New
#1
How do you actiually analyze WER files?
I have errors:
andCode:Faulting application name: AvastUI.exe, version: 17.3.3443.0, time stamp: 0x58da80daFaulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x58256ca0Exception code: 0xc0000374Fault offset: 0x000d9d11Faulting process id: 0x1738Faulting application start time: 0x01d2acf2b72cc292Faulting application path: C:\Program Files\AVAST Software\Avast\AvastUI.exeFaulting module path: C:\WINDOWS\SYSTEM32\ntdll.dllReport Id: 1dfd8dca-8737-4c0d-8f4b-15ace3eae130Faulting package full name: Faulting package-relative application ID:
in appcrashview itsCode:Faulting application name: mbamservice.exe, version: 3.1.0.415, time stamp: 0x5881b7a1Faulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x5825887fException code: 0xc0000005Fault offset: 0x000000000002f7dbFaulting process id: 0xb10Faulting application start time: 0x01d2ad3bf4ab1827Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exeFaulting module path: C:\WINDOWS\SYSTEM32\ntdll.dllReport Id: 33caedde-cb37-43aa-9fe2-aaad3b1bcd93Faulting package full name: Faulting package-relative application ID:
And what this tells me? Nothing.Code:Version=1EventType=APPCRASHEventTime=131357939672194194ReportType=2Consent=1UploadTime=131357939687985430ReportIdentifier=e008e52b-194c-11e7-8563-2c56dc9609e0IntegratorReportIdentifier=1dfd8dca-8737-4c0d-8f4b-15ace3eae130WOW64=1NsAppName=AvastUI.exeAppSessionGuid=00001738-0001-002b-92c2-2cb7f2acd201TargetAppId=W:0006aebbf3cf27eb5897b1c0ad62e1abbf7000000900!00003441d23a11eb867ae3dee273bd90c630cb0fa02a!AvastUI.exeTargetAppVer=2017//03//28:15:27:22!8cb411!AvastUI.exeBootId=4294967295Response.BucketId=70180a7aef828787591b115c9206ff23Response.BucketTable=1Response.LegacyBucketId=108834447818Response.type=4Response.CabId=107986665962Sig[0].Name=Application NameSig[0].Value=AvastUI.exeSig[1].Name=Application VersionSig[1].Value=17.3.3443.0Sig[2].Name=Application TimestampSig[2].Value=58da80daSig[3].Name=Fault Module NameSig[3].Value=StackHash_5411Sig[4].Name=Fault Module VersionSig[4].Value=10.0.14393.479Sig[5].Name=Fault Module TimestampSig[5].Value=58256ca0Sig[6].Name=Exception CodeSig[6].Value=c0000374Sig[7].Name=Exception OffsetSig[7].Value=PCH_B6_FROM_ntdll+0x0006EB8CDynamicSig[1].Name=OS VersionDynamicSig[1].Value=10.0.14393.2.0.0.256.48DynamicSig[2].Name=Locale IDDynamicSig[2].Value=5146DynamicSig[22].Name=Additional Information 1DynamicSig[22].Value=5411DynamicSig[23].Name=Additional Information 2DynamicSig[23].Value=5411d3d59c4f894c5511789db6792ebdDynamicSig[24].Name=Additional Information 3DynamicSig[24].Value=8514DynamicSig[25].Name=Additional Information 4DynamicSig[25].Value=8514217ff0dc4bca9215c586ec22c8fbUI[2]=C:\Program Files\AVAST Software\Avast\AvastUI.exeUI[3]=Avast Antivirus has stopped workingUI[4]=Windows can check online for a solution to the problem.UI[5]=Check online for a solution and close the programUI[6]=Check online for a solution later and close the programUI[7]=Close the programLoadedModule[0]=C:\Program Files\AVAST Software\Avast\AvastUI.exeLoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dllLoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLLLoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dllLoadedModule[4]=C:\WINDOWS\system32\apphelp.dllLoadedModule[5]=C:\WINDOWS\AppPatch\AcLayers.DLLLoadedModule[6]=C:\WINDOWS\System32\msvcrt.dllLoadedModule[7]=C:\WINDOWS\System32\USER32.dllLoadedModule[8]=C:\WINDOWS\System32\win32u.dllLoadedModule[9]=C:\WINDOWS\System32\GDI32.dllLoadedModule[10]=C:\WINDOWS\System32\gdi32full.dllLoadedModule[11]=C:\WINDOWS\System32\SHELL32.dllLoadedModule[12]=C:\WINDOWS\System32\cfgmgr32.dllLoadedModule[13]=C:\WINDOWS\System32\windows.storage.dllLoadedModule[14]=C:\WINDOWS\System32\combase.dllLoadedModule[15]=C:\WINDOWS\System32\ucrtbase.dllLoadedModule[16]=C:\WINDOWS\System32\RPCRT4.dllLoadedModule[17]=C:\WINDOWS\System32\SspiCli.dllLoadedModule[18]=C:\WINDOWS\System32\CRYPTBASE.dllLoadedModule[19]=C:\WINDOWS\System32\bcryptPrimitives.dllLoadedModule[20]=C:\WINDOWS\System32\sechost.dllLoadedModule[21]=C:\WINDOWS\System32\powrprof.dllLoadedModule[22]=C:\WINDOWS\System32\advapi32.dllLoadedModule[23]=C:\WINDOWS\System32\shlwapi.dllLoadedModule[24]=C:\WINDOWS\System32\kernel.appcore.dllLoadedModule[25]=C:\WINDOWS\System32\shcore.dllLoadedModule[26]=C:\WINDOWS\System32\profapi.dllLoadedModule[27]=C:\WINDOWS\System32\OLEAUT32.dllLoadedModule[28]=C:\WINDOWS\System32\msvcp_win.dllLoadedModule[29]=C:\WINDOWS\System32\SETUPAPI.dllLoadedModule[30]=C:\WINDOWS\SYSTEM32\MPR.dllLoadedModule[31]=C:\WINDOWS\SYSTEM32\sfc.dllLoadedModule[32]=C:\WINDOWS\SYSTEM32\WINSPOOL.DRVLoadedModule[33]=C:\WINDOWS\SYSTEM32\bcrypt.dllLoadedModule[34]=C:\WINDOWS\SYSTEM32\sfc_os.DLLLoadedModule[35]=C:\WINDOWS\System32\IMM32.DLLLoadedModule[36]=C:\WINDOWS\System32\CRYPT32.dllLoadedModule[37]=C:\WINDOWS\System32\MSASN1.dllLoadedModule[38]=C:\WINDOWS\SYSTEM32\VERSION.dllLoadedModule[39]=C:\WINDOWS\System32\WS2_32.dllLoadedModule[40]=C:\WINDOWS\System32\PSAPI.DLLLoadedModule[41]=C:\WINDOWS\SYSTEM32\CRYPTUI.dllLoadedModule[42]=C:\WINDOWS\SYSTEM32\DNSAPI.dllLoadedModule[43]=C:\WINDOWS\SYSTEM32\WININET.dllLoadedModule[44]=C:\WINDOWS\System32\NSI.dllLoadedModule[45]=C:\Program Files\AVAST Software\Avast\aswCmnBS.dllLoadedModule[46]=C:\Program Files\AVAST Software\Avast\JsonRpcServer.dllLoadedModule[47]=C:\Program Files\AVAST Software\Avast\aswCmnOS.dllLoadedModule[48]=C:\Program Files\AVAST Software\Avast\aswCmnIS.dllLoadedModule[49]=C:\Program Files\AVAST Software\Avast\log.dllLoadedModule[50]=C:\WINDOWS\SYSTEM32\WINHTTP.dllLoadedModule[51]=C:\WINDOWS\SYSTEM32\WTSAPI32.dllLoadedModule[52]=C:\Program Files\AVAST Software\Avast\aswAux.dllLoadedModule[53]=C:\Program Files\AVAST Software\Avast\ashBase.dllLoadedModule[54]=C:\WINDOWS\System32\WINTRUST.dllLoadedModule[55]=C:\Program Files\AVAST Software\Avast\ashTask.dllLoadedModule[56]=C:\WINDOWS\System32\ole32.dllLoadedModule[57]=C:\Program Files\AVAST Software\Avast\aswIP.dllLoadedModule[58]=C:\Program Files\AVAST Software\Avast\AavmRpch.dllLoadedModule[59]=C:\Program Files\AVAST Software\Avast\aswLog.dllLoadedModule[60]=C:\Program Files\AVAST Software\Avast\aswUtil.dllLoadedModule[61]=C:\WINDOWS\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\MSVCP140.dllLoadedModule[62]=C:\WINDOWS\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\VCRUNTIME140.dllLoadedModule[63]=C:\WINDOWS\SYSTEM32\WSOCK32.dllLoadedModule[64]=C:\Program Files\AVAST Software\Avast\commchannel.dllLoadedModule[65]=C:\Program Files\AVAST Software\Avast\libcrypto-1_1.dllLoadedModule[66]=C:\Program Files\AVAST Software\Avast\libssl-1_1.dllLoadedModule[67]=C:\Program Files\AVAST Software\Avast\aswEngLdr.dllLoadedModule[68]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLLLoadedModule[69]=C:\Program Files\AVAST Software\Avast\aswSqLt.dllLoadedModule[70]=C:\WINDOWS\SYSTEM32\MSIMG32.dllLoadedModule[71]=C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_5507ded2cb4f7f4c\COMCTL32.dllLoadedModule[72]=C:\WINDOWS\SYSTEM32\OLEACC.dllLoadedModule[73]=C:\WINDOWS\SYSTEM32\WINMM.dllLoadedModule[74]=C:\WINDOWS\SYSTEM32\WINMMBASE.dllLoadedModule[75]=C:\WINDOWS\WinSxS\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_none_a338d8ea2df29efb\mfc140u.dllLoadedModule[76]=C:\WINDOWS\SYSTEM32\UxTheme.dllLoadedModule[77]=C:\Program Files\AVAST Software\Avast\HTMLayout.dllLoadedModule[78]=C:\WINDOWS\System32\COMDLG32.dllLoadedModule[79]=C:\WINDOWS\SYSTEM32\urlmon.dllLoadedModule[80]=C:\WINDOWS\SYSTEM32\iertutil.dllLoadedModule[81]=C:\WINDOWS\system32\dbghelp.dllLoadedModule[82]=C:\WINDOWS\SYSTEM32\dbgcore.DLLLoadedModule[83]=C:\Program Files\AVAST Software\Avast\aswProperty.dllLoadedModule[84]=C:\Program Files\AVAST Software\Avast\1050\Base.dllLoadedModule[85]=C:\WINDOWS\SYSTEM32\CRYPTSP.dllLoadedModule[86]=C:\WINDOWS\system32\rsaenh.dllLoadedModule[87]=C:\WINDOWS\SYSTEM32\dwmapi.dllLoadedModule[88]=C:\WINDOWS\System32\MSCTF.dllLoadedModule[89]=C:\Program Files\AVAST Software\Avast\libcef.dllLoadedModule[90]=C:\WINDOWS\SYSTEM32\dhcpcsvc.DLLLoadedModule[91]=C:\WINDOWS\SYSTEM32\USERENV.dllLoadedModule[92]=C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.953_none_89c2555adb023171\COMCTL32.dllLoadedModule[93]=C:\WINDOWS\SYSTEM32\Secur32.dllLoadedModule[94]=C:\WINDOWS\SYSTEM32\USP10.dllLoadedModule[95]=C:\Program Files\AVAST Software\Avast\aswData.dllLoadedModule[96]=C:\Program Files\AVAST Software\Avast\Aavm4h.dllLoadedModule[97]=C:\Program Files\AVAST Software\Avast\ashTaskEx.dllLoadedModule[98]=C:\WINDOWS\SYSTEM32\NETAPI32.dllLoadedModule[99]=C:\WINDOWS\SYSTEM32\SRVCLI.DLLLoadedModule[100]=C:\WINDOWS\SYSTEM32\NETUTILS.DLLLoadedModule[101]=C:\Program Files\AVAST Software\Avast\event_manager.dllLoadedModule[102]=C:\Program Files\AVAST Software\Avast\event_manager_rpc.dllLoadedModule[103]=C:\Program Files\AVAST Software\Avast\event_routing_rpc.dllLoadedModule[104]=C:\Program Files\AVAST Software\Avast\event_routing.dllLoadedModule[105]=C:\Program Files\AVAST Software\Avast\aswRemoteCache.dllLoadedModule[106]=C:\WINDOWS\SYSTEM32\DEVOBJ.dllLoadedModule[107]=C:\Program Files\AVAST Software\Avast\gaming_probe.dllLoadedModule[108]=C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dllLoadedModule[109]=C:\Program Files\AVAST Software\Avast\1050\UILangRes.dllLoadedModule[110]=C:\Program Files\AVAST Software\Avast\CommonRes.dllLoadedModule[111]=C:\WINDOWS\SYSTEM32\webio.dllLoadedModule[112]=C:\WINDOWS\system32\mswsock.dllLoadedModule[113]=C:\WINDOWS\SYSTEM32\WINNSI.DLLLoadedModule[114]=C:\Program Files\AVAST Software\Avast\aswidpmx.dllLoadedModule[115]=C:\Program Files\AVAST Software\Avast\aswsysx.dllLoadedModule[116]=C:\Program Files\AVAST Software\Avast\aswcmlx.dllLoadedModule[117]=C:\Program Files (x86)\Bonjour\mdnsNSP.dllLoadedModule[118]=C:\Windows\System32\rasadhlp.dllLoadedModule[119]=C:\WINDOWS\System32\fwpuclnt.dllLoadedModule[120]=C:\Program Files\AVAST Software\Avast\aswlogx.dllLoadedModule[121]=C:\Program Files\AVAST Software\Avast\aswcommx.dllLoadedModule[122]=C:\WINDOWS\System32\clbcatq.dllLoadedModule[123]=C:\WINDOWS\SYSTEM32\ntmarta.dllLoadedModule[124]=C:\WINDOWS\SYSTEM32\DPAPI.dllLoadedModule[125]=C:\WINDOWS\SYSTEM32\dwrite.dllLoadedModule[126]=C:\WINDOWS\system32\NLAapi.dllLoadedModule[127]=C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLLLoadedModule[128]=C:\Program Files\AVAST Software\Avast\ffl2.dllLoadedModule[129]=C:\WINDOWS\SYSTEM32\WINSTA.dllLoadedModule[130]=C:\WINDOWS\system32\directmanipulation.dllLoadedModule[131]=C:\WINDOWS\SYSTEM32\gpapi.dllLoadedModule[132]=C:\Windows\System32\cryptnet.dllLoadedModule[133]=C:\WINDOWS\system32\explorerframe.dllLoadedModule[134]=C:\WINDOWS\System32\schannel.dllLoadedModule[135]=C:\WINDOWS\SYSTEM32\mskeyprotect.dllLoadedModule[136]=C:\WINDOWS\SYSTEM32\ncrypt.dllLoadedModule[137]=C:\WINDOWS\SYSTEM32\NTASN1.dllLoadedModule[138]=C:\WINDOWS\system32\ncryptsslp.dllLoadedModule[139]=C:\WINDOWS\SYSTEM32\MMDevAPI.DLLLoadedModule[140]=C:\WINDOWS\SYSTEM32\PROPSYS.dllLoadedModule[141]=C:\WINDOWS\SYSTEM32\wdmaud.drvLoadedModule[142]=C:\WINDOWS\SYSTEM32\ksuser.dllLoadedModule[143]=C:\WINDOWS\SYSTEM32\AVRT.dllLoadedModule[144]=C:\WINDOWS\SYSTEM32\AUDIOSES.DLLLoadedModule[145]=C:\WINDOWS\SYSTEM32\wintypes.dllLoadedModule[146]=C:\WINDOWS\SYSTEM32\msacm32.drvLoadedModule[147]=C:\WINDOWS\SYSTEM32\MSACM32.dllLoadedModule[148]=C:\WINDOWS\SYSTEM32\midimap.dllLoadedModule[149]=C:\Windows\System32\l3codeca.acmLoadedModule[150]=C:\Program Files\AVAST Software\Avast\defs\17040400\uiExt.dllLoadedModule[151]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnOS.dllLoadedModule[152]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnIS.dllLoadedModule[153]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnBS.dllLoadedModule[154]=C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dllLoadedModule[155]=C:\WINDOWS\SYSTEM32\WindowsCodecs.dllLoadedModule[156]=C:\Windows\System32\thumbcache.dllLoadedModule[157]=C:\WINDOWS\SYSTEM32\policymanager.dllLoadedModule[158]=C:\WINDOWS\SYSTEM32\msvcp110_win.dllLoadedModule[159]=C:\Windows\System32\ActXPrxy.dllLoadedModule[160]=C:\WINDOWS\SYSTEM32\samcli.dllLoadedModule[161]=C:\WINDOWS\SYSTEM32\SAMLIB.dllLoadedModule[162]=C:\WINDOWS\System32\ntlanman.dllLoadedModule[163]=C:\WINDOWS\System32\drprov.dllLoadedModule[164]=C:\WINDOWS\System32\davclnt.dllLoadedModule[165]=C:\WINDOWS\System32\DAVHLPR.dllLoadedModule[166]=C:\WINDOWS\System32\wkscli.dllLoadedModule[167]=C:\WINDOWS\SYSTEM32\cscapi.dllLoadedModule[168]=C:\Windows\System32\dlnashext.dllLoadedModule[169]=C:\Windows\System32\DevDispItemProvider.dllLoadedModule[170]=C:\WINDOWS\SYSTEM32\MFPlat.DLLLoadedModule[171]=C:\WINDOWS\SYSTEM32\RTWorkQ.DLLState[0].Key=Transport.DoneStage1State[0].Value=1File[0].CabName=WERInternalMetadata.xmlFile[0].Path=WER114D.tmp.WERInternalMetadata.xmlFile[0].Flags=851971File[0].Type=5File[0].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER114D.tmp.WERInternalMetadata.xmlFile[1].CabName=triagedump.dmpFile[1].Flags=808255491File[1].Type=6File[2].CabName=WERDataCollectionFailure.txtFile[2].Path=WER7F1E.tmp.WERDataCollectionFailure.txtFile[2].Flags=851971File[2].Type=5File[2].Original.Path=\\?\C:\Users\Muamer\AppData\Local\Temp\WER7F1E.tmp.WERDataCollectionFailure.txtFile[3].CabName=Report.cabFile[3].Path=Report.cabFile[3].Flags=196608File[3].Type=11File[3].Original.Path=\\?\C:\WINDOWS\system32\Report.cabFriendlyEventName=Stopped workingConsentKey=APPCRASHAppName=Avast AntivirusAppPath=C:\Program Files\AVAST Software\Avast\AvastUI.exeNsPartner=windowsNsGroup=windows8ApplicationIdentity=9C84B4292706AB3024A6E4DFA898CA22MetadataHash=556929350
How I am supposed to know what makes particular application crash.
Very usefull to know nothing, and I lost 2h trying.Code:The ntdll.dll file is a file created by Microsoft that has a description of "NT Layer DLL" and is the file that contains NT kernel functions.
Anyone can help pelase, coz I am really out of my nervs here.
Quote