Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - neroilo

Pages: 1 [2] 3 4 ... 7
26
Tweaking.com Support & Help / Re: TweakingRegistryBackup 2.2.0 crash
« on: July 15, 2015, 04:34:47 am »
Done, and.... done :-)

Shane

The same thing I would like to read about my issue.

 :cheesy:

27
Tweaking.com Support & Help / Re: TweakingRegistryBackup 2.2.0 crash
« on: July 03, 2015, 02:11:11 pm »
Sure am :-)

My office is finished being built in my garae and so will be moving my desk and crap into there tonight after my daughters softball game, tomorrow is my 36th birthday and then spend all day sunday unpacking. Will be back to a more normal schedule sometime next week  :cheesy:

Shane

No problem, just let me know when you're ready.

28
Tweaking.com Support & Help / Re: TweakingRegistryBackup 2.2.0 crash
« on: June 26, 2015, 03:35:24 am »
I am moving this week so I am totally slammed, once I am all done I will work with you on this and find out what is going on :-D

Shane

You're back, I presume.  :smiley:

29
Tweaking.com Support & Help / Re: Remove Policies Set By Infections
« on: June 14, 2015, 02:34:27 am »
It is always possible to trim things down, you'd be amazed what you can get away with. My oldest machine (gets used daily) has a 1.2GHz Celeron, the board is maxed out at 512MB RAM (@100MHz!) Runs XP sweetly, boots in 30 seconds. Here are my specs with OS and antivirus started (beat that  :wink:)

Can you share the name of your antivirus?

30
Tweaking.com Support & Help / Re: TweakingRegistryBackup 2.2.0 crash
« on: June 13, 2015, 04:00:34 am »
Looks like it might be related to the symbols path being messed up.

Shane

Symbols are ok here, despite some bogus warning.

I have created new crash dumps below.
IMHO second crash dump is the most significant one, but please verify all.


1) This is first crash dump obtained with WinDbg x86 + Application Verifier enabled (vrfcore.dll):

Code: [Select]
Microsoft (R) Windows Debugger Version 6.3.9600.16384 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: "C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe"

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
ModLoad: 00400000 0055b000   image00400000
ModLoad: 77070000 771f0000   ntdll.dll
Page heap: pid 0xD24: page heap enabled with flags 0x3.
AVRF: TweakingRegistryBackup.exe: pid 0xD24: flags 0x81643267: application verifier enabled
ModLoad: 6a7c0000 6a820000   C:\Windows\syswow64\verifier.dll
Page heap: pid 0xD24: page heap enabled with flags 0x3.
AVRF: TweakingRegistryBackup.exe: pid 0xD24: flags 0x81643267: application verifier enabled
ModLoad: 6aae0000 6ab10000   C:\Windows\SysWOW64\vrfcore.dll
ModLoad: 6aa80000 6aadd000   C:\Windows\SysWOW64\vfbasics.dll
ModLoad: 6a7a0000 6a7b4000   C:\Windows\SysWOW64\vfcompat.dll
ModLoad: 75e60000 75f70000   C:\Windows\syswow64\KERNEL32.dll
ModLoad: 76bf0000 76c37000   C:\Windows\syswow64\KERNELBASE.dll
ModLoad: 76810000 76910000   C:\Windows\syswow64\USER32.dll
ModLoad: 75180000 75210000   C:\Windows\syswow64\GDI32.dll
ModLoad: 765b0000 765ba000   C:\Windows\syswow64\LPK.dll
ModLoad: 74a40000 74add000   C:\Windows\syswow64\USP10.dll
ModLoad: 74e50000 74efc000   C:\Windows\syswow64\msvcrt.dll
ModLoad: 74b90000 74c31000   C:\Windows\syswow64\ADVAPI32.dll
ModLoad: 74c40000 74c59000   C:\Windows\SysWOW64\sechost.dll
ModLoad: 76210000 76300000   C:\Windows\syswow64\RPCRT4.dll
ModLoad: 749e0000 74a40000   C:\Windows\syswow64\SspiCli.dll
ModLoad: 749d0000 749dc000   C:\Windows\syswow64\CRYPTBASE.dll
ModLoad: 6a760000 6a79f000   C:\Windows\SysWOW64\vfluapriv.dll
ModLoad: 74b70000 74b75000   C:\Windows\syswow64\PSAPI.DLL
ModLoad: 76a60000 76bbc000   C:\Windows\syswow64\ole32.dll
ModLoad: 731f0000 731f9000   C:\Windows\SysWOW64\VERSION.dll
ModLoad: 6a700000 6a752000   C:\Windows\SysWOW64\vfprint.dll
ModLoad: 6a6e0000 6a6f7000   C:\Windows\SysWOW64\vfnet.dll
ModLoad: 6a6d0000 6a6da000   C:\Windows\SysWOW64\vfntlmless.dll
ModLoad: 6a6b0000 6a6c9000   C:\Windows\SysWOW64\vfnws.dll
ModLoad: 66ce0000 67314000   C:\Windows\SysWOW64\vfcuzz.dll
ModLoad: 761b0000 76210000   C:\Windows\SysWOW64\IMM32.DLL
ModLoad: 764e0000 765ac000   C:\Windows\syswow64\MSCTF.dll
LuaPriv: Attaching to process...
-- LuaPriv initialized--
failed to set heap information 00000057
ModLoad: 72940000 72a93000   C:\Windows\SysWOW64\MSVBVM60.DLL
ModLoad: 74ae0000 74b6f000   C:\Windows\syswow64\OLEAUT32.dll
(d24.1278): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00000000 ecx=444c0000 edx=0008e3c8 esi=fffffffe edi=00000000
eip=771105f6 esp=0018fb08 ebp=0018fb34 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:
771105f6 cc              int     3
0:000> bp ntdll!LdrpDoDebuggerBreak+0x30
0:000> bp ntdll!LdrpDoDebuggerBreak+0x2c
0:000> eb ntdll!LdrpDoDebuggerBreak+0x30 0x90
0:000> eb ntdll!LdrpDoDebuggerBreak+0x2c 0x90
0:000> ~* kp

.  0  Id: d24.1278 Suspend: 1 Teb: 7efdd000 Unfrozen
ChildEBP RetAddr 
0018fb34 770f0c8f ntdll!LdrpDoDebuggerBreak+0x2c
0018fcb0 770c3095 ntdll!LdrpInitializeProcess+0x12cc
0018fd00 770a8f49 ntdll!_LdrpInitialize+0x78
0018fd10 00000000 ntdll!LdrInitializeThunk+0x10
0:000> !analyze -v -f
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\SysWOW64\vrfcore.dll -
*** ERROR: Module load completed but symbols could not be loaded for image00400000

FAULTING_IP:
ntdll!LdrpDoDebuggerBreak+2c
771105f6 90              nop

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 771105f6 (ntdll!LdrpDoDebuggerBreak+0x0000002c)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=00000000 ebx=00000000 ecx=444c0000 edx=0008e3c8 esi=fffffffe edi=00000000
eip=771105f6 esp=0018fb08 ebp=0018fb34 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:
771105f6 90              nop

FAULTING_THREAD:  00001278

PROCESS_NAME:  image00400000

ERROR_CODE: (NTSTATUS) 0x80000003 - {ERRORE DI EXCEPTION}  Breakpoint    stato raggiunto un breakpoint.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Uno o pi  argomenti non validi.

EXCEPTION_PARAMETER1:  00000000

NTGLOBALFLAG:  2000100

APPLICATION_VERIFIER_FLAGS:  81643267

CHKIMG_EXTENSION: !chkimg -lo 50 -d !ntdll
    771105f6 - ntdll!LdrpDoDebuggerBreak+2c
[ cc:90 ]
    771105fa - ntdll!LdrpDoDebuggerBreak+30 (+0x04)
[ eb:90 ]
2 errors : !ntdll (771105f6-771105fa)

APP:  image00400000

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) x86fre

ADDITIONAL_DEBUG_TEXT:  Followup set based on attribute [OsBuildNumber] from Frame:[ffffffff] on thread:[PSEUDO_THREAD] ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

LAST_CONTROL_TRANSFER:  from 770f0c8f to 771105f6

DEFAULT_BUCKET_ID:  MEMORY_CORRUPTION_LARGE

PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_LARGE

BUGCHECK_STR:  APPLICATION_FAULT_MEMORY_CORRUPTION_LARGE_LOADER_INIT_FAILURE_c000000d_LOADER_INIT_FAILURE_c000000d

STACK_TEXT: 
00000000 00000000 image00400000!Unknown+0x0


CODE_MISMATCH: 771105c0 40 bytes
771105c0, 0x40 bytes valid.
771105c0  00 17 77 00 c3 90 90 90-90 90 6a 0c 68 98 bd 09  ..w.......j.h...
771105d0  77 e8 7e d8 f8 ff 33 db-53 6a 01 8d 45 e7 50 6a  w.~...3.Sj..E.Pj
771105e0  11 6a fe 5e 56 e8 fe f5-f7 ff 3b c3 7c 1c 38 5d  .j.^V.....;.|.8]
771105f0  e7 75 17 89 5d fc cc 89-75 fc eb 0e 33 c0 40 c3  .u..]...u...3.@.
Mismatch at 771105f6 - cc at event vs. 90 now
Mismatch at 771105fa - eb at event vs. 90 now

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  image00400000!Unknown

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: hardware

IMAGE_NAME:  hardware

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; ** Pseudo Context ** ; kb

BUCKET_ID:  CODE_STREAM_MISMATCH

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_80000003_hardware!Unloaded

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:memory_corruption_large_80000003_hardware!unloaded

FAILURE_ID_HASH:  {076bcc3e-0ebb-5ffb-2b1e-a2149abe1e08}

Followup: MachineOwner
---------

0:000> lm
start    end        module name
00400000 0055b000   image00400000   (no symbols)           
66ce0000 67314000   vfcuzz     (deferred)             
6a6b0000 6a6c9000   vfnws      (deferred)             
6a6d0000 6a6da000   vfntlmless   (deferred)             
6a6e0000 6a6f7000   vfnet      (deferred)             
6a700000 6a752000   vfprint    (deferred)             
6a760000 6a79f000   vfluapriv   (deferred)             
6a7a0000 6a7b4000   vfcompat   (deferred)             
6a7c0000 6a820000   verifier   (pdb symbols)          c:\symbols\verifier.pdb\8878279C450C4F4DA6B252A4B824B4981\verifier.pdb
6aa80000 6aadd000   vfbasics   (deferred)             
6aae0000 6ab10000   vrfcore    (export symbols)       C:\Windows\SYSTEM32\vrfcore.dll
72940000 72a93000   MSVBVM60   (deferred)             
731f0000 731f9000   VERSION    (deferred)             
749d0000 749dc000   CRYPTBASE   (deferred)             
749e0000 74a40000   SspiCli    (deferred)             
74a40000 74add000   USP10      (deferred)             
74ae0000 74b6f000   OLEAUT32   (deferred)             
74b70000 74b75000   PSAPI      (deferred)             
74b90000 74c31000   ADVAPI32   (deferred)             
74c40000 74c59000   sechost    (deferred)             
74e50000 74efc000   msvcrt     (deferred)             
75180000 75210000   GDI32      (deferred)             
75e60000 75f70000   KERNEL32   (pdb symbols)          c:\symbols\wkernel32.pdb\45AA75CD46D843DE9121D7BB82781B512\wkernel32.pdb
761b0000 76210000   IMM32      (deferred)             
76210000 76300000   RPCRT4     (deferred)             
764e0000 765ac000   MSCTF      (deferred)             
765b0000 765ba000   LPK        (deferred)             
76810000 76910000   USER32     (pdb symbols)          c:\symbols\wuser32.pdb\0FCE9CC301ED4567A819705B2718E1D62\wuser32.pdb
76a60000 76bbc000   ole32      (pdb symbols)          c:\symbols\ole32.pdb\5061F11A9A57433595EA5EA75A156F4B2\ole32.pdb
76bf0000 76c37000   KERNELBASE   (deferred)             
77070000 771f0000   ntdll      (pdb symbols)          c:\symbols\wntdll.pdb\6E481F7F6F1F4071853911497F850FD92\wntdll.pdb


image00400000.pdb is TweakingRegistryBackup.exe, as confirmed here:

Code: [Select]
0:000> lmvm image00400000
start    end        module name
00400000 0055b000   image00400000   (no symbols)           
    Loaded symbol image file: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
    Image path: image00400000
    Image name: image00400000
    Timestamp:        Tue Mar 10 00:58:43 2015 (54FE33B3)
    CheckSum:         00160A28
    ImageSize:        0015B000
    File version:     2.2.0.0
    Product version:  2.2.0.0
    File flags:       0 (Mask 0)
    File OS:          4 Unknown Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Tweaking.com
    ProductName:      Tweaking.com - Registry Backup
    InternalName:     TweakingRegistryBackup
    OriginalFilename: TweakingRegistryBackup.exe
    ProductVersion:   2.2.0.0
    FileVersion:      2.2.0.0
    FileDescription:  Tweaking.com - Registry Backup
    LegalCopyright:   2012 - 2015

2) Second crash dump, but produced using Windows Error Reporting:

Code: [Select]
Loading Dump File [C:\LocalDumps\TweakingRegistryBackup.exe.3828.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sun Jun 14 23:49:43.000 2015 (UTC + 2:00)
System Uptime: not available
Process Uptime: 0 days 0:00:37.000
................................................................
...............
Loading unloaded module list
..
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(ef4.e60): Access violation - code c0000005 (first/second chance not available)
eax=339081cd ebx=00000000 ecx=00000404 edx=00000000 esi=00091050 edi=00091150
eip=76c13ed1 esp=00090f70 ebp=00091028 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00210202
KERNELBASE!CheckSpecialLocales+0x15:
76c13ed1 56              push    esi
0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for msvbvm60.dll -
*** ERROR: Module load completed but symbols could not be loaded for TweakingRegistryBackup.exe

FAULTING_IP:
KERNELBASE!CheckSpecialLocales+15
76c13ed1 56              push    esi

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 76c13ed1 (KERNELBASE!CheckSpecialLocales+0x00000015)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000001
   Parameter[1]: 00090f6c
Attempt to write to address 00090f6c

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=339081cd ebx=00000000 ecx=00000404 edx=00000000 esi=00091050 edi=00091150
eip=76c13ed1 esp=00090f70 ebp=00091028 iopl=0         nv up ei pl nz na po nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00210202
KERNELBASE!CheckSpecialLocales+0x15:
76c13ed1 56              push    esi

DEFAULT_BUCKET_ID:  INVALID_STACK_ACCESS

PROCESS_NAME:  TweakingRegistryBackup.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%08lx ha fatto riferimento alla memoria a 0x%08lx. La memoria non poteva essere %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - L'istruzione a 0x%08lx ha fatto riferimento alla memoria a 0x%08lx. La memoria non poteva essere %s.

EXCEPTION_PARAMETER1:  00000001

EXCEPTION_PARAMETER2:  00090f6c

WRITE_ADDRESS:  00090f6c

FOLLOWUP_IP:
oleaut32!IsCharType+f4
74afaf07 0fb745f4        movzx   eax,word ptr [ebp-0Ch]

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  tweakingregistrybackup.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) x86fre

FAULTING_THREAD:  00000e60

PRIMARY_PROBLEM_CLASS:  INVALID_STACK_ACCESS

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_STACK_ACCESS_INVALID_POINTER_WRITE

LAST_CONTROL_TRANSFER:  from 76c13f89 to 76c13ed1

STACK_TEXT: 
00091028 76c13f89 00000410 00000410 00091048 KERNELBASE!CheckSpecialLocales+0x15
00091038 76c1273c 00091050 00000000 0009107c KERNELBASE!NlsValidateLocale+0x10
00091048 74afaf07 00000410 00000001 0009106c KERNELBASE!GetStringTypeExW+0x10
0009107c 74b0695c 00000410 00000032 00000008 oleaut32!IsCharType+0xf4
000910fc 74b06c46 000911a8 00091150 00091124 oleaut32!CDateInfo::operator delete+0x83d
000911a0 74b065fa 04bf2284 00000410 00000000 oleaut32!VarDateFromStr+0x1dd
000911f4 74b300ce 00091264 00000008 00000410 oleaut32!VariantChangeTypeEx+0xa08
00091ccc 74b320fd 0009203c 04bf2364 00091cfc oleaut32!VarFormatFromTokens+0x210
00091e2c 72a363fb 0009203c 04bf2364 00000001 oleaut32!VarFormat+0x78
WARNING: Stack unwind information not available. Following frames may be wrong.
00091e60 004bba58 0009203c 00000000 00000001 msvbvm60!rtcBstrFromFormatVar+0xb3
00092098 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbba58
000922c8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
000924f8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00092728 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00092958 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00092b88 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00092db8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00092fe8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00093218 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00093448 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00093678 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
000938a8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00093ad8 004bbe9e 002da348 0018eeb4 00093f18 TweakingRegistryBackup+0xbbe9e
00093d08 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00093f38 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00094168 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00094398 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000945c8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000947f8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00094a28 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00094c58 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00094e88 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000950b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000952e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00095518 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00095748 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00095978 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00095ba8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00095dd8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096008 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096238 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096468 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096698 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000968c8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096af8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096d28 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00096f58 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00097188 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000973b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000975e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00097818 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00097a48 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00097c78 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00097ea8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000980d8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098308 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098538 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098768 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098998 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098bc8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00098df8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099028 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099258 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099488 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000996b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000998e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099b18 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099d48 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
00099f78 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009a1a8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009a3d8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009a608 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009a838 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009aa68 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009ac98 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009aec8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009b0f8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009b328 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009b558 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009b788 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009b9b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009bbe8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009be18 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009c048 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009c278 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009c4a8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009c6d8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009c908 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009cb38 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009cd68 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009cf98 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009d1c8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009d3f8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009d628 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009d858 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009da88 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009dcb8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009dee8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009e118 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009e348 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009e578 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009e7a8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009e9d8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009ec08 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009ee38 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009f068 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009f298 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009f4c8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009f6f8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009f928 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009fb58 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009fd88 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
0009ffb8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a01e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0418 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0648 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0878 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0aa8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0cd8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a0f08 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a1138 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a1368 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a1598 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a17c8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a19f8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a1c28 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a1e58 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2088 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a22b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a24e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2718 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2948 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2b78 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2da8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a2fd8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3208 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3438 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3668 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3898 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3ac8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3cf8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a3f28 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a4158 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a4388 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a45b8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a47e8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a4a18 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a4c48 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a4e78 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a50a8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a52d8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5508 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5738 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5968 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5b98 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5dc8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a5ff8 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a6228 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a6458 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e
000a6688 004bbe9e 002da348 0018eeb4 0018f6b4 TweakingRegistryBackup+0xbbe9e

STACK_COMMAND:  ~0s; .ecxr ; kb

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  oleaut32!IsCharType+f4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: oleaut32

IMAGE_NAME:  oleaut32.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  54754919

FAILURE_BUCKET_ID:  INVALID_STACK_ACCESS_c0000005_oleaut32.dll!IsCharType

BUCKET_ID:  APPLICATION_FAULT_INVALID_STACK_ACCESS_INVALID_POINTER_WRITE_oleaut32!IsCharType+f4

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:invalid_stack_access_c0000005_oleaut32.dll!ischartype

FAILURE_ID_HASH:  {bd520b95-e660-ea1e-7f18-a1629e897997}

Followup: MachineOwner
---------



UPDATE: After 4 hours and 30 minutes, I obtained 3 passes and 0 errors on Memtest86+ 5.0.1.
Then my RAM is ok.  :smiley:
RB crashes even in safe mode.

Please let me know.

31
Tweaking.com Support & Help / Re: TweakingRegistryBackup 2.2.0 crash
« on: June 11, 2015, 11:35:31 am »
I don't understand the reason why I have 32-bit files in system32, and above all I don't understand why we should have the exact versions, especially when I have higher versions provided by MS for my OS.

According to your info, I moved MSVBVM60.DLL to syswow64 and registered with 'regsvr32 MSVBVM60.DLL'. 6.0.98.32 was released also for Windows 7 SP1, I have no reason to downgrade it.

I'm still getting crashes in C:\Windows\SysWOW64\ntdll.dll (6.1.7601.23072), C:\Windows\SysWOW64\kernelbase.dll (6.1.7601.23072), C:\Windows\syswow64\USER32.dll (6.1.7601.17514).
Fortunately I have them only in RB, not in my system so a reinstall is not a valid option to me.
I'd like to try any advanced operation before giving up.

I ran SFC /scannow multiple times, but it cannot repair these references:

Code: [Select]
2015-06-12 13:16:02, Info                  CSI    00000f40 [SR] Cannot repair member file [l:24{12}]"utc.app.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.1.7601.18869, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-06-12 13:16:02, Info                  CSI    00000f42 [SR] Cannot repair member file [l:66{33}]"telemetry.ASM-WindowsDefault.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.1.7601.18869, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-06-12 13:16:02, Info                  CSI    00000f44 [SR] Cannot repair member file [l:24{12}]"utc.app.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.1.7601.18869, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-06-12 13:16:02, Info                  CSI    00000f45 [SR] This component was referenced by [l:162{81}]"Package_250_for_KB3068708~31bf3856ad364e35~amd64~~6.1.1.0.3068708-814_neutral_GDR"
2015-06-12 13:16:02, Info                  CSI    00000f47 [SR] Cannot repair member file [l:66{33}]"telemetry.ASM-WindowsDefault.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.1.7601.18869, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-06-12 13:16:02, Info                  CSI    00000f48 [SR] This component was referenced by [l:162{81}]"Package_250_for_KB3068708~31bf3856ad364e35~amd64~~6.1.1.0.3068708-814_neutral_GDR"

But I suppose they're not so important to justify that crashes.

So I used Windbg x86 to obtain these two crash dumps:

Code: [Select]
Microsoft (R) Windows Debugger Version 6.3.9600.17298 X86
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: "C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe"

************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
ModLoad: 00400000 0055b000   image00400000
ModLoad: 77850000 779d0000   ntdll.dll
ModLoad: 76520000 76630000   C:\Windows\syswow64\kernel32.dll
ModLoad: 76f40000 76f87000   C:\Windows\syswow64\KERNELBASE.dll
ModLoad: 72940000 72a93000   C:\Windows\SysWOW64\MSVBVM60.DLL
ModLoad: 76420000 76520000   C:\Windows\syswow64\USER32.dll
ModLoad: 77020000 770b0000   C:\Windows\syswow64\GDI32.dll
ModLoad: 752f0000 752fa000   C:\Windows\syswow64\LPK.dll
ModLoad: 75250000 752ed000   C:\Windows\syswow64\USP10.dll
ModLoad: 77170000 7721c000   C:\Windows\syswow64\msvcrt.dll
ModLoad: 77220000 772c1000   C:\Windows\syswow64\ADVAPI32.dll
ModLoad: 761c0000 761d9000   C:\Windows\SysWOW64\sechost.dll
ModLoad: 76d60000 76e50000   C:\Windows\syswow64\RPCRT4.dll
ModLoad: 751c0000 75220000   C:\Windows\syswow64\SspiCli.dll
ModLoad: 751b0000 751bc000   C:\Windows\syswow64\CRYPTBASE.dll
ModLoad: 76630000 7678c000   C:\Windows\syswow64\ole32.dll
ModLoad: 76120000 761af000   C:\Windows\syswow64\OLEAUT32.dll
(1014.2ec): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00000000 ecx=5bec0000 edx=0008e3c8 esi=fffffffe edi=00000000
eip=778f05f6 esp=0018fb08 ebp=0018fb34 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:
778f05f6 cc              int     3
0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Module load completed but symbols could not be loaded for image00400000

FAULTING_IP:
ntdll!LdrpDoDebuggerBreak+2c
778f05f6 cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 778f05f6 (ntdll!LdrpDoDebuggerBreak+0x0000002c)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 00000000

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=00000000 ebx=00000000 ecx=5bec0000 edx=0008e3c8 esi=fffffffe edi=00000000
eip=778f05f6 esp=0018fb08 ebp=0018fb34 iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000246
ntdll!LdrpDoDebuggerBreak+0x2c:
778f05f6 cc              int     3

FAULTING_THREAD:  000002ec

PROCESS_NAME:  image00400000

ERROR_CODE: (NTSTATUS) 0x80000003 - {ERRORE DI EXCEPTION}  Breakpoint    stato raggiunto un breakpoint.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Uno o pi  argomenti non validi.

EXCEPTION_PARAMETER1:  00000000

NTGLOBALFLAG:  70

APPLICATION_VERIFIER_FLAGS:  0

APP:  image00400000

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) x86fre

ADDITIONAL_DEBUG_TEXT:  Followup set based on attribute [OsBuildNumber] from Frame:[ffffffff] on thread:[PSEUDO_THREAD] ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

LAST_CONTROL_TRANSFER:  from 778d0c8f to 778f05f6

BUGCHECK_STR:  APPLICATION_FAULT_LOADER_INIT_FAILURE_80000003

PRIMARY_PROBLEM_CLASS:  LOADER_INIT_FAILURE_80000003

DEFAULT_BUCKET_ID:  LOADER_INIT_FAILURE_80000003

STACK_TEXT: 
00000000 00000000 image00400000!Unknown+0x0


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  image00400000!Unknown

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: image00400000

IMAGE_NAME:  image00400000

DEBUG_FLR_IMAGE_TIMESTAMP:  54fe33b3

STACK_COMMAND:  dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; ** Pseudo Context ** ; kb

FAILURE_BUCKET_ID:  LOADER_INIT_FAILURE_80000003_80000003_image00400000!Unknown

BUCKET_ID:  APPLICATION_FAULT_LOADER_INIT_FAILURE_80000003_image00400000!Unknown

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:loader_init_failure_80000003_80000003_image00400000!unknown

FAILURE_ID_HASH:  {21aab674-93a0-3b23-60ef-5103420c1cdc}

Followup: MachineOwner
---------

0:000> lmvm image00400000
start    end        module name
00400000 0055b000   image00400000   (no symbols)           
    Loaded symbol image file: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
    Image path: image00400000
    Image name: image00400000
    Timestamp:        Tue Mar 10 00:58:43 2015 (54FE33B3)
    CheckSum:         00160A28
    ImageSize:        0015B000
    File version:     2.2.0.0
    Product version:  2.2.0.0
    File flags:       0 (Mask 0)
    File OS:          4 Unknown Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Tweaking.com
    ProductName:      Tweaking.com - Registry Backup
    InternalName:     TweakingRegistryBackup
    OriginalFilename: TweakingRegistryBackup.exe
    ProductVersion:   2.2.0.0
    FileVersion:      2.2.0.0
    FileDescription:  Tweaking.com - Registry Backup
    LegalCopyright:   2012 - 2015

Code: [Select]
Loading Dump File [C:\Users\Claudio\Desktop\TweakingRegistryBackup.dmp]
User Mini Dump File with Full Memory: Only application data is available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Fri Jun 12 16:25:24.000 2015 (UTC + 2:00)
System Uptime: 0 days 0:32:47.871
Process Uptime: 0 days 0:00:08.000
..........................................................
eax=00000000 ebx=004bba7f ecx=00000000 edx=00000000 esi=77870018 edi=00093f10
eip=7787002a esp=00093ca8 ebp=00093ccc iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00200246
ntdll!ZwProtectVirtualMemory+0x12:
7787002a 83c404          add     esp,4
0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for msvbvm60.dll -
*** ERROR: Module load completed but symbols could not be loaded for TweakingRegistryBackup.exe

FAULTING_IP:
+88f6b1004a3d358
00000000 ??              ???

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 0

CONTEXT:  00000000 -- (.cxr 0x0;r)
eax=00000000 ebx=004bba7f ecx=00000000 edx=00000000 esi=77870018 edi=00093f10
eip=7787002a esp=00093ca8 ebp=00093ccc iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00200246
ntdll!ZwProtectVirtualMemory+0x12:
7787002a 83c404          add     esp,4

FAULTING_THREAD:  000005bc

DEFAULT_BUCKET_ID:  STATUS_BREAKPOINT

PROCESS_NAME:  TweakingRegistryBackup.exe

ERROR_CODE: (NTSTATUS) 0x80000003 - {ERRORE DI EXCEPTION}  Breakpoint    stato raggiunto un breakpoint.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Uno o pi  argomenti non validi.

NTGLOBALFLAG:  0

APPLICATION_VERIFIER_FLAGS:  0

APP:  tweakingregistrybackup.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) x86fre

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT

BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT

LAST_CONTROL_TRANSFER:  from 76f4eeca to 7787002a

STACK_TEXT: 
00093ca8 76f4eeca ffffffff 00093cd8 00093cdc ntdll!ZwProtectVirtualMemory+0x12
00093ccc 76f4efe9 ffffffff 00092b94 00000001 KERNELBASE!VirtualProtectEx+0x20
00093ce8 72a24b60 00092b94 00000001 00000104 KERNELBASE!VirtualProtect+0x18
WARNING: Stack unwind information not available. Following frames may be wrong.
00093d08 72a43c8c 0018fabc 00000000 0049edd6 msvbvm60!_vbaExitProc+0x118
00093f30 004bbe9e 006396c0 0018f0dc 0018fabc msvbvm60!_vbaGosubFree+0x62
00094160 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00094390 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000945c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000947f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00094a20 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00094c50 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00094e80 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000950b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000952e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00095510 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00095740 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00095970 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00095ba0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00095dd0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096000 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096230 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096460 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096690 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000968c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096af0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096d20 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00096f50 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00097180 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000973b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000975e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00097810 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00097a40 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00097c70 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00097ea0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000980d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098300 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098530 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098760 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098990 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098bc0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00098df0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099020 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099250 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099480 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000996b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000998e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099b10 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099d40 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
00099f70 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009a1a0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009a3d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009a600 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009a830 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009aa60 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009ac90 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009aec0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009b0f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009b320 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009b550 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009b780 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009b9b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009bbe0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009be10 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009c040 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009c270 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009c4a0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009c6d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009c900 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009cb30 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009cd60 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009cf90 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009d1c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009d3f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009d620 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009d850 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009da80 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009dcb0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009dee0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009e110 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009e340 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009e570 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009e7a0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009e9d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009ec00 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009ee30 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009f060 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009f290 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009f4c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009f6f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009f920 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009fb50 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009fd80 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
0009ffb0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a01e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0410 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0640 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0870 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0aa0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0cd0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a0f00 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a1130 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a1360 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a1590 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a17c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a19f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a1c20 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a1e50 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2080 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a22b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a24e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2710 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2940 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2b70 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2da0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a2fd0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3200 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3430 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3660 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3890 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3ac0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3cf0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a3f20 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a4150 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a4380 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a45b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a47e0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a4a10 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a4c40 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a4e70 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a50a0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a52d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5500 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5730 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5960 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5b90 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5dc0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a5ff0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6220 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6450 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6680 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a68b0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6ae0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6d10 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a6f40 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a7170 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a73a0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a75d0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a7800 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a7a30 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a7c60 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a7e90 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a80c0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a82f0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a8520 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a8750 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a8980 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a8bb0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a8de0 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a9010 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e
000a9240 004bbe9e 006396c0 0018f0dc 0018fabc TweakingRegistryBackup+0xbbe9e

STACK_COMMAND:  ~0s; .ecxr ; kb

FOLLOWUP_IP:
msvbvm60!_vbaExitProc+118
72a24b60 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  msvbvm60!_vbaExitProc+118

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: msvbvm60

IMAGE_NAME:  msvbvm60.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bda6c

FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_msvbvm60.dll!_vbaExitProc

BUCKET_ID:  APPLICATION_FAULT_STATUS_BREAKPOINT_msvbvm60!_vbaExitProc+118

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:status_breakpoint_80000003_msvbvm60.dll!_vbaexitproc

FAILURE_ID_HASH:  {885e63f8-b8f0-da57-d39e-22b00834b3e2}

Followup: MachineOwner
---------

I downgraded MSVBVM60.DLL to 6.0.98.15, but it didn't help.

To be more accurate, I attached in this post a complete report of my registered dlls in system32 and syswow64 with their respective file versions.

Please let me know what I need to fix.

32
The key that is removed is under HKLM\SOFTWARE\SYSTEM\CurrentControlSet\Control\Network and is "Config"

Wrong, Config key is under HKLM\SYSTEM\CurrentControlSet\Control\Network.

I already tried a manual removal through regedit and I don't have any problem.
It happens just when I use your program to perform the repair.

I'm not sure if it may be related to the other issue I'm having with RB, it's a weird coincidence.

33
Soon after any registry backup (using VSS method), I have a crash with the following details on eventviewer:

Code: [Select]
Nome dell'applicazione che ha generato l'errore: TweakingRegistryBackup.exe, versione: 2.2.0.0, timestamp: 0x54fe33b3
Nome del modulo che ha generato l'errore: OLEAUT32.dll, versione: 6.1.7601.18679, timestamp: 0x54754919
Codice eccezione: 0xc0000005
Offset errore 0x00026bb6
ID processo che ha generato l'errore: 0x157c
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d0a3beb7b5c1c3
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\OLEAUT32.dll
ID segnalazione: 4bf15d8b-0fb2-11e5-9e1e-e0cb4e2c5802

Oleaut32.dll and backup logs are in attachment, so you can verify yourself.

Windows 7 SP1 x64

UPDATE1: Now, after a 'register system files' repair, I have a crash soon after starting Registry Backup -> Settings tab with these new errors in event viewer:

Code: [Select]
Nome dell'applicazione che ha generato l'errore: TweakingRegistryBackup.exe, versione: 2.2.0.0, timestamp: 0x54fe33b3
Nome del modulo che ha generato l'errore: MSVBVM60.DLL, versione: 6.0.98.15, timestamp: 0x4a5bda6c
Codice eccezione: 0xc0000005
Offset errore 0x000820cc
ID processo che ha generato l'errore: 0x1520
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d0a3c24cb92f62
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
Percorso del modulo che ha generato l'errore: C:\Windows\system32\MSVBVM60.DLL
ID segnalazione: 94d944f6-0fb5-11e5-841f-e0cb4e2c5802

Code: [Select]
Nome dell'applicazione che ha generato l'errore: TweakingRegistryBackup.exe, versione: 2.2.0.0, timestamp: 0x54fe33b3
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23072, timestamp: 0x5563650d
Codice eccezione: 0xc0000005
Offset errore 0x00023ed1
ID processo che ha generato l'errore: 0x13f4
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d0a3c2de47aadb
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: 2bc53a6d-0fb6-11e5-841f-e0cb4e2c5802

Code: [Select]
Nome dell'applicazione che ha generato l'errore: TweakingRegistryBackup.exe, versione: 2.2.0.0, timestamp: 0x54fe33b3
Nome del modulo che ha generato l'errore: USP10.dll, versione: 1.626.7601.18454, timestamp: 0x5359c2c9
Codice eccezione: 0xc0000005
Offset errore 0x00052f5e
ID processo che ha generato l'errore: 0xaa4
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d0a3cb77bf8524
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\USP10.dll
ID segnalazione: bf0334c5-0fbe-11e5-aee1-e0cb4e2c5802

Code: [Select]
Nome dell'applicazione che ha generato l'errore: TweakingRegistryBackup.exe, versione: 2.2.0.0, timestamp: 0x54fe33b3
Nome del modulo che ha generato l'errore: USER32.dll, versione: 6.1.7601.17514, timestamp: 0x4ce7ba59
Codice eccezione: 0xc0000005
Offset errore 0x0001613f
ID processo che ha generato l'errore: 0x794
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d0a3cfd87fd370
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\USER32.dll
ID segnalazione: 2621d2c7-0fc3-11e5-89ca-e0cb4e2c5802

UPDATE2:  System File Checker in safe mode didn't work.
Please look RB_settings attachment. Under 'Update Available' there is an empty box without any text.
Few seconds later, it crashes. Just in time to take a screenshot.

I think I have a VB6 issue... I'm a bit reluctant to install old DLL versions.

UPDATE3: I installed MSVBVM60.DLL 6.0.98.32 available here:
https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=2575928&kbln=en-us

Now I have just KernelBase.dll, usp10.dll, USER32.dll crash errors.. how can I solve these?

KernelBase has version 6.1.7601.23072 exactly like win32k.sys (same installation date). This version was introduced in a recent patch:
https://support.microsoft.com/pt-br/kb/3057839

It could be a conflict between that patch and your program?

UPDATE4:
I uninstalled KB3057839 to downgrade kernelbase.dll, but the crash in RB persists. This time I have two remaining crashes related to USER32.dll and usp10.dll.
I'll try to replace them in a Command Prompt at Boot soon.

UPDATE5: I replaced them with original files from Windows 7 install disk.
After a reboot, I started RB and I received a new error related to VB6:
Out of stack space (Error 28)

I reproduced it switching from a tab to another as fast as you can.

And I have a similar crash soon after any registry backup (a matter of seconds).

At this point I think it's something related to your VB6 code.

34
Tweaking.com Support & Help / Problem with new Repair Network (3.2.1)
« on: June 07, 2015, 08:50:04 am »
This repair broke my internet connection because it constantly removes gateway ip address at every boot.
5 minutes later (without any user interaction), gateway ip address is automatically restored.
This behaviour is repeated at every boot or restart.

So, I manually restored an old registry backup created before your repair, no problem now.

Windows 7 SP1 x64 with Windows Defender (no other security software).

36
Only problem is, part of that repair cant be automated. I havent found a way to change the permissions of a com object the way I do files, registry and services.

I found some useful stuff here:
http://stackoverflow.com/questions/11363342/change-dcom-config-security-settings-using-powershell

37
I will add it to the repair winsock and dns on the next update :-)

Shane

Thank you.

Please consider this too:
http://www.eightforums.com/performance-maintenance/11951-numerous-event-id-10016-errors-win-8-pro-64-bit.html

Cluberti fix in post #5 fixed my event id 10016 errors ... they might be tollerable, but personally I hate that kind of spamming.

38
I am always open to adding new things :-)

I just have to see if there is any side effects to deleting that key, such as when I user has a static IP or something like that, but if there is no side effects and Windows Simply rebuilds it then I think it would be good to add to the repair network.

Shane

I can confirm my dns settings remained at their place, no need to put them back after removal.

That key represents a sort of network cache easy to break almost like system restore.

Many hours were required just to discover it. :confused: :undecided:

39
I reproduced and solved a couple of bugs in Windows 8.1 Pro x86.
Can you consider to add these fixes in your repair program, please?

1) http://www.eightforums.com/performance-maintenance/62829-event-id-513-capi-2-errors.html

Post #3 and #4 helped me to fix it.

2) https://social.technet.microsoft.com/Forums/windows/en-US/d1ff28fb-a16c-4d12-a717-c43f7a9a34fc/cannot-view-static-ip-address-info-in-tcp-properties?forum=w8itpronetworking

Solution:
Quote
We finally got Microsoft to help and they tracked down the problem.
They found a corrupted registry entry in our TCP-IP configuration that doesn't allow the GUI to successfully change the TCP-IP settings.
The reg entry is removed, and the computer restarted.
TCP-IP service finds the reg entry missing, and rebuilds it.
Voila - The GUI displays properly and will set/reset the TCP-IP setting properly.
Unfortunately, I can't tell you what was the original cause of the corrupted reg entry.

Deleting the following reg entry solved our problem:
My computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\Config

Original source (it worked for other users too):
http://www.pcreview.co.uk/threads/static-ip-changes-to-dynamic-automatically.3904651/

40
So now I have to go through the hassle of getting all the AVs to whitelist the program again and stop flagging it as a false positive.

Did you consider to create an announcement with a list of links and steps to whitelist your software from major AVs?

41
Odd. So let me see if I can replicate it :-)

Can you go to the path variable either in the registry or in the properties of the system and copy and paste the whole path value you have?

That way I will mimic it the extract way you have it and see if I can replicate it. Anything I can replicate I can fix :-)

Shane

Code: [Select]
C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static

42
Quote
P.S. there is a spelling mistake to correct:

I am horrible at spelling lol, thanks I fixed it.

As for the folder, the program calls the Windows API to report back if the folder exists, can you double check to see if that folder is there or not and let me know?

I see the program picked up that the amd folder one was gone and so it removed it.

Shane

The folder is not there for sure (I checked first), so your repair should work but for some reason it doesn't.

This environment variable path was incorrectly created by Amd catalyst 14.12 WHQL installer.
Leaving old registry entries for them is a tradition.  :undecided:

43
Tweaking.com Support & Help / Repair Environment Variables not working
« on: April 23, 2015, 11:44:38 am »
This repair doesn't remove an old path (in attachment) after clicking '2. Apply New Paths' button + a reboot.

Same thing in Safe mode, so I had to remove it from registry.

I'm using Windows Repair v3.1.3 Free.
Windows 7 x64 sp1.

P.S. there is a spelling mistake to correct:

Quote
No problems where found with the Environment Variables.

 :cheesy:

44
1) Windows Repair 2.8.8 installer didn't retain Registry Backup settings after updating.
I had to restore them manually.

2) I set this custom WR path: "C:\Program Files (x86)\Windows Repair (All in One)", but the setup log is constantly updated in "C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Setup_Log.txt"

Thank you.

45
Tweaking.com Support & Help / [2.4.0] Windows Repair bug with taskbar
« on: February 14, 2014, 09:28:18 am »
I'm unable to right-click on taskbar to close Windows Repair window.
It just doesn't do anything.

It works on Registry Backup, so I suppose it should be easy to fix.

46
Tweaking.com Support & Help / Re: System Restore & Registry Back up
« on: December 16, 2013, 11:40:04 am »
Here there is an exhaustive article about what exactly does system restore:
http://www.pcworld.com/article/160858/system_restore_explained.html

47
Everything Else / Re: Malwarebytes Anti-Rootkit Beta
« on: December 11, 2013, 09:20:56 am »
I don't know if it's true, but I read in another forum that Tdsskiller doesn't scan all system (just some predetermined areas), while Malwarebytes Anti-Rootkit does it.

48
General Computer Support / Re: Two Windows 8.1 issues still unsolved
« on: November 19, 2013, 01:22:40 pm »
Just updated to 2.1.0 and I found "Repair Windows App Store" automatically ticked on a Windows 7 machine.
I think this entry should be disabled for all systems except Windows 8 and Windows 8.1.

49
Everything Else / Re: Internet Explorer 11
« on: November 13, 2013, 10:40:39 am »
I still use IE9 on Windows 7... do you know if I can update it directly to IE11 without installing IE10 first?

50
Everything Else / Re: Windows 8.1
« on: October 27, 2013, 12:59:40 am »
I have not gotten it to install. I wanted to see it to see if is any better then 8. Using my mom and dad's laptop. It came with 8 on it but 8.1 will not install. get error 0xc1900101-0x20017. Not sure what that error is. Would have put it on my desktop but it is way to old and would barely run it plus it is still 32bit. got the desktop few months after Vista cam out. Any ideas on how to get the update would be good and will others too with the same problem. The laptop is a HP Pavilion g6. If you need any other info that might help I can get that too. Thanks.

An user solved uninstalling steelseries engine software, according to this thread:
http://answers.microsoft.com/en-us/windows/forum/windows8_1-windows_install/fixed-cannot-update-to-81-0xc1900101-0x40017-bsod/9d3f35b3-1764-4cfa-a7dc-07282dbe40df

Another user in another community stated that a similar issue was solved updating his network drivers Qualcomm Atheros.

Another one uninstalling Avast antivirus.

So I think it's a driver / software issue.

You can check this, following one or all these steps:

1) Uninstall your AV & all security software first.
2) Please run Windows 8.1 Upgrade Assistant.
3) Please verify if among your optional Windows updates or among your optional HP updates is available a new driver / software update
(Optional) Submit your suspicious driver / software in Windows Compatibility Center.

Pages: 1 [2] 3 4 ... 7