Why does AdobeReader XI crash a minute after launch?

0

There was a problem on some PCs, with AdobeReader XI on Windows 7. After opening the any pdf file, the program crashes after a minute. Help to understand why this can happen. I tried to disable the antivirus, restart the PC, disable the update service for AdobeReader. I attach .dmp Windbg analysis.

Microsoft (R) Windows Debugger Version 10.0.17763.132 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\AcroRd32.DMP]
User Mini Dump File with Full Memory: Only application data is available


************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Tue Apr 21 09:48:51.000 2020 (UTC + 5:00)
System Uptime: 11 days 0:55:22.870
Process Uptime: 0 days 0:00:30.000
...........................WARNING: ole32 overlaps KERNELBASE
WARNING: ole32 overlaps user32
.............................WARNING: RpcRtRemote overlaps detoured
........
...WARNING: api_ms_win_downlevel_shlwapi_l1_1_0 overlaps ole32
..............WARNING: winnsi overlaps rsaenh
.........
wow64cpu!CpupSyscallStub+0x9:
00000000`74422e09 c3              ret
0:000> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Module load completed but symbols could not be loaded for AcroRd32.exe
WARNING: user32 overlaps ole32
GetUrlPageData2 (WinHttp) failed: 12002.

KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1

Timeline: !analyze.Start
    Name: <blank>
    Time: 2020-04-21T05:19:19.294Z
    Diff: 1828294 mSec

Timeline: Dump.Current
    Name: <blank>
    Time: 2020-04-21T04:48:51.0Z
    Diff: 0 mSec

Timeline: Process.Start
    Name: <blank>
    Time: 2020-04-21T04:48:21.0Z
    Diff: 30000 mSec

Timeline: OS.Boot
    Name: <blank>
    Time: 2020-04-10T03:53:29.0Z
    Diff: 953722000 mSec


DUMP_CLASS: 2

DUMP_QUALIFIER: 400

FAULTING_IP: 
+0
00000000`00000000 ??              ???

EXCEPTION_RECORD:  (.exr -1)
ExceptionAddress: 0000000000000000
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 0

FAULTING_THREAD:  000026a4

BUGCHECK_STR:  BREAKPOINT

DEFAULT_BUCKET_ID:  BREAKPOINT

ERROR_CODE: (NTSTATUS) 0x80000003 - <Unable to get error code text>

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - <Unable to get error code text>

EXCEPTION_CODE_STR:  80000003

WATSON_BKT_PROCSTAMP:  505fd19e

WATSON_BKT_PROCVER:  11.0.0.379

PROCESS_VER_PRODUCT:  Adobe Reader

WATSON_BKT_MODULE:  unknown

WATSON_BKT_MODVER:  0.0.0.0

WATSON_BKT_MODOFFSET:  0

WATSON_BKT_MODSTAMP:  bbbbbbb4

BUILD_VERSION_STRING:  6.1.7601.24545 (win7sp1_ldr_escrow.200102-1707)

DETOURED_IMAGE: 1

MODLIST_WITH_TSCHKSUM_HASH:  6e5b55676ef07627e1b8dea4d2606eeff892d115

MODLIST_SHA1_HASH:  30104b2587fe4b58f3526cf0c65af8acca20dfc6

NTGLOBALFLAG:  0

PROCESS_BAM_CURRENT_THROTTLED: 0

PROCESS_BAM_PREVIOUS_THROTTLED: 0

APPLICATION_VERIFIER_FLAGS:  0

PRODUCT_TYPE:  1

SUITE_MASK:  272

DUMP_FLAGS:  c07

DUMP_TYPE:  3

PROCESS_NAME:  unknown

ANALYSIS_SESSION_HOST:  B001001152

ANALYSIS_SESSION_TIME:  04-21-2020 10:19:19.0294

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

THREAD_ATTRIBUTES: 
OS_LOCALE:  RUS

PRIMARY_PROBLEM_CLASS:  BREAKPOINT

PROBLEM_CLASSES: 

    ID:     [0n321]
    Type:   [@APPLICATION_FAULT_STRING]
    Class:  Primary
    Scope:  DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
            BUCKET_ID
    Name:   Omit
    Data:   Add
            String: [BREAKPOINT]
    PID:    [Unspecified]
    TID:    [Unspecified]
    Frame:  [0]

LAST_CONTROL_TRANSFER:  from 000000007442283e to 0000000074422e09

STACK_TEXT:  
00000000`003ce9c8 00000000`7442283e : 00000000`763b774f 00000000`fff20023 00000000`00000246 00000000`0054cd64 : wow64cpu!CpupSyscallStub+0x9
00000000`003ce9d0 00000000`7449d286 : 00000000`00000000 00000000`74421920 ffffffff`fffffffe 00000000`0000001d : wow64cpu!WaitForMultipleObjects32+0x3b
00000000`003cea90 00000000`7449c69e : 00000000`00000000 00000000`00000000 00000000`74494b10 00000000`7ffe0030 : wow64!RunCpuSimulation+0xa
00000000`003ceae0 00000000`76d94393 : 00000000`006e3350 00000000`00000000 00000000`76e92e70 00000000`76d67550 : wow64!Wow64LdrpInitialize+0x42a
00000000`003cf030 00000000`76df96e0 : 00000000`00000000 00000000`76e06bdd 00000000`003cf5e0 00000000`00000000 : ntdll!LdrpInitializeProcess+0x17e3
00000000`003cf520 00000000`76da373e : 00000000`003cf5e0 00000000`00000000 00000000`fffdf000 00000000`00000000 : ntdll! ?? ::FNODOBFM::`string'+0x22770
00000000`003cf590 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!LdrInitializeThunk+0xe


STACK_COMMAND:  ~0s; .ecxr ; kb

THREAD_SHA1_HASH_MOD_FUNC:  b5fd71b04de6f507a917a181f4be030b1b52209a

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  d7d086ffeeaba87fed7336e46050a455a1a3e0d2

THREAD_SHA1_HASH_MOD:  31cc8129c2e727f537d516c2527e18338fe11819

FOLLOWUP_IP: 
wow64cpu!CpupSyscallStub+9
00000000`74422e09 c3              ret

FAULT_INSTR_CODE:  ccccccc3

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  wow64cpu!CpupSyscallStub+9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: wow64cpu

IMAGE_NAME:  wow64cpu.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  5e0eb6d0

FAILURE_BUCKET_ID:  BREAKPOINT_80000003_wow64cpu.dll!CpupSyscallStub

BUCKET_ID:  X64_BREAKPOINT_DETOURED_wow64cpu!CpupSyscallStub+9

FAILURE_EXCEPTION_CODE:  80000003

FAILURE_IMAGE_NAME:  wow64cpu.dll

BUCKET_ID_IMAGE_STR:  wow64cpu.dll

FAILURE_MODULE_NAME:  wow64cpu

BUCKET_ID_MODULE_STR:  wow64cpu

FAILURE_FUNCTION_NAME:  CpupSyscallStub

BUCKET_ID_FUNCTION_STR:  CpupSyscallStub

BUCKET_ID_OFFSET:  9

BUCKET_ID_MODTIMEDATESTAMP:  5e0eb6d0

BUCKET_ID_MODCHECKSUM:  e9ee

BUCKET_ID_MODVER_STR:  6.1.7601.24545

BUCKET_ID_PREFIX_STR:  X64_BREAKPOINT_DETOURED_

FAILURE_PROBLEM_CLASS:  BREAKPOINT

FAILURE_SYMBOL_NAME:  wow64cpu.dll!CpupSyscallStub

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/unknown/11.0.0.379/505fd19e/unknown/0.0.0.0/bbbbbbb4/80000003/00000000.htm?Retriage=1

TARGET_TIME:  2020-04-21T04:48:51.000Z

OSBUILD:  7601

OSSERVICEPACK:  24545

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 7

OSEDITION:  Windows 7 WinNt (Service Pack 1) SingleUserTS

USER_LCID:  0

OSBUILD_TIMESTAMP:  2020-01-03 08:41:40

BUILDDATESTAMP_STR:  200102-1707

BUILDLAB_STR:  win7sp1_ldr_escrow

BUILDOSVER_STR:  6.1.7601.24545

ANALYSIS_SESSION_ELAPSED_TIME:  7221

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:breakpoint_80000003_wow64cpu.dll!cpupsyscallstub

FAILURE_ID_HASH:  {289a12fb-10fd-bb5b-3edc-4567046643a5}

Followup:     MachineOwner
---------

P.S.: Sorry for my bad English

pdf
windbg
adobe-reader
asked on Stack Overflow Apr 21, 2020 by Yang

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0