example, I had a client
computer's spooler crashing on me yesterday so I thought I would try the
debugger to see if I could find out what .dll was causing the crash. First
attempt shows that it was atl.dll with an access denied, which is fine, I
suppose.. even though I had full control on the file.

Second attempt at debugging it, the printer installed fine. Nothing changed
on the queue and I made no changes to the client computer. It just starting
working, much like how it just started breaking.

This is an aggrivating problem to solve, partially due to the incredible
amount of queues on the server and the inconsistancy of the problem.

Any advice would be greatly appreciated, other than nuke and pave...


Eric
 
A

Alan Morris [MSFT]

First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print driver
from HP. Try one of the newer color lasers. You can delete the driver
later unless you have one at your site. This driver will only kill the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.
 
E

Eric

Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
..DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
..dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
..dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
..dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac] ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric
 
A

Alan Morris [MSFT]

I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


Alan Morris said:
First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the driver
later unless you have one at your site. This driver will only kill the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.
 
E

Eric

In this particular instance the printer is an HP2420 and a the HP Universal
PS 61.72.942.

The unusual thing is. I've had this problem with the HP4250 and a model
specific driver. I switch it the UPD and it works for a couple of weeks, only
to crash client spoolers again. I switch it back to model specific and it
magically starts to work.

Eric


Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


Alan Morris said:
First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the driver
later unless you have one at your site. This driver will only kill the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that somewhat
randomly blow up on client desktops. The server is Windows Server 2003
R2,
it's sole purpose is printing... roughly 500 queues of different makes
and
models, primarily HP based but some other manufacturers as well. I've
seen
the problem occur on either XP or Vista (0x00006be anyone?) desktops.

The spooler service will crash on the client desktop when the user is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is fine,
I
suppose.. even though I had full control on the file.

Second attempt at debugging it, the printer installed fine. Nothing
changed
on the queue and I made no changes to the client computer. It just
starting
working, much like how it just started breaking.

This is an aggrivating problem to solve, partially due to the
incredible
amount of queues on the server and the inconsistancy of the problem.

Any advice would be greatly appreciated, other than nuke and pave...


Eric
 
E

Eric

In this particular instance the printer is an HP2420 and a the HP Universal
PS 61.72.942.

The unusual thing is. I've had this problem with the HP4250 and a model
specific driver. I switch it the UPD and it works for a couple of weeks, only
to crash client spoolers again. I switch it back to model specific and it
magically starts to work.

Eric

Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


Alan Morris said:
First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the driver
later unless you have one at your site. This driver will only kill the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that somewhat
randomly blow up on client desktops. The server is Windows Server 2003
R2,
it's sole purpose is printing... roughly 500 queues of different makes
and
models, primarily HP based but some other manufacturers as well. I've
seen
the problem occur on either XP or Vista (0x00006be anyone?) desktops.

The spooler service will crash on the client desktop when the user is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is fine,
I
suppose.. even though I had full control on the file.

Second attempt at debugging it, the printer installed fine. Nothing
changed
on the queue and I made no changes to the client computer. It just
starting
working, much like how it just started breaking.

This is an aggrivating problem to solve, partially due to the
incredible
amount of queues on the server and the inconsistancy of the problem.

Any advice would be greatly appreciated, other than nuke and pave...


Eric
 
E

Eric

Do you need more information?

Thanks,

Eric


Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


Alan Morris said:
First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the driver
later unless you have one at your site. This driver will only kill the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that somewhat
randomly blow up on client desktops. The server is Windows Server 2003
R2,
it's sole purpose is printing... roughly 500 queues of different makes
and
models, primarily HP based but some other manufacturers as well. I've
seen
the problem occur on either XP or Vista (0x00006be anyone?) desktops.

The spooler service will crash on the client desktop when the user is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is fine,
I
suppose.. even though I had full control on the file.

Second attempt at debugging it, the printer installed fine. Nothing
changed
on the queue and I made no changes to the client computer. It just
starting
working, much like how it just started breaking.

This is an aggrivating problem to solve, partially due to the
incredible
amount of queues on the server and the inconsistancy of the problem.

Any advice would be greatly appreciated, other than nuke and pave...


Eric
 
A

Alan Morris [MSFT]

If you have a good internet connection on the client, set the symbol path
and reveal the stack trace with the corrected function calls.



http://www.ddj.com/windows/201202917

The initial debugger output reveals useful information. After displaying the
command line used to start the application, it shows the search path for
finding symbol files (PDBs). The symbol search path is important and, in
this case, I had specified it beforehand by setting the _NT_SYMBOL_PATH
system variable before running ntsd.exe. The symbol path shown here is
SRV*c:\Files\websymbols*http://msdl.microsoft.com/download/symbols, which
identifies a symbol server URL and the location where downloaded symbol
files may be cached. That is, when ntsd needs to load symbols for a binary,
it connects to the symbol server at the specified URL, and requests PDBs
based on unique characteristics of the binary such as the name of the binary
and its timestamp. The URL here is for the Microsoft public symbol server,
which provides public Windows symbols for many versions of Windows. Of
course, I also need to make sure that ntsd can find the symbols for my
application. If I wish to add, say, the location "C:\Files" to the symbol
path, then I can use the debugger command .sympath+ C:\Files. The command
..symfix+ adds the URL for the Microsoft public symbol server if is not on
the path. After changing the symbol search path, I always use the .reload
command to force the debugger to reload all symbols.


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Do you need more information?

Thanks,

Eric


Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Eric said:
Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least
in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next
just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


:

First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the
driver
later unless you have one at your site. This driver will only kill
the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that
somewhat
randomly blow up on client desktops. The server is Windows Server
2003
R2,
it's sole purpose is printing... roughly 500 queues of different
makes
and
models, primarily HP based but some other manufacturers as well.
I've
seen
the problem occur on either XP or Vista (0x00006be anyone?)
desktops.

The spooler service will crash on the client desktop when the user
is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had
a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is
fine,
I
suppose.. even though I had full control on the file.

Second attempt at debugging it, the printer installed fine. Nothing
changed
on the queue and I made no changes to the client computer. It just
starting
working, much like how it just started breaking.

This is an aggrivating problem to solve, partially due to the
incredible
amount of queues on the server and the inconsistancy of the problem.

Any advice would be greatly appreciated, other than nuke and pave...


Eric
 
E

Eric

Here's an attempt at a debug with symbols. Not sure why it's reporting that
the symbol file can't be found, though I did have to download them locally. I
was getting an error when it was trying to connect to the website,
"SRV*c:\symbols\*http://msdl.microsoft.com/download/symbols is not
accessible" is that error.. no matter.

Here it is:

ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=0099eee4 ebx=00df4350 ecx=7c801bf6 edx=00000000 esi=ffffffff edi=00e122f8
eip=75bc7140 esp=0099eeac ebp=0099eeb8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
localspl!GetIniDriverAndDirForThisMachine+f:
75bc7140 8bbeac000000 mov edi,[esi+0xac] ds:0023:000000ab=????????
0:010> k
ChildEBP RetAddr
0099eeb8 75be9f0f localspl!GetIniDriverAndDirForThisMachine+0xf
0099f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
0099f14c 75c1c069 win32spl!ProcessACopyFileKey+0x30
0099f5b4 75c1c258 win32spl!CopyFilesUnderAKey+0x250
0099f810 75c21ea3 win32spl!RefreshPrinterCopyFiles+0x153
0099f880 75c21fc6 win32spl!InternalAddPrinterConnection+0x2b4
0099f88c 75c2200a win32spl!AddPrinterConnectionPrivate+0xd
0099f89c 742ef80c win32spl!AddPrinterConnectionW+0x2a
0099f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\spoolsv.exe -
WARNING: Stack unwind information not available. Following frames may be
wrong.
0099f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\RPCRT4.dll -
0099f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
0099f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
0099fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
0099fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
0099fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
0099fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
0099fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
0099fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
0099fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
0099ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f

Alan Morris said:
If you have a good internet connection on the client, set the symbol path
and reveal the stack trace with the corrected function calls.



http://www.ddj.com/windows/201202917

The initial debugger output reveals useful information. After displaying the
command line used to start the application, it shows the search path for
finding symbol files (PDBs). The symbol search path is important and, in
this case, I had specified it beforehand by setting the _NT_SYMBOL_PATH
system variable before running ntsd.exe. The symbol path shown here is
SRV*c:\Files\websymbols*http://msdl.microsoft.com/download/symbols, which
identifies a symbol server URL and the location where downloaded symbol
files may be cached. That is, when ntsd needs to load symbols for a binary,
it connects to the symbol server at the specified URL, and requests PDBs
based on unique characteristics of the binary such as the name of the binary
and its timestamp. The URL here is for the Microsoft public symbol server,
which provides public Windows symbols for many versions of Windows. Of
course, I also need to make sure that ntsd can find the symbols for my
application. If I wish to add, say, the location "C:\Files" to the symbol
path, then I can use the debugger command .sympath+ C:\Files. The command
..symfix+ adds the URL for the Microsoft public symbol server if is not on
the path. After changing the symbol search path, I always use the .reload
command to force the debugger to reload all symbols.


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Do you need more information?

Thanks,

Eric


Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least
in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next
just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


:

First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the
driver
later unless you have one at your site. This driver will only kill
the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that
somewhat
randomly blow up on client desktops. The server is Windows Server
2003
R2,
it's sole purpose is printing... roughly 500 queues of different
makes
and
models, primarily HP based but some other manufacturers as well.
I've
seen
the problem occur on either XP or Vista (0x00006be anyone?)
desktops.

The spooler service will crash on the client desktop when the user
is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had
a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is
 
E

Eric

I had to download the symbols locally, just couldn't get the web connection
to work. No big deal, anyway here's what I got for this debug attempt:

ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=0099eee4 ebx=00df4350 ecx=7c801bf6 edx=00000000 esi=ffffffff edi=00e122f8
eip=75bc7140 esp=0099eeac ebp=0099eeb8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
localspl!GetIniDriverAndDirForThisMachine+f:
75bc7140 8bbeac000000 mov edi,[esi+0xac] ds:0023:000000ab=????????
0:010> k
ChildEBP RetAddr
0099eeb8 75be9f0f localspl!GetIniDriverAndDirForThisMachine+0xf
0099f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
0099f14c 75c1c069 win32spl!ProcessACopyFileKey+0x30
0099f5b4 75c1c258 win32spl!CopyFilesUnderAKey+0x250
0099f810 75c21ea3 win32spl!RefreshPrinterCopyFiles+0x153
0099f880 75c21fc6 win32spl!InternalAddPrinterConnection+0x2b4
0099f88c 75c2200a win32spl!AddPrinterConnectionPrivate+0xd
0099f89c 742ef80c win32spl!AddPrinterConnectionW+0x2a
0099f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\spoolsv.exe -
WARNING: Stack unwind information not available. Following frames may be
wrong.
0099f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\RPCRT4.dll -
0099f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
0099f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
0099fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
0099fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
0099fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
0099fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
0099fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
0099fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
0099fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
0099ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f

Alan Morris said:
If you have a good internet connection on the client, set the symbol path
and reveal the stack trace with the corrected function calls.



http://www.ddj.com/windows/201202917

The initial debugger output reveals useful information. After displaying the
command line used to start the application, it shows the search path for
finding symbol files (PDBs). The symbol search path is important and, in
this case, I had specified it beforehand by setting the _NT_SYMBOL_PATH
system variable before running ntsd.exe. The symbol path shown here is
SRV*c:\Files\websymbols*http://msdl.microsoft.com/download/symbols, which
identifies a symbol server URL and the location where downloaded symbol
files may be cached. That is, when ntsd needs to load symbols for a binary,
it connects to the symbol server at the specified URL, and requests PDBs
based on unique characteristics of the binary such as the name of the binary
and its timestamp. The URL here is for the Microsoft public symbol server,
which provides public Windows symbols for many versions of Windows. Of
course, I also need to make sure that ntsd can find the symbols for my
application. If I wish to add, say, the location "C:\Files" to the symbol
path, then I can use the debugger command .sympath+ C:\Files. The command
..symfix+ adds the URL for the Microsoft public symbol server if is not on
the path. After changing the symbol search path, I always use the .reload
command to force the debugger to reload all symbols.


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
Do you need more information?

Thanks,

Eric


Alan Morris said:
I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the first
things I found for Vista breaking but was unfortunately wrong, at least
in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next
just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


:

First thing to check on the HP drivers is the version of the HP mini
installer that terminates when it does not understand the OS version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the
driver
later unless you have one at your site. This driver will only kill
the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that
somewhat
randomly blow up on client desktops. The server is Windows Server
2003
R2,
it's sole purpose is printing... roughly 500 queues of different
makes
and
models, primarily HP based but some other manufacturers as well.
I've
seen
the problem occur on either XP or Vista (0x00006be anyone?)
desktops.

The spooler service will crash on the client desktop when the user
is
installing the print driver. I would assume that this means a bad
print
driver, however, the problem is not consistent. For example, I had
a
client
computer's spooler crashing on me yesterday so I thought I would try
the
debugger to see if I could find out what .dll was causing the crash.
First
attempt shows that it was atl.dll with an access denied, which is
 
A

Alan Morris [MSFT]

I found the info on this issue. You can get the hotfix for the clients but
I've hit a similar issue around the HP printer registry key and have removed
them from the print server which will fix the clients.

You only need to delete the BIDI key under the printer registry key
CopyFiles section on the print server.

the KnowledgeBase link says to delete the CopyFiles key and restart the
spooler but you do not have to restart spooler on the print server. Get
back to me on this. I was not aware of the XP client crash caused by this
reg value.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers\<PrinterName>\CopyFiles


http://support.microsoft.com/kb/953546/en-us
The Print Spooler process (Spoolsv.exe) crashes while it is copying print
driver files on a computer that is running Windows Server 2003 or Windows XP
--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
I had to download the symbols locally, just couldn't get the web connection
to work. No big deal, anyway here's what I got for this debug attempt:

ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=0099eee4 ebx=00df4350 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00e122f8
eip=75bc7140 esp=0099eeac ebp=0099eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
localspl!GetIniDriverAndDirForThisMachine+f:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:010> k
ChildEBP RetAddr
0099eeb8 75be9f0f localspl!GetIniDriverAndDirForThisMachine+0xf
0099f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
0099f14c 75c1c069 win32spl!ProcessACopyFileKey+0x30
0099f5b4 75c1c258 win32spl!CopyFilesUnderAKey+0x250
0099f810 75c21ea3 win32spl!RefreshPrinterCopyFiles+0x153
0099f880 75c21fc6 win32spl!InternalAddPrinterConnection+0x2b4
0099f88c 75c2200a win32spl!AddPrinterConnectionPrivate+0xd
0099f89c 742ef80c win32spl!AddPrinterConnectionW+0x2a
0099f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
WARNING: Stack unwind information not available. Following frames may be
wrong.
0099f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
0099f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
0099f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
0099fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
0099fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
0099fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
0099fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
0099fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
0099fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
0099fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
0099ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f

Alan Morris said:
If you have a good internet connection on the client, set the symbol path
and reveal the stack trace with the corrected function calls.



http://www.ddj.com/windows/201202917

The initial debugger output reveals useful information. After displaying
the
command line used to start the application, it shows the search path for
finding symbol files (PDBs). The symbol search path is important and, in
this case, I had specified it beforehand by setting the _NT_SYMBOL_PATH
system variable before running ntsd.exe. The symbol path shown here is
SRV*c:\Files\websymbols*http://msdl.microsoft.com/download/symbols, which
identifies a symbol server URL and the location where downloaded symbol
files may be cached. That is, when ntsd needs to load symbols for a
binary,
it connects to the symbol server at the specified URL, and requests PDBs
based on unique characteristics of the binary such as the name of the
binary
and its timestamp. The URL here is for the Microsoft public symbol
server,
which provides public Windows symbols for many versions of Windows. Of
course, I also need to make sure that ntsd can find the symbols for my
application. If I wish to add, say, the location "C:\Files" to the symbol
path, then I can use the debugger command .sympath+ C:\Files. The command
..symfix+ adds the URL for the Microsoft public symbol server if is not
on
the path. After changing the symbol search path, I always use the .reload
command to force the debugger to reload all symbols.


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Eric said:
Do you need more information?

Thanks,

Eric


:

I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the
first
things I found for Vista breaking but was unfortunately wrong, at
least
in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next
just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr
na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames
may
be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
00a4f88c 75c2200a win32spl!InitializePrintProvidor+0xd63a
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\SPOOLSS.DLL -
00a4f89c 742ef80c win32spl!InitializePrintProvidor+0xd67e
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
00a4f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
00a4f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
00a4f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
00a4f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
00a4fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
00a4fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
00a4fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
00a4fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
00a4fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
00a4fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
00a4fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
00a4ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f
0:005>

Eric


:

First thing to check on the HP drivers is the version of the HP
mini
installer that terminates when it does not understand the OS
version
greater
than 5.

look on the print server
\system32\spool\drivers\w32x86\3\hpbmini.dll


if you are not running version 16 or greater, install a newer print
driver
from HP. Try one of the newer color lasers. You can delete the
driver
later unless you have one at your site. This driver will only kill
the
spooler on Vista machines.

send me the text from the stack trace.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

I'm looking for some advice on how to deal with spoolers that
somewhat
randomly blow up on client desktops. The server is Windows
Server
2003
R2,
it's sole purpose is printing... roughly 500 queues of different
makes
and
models, primarily HP based but some other manufacturers as well.
I've
seen
the problem occur on either XP or Vista (0x00006be anyone?)
desktops.

The spooler service will crash on the client desktop when the
user
is
installing the print driver. I would assume that this means a
bad
print
driver, however, the problem is not consistent. For example, I
had
a
client
computer's spooler crashing on me yesterday so I thought I would
try
the
debugger to see if I could find out what .dll was causing the
crash.
First
attempt shows that it was atl.dll with an access denied, which is
 
E

Eric

Thank you very much Alan! Deleting the registry key on the server seems to
have fixed the problem in this particular instance.

I've been looking high and low for a solution to this for a long time and
not once did I find that particular KB, thanks for the nudge in the right
direction.

Eric

Alan Morris said:
I found the info on this issue. You can get the hotfix for the clients but
I've hit a similar issue around the HP printer registry key and have removed
them from the print server which will fix the clients.

You only need to delete the BIDI key under the printer registry key
CopyFiles section on the print server.

the KnowledgeBase link says to delete the CopyFiles key and restart the
spooler but you do not have to restart spooler on the print server. Get
back to me on this. I was not aware of the XP client crash caused by this
reg value.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers\<PrinterName>\CopyFiles


http://support.microsoft.com/kb/953546/en-us
The Print Spooler process (Spoolsv.exe) crashes while it is copying print
driver files on a computer that is running Windows Server 2003 or Windows XP
--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

Eric said:
I had to download the symbols locally, just couldn't get the web connection
to work. No big deal, anyway here's what I got for this debug attempt:

ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=0099eee4 ebx=00df4350 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00e122f8
eip=75bc7140 esp=0099eeac ebp=0099eeb8 iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
localspl!GetIniDriverAndDirForThisMachine+f:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:010> k
ChildEBP RetAddr
0099eeb8 75be9f0f localspl!GetIniDriverAndDirForThisMachine+0xf
0099f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
0099f14c 75c1c069 win32spl!ProcessACopyFileKey+0x30
0099f5b4 75c1c258 win32spl!CopyFilesUnderAKey+0x250
0099f810 75c21ea3 win32spl!RefreshPrinterCopyFiles+0x153
0099f880 75c21fc6 win32spl!InternalAddPrinterConnection+0x2b4
0099f88c 75c2200a win32spl!AddPrinterConnectionPrivate+0xd
0099f89c 742ef80c win32spl!AddPrinterConnectionW+0x2a
0099f8bc 01008785 SPOOLSS!AddPrinterConnectionW+0x4d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\spoolsv.exe -
WARNING: Stack unwind information not available. Following frames may be
wrong.
0099f8cc 0100792e spoolsv!YSetPort+0x61d
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\RPCRT4.dll -
0099f8dc 77e799dc spoolsv!YSplReadPrinter+0x11bd
0099f8f4 77ef321a RPCRT4!CheckVerificationTrailer+0x70
0099fcf4 77ef36ee RPCRT4!NdrStubCall2+0x215
0099fd10 77e794a5 RPCRT4!NdrServerCall2+0x19
0099fd44 77e7940a RPCRT4!NdrGetTypeFlags+0x1c9
0099fd98 77e79336 RPCRT4!NdrGetTypeFlags+0x12e
0099fdbc 77e7be3c RPCRT4!NdrGetTypeFlags+0x5a
0099fdf8 77e7bc99 RPCRT4!NdrConformantArrayFree+0x46e
0099fe1c 77e7bbdd RPCRT4!NdrConformantArrayFree+0x2cb
0099ff80 77e76c9f RPCRT4!NdrConformantArrayFree+0x20f

Alan Morris said:
If you have a good internet connection on the client, set the symbol path
and reveal the stack trace with the corrected function calls.



http://www.ddj.com/windows/201202917

The initial debugger output reveals useful information. After displaying
the
command line used to start the application, it shows the search path for
finding symbol files (PDBs). The symbol search path is important and, in
this case, I had specified it beforehand by setting the _NT_SYMBOL_PATH
system variable before running ntsd.exe. The symbol path shown here is
SRV*c:\Files\websymbols*http://msdl.microsoft.com/download/symbols, which
identifies a symbol server URL and the location where downloaded symbol
files may be cached. That is, when ntsd needs to load symbols for a
binary,
it connects to the symbol server at the specified URL, and requests PDBs
based on unique characteristics of the binary such as the name of the
binary
and its timestamp. The URL here is for the Microsoft public symbol
server,
which provides public Windows symbols for many versions of Windows. Of
course, I also need to make sure that ntsd can find the symbols for my
application. If I wish to add, say, the location "C:\Files" to the symbol
path, then I can use the debugger command .sympath+ C:\Files. The command
..symfix+ adds the URL for the Microsoft public symbol server if is not
on
the path. After changing the symbol search path, I always use the .reload
command to force the debugger to reload all symbols.


--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Do you need more information?

Thanks,

Eric


:

I don't need all the module load info. You are doing good so far.

What print driver?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The version on the hpbmini.dll is 1.0.0.19. That was one of the
first
things I found for Vista breaking but was unfortunately wrong, at
least
in
regards to the version of it.

Here's a debug of me adding a printer from the point of hitting next
just
after entering the path to the printer:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d7000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 5dac0000 5dac8000 C:\WINDOWS\system32\rdpsnd.dll
ModLoad: 76360000 76370000 C:\WINDOWS\system32\WINSTA.dll
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
ModLoad: 76bf0000 76bfb000 C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 00990000 00998000 C:\WINDOWS\system32\mdimon.dll
ModLoad: 7d1e0000 7d49e000 C:\WINDOWS\system32\msi.dll
ModLoad: 74280000 74287000 C:\WINDOWS\system32\pjlmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 009a0000 009a8000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dl
l
ModLoad: 009b0000 009bb000
C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpip
elineprintproc.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 5f180000 5f198000 C:\WINDOWS\system32\ntprint.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 75150000 75164000 C:\WINDOWS\system32\Cabinet.dll
ModLoad: 2e9c0000 2ea47000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5
.DLL
ModLoad: 73b30000 73b45000 C:\WINDOWS\system32\mscms.dll
ModLoad: 02d00000 02d16000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4drui
.dll
ModLoad: 76d10000 76d21000 C:\WINDOWS\system32\CLUSAPI.dll
ModLoad: 750b0000 750c2000 C:\WINDOWS\system32\RESUTILS.dll
ModLoad: 32000000 320b5000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DL
L
ModLoad: 35100000 35443000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzui5hk
.dll
ModLoad: 6e680000 6e6bb000 C:\WINDOWS\system32\COMPSTUI.dll
ModLoad: 76380000 76385000 C:\WINDOWS\system32\MSIMG32.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\SETUPAPI.dll
ModLoad: 74980000 74a93000 C:\WINDOWS\system32\msxml3.dll
ModLoad: 2c100000 2c1e0000
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpu4uixt
.dll
ModLoad: 78050000 78120000 C:\WINDOWS\system32\WININET.dll
ModLoad: 01610000 01619000 C:\WINDOWS\system32\Normaliz.dll
ModLoad: 78000000 78045000 C:\WINDOWS\system32\iertutil.dll
ModLoad: 71b20000 71b32000 C:\WINDOWS\system32\MPR.dll
ModLoad: 77cc0000 77cf2000 C:\WINDOWS\system32\ACTIVEDS.dll
ModLoad: 76e10000 76e35000 C:\WINDOWS\system32\adsldpc.dll
ModLoad: 76b20000 76b31000 C:\WINDOWS\system32\ATL.DLL
Access violation - code c0000005 (first chance)
eax=00a4eee4 ebx=00d1a7e0 ecx=7c801bf6 edx=00000000 esi=ffffffff
edi=00d157e8
eip=75bc7140 esp=00a4eeac ebp=00a4eeb8 iopl=0 nv up ei pl zr
na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010246
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplSetPrinterDataEx+1b81:
75bc7140 8bbeac000000 mov edi,[esi+0xac]
ds:0023:000000ab=????????
0:005> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames
may
be
wrong.
00a4eeb8 75be9f0f localspl!SplSetPrinterDataEx+0x1b81
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\win32spl.dll -
00a4f0f0 75c1bc29 localspl!SplLoadLibraryTheCopyFileModule+0x61
00a4f14c 75c1c069 win32spl!InitializePrintProvidor+0x729d
00a4f5b4 75c1c258 win32spl!InitializePrintProvidor+0x76dd
00a4f810 75c21ea3 win32spl!InitializePrintProvidor+0x78cc
00a4f880 75c21fc6 win32spl!InitializePrintProvidor+0xd517
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top