Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: Application Popup|
Application popup: <application name> - Application Error : The instruction at "<memory location>" referenced memory at "<memory location>". The memory could not be "read".
|English: This information is only available to subscribers. An example of English, please!|
- Application: mmc.exe - See ME938611.
- Application: iexplore.exe - See ME923996.
- Application: inetinfo.exe - See ME919789.
- Application: userinit.exe - See ME331490 for a hotfix applicable to Microsoft Windows 2000.
- Application: RTVSCAN.EXE - See the link to "Symantec Knowledge Base Document ID: 2005062407124348".
- Application: OUTLOOK.EXE - I received this error when starting Outlook 2000 in a terminal server session. All other applications in the session worked fine. Outlook in the other sessions worked fine. No recent changes were implemented. Hence, we logged off the user, deleted his profile, logged back on, and re-instated his mail profile but the error reappeared.
Cause: When starting Outlook 2000 the first mail in the mailbox is opened in the preview window. Contents of this e-mail were malformed and crashed the application. Sending another mail to the user, which became the first mail in the mailbox took care of this problem. We now could throw away the offending e-mail. Inquiry with the original sender revealed that the offending content was a jpg picture.
- Application: Explorer.EXE - In one case, this Event ID appeared on a Windows 2003 SP1 computer. Windows Terminal Services was not installed. I started the computer normally and went into Control Panel. The second time that I tried to start the Control Panel, it would not start, Windows became unresponsive, and this event appeared. I restarted the computer and EventID 1004 from source Application Error was logged.
The computer had been built from an image of another computer. I could open Control Panel with no problem in Safe Mode.
This problem relates to the display adapter. If there is both an on-board adapter and an adapter card then disable the on-board one. Ensure the correct driver is installed. If you cannot obtain the correct driver then a workaround is to disable the display adapter in Device Manager -> Display adapters but this sets the screen resolution to "640 by 480 pixels" and the color quality to "Lowest (4 bit)".
- Application: Excel - See ME319802 for information.
- Application: Explorer.EXE - See ME830515.
- Application: CdfSvc.exe - See "Citrix Support Document ID: CTX104533".
- Application: spoolsv.exe - A newsgroup post suggested that the hotfix in ME324183 fixes this problem.
- Application: dsm.exe - See the link to "IBM Support Reference #: IC33277".
- Application: termsrv.exe - Read Citrix Support Document ID: CTX452360.
See ME831885 for a hotfix applicable to Microsoft Windows 2000.
Excel.exe also may crash when saving a document if the standard printer driver is faulty and the user modifies the "Page Setup". Reinstalling or even better updating the printer driver might solve this problem.
Application MMC.exe, This happened when trying to open Component Service. Stopped MS DTC service and any related services (SQL, MS Messaging, etc) and reinstalled MS DTC by running "winnt\system32\dtcsetup.exe". Not sure why this happened but reinstalling MS DTC resolved the problem.
|Private comment: Subscribers only. See example of private comment|
|Links: IBM Support Reference #: IC33277, Symantec Knowledge Base Document ID: 2005062407124348|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated