AdwCleaner 7.1 & 7.1.1 new version

[Angelika]

AdwCleaner 7.1 new version
crashes every time it scans

Code: [Select]

Nazwa aplikacji powodującej błąd: adwcleaner_7.1.0.0.exe, wersja: 7.1.0.0, sygnatura czasowa: 0x5acf354e
Nazwa modułu powodującego błąd: msvcrt.dll, wersja: 7.0.7601.17744, sygnatura czasowa: 0x4eeaf722
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x00009b60
Identyfikator procesu powodującego błąd: 0x16e4
Godzina uruchomienia aplikacji powodującej błąd: 0x01d3d95dd74b366d
Ścieżka aplikacji powodującej błąd: C:\Users\***\Downloads\adwcleaner_7.1.0.0.exe
Ścieżka modułu powodującego błąd: C:\Windows\syswow64\msvcrt.dll
Identyfikator raportu: 1924734c-4551-11e8-beaf-0862662a261f


FAULTING_IP:
msvcrt!memcpy+5a
76979b60 f3a5            rep movs dword ptr es:[edi],dword ptr [esi]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 76979b60 (msvcrt!memcpy+0x0000005a)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 023dc000
Attempt to read from address 023dc000

PROCESS_NAME:  adwcleaner_7.1.0.0.exe

ADDITIONAL_DEBUG_TEXT: 
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

FAULTING_MODULE: 75370000 kernel32

DEBUG_FLR_IMAGE_TIMESTAMP:  4eeaf722

MODULE_NAME: msvcrt

ERROR_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod 0x%08lx odwo

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  023dc000

READ_ADDRESS:  023dc000

FOLLOWUP_IP:
msvcrt!memcpy+5a
76979b60 f3a5            rep movs dword ptr es:[edi],dword ptr [esi]

EXCEPTION_DOESNOT_MATCH_CODE:  This indicates a hardware error.
Instruction at 76979b60 does not read/write to 023dc000

MOD_LIST: <ANALYSIS/>

LAST_CONTROL_TRANSFER:  from 754a73f6 to 76979b60

FAULTING_THREAD:  00001d4c

BUGCHECK_STR:  APPLICATION_FAULT_STRING_DEREFERENCE_CODE_ADDRESS_MISMATCH_INVALID_POINTER_READ_WRONG_SYMBOLS

PRIMARY_PROBLEM_CLASS:  STRING_DEREFERENCE

DEFAULT_BUCKET_ID:  STRING_DEREFERENCE

STACK_TEXT: 
1933f3f0 754a73f6 1a510038 020a99bc 0120ccf0 msvcrt!memcpy+0x5a
1933f410 775b4e62 1933f42c 1a51002c 1933f8f8 oleaut32!BSTR_UserMarshal+0x50
1933f44c 775b4df7 1933f8f8 6bc7337a 1a510028 rpcrt4!NdrpUserMarshalMarshall+0x4b
1933f47c 77596ff0 1933f4ec 1933f8f8 6bc7337a rpcrt4!NdrUserMarshalMarshall+0xd8
1933f4a8 7763013d bc36eefa 1933f8f4 08000265 rpcrt4!NdrpClientMarshal+0xf6
1933f8bc 7727d8e2 6bc717d8 6bc73090 1933f8f4 rpcrt4!NdrClientCall2+0x19a
1933f8dc 77179785 0000001c 00000014 1933f914 ole32!ObjectStublessClient+0xa2 [d:\w7rtm\com\rpc\ndrole\i386\stblsclt.cxx @ 474]
1933f8ec 01229e3a 18fd04ec 020a99bc 020b1110 ole32!ObjectStubless+0xf [d:\w7rtm\com\rpc\ndrole\i386\stubless.asm @ 154]
WARNING: Stack unwind information not available. Following frames may be wrong.
1933f914 0123d287 00000000 1933f944 bf8724b2 adwcleaner_7_1_0_0+0x79e3a
1933f968 0122610d bf87247a 1528b130 00000001 adwcleaner_7_1_0_0+0x8d287
1933f9e0 01210cc0 bf872756 1528b130 1528b130 adwcleaner_7_1_0_0+0x7610d
1933facc 01211539 1933faf8 bf872682 1528b130 adwcleaner_7_1_0_0+0x60cc0
1933fb18 011f4d06 16524678 00000000 1933fc08 adwcleaner_7_1_0_0+0x61539
1933fb28 01267db7 1528b130 00000000 00000005 adwcleaner_7_1_0_0+0x44d06
1933fc1c 01a79cb9 1656b200 bf8721ce 00000000 adwcleaner_7_1_0_0+0xb7db7
00000000 00000000 00000000 00000000 00000000 adwcleaner_7_1_0_0+0x8c9cb9


STACK_COMMAND:  .cxr 0000000000000000 ; kb ; ~11s; .ecxr ; kb

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  msvcrt!memcpy+5a

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  msvcrt.dll

BUCKET_ID:  WRONG_SYMBOLS

FAILURE_BUCKET_ID:  STRING_DEREFERENCE_c0000005_msvcrt.dll!memcpy

Followup: MachineOwner
---------

0:011> lmvm msvcrt
start    end        module name
76970000 76a1c000   msvcrt     (pdb symbols)          c:\symbols\msvcrt.pdb\F1D253F9555C46DF8076400A52B3A9292\msvcrt.pdb
    Loaded symbol image file: msvcrt.dll
    Mapped memory image file: c:\symbols\msvcrt.dll\4EEAF722ac000\msvcrt.dll
    Image path: C:\Windows\SysWOW64\msvcrt.dll
    Image name: msvcrt.dll
    Timestamp:        Fri Dec 16 08:45:38 2011 (4EEAF722)
    CheckSum:         000A8F06
    ImageSize:        000AC000
    File version:     7.0.7601.17744
    Product version:  6.1.8638.17744
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     msvcrt.dll
    OriginalFilename: msvcrt.dll
    ProductVersion:   7.0.7601.17744
    FileVersion:      7.0.7601.17744 (win7sp1_gdr.111215-1535)
    FileDescription:  Windows NT CRT DLL
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
0:011> lmvm kernel32
start    end        module name
75370000 75480000   kernel32   (export symbols)       kernel32.dll
    Loaded symbol image file: kernel32.dll
    Mapped memory image file: C:\Windows\SysWOW64\kernel32.dll
    Image path: C:\Windows\SysWOW64\kernel32.dll
    Image name: kernel32.dll
    Timestamp:        Sat Mar 31 03:12:18 2018 (5ABEE072)
    CheckSum:         0011DEA5
    ImageSize:        00110000
    File version:     6.1.7601.24094
    Product version:  6.1.7601.24094
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     kernel32
    OriginalFilename: kernel32
    ProductVersion:   6.1.7601.24094
    FileVersion:      6.1.7601.24094 (win7sp1_ldr_escrow.180330-1600)
    FileDescription:  Windows NT BASE API Client DLL
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

[Boggin]

Run a chkdsk /f to see if it reports any KBs in bad sectors - if it does, you can then run a chkdsk /r but you will need to back up ASAP in preparation of a full fail

If no bad sectors then run a sfc /scannow and try AdwCleaner in Safe Mode with Networking.

[Angelika]

You give incorrect actions that will lead to the not correct solution of this problem. If you are not an expert, please do not speak on this matter. If you were smart then you should read from the attached dump that the problem lies in loading the module.
msvcrt.dll error that might happen on certain PCs

This is the application bug, not the error of my computer or drive.


STACK_TEXT: 
1933f3f0 754a73f6 1a510038 020a99bc 0120ccf0 msvcrt!memcpy+0x5a
1933f410 775b4e62 1933f42c 1a51002c 1933f8f8 oleaut32!BSTR_UserMarshal+0x50
1933f44c 775b4df7 1933f8f8 6bc7337a 1a510028 rpcrt4!NdrpUserMarshalMarshall+0x4b
1933f47c 77596ff0 1933f4ec 1933f8f8 6bc7337a rpcrt4!NdrUserMarshalMarshall+0xd8
1933f4a8 7763013d bc36eefa 1933f8f4 08000265 rpcrt4!NdrpClientMarshal+0xf6
1933f8bc 7727d8e2 6bc717d8 6bc73090 1933f8f4 rpcrt4!NdrClientCall2+0x19a
1933f8dc 77179785 0000001c 00000014 1933f914 ole32!ObjectStublessClient+0xa2 [d:\w7rtm\com\rpc\ndrole\i386\stblsclt.cxx @ 474]
1933f8ec 01229e3a 18fd04ec 020a99bc 020b1110 ole32!ObjectStubless+0xf [d:\w7rtm\com\rpc\ndrole\i386\stubless.asm @ 154]
WARNING: Stack unwind information not available. Following frames may be wrong.
1933f914 0123d287 00000000 1933f944 bf8724b2 adwcleaner_7_1_0_0+0x79e3a
1933f968 0122610d bf87247a 1528b130 00000001 adwcleaner_7_1_0_0+0x8d287
1933f9e0 01210cc0 bf872756 1528b130 1528b130 adwcleaner_7_1_0_0+0x7610d
1933facc 01211539 1933faf8 bf872682 1528b130 adwcleaner_7_1_0_0+0x60cc0
1933fb18 011f4d06 16524678 00000000 1933fc08 adwcleaner_7_1_0_0+0x61539
1933fb28 01267db7 1528b130 00000000 00000005 adwcleaner_7_1_0_0+0x44d06
1933fc1c 01a79cb9 1656b200 bf8721ce 00000000 adwcleaner_7_1_0_0+0xb7db7
00000000 00000000 00000000 00000000 00000000 adwcleaner_7_1_0_0+0x8c9cb9

[Boggin]

It also said it could be an hardware problem - read your own logs !

If you aren't happy with those who try to help you, then go somewhere else.

Makinero was banned because of her attitude - be careful you don't join her.

[Angelika]

The best solution: Never install sh*t that does not work. Use a better tool with no hidden surprises of this type

or use old version

[shawnyadav]

AdwCleaner was working fine however upon completing pending system updates on my win 10 pc now as I will open the software it will stop responding and crash itself. Any solution guys?

[Boggin]

My Win 10 is up to date and I've just run ADW and it worked okay.

I don't have it installed and just download as and when I want to run it.

If you normally have it installed then try an uninstall/reinstall to see if that resolves.

[Angelika]

Boggin - What the exact version of the program, the latest version does not work on my Windows 7 system. The error occurs while loading the module. I applied this bug to the author, now I have to wait for the answer.

[Boggin]

Boggin - What the exact version of the program, the latest version does not work on my Windows 7 system. The error occurs while loading the module. I applied this bug to the author, now I have to wait for the answer.

Can you install any other programs ?

When you download ADW you get the latest version - did you download from the MBAM site ?

https://www.malwarebytes.com/adwcleaner/

[Angelika]

I've already said that the latest version crashes when you load the module. I have the latest version.
This is an error that can occur on some machines. The developer needs to go through the logs.

[Boggin]

You can also get an installer problem where you can't install anything - that is why I asked that question.

[Angelika]

This is not an installer, only a portable version... the problem does not occur when the program is started.
The problem only occurs when loading modules. Click "Scan Now"

[Angelika]

.

[Angelika]

 

 
     Your browser settings are currently prohibiting this report's scripts from running.
 
 
 This is preventing some features of this analysis report from displaying properly. To enable scripts to run, right-click the security warning above and choose "Allow Blocked Content..." or enable the "Allow active content to run in files on My Computer*" setting on the Advanced tab of your "Internet Options" dialog to avoid being prompted in the future 


 


 

DebugDiag Analysis Report


   Dumps:
0/0


   Rules:
0/0


 





0

Error
 




0

Warning
 




0

Information
 




0

Notification
 
 


Analysis Summary
 



 Error


Description Recommendation

In adwcleaner_7.1.0.0.exe.7864.dmp the assembly instruction at msvcrt!memcpy+5a in C:\Windows\SysWOW64\msvcrt.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x01a7c000 on thread 10
 Please follow up with the vendor Microsoft Corporation for C:\Windows\SysWOW64\msvcrt.dll
 
The following threads in adwcleaner_7.1.0.0.exe.7864.dmp are blocked by an unhandled exception

( 10 )

7,69% of threads blocked (1 threads)

 Please see the Recovered Call Stack for thread 10 based on the restored exception and context record passed to the exception filter.
 

 


Analysis Details






CrashHangAnalysis





Report for adwcleaner_7.1.0.0.exe.7864.dmp



Type of Analysis Performed   Combined Crash/Hang Analysis
Machine Name   
Operating System   Windows 7Service Pack 1
Number Of Processors   
Process ID   7864
Process Image   C:\Users\***\Downloads\adwcleaner_7.1.0.0.exe
Command Line   "C:\Users\***\Downloads\adwcleaner_7.1.0.0.exe" 
System Up-Time   00:00:00
Process Up-Time   00:00:12
Processor Type   X86
Process Bitness   32-Bit



Top 5 Threads by CPU time


Note - Times include both user mode and kernel mode for each thread
Extended thread information (including thread CPU times) is unavailable in this dump


CLR Information







Thread Report


•Thread 2
•3
•7
•12

4 Threads (30% of all threads) have this same call stack.
Note: Grouping of identical threads can be disabled in the 'Preferences' tab of the Analysis Options


Thread 2 - System ID 7468



Thread 3 - System ID 5176



Thread 7 - System ID 4068



Thread 12 - System ID 6492







ntdll!NtWaitForWorkViaWorkerFactory+12
ntdll!TppWorkerThread+209
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b

•Thread 5
•11

2 Threads (15% of all threads) have this same call stack.
Note: Grouping of identical threads can be disabled in the 'Preferences' tab of the Analysis Options


Thread 5 - System ID 1284


This thread is not fully resolved and may or may not be a problem. Further analysis of these threads may be required.





Thread 11 - System ID 4972


This thread is not fully resolved and may or may not be a problem. Further analysis of these threads may be required.









ntdll!ZwWaitForMultipleObjects+15
KERNELBASE!WaitForMultipleObjectsEx+100
kernel32!WaitForMultipleObjectsExImplementation+e0
user32!RealMsgWaitForMultipleObjectsEx+14d
adwcleaner_7_1_0_0+17e724
adwcleaner_7_1_0_0+14965f
adwcleaner_7_1_0_0+11c964
adwcleaner_7_1_0_0+8c9de1
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 0 - System ID 7136


This thread is not fully resolved and may or may not be a problem. Further analysis of these threads may be required.









ntdll!ZwWaitForMultipleObjects+15
KERNELBASE!WaitForMultipleObjectsEx+100
kernel32!WaitForMultipleObjectsExImplementation+e0
user32!RealMsgWaitForMultipleObjectsEx+14d
adwcleaner_7_1_0_0+17e724
adwcleaner_7_1_0_0+713954
adwcleaner_7_1_0_0+11939
adwcleaner_7_1_0_0+1199b
adwcleaner_7_1_0_0+8c0d1b
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 1 - System ID 4336







ntdll!ZwWaitForMultipleObjects+15
ntdll!TppWaiterpThread+32e
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 4 - System ID 2024







ntdll!ZwDelayExecution+15
KERNELBASE!SleepEx+65
KERNELBASE!Sleep+f
ole32!CROIDTable::WorkerThreadLoop+14
ole32!CRpcThreadCache::RpcWorkerThreadEntry+16
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 6 - System ID 7332







ntdll!ZwWaitForMultipleObjects+15
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 8 - System ID 1768


This thread is not fully resolved and may or may not be a problem. Further analysis of these threads may be required.









ntdll!NtWaitForSingleObject+15
KERNELBASE!WaitForSingleObjectEx+98
kernel32!WaitForSingleObjectExImplementation+75
adwcleaner_7_1_0_0+1bf2b4
adwcleaner_7_1_0_0+1bf3cc
adwcleaner_7_1_0_0+11c964
adwcleaner_7_1_0_0+8c9de1
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 9 - System ID 3768







ntdll!ZwRemoveIoCompletion+15
kernel32!BaseThreadInitThunk+e
ntdll!__RtlUserThreadStart+70
ntdll!_RtlUserThreadStart+1b




Thread 10 - System ID 6892


This thread is blocked by an unhandled exception









ntdll!ZwWaitForMultipleObjects+15
KERNELBASE!WaitForMultipleObjectsEx+100
kernel32!WaitForMultipleObjectsExImplementation+e0
kernel32!WaitForMultipleObjects+18
kernel32!WerpReportFaultInternal+186
kernel32!WerpReportFault+70
kernel32!BasepReportFault+20
kernel32!UnhandledExceptionFilter+1af
ntdll!__RtlUserThreadStart+62
ntdll!_RtlUserThreadStart+1b
Could not restore the exception information passed to the exception filter. Crash analysis unavailable.



Well-Known COM STA Threads Report




STA Name   

Thread ID   

Thread Status   

Call Status

Main STA    0 In-Call (bad symbols)    not fully resolved and may or may not be a problem. Further analysis of this thread may be required




Exception Information


MSVCRT!MEMCPY+5AIn adwcleaner_7.1.0.0.exe.7864.dmp the assembly instruction at msvcrt!memcpy+5a in C:\Windows\SysWOW64\msvcrt.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x01a7c000 on thread 10




Module Information

Image Name: C:\Windows\SysWOW64\msvcrt.dll   Symbol Type:  PDB
Base address: 0x00905a4d   Time Stamp:  Fri Dec 16 08:45:38 2011 
Checksum: 0x00000000   Comments:   
COM DLL: False   Company Name:  Microsoft Corporation
ISAPIExtension: False   File Description:  Windows NT CRT DLL
ISAPIFilter: False   File Version:  7.0.7601.17744 (win7sp1_gdr.111215-1535)
Managed DLL: False   Internal Name:  msvcrt.dll
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved.
Loaded Image Name:  msvcrt.dll   Legal Trademarks:   
Mapped Image Name:  c:\symbols\msvcrt.dll\4EEAF722ac000\msvcrt.dll   Original filename:  msvcrt.dll
Module name:  msvcrt   Private Build:   
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System
Module Size:  688 KBytes   Product Version:  7.0.7601.17744
Symbol File Name:  c:\symbols\msvcrt.pdb\F1D253F9555C46DF8076400A52B3A9292\msvcrt.pdb   Special Build:  &


 

 



Analysis Rule Summary
 

Rule Name Status Details

CrashHangAnalysis - v (2.2.0.14) Completed   
 






close










 









close










 




 
Table of Contents




CrashHangAnalysis




Report for adwcleaner_7.1.0.0.exe.7864.dmp




Top 5 Threads by CPU time



Thread Report




















Well-Known COM STA Threads Report
 

[satrow]

Are you using a clean, legit version of W7, your C:\Windows\SysWOW64\msvcrt.dll details (file size + Private/Special build) look odd? Check your version with VirusTotal please, give us the VT URL.

My C:\Windows\SysWOW64\msvcrt.dll details:

[Angelika]

I know how to solve the problem, but I am still waiting for an expert who will tell me what is going on
If you are not power user  i wants to propose to me hopeless attempts to solve problems, thank you for the loss of time.
I gave the exact log of debugging and I hope that someone can diagnose such logs.
I'm not an expert and developer but I can do it in 3 minutes and fix any problem.

[satrow]

You have the data needed to discover the problem, we don't, you haven't supplied it. I could suggest a workaround but that's not the same as a fix.

If you wish to continue playing games you should create your own site, I don't think this is the correct place for them.

Do widzenia.

[Angelika]

the solution here still don't know what that means?

Code: [Select]

In adwcleaner_7.1.0.0.exe.7864.dmp the assembly instruction at msvcrt!memcpy+5a in C:\Windows\SysWOW64\msvcrt.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x01a7c000 on thread 10

[satrow]

That much has been obvious all along, finding the cause was impossible due to the lack of supplied data and system/software details.

unsubbed

[Still_Game]

It's the previously banned "Makinero" with a new forum identity - same bad attitude, same stupid games.

[Boggin]

It's the previously banned "Makinero" with a new forum identity - same bad attitude, same stupid games.

I'm inclined to agree.

I'm locking this thread and will not expect to see another opened on the same topic.