Jump to content

UxTheme Signature Bypass


bigmuscle

Recommended Posts


9 hours ago, bigmuscle said:

In Windows' power settings.

No, it is not changing anything. Just minute ago i disabled Fast Startup at my note in Windows power settings, disable App_Init... and placed UxTSB.dll in the folder with DWMGlas.dll. Then I restarted note. Now I have neverending logging into Windows...

Link to comment
Share on other sites

I noticed the similar problem as CKyHC once, it occurred around Christmas time, I would get the usual spinning circle indicating logging in, then, instead of desktop showing up, I'm thrown back to the login screen, having to enter the password. I usually don't have to since I have auto-login enabled for my account. There is the same VirtualAllocEx error logged at said time frame.

Cold vs fast startup doesn't change anything either, would probably have to keep rebooting PC (for cold startup to be effective) or turning it off and on again (for fast startup to be effective) all day before the bug would occur again, if at all.

Link to comment
Share on other sites

The problem seems to be obvious. It fails to inject UxTSB.dll for some reason and thus the custom theme crashes. The question is why it fails.

Auto-login is enabled via "control userpasswords2" or you just have account without password?

Link to comment
Share on other sites

2 hours ago, bigmuscle said:

The problem seems to be obvious. It fails to inject UxTSB.dll for some reason and thus the custom theme crashes. The question is why it fails.

Auto-login is enabled via "control userpasswords2" or you just have account without password?

Maybe it injects too late or too early? On my main comp with SSD login fails only if quick enter password. If I wait 1-2 sec or slowly enter my password - login succesfull. On note with HDD I can't login at all.

Link to comment
Share on other sites

On 9. 1. 2017 at 8:09 PM, CKyHC said:

Maybe it injects too late or too early? On my main comp with SSD login fails only if quick enter password. If I wait 1-2 sec or slowly enter my password - login succesfull. On note with HDD I can't login at all.

It may be the reason. The same situation (infinite login loop) happens when aerohost is not running at all.

Link to comment
Share on other sites

2 hours ago, bigmuscle said:

It may be the reason. The same situation (infinite login loop) happens when aerohost is not running at all.

No, I don't think so. In debug.log is present starting of DWMGlass.dll injecting. I think that aerohost.exe must to start after winlogon.exe, and if aerohost.exe starts before winlogon.exe - injects DWMGlass.dll into dwm, didn't find winlogon, after that winlogon.exe runs without UxtSB injected. May be aerohost.exe better run as service?

Edited by CKyHC
Link to comment
Share on other sites

Is there any difference between older UxTSB64.dll and newer UxTSB.dll besides compilation date? If not, then I suppose I'm not missing out on anything by using older UxTSB32.dll renamed to UxTSB.dll to utilize new injection method on my 32-bit system. It does seem to work, can't reproduce that DLL injection failure bug on that machine neither.

Link to comment
Share on other sites

Here's a weird one...

As of late last night my Win 10 test system, on which I'm running the Sagorpirbd Aero7 theme, stopped using my theme atlas replacement file for everything.  Thing is, I had been running the released 1.5.2 Aero Glass software for several days successfully. 

The only change to my system is that I added a couple more disks to my RAID array that holds all my VMs so the disk access speed underpinning the VM might be a little different, changing the timing of the bootup.

It seems the theme atlas is at least SOMEWHAT used because it's actually working for Modern windows (e.g., Settings, see the screen grab), and for title glow backing (which is dark colored in my theme atlas replacement).

AfterBootup.png

If I just add a space after the end of the theme atlas file then delete it, the replacement theme atlas is properly loaded everywhere.

AfterReselectingAtlasName.png

Here's the pertinent portion of debug.log, for which I upped the logging level...

Spoiler

[2017-01-11 12:04:11][0x764:0x768] Machine ID: <REDACTED>
[2017-01-11 12:04:11][0x764:0x768] Checking key <redacted> for ID <REDACTED>...
[2017-01-11 12:04:11][0x764:0x768] Installing DWM hook...
[2017-01-11 12:04:11][0x764:0x768] User: SYSTEM
[2017-01-11 12:04:11][0x764:0x768] Module: C:\AeroGlass\DWMGlass.dll
[2017-01-11 12:04:11][0x764:0x768] C:\AeroGlass\UxTSB.dll has been injected into winlogon.exe.
[2017-01-11 12:04:12][0x260:0x85C] Machine ID: <REDACTED>
[2017-01-11 12:04:12][0x260:0x85C] Checking key <redacted> for ID <REDACTED>...
[2017-01-11 12:04:12][0x260:0x85C] Hook (USER32.dll!DrawTextW from udwm.dll) installed
[2017-01-11 12:04:12][0x260:0x85C] Hook (GDI32.dll!CreateBitmap from udwm.dll) installed
[2017-01-11 12:04:12][0x260:0x85C] Hook (GDI32.dll!CreateRoundRectRgn from udwm.dll) installed
[2017-01-11 12:04:12][0x260:0x85C] Aero Glass for Win8.1+ 1.5.2.848 x64 correctly loaded (C:\AeroGlass\DWMGlass.dll).
[2017-01-11 12:04:12][0x764:0x768] C:\AeroGlass\DWMGlass.dll has been injected into dwm.exe.
[2017-01-11 12:04:12][0x260:0x87C] DBGHELP: Symbol Search Path: .;SRV*C:\AeroGlass\symbols*http://msdl.microsoft.com/download/symbols
[2017-01-11 12:04:12][0x260:0x87C] Loading settings (flags = 0x3) from HKEY 0x0000000000000000 for session #1
[2017-01-11 12:04:12][0x260:0x87C] dwmcore.dll version 10.0.14393.479
[2017-01-11 12:04:12][0x260:0x87C] udwm.dll version 10.0.14393.0
[2017-01-11 12:04:16][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:16][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:16][0x260:0x33C] Message 0x46, wparam = 0, lparam = 820678490528
[2017-01-11 12:04:16][0x260:0x33C] Message 0x83, wparam = 1, lparam = 820678490480
[2017-01-11 12:04:16][0x260:0x33C] Message 0x47, wparam = 0, lparam = 820678490528
[2017-01-11 12:04:16][0x260:0x33C] Message 0x320, wparam = 723067187, lparam = 1
[2017-01-11 12:04:16][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:16][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:16][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:16][0x260:0x33C] Message 0x31B, wparam = 0, lparam = 0
[2017-01-11 12:04:16][0x260:0x33C] Message 0x31A, wparam = 27066370, lparam = 1
[2017-01-11 12:04:16][0x260:0x33C] Loading settings (flags = 0x4) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:16][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:16][0x260:0x33C] Atlas resource loaded (custom: C:\AeroGlass\RoundedCorners.png)
[2017-01-11 12:04:16][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:04:16][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:04:16][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:04:16][0x260:0x33C] Message 0x320, wparam = 723067187, lparam = 1
[2017-01-11 12:04:16][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:16][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:16][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:17][0x260:0x33C] Message 0x1A, wparam = 24, lparam = 820678490568
[2017-01-11 12:04:17][0x260:0x33C] Message 0x320, wparam = 3813895847, lparam = 1
[2017-01-11 12:04:17][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:17][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:17][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:17][0x260:0x33C] Message 0x1A, wparam = 0, lparam = 820678490536
[2017-01-11 12:04:17][0x260:0x33C] Message 0x320, wparam = 3813895847, lparam = 1
[2017-01-11 12:04:17][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:17][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:17][0x260:0x33C] Message 0x320, wparam = 7378145, lparam = 1
[2017-01-11 12:04:17][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:04:17][0x260:0x33C] Settings reloaded
[2017-01-11 12:04:17][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:17][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:17][0xF80:0xF98] Machine ID: <REDACTED>
[2017-01-11 12:04:17][0xF80:0xF98] Checking key <redacted> for ID <REDACTED>...
[2017-01-11 12:04:17][0xF80:0xF98] DllGetClassObject CLSID {DDC05A5A-351A-4E06-8EAF-54EC1BC2DCEA}, IID {00000001-0000-0000-C000-000000000046}
[2017-01-11 12:04:17][0xF80:0xF98] Hook (USER32.dll!CreateWindowInBandEx from ApplicationFrame.dll) installed
[2017-01-11 12:04:17][0xF80:0xF98] Delayed hook (ext-ms-win-ntuser-window-l1-1-1.dll!CreateWindowExW from ApplicationFrame.dll) installed
[2017-01-11 12:04:17][0xF80:0xF98] Hook (GDI32.dll!StretchDIBits from ApplicationFrame.dll) installed
[2017-01-11 12:04:17][0x260:0x33C] Message 0xC0D1, wparam = 0, lparam = 0
[2017-01-11 12:04:17][0xF80:0xF98] DllGetClassObject CLSID {DDC05A5A-351A-4E06-8EAF-54EC1BC2DCEA}, IID {00000001-0000-0000-C000-000000000046}
[2017-01-11 12:04:19][0x260:0x33C] Message 0xC074, wparam = 0, lparam = 0
[2017-01-11 12:04:19][0x260:0x33C] Message 0x7E, wparam = 32, lparam = 78645120
[2017-01-11 12:04:19][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:04:19][0x260:0x33C] Message 0x1A, wparam = 0, lparam = 0
[2017-01-11 12:04:19][0x764:0x768] C:\AeroGlass\UxTSB.dll has been injected into explorer.exe.
[2017-01-11 12:04:33][0x260:0x4A8] Allocating class CBlurEffect for D2D 0x000001F74FCDD640
[2017-01-11 12:04:33][0x260:0x4A8] Allocating blur buffer 192 x 192 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:33][0x260:0x4A8] Allocating class CGlassSafetyZoneLayer for D2D 0x000001F74FCDD640
[2017-01-11 12:04:33][0x260:0x4A8] Allocating glass safety zone 192 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:33][0x260:0x4A8] Allocating glass safety zone 8 x 192 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:33][0x260:0x4A8] Allocating glass safety zone 8 x 192 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:33][0x260:0x4A8] Allocating glass safety zone 192 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:34][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:34][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:39][0x260:0x4A8] Allocating blur buffer 294 x 192 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:39][0x260:0x4A8] Allocating glass safety zone 8 x 384 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:39][0x260:0x4A8] Allocating glass safety zone 8 x 384 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:39][0x260:0x4A8] Allocating blur buffer 384 x 192 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:41][0x260:0x4A8] Allocating blur buffer 614 x 554 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:41][0x260:0x4A8] Allocating glass safety zone 8 x 768 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:41][0x260:0x4A8] Allocating glass safety zone 8 x 768 (D2D 0x000001F74FCDD640)
[2017-01-11 12:04:41][0x260:0x4A8] Allocating blur buffer 768 x 576 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:18][0x308:0x304] Machine ID: <REDACTED>
[2017-01-11 12:05:18][0x308:0x304] Checking key <redacted> for ID <REDACTED>...
[2017-01-11 12:05:18][0x308:0x304] DllGetClassObject CLSID {DDC05A5A-351A-4E06-8EAF-54EC1BC2DCEA}, IID {00000001-0000-0000-C000-000000000046}
[2017-01-11 12:05:18][0x308:0x304] Hook (USER32.dll!CreateWindowInBandEx from ApplicationFrame.dll) installed
[2017-01-11 12:05:18][0x308:0x304] Delayed hook (ext-ms-win-ntuser-window-l1-1-1.dll!CreateWindowExW from ApplicationFrame.dll) installed
[2017-01-11 12:05:18][0x308:0x304] Hook (GDI32.dll!StretchDIBits from ApplicationFrame.dll) installed
[2017-01-11 12:05:18][0x308:0x7A8] Loading settings (flags = 0x3) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:05:18][0x308:0x7A8] Settings reloaded
[2017-01-11 12:05:18][0x308:0x7A8] Loading settings (flags = 0x4) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:05:18][0x308:0x7A8] Settings reloaded
[2017-01-11 12:05:18][0x308:0x7A8] Message window 0x000000000005009C: 0
[2017-01-11 12:05:18][0x308:0x7A8] Atlas resource loaded (custom: C:\AeroGlass\RoundedCorners.png)
[2017-01-11 12:05:18][0x308:0x7A8] DBGHELP: Symbol Search Path: .;SRV*C:\AeroGlass\symbols*http://msdl.microsoft.com/download/symbols
[2017-01-11 12:05:18][0x308:0x7A8] ApplicationFrame.dll version 10.0.14393.0
[2017-01-11 12:05:18][0x308:0x7A8] Symbols loaded from patterns: 0x7
[2017-01-11 12:05:18][0x308:0x7A8] Loading settings (flags = 0x6) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:05:18][0x308:0x7A8] Settings reloaded
[2017-01-11 12:05:18][0x260:0x4A8] Allocating blur buffer 808 x 811 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:18][0x260:0x4A8] Allocating glass safety zone 8 x 960 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:18][0x260:0x4A8] Allocating glass safety zone 8 x 960 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:18][0x260:0x4A8] Allocating blur buffer 960 x 960 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:27][0x260:0x4A8] Allocating class CGlassSafetyZoneLayer for D2D 0x000001F74FCDD640
[2017-01-11 12:05:27][0x260:0x4A8] Allocating glass safety zone 768 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:27][0x260:0x4A8] Allocating glass safety zone 8 x 768 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:27][0x260:0x4A8] Allocating glass safety zone 8 x 768 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:27][0x260:0x4A8] Allocating glass safety zone 768 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:28][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:28][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:51][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:05:51][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:10][0x260:0x33C] Message 0x219, wparam = 7, lparam = 0
[2017-01-11 12:06:10][0x260:0x33C] Message 0x219, wparam = 7, lparam = 0
[2017-01-11 12:06:11][0x260:0x33C] Message 0x1A, wparam = 0, lparam = 820678490568
[2017-01-11 12:06:11][0x260:0x33C] Message 0x219, wparam = 7, lparam = 0
[2017-01-11 12:06:11][0x260:0x33C] Message 0x219, wparam = 7, lparam = 0
[2017-01-11 12:06:11][0x260:0x33C] Message 0x1A, wparam = 0, lparam = 820678490568
[2017-01-11 12:06:19][0x260:0x4A8] Allocating glass safety zone 8 x 960 (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:19][0x260:0x4A8] Allocating glass safety zone 8 x 960 (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:45][0x260:0x4A8] Allocating blur buffer 808 x 1001 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:45][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:45][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:06:45][0x260:0x4A8] Allocating blur buffer 960 x 1152 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:07:00][0x260:0x4A8] Allocating glass safety zone 8 x 1200 (D2D 0x000001F74FCDD640)
[2017-01-11 12:07:00][0x260:0x4A8] Allocating glass safety zone 8 x 1200 (D2D 0x000001F74FCDD640)
[2017-01-11 12:07:29][0x764:0x768] C:\AeroGlass\UxTSB.dll has been injected into explorer.exe.
[2017-01-11 12:07:30][0x260:0x33C] Message 0xC1C2, wparam = 0, lparam = 0
[2017-01-11 12:07:30][0x260:0x4A8] Allocating blur buffer 1653 x 1001 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:07:30][0x260:0x4A8] Allocating blur buffer 1728 x 1152 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:17][0x260:0x4A8] Allocating glass safety zone 8 x 1200 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:17][0x260:0x4A8] Allocating glass safety zone 8 x 1200 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating class CGlassSafetyZoneLayer for D2D 0x000001F74FCDD640
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 8 x 192 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 8 x 192 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 1920 x 8 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 8 x 576 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:19][0x260:0x4A8] Allocating glass safety zone 8 x 576 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:20][0x260:0x33C] Message 0x31A, wparam = 0, lparam = 0
[2017-01-11 12:14:20][0x260:0x33C] Loading settings (flags = 0x4) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:14:20][0x260:0x33C] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Atlas resource loaded (custom: C:\AeroGlass\RoundedCorners.png )
[2017-01-11 12:14:20][0x260:0x33C] Failed to load custom atlas layout (0x2 - The system cannot find the file specified.), using system theme layout...
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x308:0x7A8] Loading settings (flags = 0x6) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:14:20][0x308:0x7A8] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Message 0x320, wparam = 723067187, lparam = 1
[2017-01-11 12:14:20][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:14:20][0x260:0x33C] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:14:20][0x308:0x7A8] Loading settings (flags = 0x6) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:14:20][0x308:0x7A8] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Message 0x31A, wparam = 0, lparam = 0
[2017-01-11 12:14:20][0x260:0x33C] Loading settings (flags = 0x4) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:14:20][0x260:0x33C] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Atlas resource loaded (custom: C:\AeroGlass\RoundedCorners.png)
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x260:0x4A0] GetThemeStream 0,0,213
[2017-01-11 12:14:20][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:14:20][0x260:0x33C] Message 0x320, wparam = 723067187, lparam = 1
[2017-01-11 12:14:20][0x260:0x33C] Loading settings (flags = 0x2) from HKEY 0x0000000000000384 for session #1
[2017-01-11 12:14:20][0x260:0x33C] Settings reloaded
[2017-01-11 12:14:20][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:14:20][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:20][0x260:0x4A8] Allocating glass safety zone 8 x 1152 (D2D 0x000001F74FCDD640)
[2017-01-11 12:14:20][0x308:0x7A8] Loading settings (flags = 0x6) from HKEY 0x0000000000000228 for session #1
[2017-01-11 12:14:20][0x260:0x33C] Message 0x15, wparam = 0, lparam = 0
[2017-01-11 12:20:49][0x260:0x33C] Message 0x1E, wparam = 0, lparam = 0
[2017-01-11 12:20:49][0x260:0x33C] Message 0x1E, wparam = 0, lparam = 0
[2017-01-11 12:26:30][0x260:0x33C] Message 0xC1E3, wparam = 269484032, lparam = 1
[2017-01-11 12:26:31][0x260:0x33C] Message 0xC1E3, wparam = 269484032, lparam = 2
[2017-01-11 12:26:35][0x260:0x4A8] Allocating blur buffer 1859 x 1118 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:27:34][0x260:0x4A8] Allocating blur buffer 1859 x 1198 [pixelFormat: 87, 1]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:27:34][0x260:0x4A8] Allocating blur buffer 1920 x 1200 [pixelFormat: 87, 3]  (D2D 0x000001F74FCDD640)
[2017-01-11 12:28:03][0x260:0x33C] Message 0xC27A, wparam = 2, lparam = 0

Edit:  Additional information...

I restored the VM from a snapshot I took right after the cumulative update that brought Windows to 14393.576.  Then I reinstalled Aero Glass 1.5.2 from the "manual update" by replacing the various files (as I had done before).  Now it loads the theme and theme atlas successfully after reboot.  One thing I DIDN'T do was re-register the DLLs.

I did notice that a minidump has shown up in the folder, though...  Not sure why, since I didn't really see any issue.  Here it is:

http://Noel.ProDigitalSoftware.com/temp/minidump-01-11-13-29-55.zip

-Noel

Edited by NoelC
Link to comment
Share on other sites

  • 2 weeks later...

@NoelC
Your minidump says Explorer crashed for some reason. ClassicStartMenuDLL.dll is the only external module I can see somewhere down in the call stack. I'm curious, do you have the option "Launch folder windows in a separate process" enabled? (Control Panel->File Explorer Options) I've been using this option for few days now and it seems to help preventing the crashes at first glance, or at least delaying them so they don't occur with my usage pattern.

When they would occur, it almost always happens when I interact with Explorer in some way, one example is minimizing one of the Explorer Windows then clicking the Start button. Though it doesn't happen necessarily only with Start button, one thing is certain, a lot of times, my mouse is somewhere on the taskbar when it crashes. Running virtual machine in the VMware seems to increase crash frequency, it happened few times while I was in the virtual machine.

Link to comment
Share on other sites

That the minidump was in the AeroGlass folder implies it has to do with Aero Glass.  I haven't had it happen again.

Yes, I do have "Launch folder windows in a separate process".  That has always given a better experience in my observations.

-Noel

Edited by NoelC
Link to comment
Share on other sites

I see, it's been a while since I used that option, I guess because things haven't been as crashy as much as they are now so i left it as it is. You got the minidump in Aero Glass folder simply because DWMGlass.dll has that functionality and is sitting in explorer.exe. You can use SetUnhandledExceptionFilter function to specify the crash handler that will be called by the system when the process crashes. From there, you call MiniDumpWriteDump. http://stackoverflow.com/questions/5028781/how-to-write-a-sample-code-that-will-crash-and-produce-dump-file That crash could be caused by anything.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...