none
Error 1067: Process Terminated Unexpectedly

    Question

  • A bit of background info...The problem machine is the terminal server for a small-medium accounting firm. It runs Server 2008 r2, MS Office and a plethora of accounting programs. The problem software, Double-Take (http://www.visionsolutions.com/Products/DT-Avail.aspx), mirrors the terminal server to a duplicate machine as a failsafe against catastrophic failure.

    Double-Take requires .NET framework 3.5.1, which is installed on Server 2008 r2 as a feature. When the 'coremanagement.exe' (Double-Take Management Service) service attempts to start it immediately kicks back the error: Error 1067: Process Terminated Unexpectedly.

    All the logs/events/errors appear to point toward a .NET problem. I will include all related Event Viewer entries and other logs below. 

    The service will run fine as domain admin or local admin. Running as Localsystem or Local Service causes the process to crash. Unfortunately Double-Take explicitly asks to be run as Localsystem. It will not function when running as an administrator. 

    This seemed to point to a rights issue. I ran full control audits on the System account for the windows and system32 folders. I ran into rights issues on the SysWow64\config\systemprofile folder. I had to drive to the office to fix it. By the time I got here the problem didn't exist anymore. (???) All other files/folders checked out ok.

    I've removed .NET 3.5.1 as a feature and reinstalled. I've also removed .NET 4 and reinstalled. All Windows/.NET updates are installed. I've run every .NET repair tool I can find, but none would recognize 3.5.1 because it is installed as a feature vs a regular MSI install. The recommended procedure for repairing .NET as a feature is 'sfc /scannow'. I've run that several times with no results. 

    The duplicate machine runs Double-Take too (minus terminal server programs). I've even gone so far as to replace the .NET files, dlls referenced in the log files and the systemprofile folders on the problem machine from the working machine.

    Last night I did a complete removal of Double-Take including searching and purging the hard drive and registry of any references to Double-Take. We have the latest version installed on both the working and non-working machine.

    Of course, we've been in contact with Double-Take support. They haven't been able to help yet.

    Here are the event viewer logs and WER log.

    --------------------------------------------

    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1: CoreManagementService.exe
    P2: 6.0.1.1996
    P3: 50c6786b
    P4: KERNELBASE.dll
    P5: 6.1.7601.17965
    P6: 506dcae6
    P7: e0434f4d
    P8: 000000000000bccd
    P9: 
    P10: 

    Attached files:

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_CoreManagementSe_ea88e38fce63846d6e94f3f192368c3dafad71_3f7a0e71

    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: b2322534-56a6-11e2-83a7-d4ae5288953b
    Report Status: 4

    ------------------------------------------------

    Version=1
    EventType=APPCRASH
    EventTime=130018020738882837
    ReportType=2
    Consent=1
    ReportIdentifier=b2322534-56a6-11e2-83a7-d4ae5288953b
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=CoreManagementService.exe
    Sig[1].Name=Application Version
    Sig[1].Value=6.0.1.1996
    Sig[2].Name=Application Timestamp
    Sig[2].Value=50c6786b
    Sig[3].Name=Fault Module Name
    Sig[3].Value=KERNELBASE.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=6.1.7601.17965
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=506dcae6
    Sig[6].Name=Exception Code
    Sig[6].Value=e0434f4d
    Sig[7].Name=Exception Offset
    Sig[7].Value=000000000000bccd
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.16.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    UI[2]=C:\Program Files\Vision Solutions\Double-Take\Service\CoreManagementService.exe
    LoadedModule[0]=C:\Program Files\Vision Solutions\Double-Take\Service\CoreManagementService.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[6]=C:\Windows\system32\msvcrt.dll
    LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[8]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[9]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[10]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[11]=C:\Windows\system32\GDI32.dll
    LoadedModule[12]=C:\Windows\system32\USER32.dll
    LoadedModule[13]=C:\Windows\system32\LPK.dll
    LoadedModule[14]=C:\Windows\system32\USP10.dll
    LoadedModule[15]=C:\Windows\system32\IMM32.DLL
    LoadedModule[16]=C:\Windows\system32\MSCTF.dll
    LoadedModule[17]=C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
    LoadedModule[18]=C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\MSVCR80.dll
    LoadedModule[19]=C:\Windows\system32\shell32.dll
    LoadedModule[20]=C:\Windows\system32\ole32.dll
    LoadedModule[21]=C:\Windows\system32\profapi.dll
    LoadedModule[22]=C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll
    LoadedModule[23]=C:\Windows\system32\CRYPTBASE.dll
    LoadedModule[24]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System\f3888a2c7b096d416ca0cfc5405219b4\System.ni.dll
    LoadedModule[25]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\63ba654893f4fc924ff75cf785744150\System.Core.ni.dll
    LoadedModule[26]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[27]=C:\Windows\system32\rsaenh.dll
    LoadedModule[28]=C:\Windows\assembly\NativeImages_v2.0.50727_64\CoreManagementServi#\3c03890091c80568153a299e8e49a5fc\CoreManagementService.ni.exe
    LoadedModule[29]=C:\Windows\assembly\NativeImages_v2.0.50727_64\DoubleTake.Common.S#\82ae532a43c9b2165376e6c502ce9714\DoubleTake.Common.Service.ni.dll
    LoadedModule[30]=C:\Windows\assembly\NativeImages_v2.0.50727_64\DoubleTake.Common\cd825c69e2aaa3a1c5b322175dbf7661\DoubleTake.Common.ni.dll
    LoadedModule[31]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\c9866f6c2cae33d2c38ab32da622a167\System.ServiceProcess.ni.dll
    LoadedModule[32]=C:\Windows\assembly\NativeImages_v2.0.50727_64\DoubleTake.Common.C#\f2ad47a084febe94d5625f070a5db6e0\DoubleTake.Common.Contract.Data.ni.dll
    LoadedModule[33]=C:\Windows\assembly\NativeImages_v2.0.50727_64\DoubleTake.Common.C#\250b38d37cc097c13b36b03134d4378a\DoubleTake.Common.Contract.Service.ni.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\ac14913a11af4bfae0b8eb913a46a161\System.Configuration.ni.dll
    LoadedModule[35]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\52e2da35b160dbd254683f72a0f1b937\System.Xml.ni.dll
    LoadedModule[36]=C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Reactive\9e9a1c34e69984cffcf0b2c77d3679f3\System.Reactive.ni.dll
    LoadedModule[37]=C:\Windows\system32\shfolder.dll
    LoadedModule[38]=C:\Windows\system32\VERSION.dll
    LoadedModule[39]=C:\Windows\system32\apphelp.dll
    FriendlyEventName=APPCRASH
    ConsentKey=APPCRASH
    AppName=Double-Take Management Service
    AppPath=C:\Program Files\Vision Solutions\Double-Take\Service\CoreManagementService.exe
    ReportDescription=Stopped working

    ------------------------------------------------

    Faulting application name: CoreManagementService.exe, version: 6.0.1.1996, time stamp: 0x50c6786b
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.17965, time stamp: 0x506dcae6
    Exception code: 0xe0434f4d
    Fault offset: 0x000000000000bccd
    Faulting process id: 0x%9
    Faulting application start time: 0x%10
    Faulting application path: %11
    Faulting module path: %12
    Report Id: %13

    ------------------------------------------------

    I'm at the end of my rope. Any help would be greatly appreciated.

    -Joe


    Friday, January 04, 2013 8:26 PM

Answers

All replies

  • Hi Joe,

    I am suggesting you run the .NET Framework repair tool first.

    To determine if this issue is related to .NET Frameworks or not, please use .NET Framework Setup Verification Tool to verify .NET Framework 4 and 3.5 SP1: http://blogs.msdn.com/b/astebner/archive/2008/10/13/8999004.aspx

    Please show the result here after running the tool for each installed framework. For each run, the first ~15 lines of tool output will show all .NET Frameworks found. The last ~15 lines will show you the verification results.

    Best regards,


    Ego [MSFT]
    MSDN Community Support | Feedback to us
    Develop and promote your apps in Windows Store
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

    Monday, January 07, 2013 7:56 AM
  • Hi, thanks for responding

    I had already run the .NET repair tool, but below are the log entries you asked for from the verification tool. The only error I found was for .NET 4.0 full.

    .NET 2.0

    ----------------------------

    [01/07/13,10:12:40] Section [Registry GE - .NET Framework 2.0 SP2 (64-bit)] - stop parsing entries
    [01/07/13,10:12:40] Processing custom action 'Custom Action - .NET Framework 2.0 test application'
    [01/07/13,10:12:40] ExecutablePath = 'Netfx20TestApplication.exe'
    [01/07/13,10:12:40] FriendlyName = '.NET Framework 2.0 test application'
    [01/07/13,10:12:40] TimeoutSeconds = '300'
    [01/07/13,10:12:40] WaitOnExit = 'true'
    [01/07/13,10:12:40] Silent = 'true'
    [01/07/13,10:12:40] Launching process 'Netfx20TestApplication.exe' now
    [01/07/13,10:12:40] Process successfully launched. Waiting 300 seconds for it to complete.
    [01/07/13,10:12:40] Process 'Netfx20TestApplication.exe' exited with return code 0
    [01/07/13,10:12:40] Not running action 'Files - .NET Framework netfxperf.dll' for product '.NET Framework 2.0 SP2' because the OS condition does not match
    [01/07/13,10:12:40] Verification succeeded for product .NET Framework 2.0 SP2

    .NET 3.0 SP2

    ---------------------------------

    [01/07/13,10:14:59] Section [Registry GE - .NET Framework 3.0 SP2 (Wow6432Node)] - stop parsing entries
    [01/07/13,10:14:59] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - start parsing entries
    [01/07/13,10:14:59] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - stop parsing entries
    [01/07/13,10:14:59] Processing custom action 'Custom Action - .NET Framework 2.0 test application'
    [01/07/13,10:14:59] ExecutablePath = 'Netfx20TestApplication.exe'
    [01/07/13,10:14:59] FriendlyName = '.NET Framework 2.0 test application'
    [01/07/13,10:14:59] TimeoutSeconds = '300'
    [01/07/13,10:14:59] WaitOnExit = 'true'
    [01/07/13,10:14:59] Silent = 'true'
    [01/07/13,10:14:59] Launching process 'Netfx20TestApplication.exe' now
    [01/07/13,10:14:59] Process successfully launched. Waiting 300 seconds for it to complete.
    [01/07/13,10:14:59] Process 'Netfx20TestApplication.exe' exited with return code 0
    [01/07/13,10:14:59] Not running action 'Files - .NET Framework netfxperf.dll' for product '.NET Framework 3.0 SP2' because the OS condition does not match
    [01/07/13,10:14:59] Verification succeeded for product .NET Framework 3.0 SP2

    .NET 3.5 SP1

    ------------------------------

    [01/07/13,10:15:07] Section [Registry GE - .NET Framework 3.5 SP1 (Wow6432Node)] - stop parsing entries
    [01/07/13,10:15:07] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - start parsing entries
    [01/07/13,10:15:07] Section [Files - .NET Framework 3.0 SP1AndLater (Common)] - stop parsing entries
    [01/07/13,10:15:07] Processing custom action 'Custom Action - .NET Framework 2.0 test application'
    [01/07/13,10:15:07] ExecutablePath = 'Netfx20TestApplication.exe'
    [01/07/13,10:15:07] FriendlyName = '.NET Framework 2.0 test application'
    [01/07/13,10:15:07] TimeoutSeconds = '300'
    [01/07/13,10:15:07] WaitOnExit = 'true'
    [01/07/13,10:15:07] Silent = 'true'
    [01/07/13,10:15:07] Launching process 'Netfx20TestApplication.exe' now
    [01/07/13,10:15:07] Process successfully launched. Waiting 300 seconds for it to complete.
    [01/07/13,10:15:07] Process 'Netfx20TestApplication.exe' exited with return code 0
    [01/07/13,10:15:07] Not running action 'Files - .NET Framework netfxperf.dll' for product '.NET Framework 3.5 SP1' because the OS condition does not match
    [01/07/13,10:15:07] Verification succeeded for product .NET Framework 3.5 SP1

    .NET 4.0 Client

    ------------------------------

    [01/07/13,10:15:11] Section [Registry - .NET Framework 4 Client (Wow6432Node)] - stop parsing entries
    [01/07/13,10:15:11] Processing custom action 'Custom Action - .NET Framework 4.0 test application'
    [01/07/13,10:15:11] ExecutablePath = 'Netfx40TestApplication.exe'
    [01/07/13,10:15:11] FriendlyName = '.NET Framework 4 test application'
    [01/07/13,10:15:11] TimeoutSeconds = '300'
    [01/07/13,10:15:11] WaitOnExit = 'true'
    [01/07/13,10:15:12] Silent = 'true'
    [01/07/13,10:15:12] Launching process 'Netfx40TestApplication.exe' now
    [01/07/13,10:15:12] Process successfully launched. Waiting 300 seconds for it to complete.
    [01/07/13,10:15:12] Process 'Netfx40TestApplication.exe' exited with return code 0
    [01/07/13,10:15:12] Verification succeeded for product .NET Framework 4 Client

    .NET 4.0 Full

    -------------------------------

    [01/07/13,10:15:18] Section [Registry - .NET Framework 4 Full (Wow6432Node)] - stop parsing entries
    [01/07/13,10:15:18] Processing custom action 'Custom Action - .NET Framework 4.0 test application'
    [01/07/13,10:15:18] ExecutablePath = 'Netfx40TestApplication.exe'
    [01/07/13,10:15:18] FriendlyName = '.NET Framework 4 test application'
    [01/07/13,10:15:18] TimeoutSeconds = '300'
    [01/07/13,10:15:18] WaitOnExit = 'true'
    [01/07/13,10:15:18] Silent = 'true'
    [01/07/13,10:15:18] Launching process 'Netfx40TestApplication.exe' now
    [01/07/13,10:15:18] Process successfully launched. Waiting 300 seconds for it to complete.
    [01/07/13,10:15:18] Process 'Netfx40TestApplication.exe' exited with return code 0
    [01/07/13,10:15:18] Verification succeeded for product .NET Framework 4 Full
    [01/07/13,10:15:19] Launching process 'change user /execute' now
    [01/07/13,10:15:19] Process successfully launched. Waiting 4294967 seconds for it to complete.
    [01/07/13,10:15:19] ****ERROR**** Process 'change user /execute' exited with return code 1
    [01/07/13,10:15:19] SetupVerifier exiting with return value 0

    Thanks again

    -Joe

    Monday, January 07, 2013 3:29 PM
  • Hi Joe,

    From the log, I found your .Net Framework 4.0 full was fine.

    Exited code 1  just means that the required file setupverifier.ini was not found in the same path as setupverifier.exe.

    I don't think the error code 1067 caused by .Net Framework. I found a blog talking about this error which may cause this issue:

    http://kathirvelmariappan.blogspot.com/2009/03/mysql-error-1067-process-terminated.html

    Best regards,


    Ego [MSFT]
    MSDN Community Support | Feedback to us
    Develop and promote your apps in Windows Store
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

    Wednesday, January 09, 2013 9:17 AM