System: Windows XP SP3Exe:insight3_en.exe of the crashVersion: 3.50.0064Information at the time of crash:The stored exception information can be accessed via. ECXR. (5404.5050): Access violation-code c0000005 (First/second chance not available) eax=00000000 ebx=00000000 ecx=7c930323 Ed x=00000100 esi=00440b6b edi=0006f324eip=004eb2a8 esp=0006f0f4 ebp=0006f0f4 iopl=0 nv up ei pl nz na pe nccs=001b s s=0023 ds=0023 es=0023 fs=003b gs=0000
reproduce it? Microsoft Office Excel 2007 Open the POC FG-VD-15-073_PoC.xls. Then we can see that excel.exe crashes. The crash information is shown as follows:
#!bash(3344.1804): Access violation - code c0000005 (first chance)First chance exceptions are reported before any exception handling.This exception may be expected and handled.eax=1a06d0d0 ebx=00000002 ecx=18b22fea edx=00000001 esi=18b23000 edi=18b22fe8eip=6cd40b40 esp=00b739b4 ebp=00b739c4 io
Problem event name: appcrash Application name: iexplore.exe application version: 9.0.811116421 application timestamp: 4d76255d fault Module name: stackhash_a7aa fault module version: 0.0.0.0 fault module timestamp: 00000000 Exception Code: c0000005 abnormal offset: 00000000 OS Version: 6.1.7601.2.1.0.256.1 region setting ID: 2052 other information 1: a7aa Other Information 2: a7aa91f17ea749d42a4de3b390fa5b3d other information 3: a7aa other information
(msvcrt! Strnicmp + 0x00000092)
Predictioncode: c0000005
Predictionflags: 00000000
Numberparameters: 2
Parameter [0]: 00000000
Parameter [1]: 00000000
Attempt to read from address 00000000
8. The second DWORD value is the context record. To obtain the context information, run the following command at the command prompt:. Cxr second DWORD from step 60: 120>. cxr export eax = export EBX = 7803cb28 ECx = 00000000 edX = 00000000 ESI = 00000000 EDI = 09a
read and write a piece of "should... the remaining full text>Stop: 0x0000000 (0XE14B60B0, 0X00000002,0X00000000, 0X805D8B56)
Check the code below:(1) 0 × 0000001E (0 × c0000005 0 × FDE38AF9 0 × 00000001 0 × 7E8B0EB4) KMODE_EXCEPTION_HANDLED *** the first part of the error is the Stop Code) that is, 0 × 0000001E is used to identify the type that has occurred. the second part of the error is the four number sets enclosed in parentheses, indicating rand
Description: inserts a record into access. The Code is as follows:
// Insert data into access
Run to ps.exe cutebatch (). The following error is returned!
Unhandled exceptionType = segmentation error vmstate = 0x0005ff05J9generic_signal_number = 00000004 exceptioncode = c0000005 exceptionaddress = 009e0698 contextflags = 0001003fHandler1 = 008b05b0 handler2 = 008f74f0 inaccessibleaddress = 00000028EDI = 43f87d50 ESI = 442012c0 eax = 00000001 EBX = 0
Just for test ~
/*Script written by okdodo 2007/03Tested for execryptor v2.24/v2.25
Ollyice: Ignore all tions (add 0 EEDFADE, C0000005, C000001E)HideOD: Check HideNtDebugBit and ZwQueryInformationProcess (method2)
Test Environment: Ollyice 1.1 + HideODODBGScript 1.51 under WINXPThanks:Kanxue-author of HideODHnhuqiong-author of ODbgScript 1.51*/
Data:Var hInstanceVar codesegVar vmsegVar epVar oepVar esptmpVar _ espVar iat_startVar iat_endVar iat_curVar
appear the Windows The resource Manager has stopped working " Errorwhat is a resource manager? Explorer.exe the role of the process is to let us manage the resources in the computer !When you open the computer today, you always prompt the Windows Resource Management area to stop working whether it is rebooting or restarting the program. I'm going to go online and read the privacy statement. The link is only available on the browser, and the icons on the desktop and the following columns, includi
error occurs, this flag can trigger an exception and return the exception identifier} heap_zero_memory = 8; {initialize the allocated memory to 0} // when the floptions parameter is specified with heap_generate_exceptions, possible returned exceptions: status_access_violation = DWORD ($ c0000005); {parameter error} status_no_memory = DWORD ($ c0000017); {insufficient memory}
// Destroy heapdestroy (hheap: thandle {heap handle}): bool ;{}
; this size will be submitted directly to the actual memory}
Dwmaximumsize: DWORD {maximum size. If the maximum size is not limited, set it to 0}
): Thandle; {heap handle is returned; 0 is returned for failure. However, if the floptions parameter permits exceptions, an exception identifier is returned for failure}
// Optional value of floptions parameter:
Heap_no_serialize = 1; {non-mutex. This flag allows multiple threads to access the heap at the same time}
Heap_generate_exceptions = 4;
name: appcrash
Application name: msdev. exe
...
Module name: devdbg. PKG
Faulty module version: 6.0.8168.0
...
Exception Code: c0000005
...
The reason is that the msdev compatibility mode is fully set. You can cancel the msdev compatibility mode. (right-click the vc6.0 icon and choose "attribute"> "compatibility" to cancel the compatibility settings .)
3. When debugging, The shif + F5 is manually exited and the debugging process is frozen:
The cause
; connector> debugging> shadow row and select "Yes (/MapInfo: lines )"8. Configure Properties> connector> advanced> fixed base address and select "generate relocation section (/fixed: No )"
Run drwtsn32 on the command line.
An error occurred while waiting for the program ~~
After a program error occurs, logs and a DMP file are stored in the directory of the Failover and log file path. You can set this directory by yourself.
There is such information in the log information
Microsoft (r) Windows
Compile putty and so onProgram, Encountered a problem:
C: \ Program Files \ Microsoft Visual Studio \ vc98 \ include \ sspi. H (65): Fatal error c1189: # error: You must define one of security_win32, security_win16, security_kernelError executing cl.exe.
Solution:
I added the red statement in winstuff. h.
# Ifndef putty_winstuff_h # define putty_winstuff_h # ifndef auto_winsock # include /* For filename_max */# include "tree234.h" # include "winhelp. H"
# Define security_
Spoolsv-spoolsv.exe-Process Information
Process file: spoolsv or spoolsv.exe
Process name: Printer Spooler Service
Description: Windows Print task control program, used for printer readiness.
Common Errors: N/
Whether the process is a system process: Yes
If you do not have your own printer and do not want to print data on this computer, you can find "Print Spooler" in "My Computer" right-click "manage" in the "service" project (load the file to the memory for printing later .)" Find, stop, and
Question prompt:
Problem time Name: bluescreen
OS Version: 6.1.7601.2.1.0.256.1
Regional Settings id:2052
For additional information about this issue:
bccode:1000007e
bcp1:c0000005
bcp2:8357163c
Bcp3:9018fc1c
bcp4:9018f800
OS version:6_1_7601
Service PACK:1_0
Product:256_1
Files to help describe the problem:
C:windowsminidump41211-15054-01.dmp
C:usersadministratorappdatalocaltempwer-25568-0.sysdata.xml
As shown in the figure:
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.