1.    04 Apr 2017 #1
    Join Date : Apr 2017
    Posts : 1
    win 10

    How do you actiually analyze WER files?


    I have errors:
    Code:
    Faulting application name: AvastUI.exe, version: 17.3.3443.0, time stamp: 0x58da80daFaulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x58256ca0Exception code: 0xc0000374Fault offset: 0x000d9d11Faulting process id: 0x1738Faulting application start time: 0x01d2acf2b72cc292Faulting application path: C:\Program Files\AVAST Software\Avast\AvastUI.exeFaulting module path: C:\WINDOWS\SYSTEM32\ntdll.dllReport Id: 1dfd8dca-8737-4c0d-8f4b-15ace3eae130Faulting package full name: Faulting package-relative application ID:
    and
    Code:
    Faulting application name: mbamservice.exe, version: 3.1.0.415, time stamp: 0x5881b7a1Faulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x5825887fException code: 0xc0000005Fault offset: 0x000000000002f7dbFaulting process id: 0xb10Faulting application start time: 0x01d2ad3bf4ab1827Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exeFaulting module path: C:\WINDOWS\SYSTEM32\ntdll.dllReport Id: 33caedde-cb37-43aa-9fe2-aaad3b1bcd93Faulting package full name: Faulting package-relative application ID:
    in appcrashview its
    Code:
    Version=1EventType=APPCRASHEventTime=131357939672194194ReportType=2Consent=1UploadTime=131357939687985430ReportIdentifier=e008e52b-194c-11e7-8563-2c56dc9609e0IntegratorReportIdentifier=1dfd8dca-8737-4c0d-8f4b-15ace3eae130WOW64=1NsAppName=AvastUI.exeAppSessionGuid=00001738-0001-002b-92c2-2cb7f2acd201TargetAppId=W:0006aebbf3cf27eb5897b1c0ad62e1abbf7000000900!00003441d23a11eb867ae3dee273bd90c630cb0fa02a!AvastUI.exeTargetAppVer=2017//03//28:15:27:22!8cb411!AvastUI.exeBootId=4294967295Response.BucketId=70180a7aef828787591b115c9206ff23Response.BucketTable=1Response.LegacyBucketId=108834447818Response.type=4Response.CabId=107986665962Sig[0].Name=Application NameSig[0].Value=AvastUI.exeSig[1].Name=Application VersionSig[1].Value=17.3.3443.0Sig[2].Name=Application TimestampSig[2].Value=58da80daSig[3].Name=Fault Module NameSig[3].Value=StackHash_5411Sig[4].Name=Fault Module VersionSig[4].Value=10.0.14393.479Sig[5].Name=Fault Module TimestampSig[5].Value=58256ca0Sig[6].Name=Exception CodeSig[6].Value=c0000374Sig[7].Name=Exception OffsetSig[7].Value=PCH_B6_FROM_ntdll+0x0006EB8CDynamicSig[1].Name=OS VersionDynamicSig[1].Value=10.0.14393.2.0.0.256.48DynamicSig[2].Name=Locale IDDynamicSig[2].Value=5146DynamicSig[22].Name=Additional Information 1DynamicSig[22].Value=5411DynamicSig[23].Name=Additional Information 2DynamicSig[23].Value=5411d3d59c4f894c5511789db6792ebdDynamicSig[24].Name=Additional Information 3DynamicSig[24].Value=8514DynamicSig[25].Name=Additional Information 4DynamicSig[25].Value=8514217ff0dc4bca9215c586ec22c8fbUI[2]=C:\Program Files\AVAST Software\Avast\AvastUI.exeUI[3]=Avast Antivirus has stopped workingUI[4]=Windows can check online for a solution to the problem.UI[5]=Check online for a solution and close the programUI[6]=Check online for a solution later and close the programUI[7]=Close the programLoadedModule[0]=C:\Program Files\AVAST Software\Avast\AvastUI.exeLoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dllLoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLLLoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dllLoadedModule[4]=C:\WINDOWS\system32\apphelp.dllLoadedModule[5]=C:\WINDOWS\AppPatch\AcLayers.DLLLoadedModule[6]=C:\WINDOWS\System32\msvcrt.dllLoadedModule[7]=C:\WINDOWS\System32\USER32.dllLoadedModule[8]=C:\WINDOWS\System32\win32u.dllLoadedModule[9]=C:\WINDOWS\System32\GDI32.dllLoadedModule[10]=C:\WINDOWS\System32\gdi32full.dllLoadedModule[11]=C:\WINDOWS\System32\SHELL32.dllLoadedModule[12]=C:\WINDOWS\System32\cfgmgr32.dllLoadedModule[13]=C:\WINDOWS\System32\windows.storage.dllLoadedModule[14]=C:\WINDOWS\System32\combase.dllLoadedModule[15]=C:\WINDOWS\System32\ucrtbase.dllLoadedModule[16]=C:\WINDOWS\System32\RPCRT4.dllLoadedModule[17]=C:\WINDOWS\System32\SspiCli.dllLoadedModule[18]=C:\WINDOWS\System32\CRYPTBASE.dllLoadedModule[19]=C:\WINDOWS\System32\bcryptPrimitives.dllLoadedModule[20]=C:\WINDOWS\System32\sechost.dllLoadedModule[21]=C:\WINDOWS\System32\powrprof.dllLoadedModule[22]=C:\WINDOWS\System32\advapi32.dllLoadedModule[23]=C:\WINDOWS\System32\shlwapi.dllLoadedModule[24]=C:\WINDOWS\System32\kernel.appcore.dllLoadedModule[25]=C:\WINDOWS\System32\shcore.dllLoadedModule[26]=C:\WINDOWS\System32\profapi.dllLoadedModule[27]=C:\WINDOWS\System32\OLEAUT32.dllLoadedModule[28]=C:\WINDOWS\System32\msvcp_win.dllLoadedModule[29]=C:\WINDOWS\System32\SETUPAPI.dllLoadedModule[30]=C:\WINDOWS\SYSTEM32\MPR.dllLoadedModule[31]=C:\WINDOWS\SYSTEM32\sfc.dllLoadedModule[32]=C:\WINDOWS\SYSTEM32\WINSPOOL.DRVLoadedModule[33]=C:\WINDOWS\SYSTEM32\bcrypt.dllLoadedModule[34]=C:\WINDOWS\SYSTEM32\sfc_os.DLLLoadedModule[35]=C:\WINDOWS\System32\IMM32.DLLLoadedModule[36]=C:\WINDOWS\System32\CRYPT32.dllLoadedModule[37]=C:\WINDOWS\System32\MSASN1.dllLoadedModule[38]=C:\WINDOWS\SYSTEM32\VERSION.dllLoadedModule[39]=C:\WINDOWS\System32\WS2_32.dllLoadedModule[40]=C:\WINDOWS\System32\PSAPI.DLLLoadedModule[41]=C:\WINDOWS\SYSTEM32\CRYPTUI.dllLoadedModule[42]=C:\WINDOWS\SYSTEM32\DNSAPI.dllLoadedModule[43]=C:\WINDOWS\SYSTEM32\WININET.dllLoadedModule[44]=C:\WINDOWS\System32\NSI.dllLoadedModule[45]=C:\Program Files\AVAST Software\Avast\aswCmnBS.dllLoadedModule[46]=C:\Program Files\AVAST Software\Avast\JsonRpcServer.dllLoadedModule[47]=C:\Program Files\AVAST Software\Avast\aswCmnOS.dllLoadedModule[48]=C:\Program Files\AVAST Software\Avast\aswCmnIS.dllLoadedModule[49]=C:\Program Files\AVAST Software\Avast\log.dllLoadedModule[50]=C:\WINDOWS\SYSTEM32\WINHTTP.dllLoadedModule[51]=C:\WINDOWS\SYSTEM32\WTSAPI32.dllLoadedModule[52]=C:\Program Files\AVAST Software\Avast\aswAux.dllLoadedModule[53]=C:\Program Files\AVAST Software\Avast\ashBase.dllLoadedModule[54]=C:\WINDOWS\System32\WINTRUST.dllLoadedModule[55]=C:\Program Files\AVAST Software\Avast\ashTask.dllLoadedModule[56]=C:\WINDOWS\System32\ole32.dllLoadedModule[57]=C:\Program Files\AVAST Software\Avast\aswIP.dllLoadedModule[58]=C:\Program Files\AVAST Software\Avast\AavmRpch.dllLoadedModule[59]=C:\Program Files\AVAST Software\Avast\aswLog.dllLoadedModule[60]=C:\Program Files\AVAST Software\Avast\aswUtil.dllLoadedModule[61]=C:\WINDOWS\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\MSVCP140.dllLoadedModule[62]=C:\WINDOWS\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\VCRUNTIME140.dllLoadedModule[63]=C:\WINDOWS\SYSTEM32\WSOCK32.dllLoadedModule[64]=C:\Program Files\AVAST Software\Avast\commchannel.dllLoadedModule[65]=C:\Program Files\AVAST Software\Avast\libcrypto-1_1.dllLoadedModule[66]=C:\Program Files\AVAST Software\Avast\libssl-1_1.dllLoadedModule[67]=C:\Program Files\AVAST Software\Avast\aswEngLdr.dllLoadedModule[68]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLLLoadedModule[69]=C:\Program Files\AVAST Software\Avast\aswSqLt.dllLoadedModule[70]=C:\WINDOWS\SYSTEM32\MSIMG32.dllLoadedModule[71]=C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_5507ded2cb4f7f4c\COMCTL32.dllLoadedModule[72]=C:\WINDOWS\SYSTEM32\OLEACC.dllLoadedModule[73]=C:\WINDOWS\SYSTEM32\WINMM.dllLoadedModule[74]=C:\WINDOWS\SYSTEM32\WINMMBASE.dllLoadedModule[75]=C:\WINDOWS\WinSxS\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_none_a338d8ea2df29efb\mfc140u.dllLoadedModule[76]=C:\WINDOWS\SYSTEM32\UxTheme.dllLoadedModule[77]=C:\Program Files\AVAST Software\Avast\HTMLayout.dllLoadedModule[78]=C:\WINDOWS\System32\COMDLG32.dllLoadedModule[79]=C:\WINDOWS\SYSTEM32\urlmon.dllLoadedModule[80]=C:\WINDOWS\SYSTEM32\iertutil.dllLoadedModule[81]=C:\WINDOWS\system32\dbghelp.dllLoadedModule[82]=C:\WINDOWS\SYSTEM32\dbgcore.DLLLoadedModule[83]=C:\Program Files\AVAST Software\Avast\aswProperty.dllLoadedModule[84]=C:\Program Files\AVAST Software\Avast\1050\Base.dllLoadedModule[85]=C:\WINDOWS\SYSTEM32\CRYPTSP.dllLoadedModule[86]=C:\WINDOWS\system32\rsaenh.dllLoadedModule[87]=C:\WINDOWS\SYSTEM32\dwmapi.dllLoadedModule[88]=C:\WINDOWS\System32\MSCTF.dllLoadedModule[89]=C:\Program Files\AVAST Software\Avast\libcef.dllLoadedModule[90]=C:\WINDOWS\SYSTEM32\dhcpcsvc.DLLLoadedModule[91]=C:\WINDOWS\SYSTEM32\USERENV.dllLoadedModule[92]=C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.953_none_89c2555adb023171\COMCTL32.dllLoadedModule[93]=C:\WINDOWS\SYSTEM32\Secur32.dllLoadedModule[94]=C:\WINDOWS\SYSTEM32\USP10.dllLoadedModule[95]=C:\Program Files\AVAST Software\Avast\aswData.dllLoadedModule[96]=C:\Program Files\AVAST Software\Avast\Aavm4h.dllLoadedModule[97]=C:\Program Files\AVAST Software\Avast\ashTaskEx.dllLoadedModule[98]=C:\WINDOWS\SYSTEM32\NETAPI32.dllLoadedModule[99]=C:\WINDOWS\SYSTEM32\SRVCLI.DLLLoadedModule[100]=C:\WINDOWS\SYSTEM32\NETUTILS.DLLLoadedModule[101]=C:\Program Files\AVAST Software\Avast\event_manager.dllLoadedModule[102]=C:\Program Files\AVAST Software\Avast\event_manager_rpc.dllLoadedModule[103]=C:\Program Files\AVAST Software\Avast\event_routing_rpc.dllLoadedModule[104]=C:\Program Files\AVAST Software\Avast\event_routing.dllLoadedModule[105]=C:\Program Files\AVAST Software\Avast\aswRemoteCache.dllLoadedModule[106]=C:\WINDOWS\SYSTEM32\DEVOBJ.dllLoadedModule[107]=C:\Program Files\AVAST Software\Avast\gaming_probe.dllLoadedModule[108]=C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dllLoadedModule[109]=C:\Program Files\AVAST Software\Avast\1050\UILangRes.dllLoadedModule[110]=C:\Program Files\AVAST Software\Avast\CommonRes.dllLoadedModule[111]=C:\WINDOWS\SYSTEM32\webio.dllLoadedModule[112]=C:\WINDOWS\system32\mswsock.dllLoadedModule[113]=C:\WINDOWS\SYSTEM32\WINNSI.DLLLoadedModule[114]=C:\Program Files\AVAST Software\Avast\aswidpmx.dllLoadedModule[115]=C:\Program Files\AVAST Software\Avast\aswsysx.dllLoadedModule[116]=C:\Program Files\AVAST Software\Avast\aswcmlx.dllLoadedModule[117]=C:\Program Files (x86)\Bonjour\mdnsNSP.dllLoadedModule[118]=C:\Windows\System32\rasadhlp.dllLoadedModule[119]=C:\WINDOWS\System32\fwpuclnt.dllLoadedModule[120]=C:\Program Files\AVAST Software\Avast\aswlogx.dllLoadedModule[121]=C:\Program Files\AVAST Software\Avast\aswcommx.dllLoadedModule[122]=C:\WINDOWS\System32\clbcatq.dllLoadedModule[123]=C:\WINDOWS\SYSTEM32\ntmarta.dllLoadedModule[124]=C:\WINDOWS\SYSTEM32\DPAPI.dllLoadedModule[125]=C:\WINDOWS\SYSTEM32\dwrite.dllLoadedModule[126]=C:\WINDOWS\system32\NLAapi.dllLoadedModule[127]=C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLLLoadedModule[128]=C:\Program Files\AVAST Software\Avast\ffl2.dllLoadedModule[129]=C:\WINDOWS\SYSTEM32\WINSTA.dllLoadedModule[130]=C:\WINDOWS\system32\directmanipulation.dllLoadedModule[131]=C:\WINDOWS\SYSTEM32\gpapi.dllLoadedModule[132]=C:\Windows\System32\cryptnet.dllLoadedModule[133]=C:\WINDOWS\system32\explorerframe.dllLoadedModule[134]=C:\WINDOWS\System32\schannel.dllLoadedModule[135]=C:\WINDOWS\SYSTEM32\mskeyprotect.dllLoadedModule[136]=C:\WINDOWS\SYSTEM32\ncrypt.dllLoadedModule[137]=C:\WINDOWS\SYSTEM32\NTASN1.dllLoadedModule[138]=C:\WINDOWS\system32\ncryptsslp.dllLoadedModule[139]=C:\WINDOWS\SYSTEM32\MMDevAPI.DLLLoadedModule[140]=C:\WINDOWS\SYSTEM32\PROPSYS.dllLoadedModule[141]=C:\WINDOWS\SYSTEM32\wdmaud.drvLoadedModule[142]=C:\WINDOWS\SYSTEM32\ksuser.dllLoadedModule[143]=C:\WINDOWS\SYSTEM32\AVRT.dllLoadedModule[144]=C:\WINDOWS\SYSTEM32\AUDIOSES.DLLLoadedModule[145]=C:\WINDOWS\SYSTEM32\wintypes.dllLoadedModule[146]=C:\WINDOWS\SYSTEM32\msacm32.drvLoadedModule[147]=C:\WINDOWS\SYSTEM32\MSACM32.dllLoadedModule[148]=C:\WINDOWS\SYSTEM32\midimap.dllLoadedModule[149]=C:\Windows\System32\l3codeca.acmLoadedModule[150]=C:\Program Files\AVAST Software\Avast\defs\17040400\uiExt.dllLoadedModule[151]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnOS.dllLoadedModule[152]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnIS.dllLoadedModule[153]=C:\Program Files\AVAST Software\Avast\defs\17040400\aswCmnBS.dllLoadedModule[154]=C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dllLoadedModule[155]=C:\WINDOWS\SYSTEM32\WindowsCodecs.dllLoadedModule[156]=C:\Windows\System32\thumbcache.dllLoadedModule[157]=C:\WINDOWS\SYSTEM32\policymanager.dllLoadedModule[158]=C:\WINDOWS\SYSTEM32\msvcp110_win.dllLoadedModule[159]=C:\Windows\System32\ActXPrxy.dllLoadedModule[160]=C:\WINDOWS\SYSTEM32\samcli.dllLoadedModule[161]=C:\WINDOWS\SYSTEM32\SAMLIB.dllLoadedModule[162]=C:\WINDOWS\System32\ntlanman.dllLoadedModule[163]=C:\WINDOWS\System32\drprov.dllLoadedModule[164]=C:\WINDOWS\System32\davclnt.dllLoadedModule[165]=C:\WINDOWS\System32\DAVHLPR.dllLoadedModule[166]=C:\WINDOWS\System32\wkscli.dllLoadedModule[167]=C:\WINDOWS\SYSTEM32\cscapi.dllLoadedModule[168]=C:\Windows\System32\dlnashext.dllLoadedModule[169]=C:\Windows\System32\DevDispItemProvider.dllLoadedModule[170]=C:\WINDOWS\SYSTEM32\MFPlat.DLLLoadedModule[171]=C:\WINDOWS\SYSTEM32\RTWorkQ.DLLState[0].Key=Transport.DoneStage1State[0].Value=1File[0].CabName=WERInternalMetadata.xmlFile[0].Path=WER114D.tmp.WERInternalMetadata.xmlFile[0].Flags=851971File[0].Type=5File[0].Original.Path=\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER114D.tmp.WERInternalMetadata.xmlFile[1].CabName=triagedump.dmpFile[1].Flags=808255491File[1].Type=6File[2].CabName=WERDataCollectionFailure.txtFile[2].Path=WER7F1E.tmp.WERDataCollectionFailure.txtFile[2].Flags=851971File[2].Type=5File[2].Original.Path=\\?\C:\Users\Muamer\AppData\Local\Temp\WER7F1E.tmp.WERDataCollectionFailure.txtFile[3].CabName=Report.cabFile[3].Path=Report.cabFile[3].Flags=196608File[3].Type=11File[3].Original.Path=\\?\C:\WINDOWS\system32\Report.cabFriendlyEventName=Stopped workingConsentKey=APPCRASHAppName=Avast AntivirusAppPath=C:\Program Files\AVAST Software\Avast\AvastUI.exeNsPartner=windowsNsGroup=windows8ApplicationIdentity=9C84B4292706AB3024A6E4DFA898CA22MetadataHash=556929350
    And what this tells me? Nothing.
    How I am supposed to know what makes particular application crash.
    Code:
    The ntdll.dll file is a file created by Microsoft that has a description of "NT Layer DLL" and is the file that contains NT kernel functions.
    Very usefull to know nothing, and I lost 2h trying.
    Anyone can help pelase, coz I am really out of my nervs here.
      My ComputerSystem Spec
  2.    04 Apr 2017 #2
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,451
    windows 10

    Welcome to the forum. What sort of problems are you having with the PC? As two security products have problems this may be malware related. Have you checked the hard drive for errors
      My ComputerSystem Spec
  3.    04 Apr 2017 #3
    Join Date : Dec 2013
    Portsmouth Hampshire
    Posts : 1,829
    Windows 10 x86 14383 Insider Pro and Core 10240

    Go to BSOD Crashes and Debugging - Windows 10 Forums

    Follow the instructions at the top of the page, and then follow the advice of the guys there who are experts on analysis of crash data.
      My ComputersSystem Spec

 


Similar Threads
Thread Forum
Solved cclean taking long time for analyze to show up
for the past three months cclean has taken a long time for analyze to show up bright blue when first installed it took only seconds have been using it and updating it for two years. all info greatly appreciated DME
Software and Apps
Trying to Analyze a Realtek Audio driver install
This thread is a continued discussion from another thread Latest Realtek HD Audio Driver Version post #1904 (Didn't want to hijack original thread) Agreed. But seeing how and which driver is selected is a start. Will try and walk through in...
Drivers and Hardware
Analyze why EXE file (that I created myself) wont load (sys error 193)
(similar post on Software and Apps forum) I have written my own program that creates a .EXE file by modifying another .EXE file. The output file will not run. Intel's SDE program tells me it gets a system error 193. If the tool changes nothing,...
General Support
Solved How do I read/analyze this dump file so I know what is causing the BSO
I built a pc last week and I get the BSOD after a few minutes of playing any game I try. I only have the last dump file I got because the BSOD before the last wouldn't let me start my pc in safe mode or restore to a previous date so I had to...
BSOD Crashes and Debugging
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:09.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums