Windows service crashes with failing module NTDLL. DLL

I have a Windows service (Controller.exe) written in .NET 3.5 SP1, which runs on 2008 R2. The service blocks with the following entry in the event log:

Name of the failing application: Controller.exe, version: 0.7.0.1424, time stamp: 0x50d232dc

The failed module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c8f9

Exception code: 0xc0000374

Offset: 0x00000000000c40f2

ID of the process failed: 0 x 2048

Start time of application vulnerabilities: 0x01cde94e239bd028

The failing application path: K:\Weeden\Worms\Weeden.Worms.Controller.exe

The failed module path: C:\Windows\SYSTEM32\ntdll.dll

Report ID: 06f96576-55a2-11e2-8097-d8d385bcce80

There is nothing in the app logs to indicate that the application has been done nothing at the time wherever it crashed. He has done a few times before (but seldom - once every two weeks or more).

The only entrance at the time of the error is the one where it says The Windows Error Reporting Service service entered the running state. But I suspect that it is just to log the crash.

Can someone please advise on the issue?

Thank you!

Hello

Thanks for posting your question in the Microsoft Community Forum.

According to the information, you're faing questions about Windows Server 2008 R2, Windows Service hangs with NTDLL module failed. DLL.
The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums for further assistance. . You can follow the link to your question:

Technet Windows Server general forums

Using the windows-related issues feel free to post on the Microsoft Community Forum.

Tags: Windows

Similar Questions

  • Failed Application spoolsv.exe version 5.2.3790.4759 failed module ntdll.dll version 5.2.3790.4789

    I have several printers installed Windows 2003 Standard Edition Server. Canon and HP. I noticed when I remote through Windows Remote Desktop my spooler is down and in the event viewer, I saw the following message

    Failed application spoolsv.exe
    version 5.2.3790.4759
    module failed Ntdll.dll
    version 53233790.4789
    failing address 0x0002a5a4

    Hi BDain,

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows Server forum.

    http://social.technet.Microsoft.com/forums/en-us/winserverprint/threads

  • application svchost.exe, module ntdll.dll, version 5.2.3790.4789, address 0x0006beb8 failure.

    One has the solution for this error
    Failing application svchost.exe, version 5.2.3790.3959, failed module ntdll.dll, version 5.2.3790.4789, address 0x0006beb8 failure.
    I get an error at startup
    This from Event Viewer:

    Event type: error
    Event source: app error
    Event category: (100)
    Event ID: 1000
    Date: 22/11/2011
    Time: 08:06
    User: n/a
    Computer: SRV03

    Hello

    ·         What operating system do you use?

    ·         What program are you using when this event occurs?

    ·         Are you facing any specific issue on the computer?

    Please provide us with more information about the issue, so that we can help you further.

    You can check this link that looks like the same question.

    http://answers.Microsoft.com/en-us/Windows/Forum/windows_vista-performance/faulting-application-svchostexe/1f90d246-b834-4E51-bd8a-89333edef0cf

  • First and Adobe Media encoder crashing with the module KERNELBASE. DLL

    I have 2 computers windows 10 crashing while selecting a folder in the window of browser Explorer of files within these programs. These machines is 2 weeks, with 10 Pro from the start windows. The other machine has 3 months with windows 7 upgraded to Win 10.

    Machine 1

    ASUS X 99-Pro

    Six Core i7

    32 GB of Ram

    GTX 980

    Intel 750 PCIE SSD


    Computer2

    ASUS Rampage IV

    Six Core i7

    64 GB of Ram

    GTX 780

    Samsung 1 TB SSD PRO 850





    Name of the failing application: Adobe Media Encoder.exe, version: 9.1.0.163, time stamp: 0x564db283

    Name of the failed module: KERNELBASE.dll, version: 10.0.10240.16384, time stamp: 0x559f38c3

    Exception code: 0xe06d7363

    Offset: 0x000000000002a1c8

    ID of the process failed: 0 x 4150

    Start time of application vulnerabilities: 0x01d136ce9193dbc6

    The failing application path: C:\Program Files\Adobe\Adobe Media Encoder 2015\Adobe Media Encoder.exe CC

    Path of the failing module: C:\WINDOWS\system32\KERNELBASE.dll

    Report ID: 3725abd1-4ce3-44bc-97d0-f44f2a9ec7a5

    Faulting full name of the package:

    ID of the failed package-parent application:

    Name of the failing application: Adobe first Pro.exe, version: 9.1.0.174, time stamp: 0x564dce25

    Name of the failed module: KERNELBASE.dll, version: 10.0.10240.16384, time stamp: 0x559f38c3

    Exception code: 0xe06d7363

    Offset: 0x000000000002a1c8

    ID of the process failed: 0x3c74

    Start time of application vulnerabilities: 0x01d136cc8be4d555

    The failing application path: C:\Program Files\Adobe\Adobe Premiere Pro 2015\Adobe first Pro.exe CC

    Path of the failing module: C:\WINDOWS\system32\KERNELBASE.dll

    Report ID: f4c46647-06bd-4e15-a3ac-13a2433d77f1

    Faulting full name of the package:

    ID of the failed package-parent application:

    Thank you Lord! SOLUTION AT LAST!

    After having been informed by tech adobe support that: "I'm sorry, but this is a file from the base of the core of the system, we cannot do much."

    I decided that I was going to test each component in user accounts and find the culprit manually.

    I have studied everything that I could all kernelbase.dll NTUSER.dat and parameters of the first.

    From what I could gather kernelbase.dll if crushed more often when the 32-bit and 64-bit settings are not configured right.

    I downloaded Registry Explorer 0.7 and analyzed a new vs account a "corrupted".

    I discovered that windows keeps a record of the last access programs via OPEN/SAVE location.

    It is located in:

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidl MRU\prproj

    To solve the problem:

    It comes to registry changes, do at your own risk!

    1. Create a new user account with admin rights. I'll call it "AdminRescue".
    2. Connection in "AdminRescue" and open first cc, check that the problem has disappeared.
    3. Now you could start using the new account and forget the old, but I find myself that making 3 times in 4 months, the issue will come back again.
    4. The solution is to runREGEDIT under the new account that you created.
    5. Go to HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidl MRU\prproj
    6. Select prproj and export it to a disk usb or c:\adobefix
    7. Disconnect from the new user account and log in to the old damaged account
    8. Run Regedit
    9. Go to HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidl MRU\prproj
    10. Select prproj and Delete
    11. Select OpenSavePidMRU and import the regkeys exported in the new account. located in the usb or c:\adobefix
    12. FIXED!
  • Programs closing failing module NTDLL. DLL

    Failed module NTDLL. DLL

    A couple of days started programs closing without error. When I look at the report in the event viewer, I see that the failed module is ntdll.dll that it becomes really annoying because it hampers my ability to do my job. This affects programs such as Chrome, FireFox, Apache, and Spyware Doctor.

    Do you get this problem if you test in safe mode?

    Startup options (including safe mode)
    http://Windows.Microsoft.com/en-us/Windows7/advanced-startup-options-including-safe-mode

    If the problem is not reproducible in Mode safe, see if you can follow the next article and isolate the cause.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
    http://support.Microsoft.com/default.aspx/KB/929135

    You could also test the problem when you are connected to another user (that you may need to create test purposes).

    Try running ChkDsk to check your drive for errors. Right click on your drive icon / properties / tools / error checking.  Try first by checking do not each box (that it will run in read-only mode) to see if it reports any problems file or hard drive.  If so, restart it by checking both boxes and restart to allow him to attempt to fix any problems found.

    A check for malicious software could be interesting, too.

    I see a lot of recommendations here for programs such as -

    Malwarebytes' Anti-Malware
    http://www.Malwarebytes.org/MBAM.php

    SuperAntispyware
    http://SUPERAntiSpyware.com/

  • Failed application softwareupdate.exe, version 2.1.3.127, failed module urlmon.dll on Windows 7

    Original title: don't know how to fix this help please

    Failing application softwareupdate.exe, version 2.1.3.127, failed module urlmon.dll, version 8.0.6001.19258, address failure 0 x 00039953.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    This could be any malware or virus. Please a scanner.

    You can download the Microsoft Safety Scanner at the following address:
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    It's free and helps remove viruses, malware, spyware and other malicious software.

    Let us know if that helps.

  • Event ID: 1000 Faulting application devenv.exe, version 8.0.50727.762, stamp 45716759, failed module gdiplus.dll, version 5.2.6001.22319, time stamp 4a841b37, debug? 0, address of failure 0x0001bf5e

    My repeateedly of crash of visual studio 2005 in 10-20 minutes

    with the following error

    Event ID: 1000

    Failing application devenv.exe, version 8.0.50727.762, time stamp 45716759, failed module gdiplus.dll, version 5.2.6001.22319, time stamp 4a841b37, debug? 0, address failure 0x0001bf5e.

    Event ID: 1023

    .NET runtime version 2.0.50727.3615 - engine error fatal execution (7A2E1122) (0)

    Hi ashnov,

    1. did you of recent changes on the computer?

    2 when was the last time it was working fine?

    Method 1

    I suggest that you install the updated drivers for the graphics card on the computer by visiting the card manufacturer or the manufacturer of the computer Web site to download and install the drivers, check if it helps.

    How to manage devices in Windows XP

    http://support.Microsoft.com/kb/283658

    Method 2

    If the previous step fails, then I suggest that you do the system restore and check if it works.

    How to restore Windows XP to a previous state

    http://support.Microsoft.com/kb/306084

    Method 3

    I suggest that scan you SFC on the computer that would be a system file corrupt on the computer search and replace.

    The analysis may take some time, so be patient. Windows allows to fix corrupt or missing files it finds. If the information of the installation CD is required to fix the problem, you may be asked to insert your Windows XP installation CD.

    Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe)

    http://support.Microsoft.com/kb/310747

    Method 4

    If the steps above fail, then reinstall the program and check if that helps.

  • Event 1000, Application error (the default application name: w3wp.exe - name of the failed module: KERNELBASE.dll)

    Hello guys,.

    During the execution of a web app to make me as a mistake: remote server does not. Here are the details of the spectators of the event who were captured at the same time where this error occurred:
    Event 1000, Application error
    The failing application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb
    Name of the failed module: KERNELBASE.dll, version: 6.1.7600.16850, time stamp: 0x4e211da1
    Exception code: 0xe053534f
    Offset: 0x000000000000a88d
    ID of the process failed: 0 x %9
    Start time of application vulnerabilities: 0 x % 10
    The failing application path: %11
    Path of the failing module: 12%
    Report ID: 13%
    Event 1001, Windows Error Reporting
    Bucket of error, type 0
    Event name: APPCRASH
    Answer: No available
    Cabin ID: 0
    Signature of the problem:
    P1: w3wp.exe
    P2: 7.5.7600.16385
    P3: 4a5bd0eb
    P4: KERNELBASE.dll
    P5: 6.1.7600.16850
    P6: 4e211da1
    P7: e053534f
    P8: 000000000000a88d
    P9:
    P10:
    Attached files:
    C:\Windows\Temp\WERC9CD.tmp.WERInternalMetadata.XML
    C:\Windows\Temp\WERC9CE.tmp.HDMP
    C:\Windows\Temp\WEREE30.tmp.mdmp
    These files are available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_30877924d6b2c607fe88a8718915f25fb79093_cab_e905f2b0
    Symbol of the analysis:
    Recheck for solution: 0
    Report ID: d46a6849-8f6a-11e1-98af-00215e6e4855
    Display state: 4
    It is a priority issue we are facing in IIS. IIS is configured for the 2.0 Framework and underlying operating system is Windows Server 2008 R2 Standard. Please suggest how to solve. Any input related question above is significant.

    Hello

    In dealing with the problem with Windows Server 2008, it would be preferable to send the same in the Technet community for more help.

    http://social.technet.Microsoft.com/forums/en/category/WindowsServer/

  • When closing Firefox 13.01 I always get this pop-up: Exception EAccessViolation in module ntdll.dll to 000222 B 2. Access violation at address 77BF22B2 in module

    When closing Firefox 13.01 I always get this popup:
    Exception EAccessViolation in module ntdll.dll to 000222B 2. Access violation at address 77BF22B2 in module 'ntdll.dll '. Writing of
    address 00000008.
    With previous versions of FF it never happened.
    Any solution?

    Hello

    Please check if this happens in a new profile. If the new profile is correct, you can then reset Firefox on the old (previous) profile via the help (Alt + H) > troubleshooting information.

  • Event ID: 1000 - Faulting application vstudio.exe, version 13.0.0.0, failed module msvfw32.dll, version 5.1.2600.5512, fault 0x0000a81a address.

    Failing application vstudio.exe, version 13.0.0.0, failed module msvfw32.dll, version 5.1.2600.5512, address failure 0x0000a81a. After execution of the application for a day or two, the application closes.  The event log has been as above.  I ran "sfc/scannow" but he has no apparent effect.  Nothing in the log of events to indicate any repaired or replaced file.  How do I know if msvfw32.dll is bad, and if it is, how do I replace it.   If this is not bad, what else could be the cause?

    You run Microsoft® Windows® Update?  There are a couple of security updates for Visual Studio, DirectShow and Quartz which involve the msvfw32.dll and vstudio.exe.  Try and let the forum know if this helped.

  • HELP - I got error code-0000016 ExceptionEaccessviolation module ntdll.dll

    I got the error code Exception Eaccess Violation in module ntdll.dll with the big red X! What is it? I t has occurred - send an email.

    Thank you! I looked in the questions that you have said - and Microsoft Support helped me to install OUTLOOK 2013.

    OFFICE 365, MORE my Kaspersky antivirus and password 3.0 did not work for some time and I have now because it shows activated etc so I bought a brand new, suggested by the support.

    Error codes have been coming when I sent emails only. I didn't know that Yahoo was not good enough for "stand alone" on my laptop as my only e-mail program! Thanks for the reply - I am a grandmother and first teacher of the year! Fortunately, I CAN follow directions, instructions and ask for

    Help.

    .

    Also, to name, I don't know if I deleted the files, but this kind of now easier for me to make sure that I know what I'm deleting and I've never seen anything in the trash for a long, long time but my 'Favorites' sites Web-when I do use not much - I delete them and they always go to the Recycle Bin.

    The big red X and its sound on an error to my attention!

    I'm so happy I tried this forum to find answers. Thank you once again.

    Sheila G.

  • 775de753 of the module ntdll.dll access violation

    I am getting access violation 775de753 in module ntdll.dll which I can't very well what the problem is with the software. can someone help me in this reregard?

    Hello

    1. have there been recent changes to the system before the show?

    2. when exactly do you have this problem?

    3. What is the exact error message?

    4 are. what software you referring?

    Please provide more information on the issue to help you best.

    For more information, please visit: http://social.msdn.microsoft.com/forums/en-US/ieextensiondevelopment/thread/5ab972c4-8924-4214-a314-e60080972b05/

  • 7 c 911689 in module 'ntdll.dll '.

    I get a message "Access violation at address 7 911689 in module 'ntdll.dll'.  Read of address 00000000 ".  How can I fix or eliminate popup to constantly come back?

    These articles may help you:

    http://www.techsupportforum.com/forums/F10/solved-waln_cfg-access-violation-368823.html

    http://connect.Microsoft.com/VisualStudio/feedback/details/118061/unhandled-exception-at-0x7c93426d-ntdll-DLL-in-ssexp-exe-0xc0000005-access-violation-reading-location-0x00000000

  • Lenovo SL500 Windows Vista crashed with STOP: 0x0000007B (0x80599BB0, 0xC0000034, 0x00000000, 0x00000000) error and won't start.

    Original title: Lenovo SL500 Windows Vista crashed with STOP error message and won't start

    Hello peoples,
    I just installed an iMicro Bluetooth adapter on my computer, and then I wanted to restart my computer. When I turned it on, loading like regular until right after the Vista loading screen, when the Blue Screen of Death (a blue screen with an error on this subject) flashed for about 1/2 second and then restarted my computer. Then he asked me if I wanted to load startup repair or simply start WIndows normally and I chose to start WIndows normally, but it's the same thing, so when the computer is restarted again, I chose the Startup Repair. He said that if I inserted an external device in my computer for me to remove it. But I had no external devices in my computer at the same time! I already pulled the iMicro adapter! So when my computer restarted again, I pressed the button Lenovo Care and charge of Lenovo Rescue and Recovery 4. (This is where I am now, typing away in the Opera browser.) I tried to find help, but could not find anythign useful so far. I installed for many drivers, updates, patches, etc. But none have anything to remove the blue screen of death. Now, after 7 hours, I really frustrated, and this is my last hope! (I don't want to save my hard drive and reinstall, because I paid more than 250 applications and more than 270 free programs on my computer! Of more, more than 350 iPad apps, of which a few are paid! Oh and 700 iBooks!)
    Help, please! I'm really desperate right now, and any help would be appreciated!
    Thanks in advance!

    PS I run Windows Vista Home Basic SP2 (I think) on a Lenovo ThinkPad SL500 (NOT SL500c!)

    PPS Lenovo all computers have this Lenovo Rescue Recovery 4, which is like an operating system of its own. It has a browser that you can install updates and other things. Right now I use Rescue and Recovery. Thanks again in advance and please answer my question! I had this problem for a week and I'm in school tomorrow! Thanks again!

    EDIT: The error message went like this:

    A problem has been detected and Windows has shut down to prevent damage to your computer.

    If this is the first time you've seen this Stop error screen, restart your computer. If this screen appears again, follow these steps:

    Check for viruses on your computer. Remove the hard drives newly installed on the hard disk controllers. Check your hard drive to ensure that it is configured and completed proeprly. Run CHKDSK /F to check for hard drive corruption, and then restart your computer.

    Technical information:

    STOP: 0X0000007B (0X80599BB0, 0XC0000034, 0X00000000, 0X00000000)

    Thanks for the billionth time!

    have you tried diving into the blue tooth to the computer with a usb cable before starting the computer u? Sometimes it works

  • MMC.exe crashes with the module failed Ntdll.dll.

    Original title: certmgr falls down to the personal certificate

    Hello

    a machine that has problems of management certificate gives me a time difficult.

    If I go to the personal certificate store and try to reregister a certificate the mmc.exe hangs with the module failed Ntdll.dll.

    The dll in System32 and Syswow64 are all two ok (digital signed)

    This problem happens in my profile and created a new.

    I have the Code 0 x 0000005

    The windows error report looks like this

    ==================================================
    File: mmc.exe
    Event name: has stopped working
    Time of the event: 29.07.2014 08:39:31
    Username: all users
    Exception code: 0xc0000005
    Exception offset: 0x000ccf63
    Fault Module name: ntdll.dll
    Fault Module Version: 6.1.7601.22436
    Path of the process: C:\WINDOWS\system32\mmc.exe
    Size of the report file: 20.428
    Report file path: C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_mmc.exe_e8911f92836e49f026e82e5d30397fcc5e52eb60_cab_1db860b6\Report.wer
    ==================================================

    ==================================================
    File: sbus.exe
    Event name: has stopped working
    Time of the event: 28.07.2014 16:32:37
    Username: C5160554
    Exception code: 0xc0000005
    Exception offset: 0xdbdbdbdb
    Fault Module name: StackHash_0a9e
    Fault Module Version: 0.0.0.0
    The process path: C:\Program Files (x86)\SAP\FrontEnd\SecureLogin\bin\sbus.exe
    Size of the report file: 6.004
    The report file path: C:\Users\C5160554\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_sbus.exe_446dd3b92ed2638c6f931bd393315bd4d6278_1ec49be1\Report.wer
    ==================================================

    Hello

    I discovered that there was another DLL loaded by filtering with ProcMon - this DLL is part of the SSO framework already uninstalled. After cleaning the residue, it did not crash more.

    Best regards

    Mr. Snipes

Maybe you are looking for