.NET Framework woes. (now Trusteer Rapport)

All about the program

Re: .NET Framework woes.

Postby Doddie » 03 Aug 2017, 20:55

Log Name: Application
Source: Application Error
Date: 28/07/2017 12:00:53
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Doddie-PC
Description:
Faulting application name: VideoThumbnailsMaker.exe, version: 10.0.0.1, time stamp: 0x59627b97
Faulting module name: gdiplus.dll, version: 6.1.7601.23807, time stamp: 0x5915f8d7
Exception code: 0xc0000005
Fault offset: 0x001147c6
Faulting process id: 0x13d0
Faulting application start time: 0x01d30781a9cc315c
Faulting application path: D:\Video Thumbnails Maker\VideoThumbnailsMaker.exe
Faulting module path: C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_5c02a265a011fb02\gdiplus.dll
Report Id: 05a6636b-7384-11e7-b1a5-408d5c8226f8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-07-28T11:00:53.000000000Z" />
<EventRecordID>28350</EventRecordID>
<Channel>Application</Channel>
<Computer>Doddie-PC</Computer>
<Security />
</System>
<EventData>
<Data>VideoThumbnailsMaker.exe</Data>
<Data>10.0.0.1</Data>
<Data>59627b97</Data>
<Data>gdiplus.dll</Data>
<Data>6.1.7601.23807</Data>
<Data>5915f8d7</Data>
<Data>c0000005</Data>
<Data>001147c6</Data>
<Data>13d0</Data>
<Data>01d30781a9cc315c</Data>
<Data>D:\Video Thumbnails Maker\VideoThumbnailsMaker.exe</Data>
<Data>C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23807_none_5c02a265a011fb02\gdiplus.dll</Data>
<Data>05a6636b-7384-11e7-b1a5-408d5c8226f8</Data>
</EventData>
</Event>
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes.

Postby Doddie » 03 Aug 2017, 20:56

Log Name: Application
Source: Windows Error Reporting
Date: 28/07/2017 12:00:58
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Doddie-PC
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: VideoThumbnailsMaker.exe
P2: 10.0.0.1
P3: 59627b97
P4: gdiplus.dll
P5: 6.1.7601.23807
P6: 5915f8d7
P7: c0000005
P8: 001147c6
P9:
P10:

Attached files:

These files may be available here:
C:\Users\Doddie\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_VideoThumbnailsM_c1529ac0536a1578a1e11c11a12eb6be2b4fd391_1993d6ff

Analysis symbol:
Rechecking for solution: 0
Report Id: 05a6636b-7384-11e7-b1a5-408d5c8226f8
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-07-28T11:00:58.000000000Z" />
<EventRecordID>28351</EventRecordID>
<Channel>Application</Channel>
<Computer>Doddie-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>VideoThumbnailsMaker.exe</Data>
<Data>10.0.0.1</Data>
<Data>59627b97</Data>
<Data>gdiplus.dll</Data>
<Data>6.1.7601.23807</Data>
<Data>5915f8d7</Data>
<Data>c0000005</Data>
<Data>001147c6</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\Users\Doddie\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_VideoThumbnailsM_c1529ac0536a1578a1e11c11a12eb6be2b4fd391_1993d6ff</Data>
<Data>
</Data>
<Data>0</Data>
<Data>05a6636b-7384-11e7-b1a5-408d5c8226f8</Data>
<Data>0</Data>
</EventData>
</Event>
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes.

Postby Doddie » 04 Aug 2017, 21:07

Well, after finding and running the ".NET Framework Setup Verification Tool" I've decided that .NET may not have been the problem after all as all the versions on my PC passed without a single issue... how I've got .NET framework 2.0 SP2 on my system though is beyond me, but with no option (apparently) available to uninstall it I'm stuck with it.. i'll probably format and re-install Windows over the weekend (if time permits).
cf. https://blogs.msdn.microsoft.com/astebn ... ers-guide/

Fwiw, the versions the tool above found were:
2.0 SP2
3.0 SP2
3.5 SP1
4 Client
4 Full
4.5
4.5.1
4.6
4.6.1
4.6.2
4.7

I removed all that i could again earlier and ran the tool above, all that was then listed was 2.0 SP2

I then re-enabled 3.5.1 in Control Panel > Programs and Features > Turn Windows features on or off > Microsoft .NET Framework 3.5.1, re-booted.
Ran Windows Update, chose 4.7 over the other two offered (4.5.1 & 4.6, i think) because it's supposed to be backwards compatible... and the list above is what i got after another reboot.

Anyway, I'm just letting you know the above just in case it proves to be useful because I've exhausted everything i can think of, whilst taking a sledge-hammer to crack a nut (my pc is otherwise stable) does feel a bit extreme it does appear to be my only option as VTM still isn't working like it should which likely means there's an underlying issue in my OS.

Thanks for your time.
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes.

Postby Doddie » 11 Aug 2017, 08:53

I've found out what's been causing VTM to slow down and it ISN'T .Net Framework.

I formatted my drive and as I re-installed my software I checked VTM as I went along...

The culprit is IBM Security Trusteer Rapport:
https://www.trusteer.com/en/support/rap ... tion-links

You were spot on in your suspicion that it might be security software related, to be honest I'd forgotten I had it installed until I went to my banks website and it flagged that I might want to consider installing it.

Anyway, I installed Trusteer and VTM immediately slowed down, as soon as I uninstalled Trusteer VTM speeds returned to normal, I tired this 3 times and every time the results were the same... I've since left Trusteer off my system until there's a resolution for the issue.

I'm unsure who to contact first about this, yourself or Trusteer, but as I'm already in discussion with you it would be appreciated if you can see if you can replicate this at your end... if you can then perhaps you can advise?

I'm running Windows 7 Professional x64, IE11 with Microsoft Security Essentials, Windows Firewall, Malwarebytes Premium 3.1.2, AdGuard 6.2 (Beta).

If you need any further information please ask.
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes.

Postby admin » 11 Aug 2017, 16:36

Congratulations and thank you for your feedback.
I know, that was not an easy thing ti find the reason.

As for Trusteer, I really do not know what should I change, because everything works as it should be.
VTM is obuscated, so, probably Trusteer spends a lot of time and CPU resources analyzing VTM at runtime.
I am not familiar with that tool, is it possible to exclude VTM from Trusteer checks (if you really want to do that)?
Of you could try to decrease the 'level of protection' in Trusteer, to force it to be not so paranoid ;)
Of course, it is up to you to perform that actions, becasue I do not want to harm anything.
User avatar
admin
Site Admin
 
Posts: 398
Joined: 03 Jun 2014, 19:14

Re: .NET Framework woes.

Postby Doddie » 12 Aug 2017, 11:31

Thanks for getting back to me, as far as I can see it's not possible to exclude VTM from Trusteer, there are some settings that can be changed but nothing that I'd have thought would apply to third party software such as yours.

I've sent a report to Trusteer Technical Support detailing what my issue is along with the logs they requested and have just been assigned a case number, i'll let you know how I get on.
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes. (now Trusteer Rapport)

Postby Doddie » Yesterday, 19:12

I thought I'd update where I am on this:

IBM have asked various questions as part of their troubleshooting process, as a result of my answers they asked me to disable "Rapport Cerberus" in safe mode and that seems to be where the problem may be because VTM works as expected when it's disabled.

[Note: I didn't know "Rapport Cerberus" existed, there's no mention of it in the programme UI and the only way to disable it as far as I can tell is with the method they supplied... I won't post here what that method is because it was a troubleshooting step that was possibly specific to my pc, or issue.]

As a result of that finding they have now asked for me to send them my latest Rapport log files... I'm waiting to hear back from them.
Doddie
 
Posts: 18
Joined: 25 Sep 2014, 17:27

Re: .NET Framework woes. (now Trusteer Rapport)

Postby admin » Yesterday, 20:32

Thank you for letting us know about the progress.
User avatar
admin
Site Admin
 
Posts: 398
Joined: 03 Jun 2014, 19:14

Previous

Return to Video Thumbnails Maker

Who is online

Users browsing this forum: No registered users and 3 guests