Winstep Forums
http://forums.winstep.net/phpBB2/

Access Violation Error in v19.2 - Acronis Active Protection
http://forums.winstep.net/phpBB2/viewtopic.php?f=2&t=10982
Page 1 of 3

Author:  winstep [ Mon Mar 04, 2019 1:44 pm ]
Post subject:  Access Violation Error in v19.2 - Acronis Active Protection

EDIT: Turns out Acronis Active Protection (shipping with Acronis True Image backup software and enabled by default) was the culprit.

It injects buggy code into other processes which caused the Winstep application to crash while retrieving data from the Internet via the HTTPS protocol. Disabling Acronis Active Protection fixes this crashes.

Another unfortunate example of 3rd party software causing problems to other applications, which then take the blame despite being completely innocent.

Even though I also use Acronis for backups, I had problems with Acronis Active Protection interfering with Jedi of the Fallen Order in the past and therefore had Active Protection already disabled here, which explains why I did not experience any crashes that might lead me to the true culprit (another user figured it out and tipped me off).

The fact that Acronis software is very popular in Germany would also explain why so many reports were initially coming from Germany.

####


A handful of people have reported that Nexus and WorkShelf v19.2 are crashing with an Access Violation error a few seconds after starting up even when you don't do anything to it.

This seems to be a very restricted problem and one I cannot reproduce here, which makes it very difficult to diagnose. I'm creating this thread for users suffering from this issue to see if together we can find a common 'pattern' or cause.

The error codes and error addresses reported by the Winstep application when it crashes are all different from case to case, which makes this issue even more mysterious.

Since the crash happens a handful of seconds after WorkShelf starting up and this coincides more or less with the time it takes for the weather module to start retrieving data, I suspect the new HTTPS ability in v19.2 might have something to do with it.

I need all users suffering from this issue to please report back if their weather module location uses a METAR code. If they cannot start the program, this information can be found in the following Registry key:

Nexus\Nexus Ultimate:

HKEY_CURRENT_USER\Software\WinSTEP2000\NeXuS

WorkShelf:

HKEY_CURRENT_USER\Software\WinSTEP2000\WorkSHELF

Go to that key and look for the METARCode entry. If it's not empty, please report back the code, then edit the entry and delete the METAR code value (i.e.; double click the METARCode entry then delete all characters in the Value data field).

Once that's done try running the Winstep application again to see if it still crashes.

Author:  winstep [ Mon Mar 04, 2019 2:22 pm ]
Post subject:  Re: Access Violation Error in v19.2

Ok, already had two users reporting back that after deleting the METAR code from the Registry the crashes stopped.

So, this definitely seems related to a 3rd party DLL used to perform the encrypted HTTPS connections. Here is the problem: the DLL works fine for most people (here I can try the METAR codes they reported and there are no crashes, for instance) which leads me to assume this is a machine/system configuration specific problem.

Anyway, if anyone reading this is also suffering from this issue (or was until they deleted the METAR code), please post here. We still need to find the common denominator behind it.

Author:  Danielp584 [ Mon Mar 04, 2019 2:41 pm ]
Post subject:  Re: Access Violation Error in v19.2

My code was KMWC and deleting it from the registry stabilized the app for me.

This was the error in the Windows logs

Faulting application name: Nexus.exe, version: 19.2.0.1164, time stamp: 0x5c78bf75
Faulting module name: KERNELBASE.dll, version: 6.1.7601.24354, time stamp: 0x5c356365
Exception code: 0xc000008f
Fault offset: 0x0000c5af

Thanks!

Author:  nexter [ Mon Mar 04, 2019 4:15 pm ]
Post subject:  Re: Access Violation Error in v19.2

winstep wrote:
Ok, already had two users reporting back that after deleting the METAR code from the Registry the crashes stopped.

So, this definitely seems related to a 3rd party DLL used to perform the encrypted HTTPS connections. Here is the problem: the DLL works fine for most people (here I can try the METAR codes they reported and there are no crashes, for instance) which leads me to assume this is a machine/system configuration specific problem.

Anyway, if anyone reading this is also suffering from this issue (or was until they deleted the METAR code), please post here. We still need to find the common denominator behind it.

Nothing untoward's been happening here at all. But then, don't have a METAR code at all, guess too far from any major airport. (Nearest is about 40 miles.)

The weather.com stuff's as far out as ever.

Author:  winstep [ Mon Mar 18, 2019 2:51 pm ]
Post subject:  Re: Access Violation Error in v19.2

Got another user reporting the same issue.

What I find really odd is the following: from the handful of users who contacted support suffering from this issue, all were German - EXCEPT one, who was from the US.

The exception is what prevents me from thinking this might be related to some issue that only happens on the German version of Windows. So, if you are reading this and you experienced the same Access Violation crashes that stop once you remove the METAR code, please post in this thread.

Author:  vectornut [ Tue Mar 19, 2019 1:48 am ]
Post subject:  Re: Access Violation Error in v19.2

Jorge, I don't know if it's part of the same issue, or even how to try to track down what's happening. But Every time I come back to my computer after being away for a while since the last update, WorkShelf isn't running. There's no error message. It's just not running. I can restart it fine. But leave the computer and come back and it's gone again.

Author:  winstep [ Tue Mar 19, 2019 1:51 am ]
Post subject:  Re: Access Violation Error in v19.2

Check the Application section of the Windows Event Viewer for errors with Workshelf.exe.

Author:  vectornut [ Wed Mar 20, 2019 3:24 am ]
Post subject:  Re: Access Violation Error in v19.2

Okay, here's the most recent one (I actually produced this by accessing a Desktop tab in WorkShelf):

General
Faulting application name: WorkShelf.exe, version: 19.2.0.1390, time stamp: 0x5c819ca7
Faulting module name: ntdll.dll, version: 10.0.17763.292, time stamp: 0xf3450dbf
Exception code: 0xc0000374
Fault offset: 0x000e0e23
Faulting process id: 0x561f4
Faulting application start time: 0x01d4decb304f2998
Faulting application path: C:\Program Files (x86)\Winstep\WorkShelf.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 9fe27c40-a1c1-4c13-86d2-31bd12dc4ed8
Faulting package full name:
Faulting package-relative application ID:

Details
- System

- Provider

[ Name] Application Error

- EventID 1000

[ Qualifiers] 0

Level 2

Task 100

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2019-03-20T03:15:43.047206300Z

EventRecordID 64739

Channel Application

Computer Vector-SRV8

Security


- EventData

WorkShelf.exe
19.2.0.1390
5c819ca7
ntdll.dll
10.0.17763.292
f3450dbf
c0000374
000e0e23
561f4
01d4decb304f2998
C:\Program Files (x86)\Winstep\WorkShelf.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
9fe27c40-a1c1-4c13-86d2-31bd12dc4ed8


Here's an earlier one that happened without me doing anything:

General
Faulting application name: WorkShelf.exe, version: 19.2.0.1390, time stamp: 0x5c819ca7
Faulting module name: GROOVEEX.DLL, version: 14.0.7113.5005, time stamp: 0x52b23fd0
Exception code: 0xc0000005
Fault offset: 0x0016ceaa
Faulting process id: 0x6c0fc
Faulting application start time: 0x01d4ddf5ef1d1b66
Faulting application path: C:\Program Files (x86)\Winstep\WorkShelf.exe
Faulting module path: C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
Report Id: f0905a60-01ca-4f9f-bbf9-88140f96ef22
Faulting package full name:
Faulting package-relative application ID:

Details
- System

- Provider

[ Name] Application Error

- EventID 1000

[ Qualifiers] 0

Level 2

Task 100

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2019-03-19T05:32:08.274034600Z

EventRecordID 64031

Channel Application

Computer Vector-SRV8

Security


- EventData

WorkShelf.exe
19.2.0.1390
5c819ca7
GROOVEEX.DLL
14.0.7113.5005
52b23fd0
c0000005
0016ceaa
6c0fc
01d4ddf5ef1d1b66
C:\Program Files (x86)\Winstep\WorkShelf.exe
C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
f0905a60-01ca-4f9f-bbf9-88140f96ef22

Author:  vectornut [ Fri Mar 22, 2019 12:46 am ]
Post subject:  Re: Access Violation Error in v19.2

So I removed the "Desktop" tab and it hasn't crashed since.

Author:  winstep [ Fri Mar 22, 2019 1:00 am ]
Post subject:  Re: Access Violation Error in v19.2

I don't know what the other entries said, Paul, but GROOVEEX.DLL is again one of those cases where a 3rd party DLL is injected into the process space of other running applications.

In this particular case, GROOVEEX.DLL seems to be related to OneDrive and Office applications.

Anyway, it has nothing to do with the reason for this topic.

Author:  Windy [ Fri Mar 22, 2019 6:21 am ]
Post subject:  Re: Access Violation Error in v19.2

Jorge, I don't have a METAR code. Should I use one to see if it does the same thing to me and report back?

What's the best way to get the METAR code?

Author:  Nemogalactic [ Thu Apr 18, 2019 8:55 pm ]
Post subject:  Re: Access Violation Error in v19.2

I keep getting this occasionally on two computers.

I checked and don't seem to have either registry keys.

Quote:
Error: Unknown (&H0019BEC)
Unknown (&H0019DBD4)
Access Violation - Instruction at 0x740DBD8F tried to read from 0xFFACAEB.

It might be possible to continue running...
Click Retry to attempt to save your data and continue or Cancel to close Nexus Ultimate.

Author:  winstep [ Fri Apr 19, 2019 1:53 am ]
Post subject:  Re: Access Violation Error in v19.2

You need to check the Application section of the Windows Event Viewer for a full description of the crash including the all-important 'Faulting module path'.

Author:  Nemogalactic [ Fri Apr 19, 2019 8:53 pm ]
Post subject:  Re: Access Violation Error in v19.2

I'll try to catch that the next time it crashes.

Author:  winstep [ Fri Apr 19, 2019 9:16 pm ]
Post subject:  Re: Access Violation Error in v19.2

It's still in your Event Viewer...

Page 1 of 3 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/