KernelEx 2022 (Kex22) Test Versions (4.22.26.2)

[MiKl]

Same here unfortunately !!

 

**********************************************************************Datum 01/01/2016 Uhrzeit 19:21RUNONCE verursachte einen Fehler durch eine ungültige Seitein Modul KERNEL32.DLL bei 017f:bff741ca.Register:EAX=c22c1980 CS=017f EIP=bff741ca EFLGS=00010202EBX=928804fc SS=0187 ESP=0063fbd0 EBP=0063fbfcECX=7d00b90d DS=0187 ESI=7fe40000 FS=4407EDX=00000000 ES=0187 EDI=00000000 GS=0000Bytes bei CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08Stapelwerte:7d00b90d 00000000 7fe40000 928804fc bff20000 bff20000 bff741f7 928804b9 00000000 bffcd4c0 928817d4 0063fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000**********************************************************************Datum 01/01/2016 Uhrzeit 19:21EXPLORER verursachte einen Fehler durch eine ungültige Seitein Modul KERNEL32.DLL bei 017f:bff741ca.Register:EAX=c22b9840 CS=017f EIP=bff741ca EFLGS=00010202EBX=928806d8 SS=0187 ESP=0059fbd0 EBP=0059fbfcECX=7d00b90d DS=0187 ESI=7fe40000 FS=50bfEDX=00000000 ES=0187 EDI=00000000 GS=0000Bytes bei CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08Stapelwerte:7d00b90d 00000000 7fe40000 928806d8 bff20000 bff20000 bff741f7 92880695 00000000 bffcd4c0 9287fab8 0059fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000**********************************************************************Datum 01/01/2016 Uhrzeit 19:22RUNDLL32 verursachte einen Fehler durch eine ungültige Seitein Modul KERNEL32.DLL bei 017f:bff741ca.Register:EAX=c22c6000 CS=017f EIP=bff741ca EFLGS=00010202EBX=9288165c SS=0187 ESP=0063fbd0 EBP=0063fbfcECX=7d00b90d DS=0187 ESI=7fe40000 FS=0fcfEDX=00000000 ES=0187 EDI=00000000 GS=0000Bytes bei CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08Stapelwerte:7d00b90d 00000000 7fe40000 9288165c bff20000 bff20000 bff741f7 92881619 00000000 bffcd4c0 92881494 0063fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000

[Dave-H]

I'm not seeing the error message about RUNDLL32, but the first two appear to be the same errors I'm seeing.

The system stops loading before any third one appears after I dismiss the first two.

[loblo]

Me too, same crashes.

[jumper]

I don't have ME, so you need to tell us what Kernel32 API "0177:bff641a2" is in. "DumpPE -disasm Kernel32.dll" will help. If the code doesn't appear to be in an exported function, check the call stack for an address that is.

In SE, bff741a2 is in the function:

BFF74176                    fn_BFF74176:                ; Xref BFF7C9C9 BFF87CFC

So I would check the call stack for addresses about five (the length of a typical call instruction) higher: BFF7C9CE, BFF87D01. Keep doing the same until you find an exported API.

[loblo]

In ME, bff641a2is in the function:

BFF64198                    fn_BFF64198:                ; Xref BFF627E2 BFF628C0 BFF6296D BFF62A6B

Searching for  BFF627E2 I find the function  QT_Thunk

Searching for  BFF6296D I find the function  FT_ Thunk

Searching to the two other Xref leads to nothing meaninful for me.

 

In any case here is a dump of ME's kernel32.dll: http://filebin.net/6qz65jd0qb

 

Full faultlog for ME btw:

RUNONCE caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b9290 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=83359ba8 SS=017f ESP=0063faf8 EBP=0063fb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3cefEDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 83359ba8 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 833599d8 0063fbcc 7c002e15 7c002cb5 00000094 00000004 **********************************************************************EXPLORER caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b8320 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=83359adc SS=017f ESP=005afaf8 EBP=005afb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3cefEDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 83359adc 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 83357cf4 005afbcc 7c002e15 7c002cb5 00000094 00000004 **********************************************************************RUNDLL32 caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b9290 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=8335dde4 SS=017f ESP=0063faf8 EBP=0063fb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3ce7EDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 8335dde4 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 833594bc 0063fbcc 7c002e15 7c002cb5 00000094 00000004 

[DougB]

I'm getting similar crashes on my "pimped up" 98SE system (U98SESP3x, 98SE2ME, RP9, IEradicator, etc). 

 

For what it's worth, here are my FaultLog dumps (some numbers are different)....

On bootup, these two:

  RUNONCE caused an invalid page fault in  module KERNEL32.DLL at 019f:bff741ca.  Registers:  EAX=c1abb1f0 CS=019f EIP=bff741ca EFLGS=00010202  EBX=8254eb0c SS=01a7 ESP=0063fbd0 EBP=0063fbfc  ECX=7d00b90d DS=01a7 ESI=7fe40000 FS=2ff7  EDX=00000000 ES=01a7 EDI=00000000 GS=0000  Bytes at CS:EIP:  ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08  Stack dump:  7d00b90d 00000000 7fe40000 8254eb0c bff20000 bff20000 bff741f7 8254eac9 00000000 bffcd4c0 8254e890 0063fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000  EXPLORER caused an invalid page fault in  module KERNEL32.DLL at 019f:bff741ca.  Registers:  EAX=c1abcbb0 CS=019f EIP=bff741ca EFLGS=00010202  EBX=8254db10 SS=01a7 ESP=0059fbd0 EBP=0059fbfc  ECX=7d00b90d DS=01a7 ESI=7fe40000 FS=2d3f  EDX=00000000 ES=01a7 EDI=00000000 GS=0000  Bytes at CS:EIP:  ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08  Stack dump:  7d00b90d 00000000 7fe40000 8254db10 bff20000 bff20000 bff741f7 8254dacd 00000000 bffcd4c0 82549980 0059fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000

Only desktop background image is displayed, no desktop icons; but mouse and keyboard are functional.  

Ctrl-Alt-Del > Shut Down yields:

  RUNDLL32 caused an invalid page fault in  module KERNEL32.DLL at 019f:bff741ca.  Registers:  EAX=c1ac48d0 CS=019f EIP=bff741ca EFLGS=00010202  EBX=82552888 SS=01a7 ESP=0063fbd0 EBP=0063fbfc  ECX=7d00b90d DS=01a7 ESI=7fe40000 FS=2ec7  EDX=00000000 ES=01a7 EDI=00000000 GS=0000  Bytes at CS:EIP:  ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08  Stack dump:  7d00b90d 00000000 7fe40000 82552888 bff20000 bff20000 bff741f7 82552845 00000000 bffcd4c0 82549980 0063fdcc 7fe41606 7fe40000 bff7ddd6 7fe40000

- Doug B.

[jumper]

I think I know what change triggered the problem, but am still trying to determine what the actual problem is. I haven't been able to reproduce the problem on my SE system, but it may have to do with what DLL's (names and versions) are dynamically linked to by Kexbasen at load time.

Here is my Taskinfo2000 Process Pane and MPREXE.EXE Current Process Pane (sorted by name) right after a full reboot:

Process PaneID   Process          % CPU    LT % CPU   CPU    Sw/s   InMem KB   Total KB   Th   Pri    Ver   State     Path                                                                                                                                                                                                           + Idle           98.54%   94.52%     3:33   14     0          0          1    Idle   4.0             Idle                                                 + KERNEL32.DLL   0.05%    0.10%             10     32         44         3    High   4.3   32        C:\WINDOWS\SYSTEM\KERNEL32.DLL                       + MSGSRV32.EXE   0.05%    0.04%      0:03   2      52         64         1    Norm   4.0   16 Sys    C:\WINDOWS\SYSTEM\MSGSRV32.EXE                       + MPREXE.EXE                         0:01   0      0          0          1    Norm   4.0   32 Sys    C:\WINDOWS\SYSTEM\MPREXE.EXE                         + mmtask.tsk                                0      0          0          1    Norm   4.0   16 Sys    C:\WINDOWS\SYSTEM\mmtask.tsk                         + EXPLORER.EXE   0.05%    0.07%      0:04   2      1,932      8,064      4    Norm   4.0   32        C:\WINDOWS\EXPLORER.EXE                              + SYSTRAY.EXE                               1      668        2,900      1    Norm   4.0   32        C:\WINDOWS\SYSTEM\SYSTRAY.EXE                        + TASKINFO.EXE   1.23%    4.83%      0:05   13     904        2,840      1    Norm   4.0   32        D:\PROGRAM FILES\TASKINFO\TASKINFO.EXE               + VxD NTKERN     0.05%    0.38%      0:01   22     0          0          7    Norm   4.3             NTKERN                                          Current Process PaneName           Base       Size        Version          Description                                Company                 Full Path                                                                                                                                                                                       ADVAPI32.DLL   BFE80000   65,536      4.80.1675        Win32 ADVAPI32 core component              Microsoft Corporation   C:\WINDOWS\SYSTEM\ADVAPI32.DLL     COMCTL32.DLL   BFB70000   581,632     5.81             Common Controls Library                    Microsoft Corporation   C:\WINDOWS\SYSTEM\COMCTL32.DLL     COMDLG32.DLL   7FE10000   184,320     4.72.3510.2300   Common Dialogs DLL                         Microsoft Corporation   C:\WINDOWS\SYSTEM\COMDLG32.DLL     CRYPT32.DLL    5CF00000   479,232     5.131.1880.14    Crypto API32                               Microsoft Corporation   C:\WINDOWS\SYSTEM\CRYPT32.DLL      CRYPTUI.DLL    61400000   450,560     5.131.1878.14    Microsoft Trust UI Provider                Microsoft Corporation   C:\WINDOWS\SYSTEM\CRYPTUI.DLL      GDI32.DLL      BFF20000   155,648     4.10.2227        Win32 GDI core component                   Microsoft Corporation   C:\WINDOWS\SYSTEM\GDI32.DLL        IMAGEHLP.DLL   7CC00000   118,784     4.00             Windows NT Image Helper                    Microsoft Corporation   C:\WINDOWS\SYSTEM\IMAGEHLP.DLL     IMM32.DLL      BFE20000   16,384      4.10.1998        Win32 IMM32 core component                 Microsoft Corporation   C:\WINDOWS\SYSTEM\IMM32.DLL        KERNEL32.DLL   BFF70000   471,040     4.10.2222        Win32 Kernel core component                Microsoft Corporation   C:\WINDOWS\SYSTEM\KERNEL32.DLL     KERNELEX.DLL   BFA00000   233,472     4.5.2015.11      KernelEx Core with ApiHook                 Xeno86                  C:\WINDOWS\KERNELEX\KERNELEX.DLL   KEXBASEN.DLL   7D000000   118,784     4.5.2015.11      KernelEx Base Non-shared Api Library       Xeno86                  C:\WINDOWS\KERNELEX\KEXBASEN.DLL   KEXBASES.DLL   BFA40000   274,432     4.5.2015.11      KernelEx Base Shared Api Library           Xeno86                  C:\WINDOWS\KERNELEX\KEXBASES.DLL   KSTUB822.DLL   19980000   65,536                                                                                          C:\WINDOWS\KERNELEX\KSTUB822.DLL   LZ32.DLL       BFE60000   24,576      4.10.1998        Win32 LZ32 core component                  Microsoft Corporation   C:\WINDOWS\SYSTEM\LZ32.DLL         MPR.DLL        7FBF0000   57,344      4.10.1998        WIN32 Network Interface DLL                Microsoft Corporation   C:\WINDOWS\SYSTEM\MPR.DLL          MPREXE.EXE     00500000   28,672      4.10.1998        WIN32 Network Interface Service Process    Microsoft Corporation   C:\WINDOWS\SYSTEM\MPREXE.EXE       MPRSERV.DLL    7FAD0000   155,648     4.10.2222        Multinet Router                            Microsoft Corporation   C:\WINDOWS\SYSTEM\MPRSERV.DLL      MSASN1.DLL     77430000   69,632      5.00.2195.6905   ASN.1 Runtime APIs                         Microsoft Corporation   C:\WINDOWS\SYSTEM\MSASN1.DLL       MSNET32.DLL    7FB00000   77,824      4.10.1998        Microsoft 32-bit Network API Library       Microsoft Corporation   C:\WINDOWS\SYSTEM\MSNET32.DLL      MSNP32.DLL     7FB20000   81,920      4.10.2222        Network provider for Microsoft networks    Microsoft Corporation   C:\WINDOWS\SYSTEM\MSNP32.DLL       MSPWL32.DLL    7FB40000   40,960      4.10.1998        Password list management library           Microsoft Corporation   C:\WINDOWS\SYSTEM\MSPWL32.DLL      MSVCR70.DLL    7C000000   344,064     7.00.9981.0      Microsoft® C Runtime Library               Microsoft Corporation   C:\WINDOWS\SYSTEM\MSVCR70.DLL      NTDLL.DLL      BFEE0000   20,480      4.10.1998        Win32 NTDLL core component                 Microsoft Corporation   C:\WINDOWS\SYSTEM\NTDLL.DLL        OLE32.DLL      7FF20000   790,528     4.71.2900        Microsoft OLE for Windows and Windows NT   Microsoft Corporation   C:\WINDOWS\SYSTEM\OLE32.DLL        RPCRT4.DLL     7FB90000   335,872     4.71.2900        Remote Procedure Call DLL                  Microsoft Corporation   C:\WINDOWS\SYSTEM\RPCRT4.DLL       SHELL32.DLL    7FCB0000   1,400,832   4.72.3612.1700   Windows Shell Common Dll                   Microsoft Corporation   C:\WINDOWS\SYSTEM\SHELL32.DLL      SHLWAPI.DLL    70BD0000   278,528     5.00.2614.3500   Shell Light-weight Utility Library         Microsoft Corporation   C:\WINDOWS\SYSTEM\SHLWAPI.DLL      USER32.DLL     BFC00000   69,632      4.10.2233        Win32 USER32 core component                Microsoft Corporation   C:\WINDOWS\SYSTEM\USER32.DLL       USP10.DLL      66650000   344,064     1.0325.2180.1    Uniscribe Unicode script processor         Microsoft Corporation   C:\WINDOWS\SYSTEM\USP10.DLL        VERSION.DLL    BFE70000   24,576      4.10.1998        Win32 VERSION core component               Microsoft Corporation   C:\WINDOWS\SYSTEM\VERSION.DLL      WININET.DLL    76280000   458,752     5.00.2614.3500   Internet Extensions for Win32              Microsoft Corporation   C:\WINDOWS\SYSTEM\WININET.DLL      WINMM.DLL      BFDF0000   65,536      4.03.1998        System APIs for Multimedia                 Microsoft Corporation   C:\WINDOWS\SYSTEM\WINMM.DLL        WINSPOOL.DRV   7FE40000   36,864      4.10.1998        Win32 WINSPOOL core component              Microsoft Corporation   C:\WINDOWS\SYSTEM\WINSPOOL.DRV     WINTRUST.DLL   47600000   172,032     5.131.1880.14    Microsoft Trust Verification APIs          Microsoft Corporation   C:\WINDOWS\SYSTEM\WINTRUST.DLL     WS2_32.DLL     76000000   73,728      4.10.2222        Windows Socket 2.0 32-Bit DLL              Microsoft Corporation   C:\WINDOWS\SYSTEM\WS2_32.DLL       WS2HELP.DLL    75FE0000   24,576      4.10.1998        Windows Socket 2.0 Helper for Windows 98   Microsoft Corporation   C:\WINDOWS\SYSTEM\WS2HELP.DLL      

Please test your systems with the latest version of Kexbasen that will allow you to reach the desktop and report any DLL differences that might be significant. Edited January 2, 2016 by jumper

[schwups]

I can't reach the desktop:

 

latest Kexbasen.dll Release 11

KernelEx.dll  Release 8

Kexbases.dll  Release 8

 

 

 

 

Yesterday I wrote

 

I get three errors Rundll32 in Kernel32.dll on start.

SorryI would better have put on my glasses!:

 

My Faultlog was:

 

Datum 01/01/2016 Uhrzeit 20:04

RUNDLL32 verursachte einen Fehler durch eine ungültige Seite

in Modul KERNEL32.DLL bei 0177:bff641a2.

Register:

EAX=c1a17930 CS=0177 EIP=bff641a2 EFLGS=00010202

EBX=82528948 SS=017f ESP=0063faf8 EBP=0063fb24

ECX=7d00b90d DS=017f ESI=00000a28 FS=2a87

EDX=00000000 ES=017f EDI=00000094 GS=0000

Bytes bei CS:EIP:

ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08

Stapelwerte:

7d00b90d 00000094 00000a28 82528948 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 825286c0 0063fbcc 7c002e15 7c002cb5 00000094 00000005

**********************************************************************

Datum 01/01/2016 Uhrzeit 20:04

RUNONCE verursachte einen Fehler durch eine ungültige Seite

in Modul KERNEL32.DLL bei 0177:bff641a2.

Register:

EAX=c1a25230 CS=0177 EIP=bff641a2 EFLGS=00010202

EBX=8253cca4 SS=017f ESP=0063faf8 EBP=0063fb24

ECX=7d00b90d DS=017f ESI=00008bb8 FS=19d7

EDX=00000000 ES=017f EDI=00000094 GS=0000

Bytes bei CS:EIP:

ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08

Stapelwerte:

7d00b90d 00000094 00008bb8 8253cca4 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 8253ca20 0063fbcc 7c002e15 7c002cb5 00000094 00000004

**********************************************************************

Datum 01/01/2016 Uhrzeit 20:04

EXPLORER verursachte einen Fehler durch eine ungültige Seite

in Modul KERNEL32.DLL bei 0177:bff641a2.

Register:

EAX=c1a0b930 CS=0177 EIP=bff641a2 EFLGS=00010202

EBX=8252dc78 SS=017f ESP=005afaf8 EBP=005afb24

ECX=7d00b90d DS=017f ESI=00008bb8 FS=19d7

EDX=00000000 ES=017f EDI=00000094 GS=0000

Bytes bei CS:EIP:

ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08

Stapelwerte:

7d00b90d 00000094 00008bb8 8252dc78 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 825286c0 005afbcc 7c002e15 7c002cb5 00000094 00000004

Edited January 3, 2016 by schwups

[loblo]

It's ME so most dlls are different but here goes anyway with kexbasen.dll v10 (which is not fully useable due to issues reported previously):

[Process Pane]|Process|            |% CPU| |LT % CPU| |Time| |Sw/s| |InMem KB| |Total KB|  |Th||Pri|       |Ver|  |State|   |Path|                                                                                                              + Idle                98.95%     98.64%   1:36     48          0          0   1  Very Idle   4.0              Idle+ KERNEL32.DLL                    0.03%            18         32         44   3  High        4.90   32        C:\WINDOWS\SYSTEM\KERNEL32.DLL+ MSGSRV32.EXE         0.04%      0.02%   0:36      1        752      3,364   1  Norm        4.0    16 Sys    C:\WINDOWS\SYSTEM\MSGSRV32.EXE+ mmtask.tsk                                        0        684      3,268   1  Norm        4.0    16 Sys    C:\WINDOWS\SYSTEM\mmtask.tsk+ MPREXE.EXE                              0:02      0      1,200      4,044   2  Norm        4.0    32 Sys    C:\WINDOWS\SYSTEM\MPREXE.EXE+ NVSVC.EXE                               0:02      5      1,192      4,988   2  Norm        4.0    32 Sys    C:\WINDOWS\SYSTEM\NVSVC.EXE+ STIMON.EXE                              0:01     10      2,688     12,708   6  Norm        4.0    32 Sys    C:\WINDOWS\SYSTEM\STIMON.EXE+ EXPLORER.EXE         0.17%      0.36%   0:03     10      4,968     12,584   5  Norm        4.0    32        C:\WINDOWS\EXPLORER.EXE+ JULAPAN.EXE                     0.02%            19      2,204      7,124   2  Norm        4.0    32        C:\WINDOWS\SYSTEM\JULAPAN.EXE+ INTERNAT.EXE                            0:01      0        856      3,620   1  Norm        4.0    32        C:\WINDOWS\SYSTEM\INTERNAT.EXE+ POPUPICONS.EXE       0.04%      0.02%             3      1,756      5,488   1  Norm        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\POPUPICONSEX\POPUPICONS.EXE+ SMILEY.EXE                                        0        912      3,820   1  Norm        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\SMILEY\SMILEY.EXE+ STROKEIT.EXE                                      0        964      3,856   1  High        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\STROKE IT\STROKEIT.EXE+ CMOUSE96.EXE                                      0        820      3,640   1  Norm        4.0    32        C:\AUSER\SOFTWARE\MOUSE TOOLS\COOL MOUSE 96\CMOUSE96.EXE+ WINROLL.EXE                                       0        824      3,564   1  Norm        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\WINROLL\WINROLL.EXE+ FILEBX.EXE                                        0      7,380     15,228   4  Norm        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\FILEBX\FILEBX.EXE+ TBHIDE.EXE           0.04%      0.04%            10      1,584      5,584   1  Norm        4.0    32        C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\TASKBARHIDE\TBHIDE.EXE+ NETWORX.EXE          0.22%      0.19%   0:04     21     15,116     26,072   5  Norm        5.0    32        C:\AUSER\SOFTWARE\INTERNET\UTILS\NETWORX\NETWORX.EXE+ DDHELP.EXE                                        0        936      3,636   2  Real        4.0    32 Sys    C:\WINDOWS\SYSTEM\DDHELP.EXE+ TASKINFO.EXE         0.36%      0.50%   0:01     12      2,392      7,012   1  High        4.0    32        D:\DESKTOP\TASKINFO2000 3.0\TASKINFO.EXE+ VxD VDHCP                                         0          0          0   1  Norm        4.3              VxD VDHCP   + VxD NTKERN           0.13%      0.07%   0:01     17          0          0   7  Norm        4.3              VxD NTKERN  [Current Process Pane]|Name|           |Base|           |Size| |Version|                              |Description|                             |Company|                                                                                                                                                                       ADVAPI32.DLL     BFE60000         65,536   4.90.3000                            Win32 ADVAPI32 core component             Microsoft Corporation      COMCTL32.DLL     BFB70000        557,056   5.81                                 Common Controls Library                   Microsoft Corporation      COMCTLV8.DLL     BF9E0000         65,536                                                                                                             FILEBXH.DLL      020D0000        106,496   1, 91, 2, 0                          FileBox eXtender                          Hyperionics Technology LLC GDI32.DLL        BFF20000        172,032   4.90.3001                            Win32 GDI core component                  Microsoft Corporation      IMM32.DLL        BFE00000         16,384   4.90.3000                            Win32 IMM32 core component                Microsoft Corporation      K452STUB.DLL     00410000         65,536                                                                                                             KERNEL32.DLL     BFF60000        536,576   4.90.3000                            Win32 Kernel core component               Microsoft Corporation      KERNELEX.DLL     BFA00000        233,472   4.5.2015.11                          KernelEx Core with ApiHook                Xeno86                     KEXBASEN.DLL     7D000000        122,880   4.5.2015.10                          KernelEx Base Non-shared Api Library      Xeno86                     KEXBASES.DLL     BFA40000        274,432   4.5.2015.11                          KernelEx Base Shared Api Library          Xeno86                     KSTUB822.DLL     19980000         65,536                                                                                                             MPR.DLL          7F160000         57,344   4.90.3000                            WIN32 Network Interface DLL               Microsoft Corporation      MPREXE.EXE       00500000         28,672   4.90.3000                            WIN32 Network Interface Service Process   Microsoft Corporation      MPRSERV.DLL      7FA00000        155,648   4.90.3000                            Multinet Router                           Microsoft Corporation      MSNET32.DLL      7FA30000         77,824   4.90.3000                            Microsoft 32-bit Network API Library      Microsoft Corporation      MSNP32.DLL       7FA50000         86,016   4.90.3000                            Network provider for Microsoft networks   Microsoft Corporation      MSPWL32.DLL      7FA70000         40,960   4.90.3000                            Password list management library          Microsoft Corporation      MSVCRT.DLL       7C000000        344,064   7.00.9981.0                          Microsoft® C Runtime Library              Microsoft Corporation      NTDLL.DLL        BFE70000         20,480   4.90.3000                            Win32 NTDLL core component                Microsoft Corporation      POPUPICONS.DLL   10000000         24,576                                                                                                             SHELL32.DLL      7FBD0000      2,285,568   5.50.4134.100                        Windows Shell Common Dll                  Microsoft Corporation      SHLWAPI.DLL      70A70000        417,792   6.00.2800.1907 (xpsp2.070219-1040)   Shell Light-weight Utility Library        Microsoft Corporation      UBERSKIN.DLL     BF9C0000         94,208                                                                                                             USER32.DLL       BFC00000         69,632   4.90.3001                            Win32 USER32 core component               Microsoft Corporation      VERSION.DLL      BFE50000         24,576   4.90.3000                            Win32 VERSION core component              Microsoft Corporation      WINMM.DLL        BFDD0000         65,536   4.90.3000                            System APIs for Multimedia                Microsoft Corporation      WINROLL.DLL      02480000         28,672                                                                                                             

Filebxh.dll, popupucons.dll and winroll.dll are hooks from background processes running from startup folder and hence can be ruled out as a cause.

 

Comctlv8.dll and uberskin.dll are Revolutions Pack files which start from same MPRServices key as KernelEx.

[Dave-H]

I've decided to completely roll back to 4.5.2015.10 until this is resolved.

As a matter of interest, how are people managing to copy and paste the text from their error messages when you can't get fully to the desktop?

[loblo]

Upon reboot in faultlog.txt.

[MiKl]

Hi Jumper, since almost all of 'us' are running more or less 'pimped' Win98SE installs or are using ME I think it would be a good idea to test your builds also in these environments - at least on a MDGX-updated SE.

 

Thank you for your hard work !!!

[Dave-H]

Upon reboot in faultlog.txt.

D'oh! Of course, silly me!

   

Edited January 3, 2016 by Dave-H

[jumper]

Great information, everyone!

bff*41ca (in Kernel32.dll) and 7d00b90d (in Kexbasen.dll) are the common keys. More about this later (even if someone else makes use of the new PDB files, runs DumpPE on Kexbasen, and reports back before me )....

I looked at Kexbasen in Dependency Walker and found 21 non-delay-load system file dependencies. Most of them I have disabled Kernelex on. Crypt32.dll was the key (haha)--I un-disabled KernelEx on it and was finally able to reproduce the crash (ironically with DumpPE):

DUMPPE caused an invalid page fault in

module KERNEL32.DLL at 016f:bff741ca.

Registers:

EAX=c140bad0 CS=016f EIP=bff741ca EFLGS=00010202

EBX=00000001 SS=0177 ESP=006bfb18 EBP=006bfb44

ECX=7d00b90d DS=0177 ESI=5cf01500 FS=3497

EDX=00000000 ES=0177 EDI=00000000 GS=0000

Bytes at CS:EIP:

ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08

Stack dump:

7d00b90d 00000000 5cf01500 00000001 8181f7c8 bff741f7 bffc9490 bff8433d

00000000 5cf01500 8181dde0 006bfb8c 5cf33132 00000001 5cf01500 00000001

Re-disabling KernelEx on Crypt32.dll fixed the problem again. (Note: in KernelEx property tab, the Apply button is broken and will prevent changes from being applied; use the Okay button!)

[MiKl]

Hmmm, the fix is not working here - tested on 2 diff. systems.