Add Printer Wizard and Spooler Subsystem

Guest · Oct 3, 2007

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or if I use
the HP printer driver install program the "spooler subsystem" error is
displayed.
The spooler service is running. The Lexmark and HP services and drivers
have been removed from the system. Essentially the system should be clean of
any old printer driver info.

What other solutions exist? I've tried everything found from a search on
google for "spooler subsystem".

Thanks!

Alan Morris [MSFT] · Oct 4, 2007

Did you run the Lexmark and HP uninstall applications specifically for each
model installed

The next step after that is system restore or debug the spoolsv.exe process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Guest · Oct 4, 2007

Alan,
I did not have a Lexmark printer installed and I did uninstall the HP
drivers using the HP uninstall program. I believe the faulty module is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler subsystem
error appears on system load and the service won't run for more than a minute.

Alan Morris said:
Did you run the Lexmark and HP uninstall applications specifically for each
model installed

The next step after that is system restore or debug the spoolsv.exe process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or if I
use
the HP printer driver install program the "spooler subsystem" error is
displayed.
The spooler service is running. The Lexmark and HP services and drivers
have been removed from the system. Essentially the system should be clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a search on
google for "spooler subsystem".

Thanks!

Click to expand...

Paul Baker [MVP, Windows - SDK] · Oct 4, 2007

localspl.dll is a Windows component, but just because it faulted, doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring to
the System Restore feature, I believe.

Paul

Steve said:
Alan,
I did not have a Lexmark printer installed and I did uninstall the HP
drivers using the HP uninstall program. I believe the faulty module is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler subsystem
error appears on system load and the service won't run for more than a
minute.

Alan Morris said:

Did you run the Lexmark and HP uninstall applications specifically for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or if
I
use
the HP printer driver install program the "spooler subsystem" error is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Guest · Oct 4, 2007

No I haven't used system restore since this problem has existed for some time
and numerous OS updates and product updates have been applied to the system.
I need a solution that doesn't require a system reimage.

Paul Baker said:
localspl.dll is a Windows component, but just because it faulted, doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring to
the System Restore feature, I believe.

Paul

Steve said:

Alan,
I did not have a Lexmark printer installed and I did uninstall the HP
drivers using the HP uninstall program. I believe the faulty module is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler subsystem
error appears on system load and the service won't run for more than a
minute.

Alan Morris said:

Did you run the Lexmark and HP uninstall applications specifically for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or if
I
use
the HP printer driver install program the "spooler subsystem" error is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Paul Baker [MVP, Windows - SDK] · Oct 5, 2007

Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer drivers
installed

Then you can reinstall the third party software you need and
see if it how it goes this time. Do it one at a time so that if problems
start, you will be able to blame the most recent part.

Paul

Steve said:
No I haven't used system restore since this problem has existed for some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

Paul Baker said:

localspl.dll is a Windows component, but just because it faulted, doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring to
the System Restore feature, I believe.

Paul

Steve said:

Alan,
I did not have a Lexmark printer installed and I did uninstall the HP
drivers using the HP uninstall program. I believe the faulty module is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more than a
minute.

:

Did you run the Lexmark and HP uninstall applications specifically for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or
if
I
use
the HP printer driver install program the "spooler subsystem" error
is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Guest · Oct 6, 2007

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation 5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation 5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation 5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation 5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

Paul Baker said:
Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer drivers
installed Then you can reinstall the third party software you need and
see if it how it goes this time. Do it one at a time so that if problems
start, you will be able to blame the most recent part.

Paul

Steve said:

No I haven't used system restore since this problem has existed for some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

Paul Baker said:

localspl.dll is a Windows component, but just because it faulted, doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did uninstall the HP
drivers using the HP uninstall program. I believe the faulty module is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more than a
minute.

:

Did you run the Lexmark and HP uninstall applications specifically for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard or
if
I
use
the HP printer driver install program the "spooler subsystem" error
is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 9, 2007

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation 5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation 5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

Paul Baker said:

Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer drivers
installed Then you can reinstall the third party software you need and
see if it how it goes this time. Do it one at a time so that if problems
start, you will be able to blame the most recent part.

Paul

Steve said:

No I haven't used system restore since this problem has existed for
some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

:

localspl.dll is a Windows component, but just because it faulted,
doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring
to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did uninstall the
HP
drivers using the HP uninstall program. I believe the faulty module
is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more than
a
minute.

:

Did you run the Lexmark and HP uninstall applications specifically
for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard
or
if
I
use
the HP printer driver install program the "spooler subsystem"
error
is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should
be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Guest · Oct 9, 2007

Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

Alan Morris said:
What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation 5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation 5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

Paul Baker said:

Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer drivers
installed Then you can reinstall the third party software you need and
see if it how it goes this time. Do it one at a time so that if problems
start, you will be able to blame the most recent part.

Paul

No I haven't used system restore since this problem has existed for
some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

:

localspl.dll is a Windows component, but just because it faulted,
doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is referring
to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did uninstall the
HP
drivers using the HP uninstall program. I believe the faulty module
is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more than
a
minute.

:

Did you run the Lexmark and HP uninstall applications specifically
for
each
model installed

The next step after that is system restore or debug the spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer wizard
or
if
I
use
the HP printer driver install program the "spooler subsystem"
error
is
displayed.
The spooler service is running. The Lexmark and HP services and
drivers
have been removed from the system. Essentially the system should
be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 10, 2007

Use sfc /scannow in a cmd window to replace damaged system binaries You
will need the installation CD.

The next step will be to attach ntsd (a debugger) to the spoolsv.exe process
and send the stack backtrace

Open taskmanager, Processes, View, Select Column, check PID

start the spooler, find spoolsv.exe in the list of processes, note the PID
number

in a command window type

ntsd -p (PID of spoolsv.exe) -g -G -x

this will display a bunch of loaded module information

now go to add a printer from the printers folder

when the process terminates, the ntsd session will stop at a prompt with
some numbers (this is the faulting thread number)

type k

this will dump the stack backtrace

just copy and add that to the mail

0:001> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00abfff4 00000000 ntdll!DbgBreakPoint
0:001>

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

Alan Morris said:

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation
5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation
5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation
6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation 5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation
6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

:

Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is
causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the
Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer
drivers
installed Then you can reinstall the third party software you need
and
see if it how it goes this time. Do it one at a time so that if
problems
start, you will be able to blame the most recent part.

Paul

No I haven't used system restore since this problem has existed for
some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

:

localspl.dll is a Windows component, but just because it faulted,
doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is
referring
to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did uninstall
the
HP
drivers using the HP uninstall program. I believe the faulty
module
is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more
than
a
minute.

:

Did you run the Lexmark and HP uninstall applications
specifically
for
each
model installed

The next step after that is system restore or debug the
spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers
no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer
wizard
or
if
I
use
the HP printer driver install program the "spooler subsystem"
error
is
displayed.
The spooler service is running. The Lexmark and HP services
and
drivers
have been removed from the system. Essentially the system
should
be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Guest · Oct 11, 2007

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8 edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14] ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

Alan Morris said:
Use sfc /scannow in a cmd window to replace damaged system binaries You
will need the installation CD.

The next step will be to attach ntsd (a debugger) to the spoolsv.exe process
and send the stack backtrace

Open taskmanager, Processes, View, Select Column, check PID

start the spooler, find spoolsv.exe in the list of processes, note the PID
number

in a command window type

ntsd -p (PID of spoolsv.exe) -g -G -x

this will display a bunch of loaded module information

now go to add a printer from the printers folder

when the process terminates, the ntsd session will stop at a prompt with
some numbers (this is the faulting thread number)

type k

this will dump the stack backtrace

just copy and add that to the mail

0:001> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00abfff4 00000000 ntdll!DbgBreakPoint
0:001>

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

Alan Morris said:

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation
5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation
5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation
6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation 5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation
6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

:

Steve,

Process Explorer will tell you which DLLS are loaded by spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is
causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the
Print
Spooler is using. Bill Sanderson provides instructons for this here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer
drivers
installed Then you can reinstall the third party software you need
and
see if it how it goes this time. Do it one at a time so that if
problems
start, you will be able to blame the most recent part.

Paul

No I haven't used system restore since this problem has existed for
some
time
and numerous OS updates and product updates have been applied to the
system.
I need a solution that doesn't require a system reimage.

:

localspl.dll is a Windows component, but just because it faulted,
doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is
referring
to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did uninstall
the
HP
drivers using the HP uninstall program. I believe the faulty
module
is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the spooler
subsystem
error appears on system load and the service won't run for more
than
a
minute.

:

Did you run the Lexmark and HP uninstall applications
specifically
for
each
model installed

The next step after that is system restore or debug the
spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers
no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer
wizard
or
if
I
use
the HP printer driver install program the "spooler subsystem"
error
is
displayed.
The spooler service is running. The Lexmark and HP services
and
drivers
have been removed from the system. Essentially the system
should
be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 11, 2007

It actually does help. There are a couple questions now. Did you try sfc
/scannow , where you prompted for any binaries? You should have rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not know if
the version of ntsd will work for this but let's give it a try. You will
need to be connected to the internet and not dialup. If it's dialup forget
it.

at the failure Access violation - code c0000005 (!!! second chance !!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a valid
size, particularly these. Or just look for files with size 0 and see it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll

C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

Alan Morris said:

Use sfc /scannow in a cmd window to replace damaged system binaries You
will need the installation CD.

The next step will be to attach ntsd (a debugger) to the spoolsv.exe
process
and send the stack backtrace

Open taskmanager, Processes, View, Select Column, check PID

start the spooler, find spoolsv.exe in the list of processes, note the
PID
number

in a command window type

ntsd -p (PID of spoolsv.exe) -g -G -x

this will display a bunch of loaded module information

now go to add a printer from the printers folder

when the process terminates, the ntsd session will stop at a prompt with
some numbers (this is the faulting thread number)

type k

this will dump the stack backtrace

just copy and add that to the mail

0:001> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00abfff4 00000000 ntdll!DbgBreakPoint
0:001>

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

:

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation
5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation
5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation
6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation
5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation
6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries
Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc
ADVAPI32.dll!StartServiceCtrlDispatcherW+0x8b
spoolsv.exe+0x43cc
kernel32.dll!RegisterWaitForInputIdle+0x49

:

Steve,

Process Explorer will tell you which DLLS are loaded by
spoolsv.exe.
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Even though you installed the third party software you suspect is
causing
the problem, parts of it may still be lurking.

I would proceed by removing all traces of third party software the
Print
Spooler is using. Bill Sanderson provides instructons for this
here:
http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm

This should eliminate the problem, but you won't have any printer
drivers
installed Then you can reinstall the third party software you
need
and
see if it how it goes this time. Do it one at a time so that if
problems
start, you will be able to blame the most recent part.

Paul

No I haven't used system restore since this problem has existed
for
some
time
and numerous OS updates and product updates have been applied to
the
system.
I need a solution that doesn't require a system reimage.

:

localspl.dll is a Windows component, but just because it
faulted,
doesn't
mean it's "at fault"

Reinstalling Service Pack 2 won't make a difference. Alan is
referring
to
the System Restore feature, I believe.

Paul

Alan,
I did not have a Lexmark printer installed and I did
uninstall
the
HP
drivers using the HP uninstall program. I believe the faulty
module
is
located in the DLL, localspl.dll.
I tried re-installing SP2 and that didn't work, now the
spooler
subsystem
error appears on system load and the service won't run for
more
than
a
minute.

:

Did you run the Lexmark and HP uninstall applications
specifically
for
each
model installed

The next step after that is system restore or debug the
spoolsv.exe
process
and find the faulty module.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and
confers
no
rights.

I've tried everything I can find on the net.
1.Deleted all spooler temp files
2.Cleaned registry settings
3.Ran cleanspl.exe

My system will not install a printer from the Add Printer
wizard
or
if
I
use
the HP printer driver install program the "spooler
subsystem"
error
is
displayed.
The spooler service is running. The Lexmark and HP
services
and
drivers
have been removed from the system. Essentially the system
should
be
clean
of
any old printer driver info.

What other solutions exist? I've tried everything found
from a
search
on
google for "spooler subsystem".

Thanks!

Click to expand...

Click to expand...

Guest · Oct 12, 2007

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
MicrosoftÂ® WindowsÂ® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40 edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14] ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
.....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

Alan Morris said:
It actually does help. There are a couple questions now. Did you try sfc
/scannow , where you prompted for any binaries? You should have rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not know if
the version of ntsd will work for this but let's give it a try. You will
need to be connected to the internet and not dialup. If it's dialup forget
it.

at the failure Access violation - code c0000005 (!!! second chance !!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a valid
size, particularly these. Or just look for files with size 0 and see it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll

Click to expand...

C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

Alan Morris said:

Use sfc /scannow in a cmd window to replace damaged system binaries You
will need the installation CD.

The next step will be to attach ntsd (a debugger) to the spoolsv.exe
process
and send the stack backtrace

Open taskmanager, Processes, View, Select Column, check PID

start the spooler, find spoolsv.exe in the list of processes, note the
PID
number

in a command window type

ntsd -p (PID of spoolsv.exe) -g -G -x

this will display a bunch of loaded module information

now go to add a printer from the printers folder

when the process terminates, the ntsd session will stop at a prompt with
some numbers (this is the faulting thread number)

type k

this will dump the stack backtrace

just copy and add that to the mail

0:001> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00abfff4 00000000 ntdll!DbgBreakPoint
0:001>

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

:

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation
5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation
5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation
6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation
5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation
6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries
Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 12, 2007

Are there any version 2 drivers?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
Microsoft® Windows® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

Alan Morris said:

It actually does help. There are a couple questions now. Did you try
sfc
/scannow , where you prompted for any binaries? You should have rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not know
if
the version of ntsd will work for this but let's give it a try. You will
need to be connected to the internet and not dialup. If it's dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance !!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a valid
size, particularly these. Or just look for files with size 0 and see it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll

Click to expand...

C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

:

Use sfc /scannow in a cmd window to replace damaged system binaries
You
will need the installation CD.

The next step will be to attach ntsd (a debugger) to the spoolsv.exe
process
and send the stack backtrace

Open taskmanager, Processes, View, Select Column, check PID

start the spooler, find spoolsv.exe in the list of processes, note the
PID
number

in a command window type

ntsd -p (PID of spoolsv.exe) -g -G -x

this will display a bunch of loaded module information

now go to add a printer from the printers folder

when the process terminates, the ntsd session will stop at a prompt
with
some numbers (this is the faulting thread number)

type k

this will dump the stack backtrace

just copy and add that to the mail

0:001> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00abfff4 00000000 ntdll!DbgBreakPoint
0:001>

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Alan,
There are zero subkeys under ..\Drivers\Version-3.
The following keys are found under ..\Print\Monitors:
-BJ Language Monitor
-Local Port
-Standard TCP/IP Port
-USB Monitor

:

What print drivers are listed under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

What monitors are installed?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

My system is clean as described in the article.

Process Explorer Information:

Process: spoolsv.exe Pid: 3572

Name Description Company Name Version
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation
5.01.2600.2180
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation
5.01.2600.2180
comctl32.dll User Experience Controls Library Microsoft
Corporation 6.00.2900.2982
comctl32.dll Common Controls Library Microsoft Corporation
5.82.2900.2982
ctype.nls
GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159
IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation
5.01.2600.2180
kernel32.dll Windows NT BASE API Client DLL Microsoft
Corporation 5.01.2600.3119
locale.nls
LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation
5.01.2600.2180
msvcrt.dll Windows NT CRT DLL Microsoft Corporation
7.00.2600.2180
ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180
ole32.dll Microsoft OLE for Windows Microsoft Corporation
5.01.2600.2726
OLEAUT32.dll Microsoft Corporation 5.01.2600.3139
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation
5.01.2600.2180
SHELL32.dll Windows Shell Common Dll Microsoft Corporation
6.00.2900.3051
ShimEng.dll Shim Engine DLL Microsoft Corporation 5.01.2600.2180
SHLWAPI.dll Shell Light-weight Utility Library Microsoft
Corporation 6.00.2900.2995
sortkey.nls
sorttbls.nls
spoolsv.exe Spooler SubSystem App Microsoft Corporation
5.01.2600.2696
unicode.nls
USER32.dll Windows XP USER API Client DLL Microsoft Corporation
5.01.2600.3099
USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180
USP10.dll Uniscribe Unicode script processor Microsoft
Corporation 1.420.2600.2180
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation
6.00.2900.2180
VERSION.dll Version Checking and File Installation Libraries
Microsoft
Corporation 5.01.2600.2180
WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180

Stack: spoolsv.exe
ntoskrnl.exe!ExReleaseResourceLite+0x206
ntoskrnl.exe!PsCreateSystemThread+0x136
ntoskrnl.exe!FsRtlIncrementCcFastReadWait+0xd1
ntoskrnl.exe!ZwYieldExecution+0xb78
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!SetServiceStatus+0x238
ADVAPI32.dll!SetServiceStatus+0xcc

Click to expand...

Click to expand...

Guest · Oct 14, 2007

Yes the registry exists.

Alan Morris said:
Are there any version 2 drivers?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
MicrosoftÂ® WindowsÂ® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

Alan Morris said:

It actually does help. There are a couple questions now. Did you try
sfc
/scannow , where you prompted for any binaries? You should have rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not know
if
the version of ntsd will work for this but let's give it a try. You will
need to be connected to the internet and not dialup. If it's dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance !!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a valid
size, particularly these. Or just look for files with size 0 and see it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

"Alan Morris [MSFT]" wrote:

Click to expand...

Click to expand...

Guest · Oct 14, 2007

The Key exists but empty.

Alan Morris said:
Are there any version 2 drivers?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
MicrosoftÂ® WindowsÂ® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

Alan Morris said:

It actually does help. There are a couple questions now. Did you try
sfc
/scannow , where you prompted for any binaries? You should have rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not know
if
the version of ntsd will work for this but let's give it a try. You will
need to be connected to the internet and not dialup. If it's dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance !!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a valid
size, particularly these. Or just look for files with size 0 and see it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

"Alan Morris [MSFT]" wrote:

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 15, 2007

verify that win32spl.dll winspool.drv, localspl.dll. spoolss.dll,
spoolsv.exe are all valid. I know you already looked at most of these.

I'd need to debug the spooler at this point. Do you have another machine
to compare the registry entries?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
The Key exists but empty.

Alan Morris said:

Are there any version 2 drivers?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-2

Click to expand...

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
Microsoft® Windows® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

:

It actually does help. There are a couple questions now. Did you try
sfc
/scannow , where you prompted for any binaries? You should have
rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not
know
if
the version of ntsd will work for this but let's give it a try. You
will
need to be connected to the internet and not dialup. If it's dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance
!!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a
valid
size, particularly these. Or just look for files with size 0 and see
it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr
na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:010> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames
may
be
wrong.
00e5f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e5f728 75be5324 localspl+0x3b3f5
00e5f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e5ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e5ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e5ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:010>

Hope that helps, thanks!

"Alan Morris [MSFT]" wrote:

Click to expand...

Click to expand...

Guest · Oct 16, 2007

All the files appear to be Microsoft verified. Also, Filemon and Regmon do
not report any "Access Denied" errors.

Alan Morris said:
verify that win32spl.dll winspool.drv, localspl.dll. spoolss.dll,
spoolsv.exe are all valid. I know you already looked at most of these.

I'd need to debug the spooler at this point. Do you have another machine
to compare the registry entries?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

The Key exists but empty.

Alan Morris said:

Are there any version 2 drivers?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-2

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
MicrosoftÂ® WindowsÂ® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

:

It actually does help. There are a couple questions now. Did you try
sfc
/scannow , where you prompted for any binaries? You should have
rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do not
know
if
the version of ntsd will work for this but let's give it a try. You
will
need to be connected to the internet and not dialup. If it's dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance
!!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a
valid
size, particularly these. Or just look for files with size 0 and see
it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl zr

Click to expand...

Click to expand...

Alan Morris [MSFT] · Oct 16, 2007

Verify that the Print Spooler Service only Depends on RPC in the Services
mmc snapin. It's almost time to just reinstall.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:
All the files appear to be Microsoft verified. Also, Filemon and Regmon
do
not report any "Access Denied" errors.

Alan Morris said:

verify that win32spl.dll winspool.drv, localspl.dll. spoolss.dll,
spoolsv.exe are all valid. I know you already looked at most of these.

I'd need to debug the spooler at this point. Do you have another
machine
to compare the registry entries?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Steve said:

The Key exists but empty.

:

Are there any version 2 drivers?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-2

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
Microsoft® Windows® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr
na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames
may
be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

:

It actually does help. There are a couple questions now. Did you
try
sfc
/scannow , where you prompted for any binaries? You should have
rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do
not
know
if
the version of ntsd will work for this but let's give it a try.
You
will
need to be connected to the internet and not dialup. If it's
dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance
!!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a
valid
size, particularly these. Or just look for files with size 0 and
see
it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd4000 edx=75bfb340 esi=00a26ca8
edi=00a22118
eip=75bc139d esp=00e5f70c ebp=00e5f70c iopl=0 nv up ei pl
zr

Click to expand...

Click to expand...

Guest · Oct 16, 2007

Only RPC is listed as a dependent service.

Alan Morris said:
Verify that the Print Spooler Service only Depends on RPC in the Services
mmc snapin. It's almost time to just reinstall.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Steve said:

All the files appear to be Microsoft verified. Also, Filemon and Regmon
do
not report any "Access Denied" errors.

Alan Morris said:

verify that win32spl.dll winspool.drv, localspl.dll. spoolss.dll,
spoolsv.exe are all valid. I know you already looked at most of these.

I'd need to debug the spooler at this point. Do you have another
machine
to compare the registry entries?
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

The Key exists but empty.

:

Are there any version 2 drivers?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-2

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

AcGenral.dll
5.1.2600.2180
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Windows Compatibility DLL
MicrosoftÂ® WindowsÂ® Operating System

Zero files with zero file size.

NTSD:
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 76fc0000 76fc6000 C:\WINDOWS\system32\rasadhlp.dll
ModLoad: 75bb0000 75c06000 C:\WINDOWS\system32\localspl.dll
ModLoad: 77fe0000 77ff1000 C:\WINDOWS\system32\Secur32.dll
ModLoad: 76c60000 76c8a000 C:\WINDOWS\system32\sfc_os.dll
ModLoad: 76c30000 76c5e000 C:\WINDOWS\system32\WINTRUST.dll
ModLoad: 77a80000 77b14000 C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000 C:\WINDOWS\system32\MSASN1.dll
ModLoad: 76c90000 76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
ModLoad: 73000000 73026000 C:\WINDOWS\system32\winspool.drv
ModLoad: 5b860000 5b8b4000 C:\WINDOWS\system32\netapi32.dll
ModLoad: 742a0000 742ae000 C:\WINDOWS\system32\cnbjmon.dll
ModLoad: 72400000 7240e000 C:\WINDOWS\system32\tcpmon.dll
ModLoad: 723f0000 723f7000 C:\WINDOWS\system32\usbmon.dll
ModLoad: 77920000 77a13000 C:\WINDOWS\system32\setupapi.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll
ModLoad: 76f60000 76f8c000 C:\WINDOWS\system32\WLDAP32.dll
ModLoad: 66580000 66592000 C:\WINDOWS\system32\pnrpnsp.dll
ModLoad: 75c10000 75c33000 C:\WINDOWS\system32\win32spl.dll
ModLoad: 71c80000 71c87000 C:\WINDOWS\system32\NETRAP.dll
ModLoad: 767a0000 767b3000 C:\WINDOWS\system32\NTDSAPI.dll
ModLoad: 76fd0000 7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
ModLoad: 77050000 77115000 C:\WINDOWS\system32\COMRes.dll
ModLoad: 20000000 202c5000 C:\WINDOWS\system32\xpsp2res.dll
ModLoad: 74300000 74315000 C:\WINDOWS\system32\inetpp.dll
Access violation - code c0000005 (first chance)
Access violation - code c0000005 (!!! second chance !!!)
eax=00000000 ebx=00a22118 ecx=7ffd5000 edx=75bfb340 esi=00a26d40
edi=00a22118
eip=75bc139d esp=00e1f70c ebp=00e1f70c iopl=0 nv up ei pl zr
na
po
nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00000246
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
localspl!SplAddPrintProcessor+1ca:
75bc139d 8b4014 mov eax,[eax+0x14]
ds:0023:00000014=????????
0:009> !symfix
Symbol search path is: symsrv*symsrv.dll*\\symbols\symbols
0:009> .reload
Reloading current modules
....................................................
0:009> k
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\localspl.dll -
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames
may
be
wrong.
00e1f70c 75beb3f5 localspl!SplAddPrintProcessor+0x1ca
00e1f728 75be5324 localspl+0x3b3f5
00e1f954 75bd70a1 localspl!SplDeleteSpooler+0x93
00e1ffa4 75bc93a5 localspl!DllMain+0x689a
*** ERROR: Symbol file could not be found. Defaulted to export
symbols
for
C:\W
INDOWS\system32\kernel32.dll -
00e1ffb4 7c80b683 localspl!SplDeletePrinter+0x35a
00e1ffec 00000000 kernel32!GetModuleFileNameA+0x1b4
0:009>

:

It actually does help. There are a couple questions now. Did you
try
sfc
/scannow , where you prompted for any binaries? You should have
rebooted
after the file replacement.

What is
C:\WINDOWS\AppPatch\AcGenral.DLL
?

The next step would be to actually get the proper symbols. I do
not
know
if
the version of ntsd will work for this but let's give it a try.
You
will
need to be connected to the internet and not dialup. If it's
dialup
forget
it.

at the failure Access violation - code c0000005 (!!! second chance
!!!)
type
!symfix

when it returns type
..reload

then type
k

If the symbols get corrected the stack trace will change

Also verify that all the files in the list of loaded modules have a
valid
size, particularly these. Or just look for files with size 0 and
see
it
anything matches.

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\inetpp.dll
C:\WINDOWS\AppPatch\AcGenral.DLL

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Loaded dbghelp extension DLL
The call to LoadLibrary(ext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded exts extension DLL
The call to LoadLibrary(uext) failed with error 2.
Please check your debugger configuration and/or network access
Loaded ntsdexts extension DLL
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH
setting
Executable search path is:
ModLoad: 01000000 01010000 C:\WINDOWS\system32\spoolsv.exe
ModLoad: 7c900000 7c9b0000 C:\WINDOWS\system32\ntdll.dll
ModLoad: 7c800000 7c8f5000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 77dd0000 77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
ModLoad: 77e70000 77f01000 C:\WINDOWS\system32\RPCRT4.dll
ModLoad: 77f10000 77f57000 C:\WINDOWS\system32\GDI32.dll
ModLoad: 7e410000 7e4a0000 C:\WINDOWS\system32\USER32.dll
ModLoad: 77c10000 77c68000 C:\WINDOWS\system32\msvcrt.dll
ModLoad: 5cb70000 5cb96000 C:\WINDOWS\system32\ShimEng.dll
ModLoad: 6f880000 6fa4a000 C:\WINDOWS\AppPatch\AcGenral.DLL
ModLoad: 76b40000 76b6d000 C:\WINDOWS\system32\WINMM.dll
ModLoad: 774e0000 7761d000 C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000 C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 77be0000 77bf5000 C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77c00000 77c08000 C:\WINDOWS\system32\VERSION.dll
ModLoad: 7c9c0000 7d1d5000 C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 769c0000 76a73000 C:\WINDOWS\system32\USERENV.dll
ModLoad: 5ad70000 5ada8000 C:\WINDOWS\system32\UxTheme.dll
ModLoad: 76390000 763ad000 C:\WINDOWS\system32\IMM32.DLL
ModLoad: 629c0000 629c9000 C:\WINDOWS\system32\LPK.DLL
ModLoad: 74d90000 74dfb000 C:\WINDOWS\system32\USP10.dll
ModLoad: 773d0000 774d3000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Cont
rols_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
ModLoad: 5d090000 5d12a000 C:\WINDOWS\system32\comctl32.dll
ModLoad: 742e0000 742f5000 C:\WINDOWS\system32\SPOOLSS.DLL
ModLoad: 71ab0000 71ac7000 C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000 C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 71a50000 71a8f000 C:\WINDOWS\System32\mswsock.dll
ModLoad: 76f20000 76f47000 C:\WINDOWS\system32\DNSAPI.dll
ModLoad: 76fb0000 76fb8000 C:\WINDOWS\System32\winrnr.dll

Click to expand...

Click to expand...

Add Printer Wizard and Spooler Subsystem

Guest

Alan Morris [MSFT]

Guest

Paul Baker [MVP, Windows - SDK]

Guest

Paul Baker [MVP, Windows - SDK]

Guest

Alan Morris [MSFT]

Guest

Alan Morris [MSFT]

Guest

Alan Morris [MSFT]

Guest

Alan Morris [MSFT]

Guest

Guest

Alan Morris [MSFT]

Guest

Alan Morris [MSFT]

Guest