(Msg. 1) Posted: Fri Jan 16, 2009 11:44 am
Post subject: Spooler Subsystem App closed by Data Execution Prevention Archived from groups: microsoft>public>windowsxp>print_fax (more info?)
I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1 G of
memory. I have two 149 G drives, each with about 63G of free space. When I
started the system this morning, Windows displayed a message headed "Data
Execution Prevention" and reading "To help protect your computer, Windows has
closed this program. Name: Spooler Subsystem App Publisher: Microsoft
Corporation".
All of my printers - 2 local and 2 networked - have disappeared, and when I
try to reinstall them Windows displays the message "Operation could not be
completed. The print spooler service is not running."
Everything seemed to be working normally yesterday.
I ran a full virus scan after getting this error - it says the system is
clean.
The formerly installed printers are -
1) HP2200 on LPT1 - this was set to allow shared access since several users
need to print to it
2) Xerox Phaser 6250 on USB
3) HP4000 on an internal IP address
4) HP1312 on an internal IP address
Printers 1, 2, and 3 have been installed on this system for several years. I
installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary user
was getting error messages from it. I don't think I'll reinstall it...
There are 35 other systems in use in this building, and since no one has
phoned me for support I believe my system is the only one showing this
problem.
(Msg. 2) Posted: Mon Jan 19, 2009 9:09 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
You will need to start the Printer Spooler service
in Services.msc or at a command prompt
net start spooler
most spooler failures are caused when print drivers corrupt the memory of
the process.
--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1
This posting is provided "AS IS" with no warranties, and confers no rights.
"SharonW" wrote in message
>I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1 G
>of
> memory. I have two 149 G drives, each with about 63G of free space. When I
> started the system this morning, Windows displayed a message headed "Data
> Execution Prevention" and reading "To help protect your computer, Windows
> has
> closed this program. Name: Spooler Subsystem App Publisher: Microsoft
> Corporation".
>
> All of my printers - 2 local and 2 networked - have disappeared, and when
> I
> try to reinstall them Windows displays the message "Operation could not be
> completed. The print spooler service is not running."
>
> Everything seemed to be working normally yesterday.
>
> I ran a full virus scan after getting this error - it says the system is
> clean.
>
> The formerly installed printers are -
> 1) HP2200 on LPT1 - this was set to allow shared access since several
> users
> need to print to it
> 2) Xerox Phaser 6250 on USB
> 3) HP4000 on an internal IP address
> 4) HP1312 on an internal IP address
> Printers 1, 2, and 3 have been installed on this system for several years.
> I
> installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary
> user
> was getting error messages from it. I don't think I'll reinstall it...
>
> There are 35 other systems in use in this building, and since no one has
> phoned me for support I believe my system is the only one showing this
> problem.
>
> How can I get my printing to work again?
(Msg. 3) Posted: Tue Jan 20, 2009 5:45 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Thanks, Alan - but it doesn't work. When I type "net start spooler" at the
command prompt, I get the messages "The Print Spooler service is starting.
The Print Spooler service was started successfully." But when I next go to
Printers and Faxes and click Add Printer, I get the message "Operation could
not be completed. The print spooler service is not running."
I tried a couple of variations -
1) Cold boot, then enter "net start spooler" at the command prompt. Same
result.
2) Uninstall the software for that HP1312 printer, and cold boot after
finishing the uninstall with its associated restarts. Enter "net start
spooler" after the cold boot. Same result.
Where do I go from here?
TIA,
Sharon
"Alan Morris [MSFT]" wrote:
> You will need to start the Printer Spooler service
>
> in Services.msc or at a command prompt
> net start spooler
>
>
> most spooler failures are caused when print drivers corrupt the memory of
> the process.
> --
> Alan Morris
> Windows Printing Team
> Search the Microsoft Knowledge Base here:
> http://support.microsoft.com/search/?adv=1 >
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "SharonW" wrote in message
> > >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1 G
> >of
> > memory. I have two 149 G drives, each with about 63G of free space. When I
> > started the system this morning, Windows displayed a message headed "Data
> > Execution Prevention" and reading "To help protect your computer, Windows
> > has
> > closed this program. Name: Spooler Subsystem App Publisher: Microsoft
> > Corporation".
> >
> > All of my printers - 2 local and 2 networked - have disappeared, and when
> > I
> > try to reinstall them Windows displays the message "Operation could not be
> > completed. The print spooler service is not running."
> >
> > Everything seemed to be working normally yesterday.
> >
> > I ran a full virus scan after getting this error - it says the system is
> > clean.
> >
> > The formerly installed printers are -
> > 1) HP2200 on LPT1 - this was set to allow shared access since several
> > users
> > need to print to it
> > 2) Xerox Phaser 6250 on USB
> > 3) HP4000 on an internal IP address
> > 4) HP1312 on an internal IP address
> > Printers 1, 2, and 3 have been installed on this system for several years.
> > I
> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary
> > user
> > was getting error messages from it. I don't think I'll reinstall it...
> >
> > There are 35 other systems in use in this building, and since no one has
> > phoned me for support I believe my system is the only one showing this
> > problem.
> >
> > How can I get my printing to work again?
>
>
>
(Msg. 4) Posted: Tue Jan 20, 2009 6:28 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Addition to my post about this technique not working when I entered "net
start spooler" at the command prompt -
I just tried running services.msc - the Print Spooler service status was
"stopped". When I clicked "Start", the status changed to "Started". Next I
tried to add a printer, and a few seconds after I clicked "Add printer" the
Print Spooler service status changed back to "Stopped".
Sharon
"Alan Morris [MSFT]" wrote:
> You will need to start the Printer Spooler service
>
> in Services.msc or at a command prompt
> net start spooler
>
>
> most spooler failures are caused when print drivers corrupt the memory of
> the process.
> --
> Alan Morris
> Windows Printing Team
> Search the Microsoft Knowledge Base here:
> http://support.microsoft.com/search/?adv=1 >
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "SharonW" wrote in message
> > >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1 G
> >of
> > memory. I have two 149 G drives, each with about 63G of free space. When I
> > started the system this morning, Windows displayed a message headed "Data
> > Execution Prevention" and reading "To help protect your computer, Windows
> > has
> > closed this program. Name: Spooler Subsystem App Publisher: Microsoft
> > Corporation".
> >
> > All of my printers - 2 local and 2 networked - have disappeared, and when
> > I
> > try to reinstall them Windows displays the message "Operation could not be
> > completed. The print spooler service is not running."
> >
> > Everything seemed to be working normally yesterday.
> >
> > I ran a full virus scan after getting this error - it says the system is
> > clean.
> >
> > The formerly installed printers are -
> > 1) HP2200 on LPT1 - this was set to allow shared access since several
> > users
> > need to print to it
> > 2) Xerox Phaser 6250 on USB
> > 3) HP4000 on an internal IP address
> > 4) HP1312 on an internal IP address
> > Printers 1, 2, and 3 have been installed on this system for several years.
> > I
> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary
> > user
> > was getting error messages from it. I don't think I'll reinstall it...
> >
> > There are 35 other systems in use in this building, and since no one has
> > phoned me for support I believe my system is the only one showing this
> > problem.
> >
> > How can I get my printing to work again?
>
>
>
(Msg. 5) Posted: Tue Jan 20, 2009 10:07 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
the service starts until it loads something (of fails to load something)
which corrupts the spooler memory and terminates.
If you are interested in debugging the process and determining which file is
causing the problem we can go there but most people would rather just get
the dang spooler running again.
This posting is provided "AS IS" with no warranties, and confers no rights.
"SharonW" wrote in message
> Thanks, Alan - but it doesn't work. When I type "net start spooler" at the
> command prompt, I get the messages "The Print Spooler service is starting.
> The Print Spooler service was started successfully." But when I next go to
> Printers and Faxes and click Add Printer, I get the message "Operation
> could
> not be completed. The print spooler service is not running."
>
> I tried a couple of variations -
> 1) Cold boot, then enter "net start spooler" at the command prompt. Same
> result.
> 2) Uninstall the software for that HP1312 printer, and cold boot after
> finishing the uninstall with its associated restarts. Enter "net start
> spooler" after the cold boot. Same result.
>
> Where do I go from here?
>
> TIA,
>
> Sharon
>
> "Alan Morris [MSFT]" wrote:
>
>> You will need to start the Printer Spooler service
>>
>> in Services.msc or at a command prompt
>> net start spooler
>>
>>
>> most spooler failures are caused when print drivers corrupt the memory of
>> the process.
>> --
>> Alan Morris
>> Windows Printing Team
>> Search the Microsoft Knowledge Base here:
>> http://support.microsoft.com/search/?adv=1 >>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "SharonW" wrote in message
>> >> >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1
>> >G
>> >of
>> > memory. I have two 149 G drives, each with about 63G of free space.
>> > When I
>> > started the system this morning, Windows displayed a message headed
>> > "Data
>> > Execution Prevention" and reading "To help protect your computer,
>> > Windows
>> > has
>> > closed this program. Name: Spooler Subsystem App Publisher: Microsoft
>> > Corporation".
>> >
>> > All of my printers - 2 local and 2 networked - have disappeared, and
>> > when
>> > I
>> > try to reinstall them Windows displays the message "Operation could not
>> > be
>> > completed. The print spooler service is not running."
>> >
>> > Everything seemed to be working normally yesterday.
>> >
>> > I ran a full virus scan after getting this error - it says the system
>> > is
>> > clean.
>> >
>> > The formerly installed printers are -
>> > 1) HP2200 on LPT1 - this was set to allow shared access since several
>> > users
>> > need to print to it
>> > 2) Xerox Phaser 6250 on USB
>> > 3) HP4000 on an internal IP address
>> > 4) HP1312 on an internal IP address
>> > Printers 1, 2, and 3 have been installed on this system for several
>> > years.
>> > I
>> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary
>> > user
>> > was getting error messages from it. I don't think I'll reinstall it...
>> >
>> > There are 35 other systems in use in this building, and since no one
>> > has
>> > phoned me for support I believe my system is the only one showing this
>> > problem.
>> >
>> > How can I get my printing to work again?
>>
>>
>>
(Msg. 6) Posted: Wed Jan 21, 2009 9:17 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Alan - I would LOVE to get the dang spooler running, but no luck so far.
(Apologies in advance - this is going to be a long one.)
Background detail - I don't think this is related to upgrading from an
earlier version of Windows. When I set up systems, I always start with a
clean install. Many data files on the pc were brought over from older
installations, but this machine started with a freshly formatted drive and an
install of Windows XP from scratch.
I looked at Bruce's page and proceeded as follows -
Installed the Windows Server 2003 Resource Kit
Run - cleanspl.exe
Got the error 'Unable to create registry key "\\(my system
name)\HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\Print\Printers\Phaser 6250DP". Access is denied.'
No, there is no listing in Add/Remove programs for my Xerox Phaser 6250.
Yes, there should be a Xerox Phaser 6250 installed.
So next I tried regedit, with appropriate fear and trembling.
I deleted all keys from
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NTx86\Drivers\Version-3, without deleting Version-3 itself. (Version-2 was
not present.)
At the command prompt, I entered net stop spooler, then net start spooler.
Next Windows Explorer - c:\windows\system32\spool\printers was empty. I
deleted everything from c:\windows\system32\spool\drivers\w32x86\3, and
everything else that was in the w32x86 folder except for folder "3".
Back to the command prompt - net stop spooler, net start spooler. (Yes, I
hit enter and allowed time for a response after each of those two commands.)
Add Printer
Operation could not be completed. The print spooler service is not running.
(The usual error I've been getting.)
I restarted the system, then restarted the print spooler again. Tried to add
a printer - Operation could not be completed. I went to services.msc (so I
could watch when things happened) and started the (stopped) print spooler,
then tried once more to add a printer - the spooler stopped a few seconds
later and I got the usual error message.
Help! Is there anything else I can do?
Thanks for your trouble,
Sharon
"Alan Morris [MSFT]" wrote:
> the service starts until it loads something (of fails to load something)
> which corrupts the spooler memory and terminates.
>
> If you are interested in debugging the process and determining which file is
> causing the problem we can go there but most people would rather just get
> the dang spooler running again.
>
>
> Bruce has some useful information on cleaning out the print drivers.
> http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm > --
> Alan Morris
> Windows Printing Team
> Search the Microsoft Knowledge Base here:
> http://support.microsoft.com/search/?adv=1 >
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "SharonW" wrote in message
> > > Thanks, Alan - but it doesn't work. When I type "net start spooler" at the
> > command prompt, I get the messages "The Print Spooler service is starting.
> > The Print Spooler service was started successfully." But when I next go to
> > Printers and Faxes and click Add Printer, I get the message "Operation
> > could
> > not be completed. The print spooler service is not running."
> >
> > I tried a couple of variations -
> > 1) Cold boot, then enter "net start spooler" at the command prompt. Same
> > result.
> > 2) Uninstall the software for that HP1312 printer, and cold boot after
> > finishing the uninstall with its associated restarts. Enter "net start
> > spooler" after the cold boot. Same result.
> >
> > Where do I go from here?
> >
> > TIA,
> >
> > Sharon
> >
> > "Alan Morris [MSFT]" wrote:
> >
> >> You will need to start the Printer Spooler service
> >>
> >> in Services.msc or at a command prompt
> >> net start spooler
> >>
> >>
> >> most spooler failures are caused when print drivers corrupt the memory of
> >> the process.
> >> --
> >> Alan Morris
> >> Windows Printing Team
> >> Search the Microsoft Knowledge Base here:
> >> http://support.microsoft.com/search/?adv=1 > >>
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> "SharonW" wrote in message
> >> > >> >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and 1
> >> >G
> >> >of
> >> > memory. I have two 149 G drives, each with about 63G of free space.
> >> > When I
> >> > started the system this morning, Windows displayed a message headed
> >> > "Data
> >> > Execution Prevention" and reading "To help protect your computer,
> >> > Windows
> >> > has
> >> > closed this program. Name: Spooler Subsystem App Publisher: Microsoft
> >> > Corporation".
> >> >
> >> > All of my printers - 2 local and 2 networked - have disappeared, and
> >> > when
> >> > I
> >> > try to reinstall them Windows displays the message "Operation could not
> >> > be
> >> > completed. The print spooler service is not running."
> >> >
> >> > Everything seemed to be working normally yesterday.
> >> >
> >> > I ran a full virus scan after getting this error - it says the system
> >> > is
> >> > clean.
> >> >
> >> > The formerly installed printers are -
> >> > 1) HP2200 on LPT1 - this was set to allow shared access since several
> >> > users
> >> > need to print to it
> >> > 2) Xerox Phaser 6250 on USB
> >> > 3) HP4000 on an internal IP address
> >> > 4) HP1312 on an internal IP address
> >> > Printers 1, 2, and 3 have been installed on this system for several
> >> > years.
> >> > I
> >> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its primary
> >> > user
> >> > was getting error messages from it. I don't think I'll reinstall it...
> >> >
> >> > There are 35 other systems in use in this building, and since no one
> >> > has
> >> > phoned me for support I believe my system is the only one showing this
> >> > problem.
> >> >
> >> > How can I get my printing to work again?
> >>
> >>
> >>
>
>
>
(Msg. 7) Posted: Wed Jan 21, 2009 11:04 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Okay let's find out what is causing the spooler service to fail.
Launch task manager. On the Processes tab, change the view to include a
column for PID
open a command window
type net start spooler
You have one minute to complete the next couple tasks
find spoolsv.exe in task manager, note the PID
in the command window type
ntsd -p [PID for spoolsv.exe] -g -G
press enter and a bunch of module load info will scroll paste.
when the process terminates you will see a prompt
ntdll!DbgBreakPoint:
7c822583 cc int 3
0:001>
type k
hopefully this will indicate which module is failing.
This posting is provided "AS IS" with no warranties, and confers no rights.
"SharonW" wrote in message
> Alan - I would LOVE to get the dang spooler running, but no luck so far.
>
> (Apologies in advance - this is going to be a long one.)
>
> Background detail - I don't think this is related to upgrading from an
> earlier version of Windows. When I set up systems, I always start with a
> clean install. Many data files on the pc were brought over from older
> installations, but this machine started with a freshly formatted drive and
> an
> install of Windows XP from scratch.
>
> I looked at Bruce's page and proceeded as follows -
>
> Installed the Windows Server 2003 Resource Kit
>
> Run - cleanspl.exe
>
> Got the error 'Unable to create registry key "\\(my system
> name)\HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\Print\Printers\Phaser
> 6250DP". Access is denied.'
>
> No, there is no listing in Add/Remove programs for my Xerox Phaser 6250.
> Yes, there should be a Xerox Phaser 6250 installed.
>
> So next I tried regedit, with appropriate fear and trembling.
>
> I deleted all keys from
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
> NTx86\Drivers\Version-3, without deleting Version-3 itself. (Version-2 was
> not present.)
>
> At the command prompt, I entered net stop spooler, then net start spooler.
>
> Next Windows Explorer - c:\windows\system32\spool\printers was empty. I
> deleted everything from c:\windows\system32\spool\drivers\w32x86\3, and
> everything else that was in the w32x86 folder except for folder "3".
>
> Back to the command prompt - net stop spooler, net start spooler. (Yes, I
> hit enter and allowed time for a response after each of those two
> commands.)
>
> Add Printer
>
> Operation could not be completed. The print spooler service is not
> running.
> (The usual error I've been getting.)
>
> I restarted the system, then restarted the print spooler again. Tried to
> add
> a printer - Operation could not be completed. I went to services.msc (so I
> could watch when things happened) and started the (stopped) print spooler,
> then tried once more to add a printer - the spooler stopped a few seconds
> later and I got the usual error message.
>
> Help! Is there anything else I can do?
>
> Thanks for your trouble,
>
> Sharon
>
> "Alan Morris [MSFT]" wrote:
>
>> the service starts until it loads something (of fails to load something)
>> which corrupts the spooler memory and terminates.
>>
>> If you are interested in debugging the process and determining which file
>> is
>> causing the problem we can go there but most people would rather just get
>> the dang spooler running again.
>>
>>
>> Bruce has some useful information on cleaning out the print drivers.
>> http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm >> --
>> Alan Morris
>> Windows Printing Team
>> Search the Microsoft Knowledge Base here:
>> http://support.microsoft.com/search/?adv=1 >>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "SharonW" wrote in message
>> >> > Thanks, Alan - but it doesn't work. When I type "net start spooler" at
>> > the
>> > command prompt, I get the messages "The Print Spooler service is
>> > starting.
>> > The Print Spooler service was started successfully." But when I next go
>> > to
>> > Printers and Faxes and click Add Printer, I get the message "Operation
>> > could
>> > not be completed. The print spooler service is not running."
>> >
>> > I tried a couple of variations -
>> > 1) Cold boot, then enter "net start spooler" at the command prompt.
>> > Same
>> > result.
>> > 2) Uninstall the software for that HP1312 printer, and cold boot after
>> > finishing the uninstall with its associated restarts. Enter "net start
>> > spooler" after the cold boot. Same result.
>> >
>> > Where do I go from here?
>> >
>> > TIA,
>> >
>> > Sharon
>> >
>> > "Alan Morris [MSFT]" wrote:
>> >
>> >> You will need to start the Printer Spooler service
>> >>
>> >> in Services.msc or at a command prompt
>> >> net start spooler
>> >>
>> >>
>> >> most spooler failures are caused when print drivers corrupt the memory
>> >> of
>> >> the process.
>> >> --
>> >> Alan Morris
>> >> Windows Printing Team
>> >> Search the Microsoft Knowledge Base here:
>> >> http://support.microsoft.com/search/?adv=1 >> >>
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >> "SharonW" wrote in message
>> >> >> >> >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and
>> >> >1
>> >> >G
>> >> >of
>> >> > memory. I have two 149 G drives, each with about 63G of free space.
>> >> > When I
>> >> > started the system this morning, Windows displayed a message headed
>> >> > "Data
>> >> > Execution Prevention" and reading "To help protect your computer,
>> >> > Windows
>> >> > has
>> >> > closed this program. Name: Spooler Subsystem App Publisher:
>> >> > Microsoft
>> >> > Corporation".
>> >> >
>> >> > All of my printers - 2 local and 2 networked - have disappeared, and
>> >> > when
>> >> > I
>> >> > try to reinstall them Windows displays the message "Operation could
>> >> > not
>> >> > be
>> >> > completed. The print spooler service is not running."
>> >> >
>> >> > Everything seemed to be working normally yesterday.
>> >> >
>> >> > I ran a full virus scan after getting this error - it says the
>> >> > system
>> >> > is
>> >> > clean.
>> >> >
>> >> > The formerly installed printers are -
>> >> > 1) HP2200 on LPT1 - this was set to allow shared access since
>> >> > several
>> >> > users
>> >> > need to print to it
>> >> > 2) Xerox Phaser 6250 on USB
>> >> > 3) HP4000 on an internal IP address
>> >> > 4) HP1312 on an internal IP address
>> >> > Printers 1, 2, and 3 have been installed on this system for several
>> >> > years.
>> >> > I
>> >> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its
>> >> > primary
>> >> > user
>> >> > was getting error messages from it. I don't think I'll reinstall
>> >> > it...
>> >> >
>> >> > There are 35 other systems in use in this building, and since no one
>> >> > has
>> >> > phoned me for support I believe my system is the only one showing
>> >> > this
>> >> > problem.
>> >> >
>> >> > How can I get my printing to work again?
>> >>
>> >>
>> >>
>>
>>
>>
(Msg. 8) Posted: Thu Jan 22, 2009 7:41 am
Post subject: Re: Spooler Subsystem App closed by Data Execution Prevention [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
YAY!! I think that did it!!
When I ran ntsd as instructed, after I typed "k" the system displayed:
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00abe75c 00000000 HpTctMon +0x5d71
Just before ntsd paused and let me type "k", it displayed:
***WARNING: Unable to verify checksum for c:\windows\system32\HpTcpMon.dll
***ERROR: Symbol file could not be found. Defaulted to export symbols for
c:\windows\system32\HpTcpMon.dll - HpTcpMon+5d71: 10005d71 8901 mov [ecx] eax
ds:0023:00000000=????????
That left me very suspicious of hptcpmon.dll, so I renamed it as
xhptcpmon.dll (to be sure it could be retrieved in case it turned out to be
needed), typed "net start spooler" at the command prompt, and tried to add a
printer.
It worked.
I now have my HP2200 and my usual network printer back and usable. I will
reinstall the Phaser 6250 (when I locate its CD). I will not reinstall the
HP1312 - especially after noting that windows\system32\hptcpmon.dll has the
same date (3-3-2008) as an installer file, HpTcpMon.msi, in the install files
for the HP1312.
Thank you very much - it's been a pretty agonizing process, but at least I
have some idea of how to proceed if one of my users should have similar
problems (God forbid).
"Alan Morris [MSFT]" wrote:
> Okay let's find out what is causing the spooler service to fail.
>
> Launch task manager. On the Processes tab, change the view to include a
> column for PID
>
> open a command window
> type net start spooler
>
> You have one minute to complete the next couple tasks
>
> find spoolsv.exe in task manager, note the PID
>
> in the command window type
> ntsd -p [PID for spoolsv.exe] -g -G
>
>
> press enter and a bunch of module load info will scroll paste.
>
>
> when the process terminates you will see a prompt
> ntdll!DbgBreakPoint:
> 7c822583 cc int 3
> 0:001>
>
>
> type k
>
> hopefully this will indicate which module is failing.
>
> --
> Alan Morris
> Windows Printing Team
> Search the Microsoft Knowledge Base here:
> http://support.microsoft.com/search/?adv=1 >
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "SharonW" wrote in message
> > > Alan - I would LOVE to get the dang spooler running, but no luck so far.
> >
> > (Apologies in advance - this is going to be a long one.)
> >
> > Background detail - I don't think this is related to upgrading from an
> > earlier version of Windows. When I set up systems, I always start with a
> > clean install. Many data files on the pc were brought over from older
> > installations, but this machine started with a freshly formatted drive and
> > an
> > install of Windows XP from scratch.
> >
> > I looked at Bruce's page and proceeded as follows -
> >
> > Installed the Windows Server 2003 Resource Kit
> >
> > Run - cleanspl.exe
> >
> > Got the error 'Unable to create registry key "\\(my system
> > name)\HKEY_LOCAL_MACHINE\system\CurrentControlSet\Control\Print\Printers\Phaser
> > 6250DP". Access is denied.'
> >
> > No, there is no listing in Add/Remove programs for my Xerox Phaser 6250.
> > Yes, there should be a Xerox Phaser 6250 installed.
> >
> > So next I tried regedit, with appropriate fear and trembling.
> >
> > I deleted all keys from
> > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
> > NTx86\Drivers\Version-3, without deleting Version-3 itself. (Version-2 was
> > not present.)
> >
> > At the command prompt, I entered net stop spooler, then net start spooler.
> >
> > Next Windows Explorer - c:\windows\system32\spool\printers was empty. I
> > deleted everything from c:\windows\system32\spool\drivers\w32x86\3, and
> > everything else that was in the w32x86 folder except for folder "3".
> >
> > Back to the command prompt - net stop spooler, net start spooler. (Yes, I
> > hit enter and allowed time for a response after each of those two
> > commands.)
> >
> > Add Printer
> >
> > Operation could not be completed. The print spooler service is not
> > running.
> > (The usual error I've been getting.)
> >
> > I restarted the system, then restarted the print spooler again. Tried to
> > add
> > a printer - Operation could not be completed. I went to services.msc (so I
> > could watch when things happened) and started the (stopped) print spooler,
> > then tried once more to add a printer - the spooler stopped a few seconds
> > later and I got the usual error message.
> >
> > Help! Is there anything else I can do?
> >
> > Thanks for your trouble,
> >
> > Sharon
> >
> > "Alan Morris [MSFT]" wrote:
> >
> >> the service starts until it loads something (of fails to load something)
> >> which corrupts the spooler memory and terminates.
> >>
> >> If you are interested in debugging the process and determining which file
> >> is
> >> causing the problem we can go there but most people would rather just get
> >> the dang spooler running again.
> >>
> >>
> >> Bruce has some useful information on cleaning out the print drivers.
> >> http://members.shaw.ca/bsanders/CleanPrinterDrivers.htm > >> --
> >> Alan Morris
> >> Windows Printing Team
> >> Search the Microsoft Knowledge Base here:
> >> http://support.microsoft.com/search/?adv=1 > >>
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> "SharonW" wrote in message
> >> > >> > Thanks, Alan - but it doesn't work. When I type "net start spooler" at
> >> > the
> >> > command prompt, I get the messages "The Print Spooler service is
> >> > starting.
> >> > The Print Spooler service was started successfully." But when I next go
> >> > to
> >> > Printers and Faxes and click Add Printer, I get the message "Operation
> >> > could
> >> > not be completed. The print spooler service is not running."
> >> >
> >> > I tried a couple of variations -
> >> > 1) Cold boot, then enter "net start spooler" at the command prompt.
> >> > Same
> >> > result.
> >> > 2) Uninstall the software for that HP1312 printer, and cold boot after
> >> > finishing the uninstall with its associated restarts. Enter "net start
> >> > spooler" after the cold boot. Same result.
> >> >
> >> > Where do I go from here?
> >> >
> >> > TIA,
> >> >
> >> > Sharon
> >> >
> >> > "Alan Morris [MSFT]" wrote:
> >> >
> >> >> You will need to start the Printer Spooler service
> >> >>
> >> >> in Services.msc or at a command prompt
> >> >> net start spooler
> >> >>
> >> >>
> >> >> most spooler failures are caused when print drivers corrupt the memory
> >> >> of
> >> >> the process.
> >> >> --
> >> >> Alan Morris
> >> >> Windows Printing Team
> >> >> Search the Microsoft Knowledge Base here:
> >> >> http://support.microsoft.com/search/?adv=1 > >> >>
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> rights.
> >> >>
> >> >> "SharonW" wrote in message
> >> >> > >> >> >I am running XP Pro with SP3 on a system with a 3.2 Mhz processor and
> >> >> >1
> >> >> >G
> >> >> >of
> >> >> > memory. I have two 149 G drives, each with about 63G of free space.
> >> >> > When I
> >> >> > started the system this morning, Windows displayed a message headed
> >> >> > "Data
> >> >> > Execution Prevention" and reading "To help protect your computer,
> >> >> > Windows
> >> >> > has
> >> >> > closed this program. Name: Spooler Subsystem App Publisher:
> >> >> > Microsoft
> >> >> > Corporation".
> >> >> >
> >> >> > All of my printers - 2 local and 2 networked - have disappeared, and
> >> >> > when
> >> >> > I
> >> >> > try to reinstall them Windows displays the message "Operation could
> >> >> > not
> >> >> > be
> >> >> > completed. The print spooler service is not running."
> >> >> >
> >> >> > Everything seemed to be working normally yesterday.
> >> >> >
> >> >> > I ran a full virus scan after getting this error - it says the
> >> >> > system
> >> >> > is
> >> >> > clean.
> >> >> >
> >> >> > The formerly installed printers are -
> >> >> > 1) HP2200 on LPT1 - this was set to allow shared access since
> >> >> > several
> >> >> > users
> >> >> > need to print to it
> >> >> > 2) Xerox Phaser 6250 on USB
> >> >> > 3) HP4000 on an internal IP address
> >> >> > 4) HP1312 on an internal IP address
> >> >> > Printers 1, 2, and 3 have been installed on this system for several
> >> >> > years.
> >> >> > I
> >> >> > installed the HP1312 on Tuesday Jan 13 to troubleshoot why its
> >> >> > primary
> >> >> > user
> >> >> > was getting error messages from it. I don't think I'll reinstall
> >> >> > it...
> >> >> >
> >> >> > There are 35 other systems in use in this building, and since no one
> >> >> > has
> >> >> > phoned me for support I believe my system is the only one showing
> >> >> > this
> >> >> > problem.
> >> >> >
> >> >> > How can I get my printing to work again?
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
All times are: Eastern Time (US & Canada) (change) Goto page 1, 2
Page 1 of 2
You can post new topics in this forum You can reply to topics in this forum You can edit your posts in this forum You can delete your posts in this forum You can vote in polls in this forum