none
Faulting application error, faulting module msvcr80.dll Event:1000

    Question

  • Hi,

    I'm facing this issue with my Windows service. This service runs on the Windows XP. I was wondering if anyone of you guys could find a solution. The error looks somethng like this:

    Faulting application xxxx.exe, version 1.1.0.0, stamp 4b6a83c9,
    faulting module msvcr80.dll, version 8.0.50727.1433, stamp 471eb5ae, debug? 0,
    fault address 0x000150d8

     I have already tried upgrading and reinstalling the framework( a solution that I found in one of the related forums) but it doesn't work for me.

    The error in my case always refers to the same msvcr80.dll.

    PLease provide me some help as I'm in dire need of fixing this issue.

    Thanks,

    Vivek

    Thursday, April 01, 2010 6:43 AM

Answers

  • Hi Vivek,

    As you mentioned, it seems that your issue is related to msvcr80.dll.

    Frankly speaking, there would be some causes for the error to occur. It might be caused by something like corrupted .NET Framework installation or the source code.
    We would try some points to eliminate some possible causes of your concern.

    Firstly, could you please help me to use Verification Tool to verify all the .NET Frameworks on your Windows XP machine?
    If any .NET Framework fails to verify, please apply Cleanup tool to remove it and reinstall it. This would be helpful for us to eliminate the possible cause of corrupted .NET Framework installation.

    Secondly, please help me to check whether your Windows service can be run properly on other Windows XP machines?
    If you get the same error message, I would suspect that it might be related to the source code of your service.
    We could check the following similar issue.
    Please see: http://social.msdn.microsoft.com/forums/en-US/clr/thread/5298172b-be4e-49fb-a8f6-2afff6f29ccd/
    If it doesn't work, you can try Common Language Runtime forum to track the cause of your concern.

    Hope this helps! If you have any concern, please feel free to let me know.

    Best regards,
    Yichun Chen
    MSDN Subscriber Support in Forum
    If you have any feedback on our support, please contact msdnmg@microsoft.com


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    Welcome to the All-In-One Code Framework! If you have any feedback, please tell us.
    • Marked as answer by vivd Monday, April 05, 2010 6:59 AM
    Thursday, April 01, 2010 8:38 AM

All replies

  • Hi Vivek,

    As you mentioned, it seems that your issue is related to msvcr80.dll.

    Frankly speaking, there would be some causes for the error to occur. It might be caused by something like corrupted .NET Framework installation or the source code.
    We would try some points to eliminate some possible causes of your concern.

    Firstly, could you please help me to use Verification Tool to verify all the .NET Frameworks on your Windows XP machine?
    If any .NET Framework fails to verify, please apply Cleanup tool to remove it and reinstall it. This would be helpful for us to eliminate the possible cause of corrupted .NET Framework installation.

    Secondly, please help me to check whether your Windows service can be run properly on other Windows XP machines?
    If you get the same error message, I would suspect that it might be related to the source code of your service.
    We could check the following similar issue.
    Please see: http://social.msdn.microsoft.com/forums/en-US/clr/thread/5298172b-be4e-49fb-a8f6-2afff6f29ccd/
    If it doesn't work, you can try Common Language Runtime forum to track the cause of your concern.

    Hope this helps! If you have any concern, please feel free to let me know.

    Best regards,
    Yichun Chen
    MSDN Subscriber Support in Forum
    If you have any feedback on our support, please contact msdnmg@microsoft.com


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    Welcome to the All-In-One Code Framework! If you have any feedback, please tell us.
    • Marked as answer by vivd Monday, April 05, 2010 6:59 AM
    Thursday, April 01, 2010 8:38 AM
  • Hi Yichun,

    I never faced this issue in my development evironment. When we placed this application in the production environment, we started facing this error. Though there is a difference between the production and development applications and that would only be in terms of the load that the production application is exposed to and that causes the application to write huge amount of log(appx size 650 MB).

    Also, yes my service can be run on XP. We have tested it and we didn't see any error of this kind.

    Suggestions Made by You:

    I looked in to the options that you had provided but the problem that I see is that I can't run such tools in the environment in which I'm facing the issues i.e. I'm not allowed to.

    Things that I've tried:

    1. I tweaked the application slightly to write no log except the exceptions. That I way reduced the size of the log. So now every time my application needs to write something in the log it will not need to open a 500 - 600 MB log to write something.

    2. I added the code below in my app as suugested by you:

     <runtime>

    <legacyUnhandledExceptionPolicy enabled="1" />

     

    </

    runtime>

    Result:

    Good news!!! After making these changes I'm not facing this issue anymore.

    Questions:

    What can I do to make sure that the problem is not occuring from my application, other than checking the framework by those tools you suggested? When does one normally see this error? Is there a way to trap such errors( other than having try catch blocks everywhere because I believe I have it already) ? Could it occur because of any of the unhandled exceptions?

    Thanks alot for your time! It was really helpful.

    Vivek

    Monday, April 05, 2010 6:59 AM
  • Hi Vivek,

    It's my pleasure!

    Firstly, I'm so glad to hear that the error has gone. Cheer!

    What can I do to make sure that the problem is not occuring from my application, other than checking the framework by those tools you suggested?

    The Verification Tool is applied to verify the .NET Frameworks on the specific Windows XP machine to eliminate the possible cause of corrupted .NET Framework installation.
    To ensure that the error will not occur for your application, you might test it on more Windows XP machines.

    When does one normally see this error? Is there a way to trap such errors( other than having try catch blocks everywhere because I believe I have it already) ? Could it occur because of any of the unhandled exceptions?

    I'm not quite sure when this error would occur since it might be caused by some causes.
    This forum is for the support of .NET Framework installation. I'm not the expert on CLR. Sorry for that. However, the following document might shed some light on your concern.
    Please check: http://msdn.microsoft.com/en-us/library/ms228965.aspx

    If you want to know more helpful information, please try Common Language Runtime forum to get more useful help.

    Hope this helps! If you have any concern, please feel free to let me know.

    Have a nice day!

    Best regards,
    Yichun Chen
    MSDN Subscriber Support in Forum
    If you have any feedback on our support, please contact msdnmg@microsoft.com
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    Welcome to the All-In-One Code Framework! If you have any feedback, please tell us.
    Monday, April 05, 2010 7:43 AM
  • I have the same error message

    Problem signature:
      Problem Event Name: APPCRASH
      Application Name: MSACCESS.EXE
      Application Version: 12.0.6606.1000
      Application Timestamp: 4e27ab6b
      Fault Module Name: MSVCR80.dll
      Fault Module Version: 8.0.50727.4940
      Fault Module Timestamp: 4ca2b271
      Exception Code: c0000005
      Exception Offset: 000172d7
      OS Version: 6.1.7601.2.1.0.16.7
      Locale ID: 1033

    Additional information about the problem:
      LCID: 1033
      Brand: Office12Crash
      skulcid: 1033
    (and these came from crash #1)
    >>>>>>>>>>>>>>>>>>>>>>>>>
    Log Name:      Application
    Source:        Application Error
    Date:          8/4/2013 9:19:39 PM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      S-WHSDDPTS1.win.root.sonoma.gov
    Description:
    Faulting application name: MSACCESS.EXE, version: 12.0.6606.1000, time stamp: 0x4e27ab6b
    Faulting module name: MSVCR80.dll, version: 8.0.50727.4940, time stamp: 0x4ca2b271
    Exception code: 0xc0000005
    Fault offset: 0x000172d7
    Faulting process id: 0xc04
    Faulting application start time: 0x01ce9192c990c522
    Faulting application path: S:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
    Faulting module path: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll
    Report Id: 3e010bf4-fd86-11e2-b1a4-0050569c00ee
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-08-05T04:19:39.000000000Z" />
        <EventRecordID>85415</EventRecordID>
        <Channel>Application</Channel>
        <Computer>S-WHSDDPTS1.win.root.sonoma.gov</Computer>
        <Security />
      </System>
      <EventData>
        <Data>MSACCESS.EXE</Data>
        <Data>12.0.6606.1000</Data>
        <Data>4e27ab6b</Data>
        <Data>MSVCR80.dll</Data>
        <Data>8.0.50727.4940</Data>
        <Data>4ca2b271</Data>
        <Data>c0000005</Data>
        <Data>000172d7</Data>
        <Data>c04</Data>
        <Data>01ce9192c990c522</Data>
        <Data>S:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE</Data>
        <Data>C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll</Data>
        <Data>3e010bf4-fd86-11e2-b1a4-0050569c00ee</Data>
      </EventData>
    </Event>
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Then this next log
    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          8/4/2013 9:20:33 PM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      S-WHSDDPTS1.win.root.sonoma.gov
    Description:
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1: MSACCESS.EXE
    P2: 12.0.6606.1000
    P3: 4e27ab6b
    P4: MSVCR80.dll
    P5: 8.0.50727.4940
    P6: 4ca2b271
    P7: c0000005
    P8: 000172d7
    P9:
    P10:

    Attached files:
    C:\Users\jsatterl\AppData\Local\Temp\2\65881843.cvr
    C:\Users\jsatterl\AppData\Local\Temp\2\65881843.od
    S:\Compman\CMFrnt\Update\CM2000.mde
    C:\Users\jsatterl\AppData\Local\Temp\2\65791906.od
    C:\Users\jsatterl\AppData\Local\Temp\2\CVRE7A2.tmp.cvr

    These files may be available here:
    C:\Users\jsatterl\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_MSACCESS.EXE_c59883b776fe1a5c1764ed50db85fb616b18fc6_0ffe1bc8

    Analysis symbol:
    Rechecking for solution: 0
    Report Id: 3e010bf4-fd86-11e2-b1a4-0050569c00ee
    Report Status: 0
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-08-05T04:20:33.000000000Z" />
        <EventRecordID>85416</EventRecordID>
        <Channel>Application</Channel>
        <Computer>S-WHSDDPTS1.win.root.sonoma.gov</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>APPCRASH</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>MSACCESS.EXE</Data>
        <Data>12.0.6606.1000</Data>
        <Data>4e27ab6b</Data>
        <Data>MSVCR80.dll</Data>
        <Data>8.0.50727.4940</Data>
        <Data>4ca2b271</Data>
        <Data>c0000005</Data>
        <Data>000172d7</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
    C:\Users\jsatterl\AppData\Local\Temp\2\65881843.cvr
    C:\Users\jsatterl\AppData\Local\Temp\2\65881843.od
    S:\Compman\CMFrnt\Update\CM2000.mde
    C:\Users\jsatterl\AppData\Local\Temp\2\65791906.od
    C:\Users\jsatterl\AppData\Local\Temp\2\CVRE7A2.tmp.cvr</Data>
        <Data>C:\Users\jsatterl\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_MSACCESS.EXE_c59883b776fe1a5c1764ed50db85fb616b18fc6_0ffe1bc8</Data>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>3e010bf4-fd86-11e2-b1a4-0050569c00ee</Data>
        <Data>0</Data>
      </EventData>
    </Event>
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Report.wer referenced above is-
    Version=1
    EventType=APPCRASH
    EventTime=130201499793018462
    ReportType=2
    Consent=1
    ReportIdentifier=3e010bf5-fd86-11e2-b1a4-0050569c00ee
    IntegratorReportIdentifier=3e010bf4-fd86-11e2-b1a4-0050569c00ee
    WOW64=1
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=MSACCESS.EXE
    Sig[1].Name=Application Version
    Sig[1].Value=12.0.6606.1000
    Sig[2].Name=Application Timestamp
    Sig[2].Value=4e27ab6b
    Sig[3].Name=Fault Module Name
    Sig[3].Value=MSVCR80.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=8.0.50727.4940
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=4ca2b271
    Sig[6].Name=Exception Code
    Sig[6].Value=c0000005
    Sig[7].Name=Exception Offset
    Sig[7].Value=000172d7
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.16.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    UI[2]=S:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
    UI[3]=Microsoft Office Access has stopped working
    UI[4]=Windows can check online for a solution to the problem and try to recover your information and restart the program.
    UI[5]=Check online for a solution and restart the program
    UI[6]=Check online for a solution later and close the program
    UI[7]=Close the program
    LoadedModule[0]=S:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
    LoadedModule[1]=C:\Windows\SysWOW64\ntdll.dll
    LoadedModule[2]=C:\Windows\syswow64\kernel32.dll
    LoadedModule[3]=C:\Windows\syswow64\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\system32\tsappcmp.dll
    LoadedModule[5]=C:\Windows\syswow64\msvcrt.dll
    LoadedModule[6]=C:\Windows\syswow64\USER32.dll
    LoadedModule[7]=C:\Windows\syswow64\GDI32.dll
    LoadedModule[8]=C:\Windows\syswow64\LPK.dll
    LoadedModule[9]=C:\Windows\syswow64\USP10.dll
    LoadedModule[10]=C:\Windows\syswow64\ADVAPI32.dll
    LoadedModule[11]=C:\Windows\SysWOW64\sechost.dll
    LoadedModule[12]=C:\Windows\syswow64\RPCRT4.dll
    LoadedModule[13]=C:\Windows\syswow64\SspiCli.dll
    LoadedModule[14]=C:\Windows\syswow64\CRYPTBASE.dll
    LoadedModule[15]=C:\Windows\syswow64\ole32.dll
    LoadedModule[16]=C:\Windows\system32\IMM32.DLL
    LoadedModule[17]=C:\Windows\syswow64\MSCTF.dll
    LoadedModule[18]=C:\Windows\syswow64\SHELL32.dll
    LoadedModule[19]=C:\Windows\syswow64\SHLWAPI.dll
    LoadedModule[20]=C:\Windows\system32\MSIMG32.dll
    LoadedModule[21]=C:\Windows\system32\msi.dll
    LoadedModule[22]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll
    LoadedModule[23]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCP80.dll
    LoadedModule[24]=C:\Windows\system32\apphelp.dll
    LoadedModule[25]=C:\Windows\AppPatch\AcGenral.DLL
    LoadedModule[26]=C:\Windows\system32\UxTheme.dll
    LoadedModule[27]=C:\Windows\system32\WINMM.dll
    LoadedModule[28]=C:\Windows\system32\samcli.dll
    LoadedModule[29]=C:\Windows\syswow64\OLEAUT32.dll
    LoadedModule[30]=C:\Windows\system32\MSACM32.dll
    LoadedModule[31]=C:\Windows\system32\VERSION.dll
    LoadedModule[32]=C:\Windows\system32\sfc.dll
    LoadedModule[33]=C:\Windows\system32\sfc_os.DLL
    LoadedModule[34]=C:\Windows\system32\USERENV.dll
    LoadedModule[35]=C:\Windows\system32\profapi.dll
    LoadedModule[36]=C:\Windows\system32\dwmapi.dll
    LoadedModule[37]=C:\Windows\syswow64\SETUPAPI.dll
    LoadedModule[38]=C:\Windows\syswow64\CFGMGR32.dll
    LoadedModule[39]=C:\Windows\syswow64\DEVOBJ.dll
    LoadedModule[40]=C:\Windows\syswow64\urlmon.dll
    LoadedModule[41]=C:\Windows\syswow64\WININET.dll
    LoadedModule[42]=C:\Windows\syswow64\iertutil.dll
    LoadedModule[43]=C:\Windows\syswow64\CRYPT32.dll
    LoadedModule[44]=C:\Windows\syswow64\MSASN1.dll
    LoadedModule[45]=C:\Windows\system32\MPR.dll
    LoadedModule[46]=C:\Windows\AppPatch\AcSpecfc.DLL
    LoadedModule[47]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\COMCTL32.dll
    LoadedModule[48]=C:\Windows\system32\mscms.dll
    LoadedModule[49]=C:\Windows\system32\DDRAW.dll
    LoadedModule[50]=C:\Windows\system32\DCIMAN32.dll
    LoadedModule[51]=C:\Windows\syswow64\COMDLG32.dll
    LoadedModule[52]=C:\Windows\syswow64\WS2_32.dll
    LoadedModule[53]=C:\Windows\syswow64\NSI.dll
    LoadedModule[54]=C:\Program Files (x86)\Common Files\Microsoft Shared\office12\mso.dll
    LoadedModule[55]=S:\Program Files (x86)\Microsoft Office\Office12\1033\MSAIN.DLL
    LoadedModule[56]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\Comctl32.dll
    LoadedModule[57]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSORES.DLL
    LoadedModule[58]=C:\Windows\system32\DavClnt.DLL
    LoadedModule[59]=C:\Windows\system32\DAVHLPR.dll
    LoadedModule[60]=C:\Program Files (x86)\Common Files\Microsoft Shared\office12\1033\MSOINTL.DLL
    LoadedModule[61]=C:\Windows\system32\mscoree.dll
    LoadedModule[62]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    LoadedModule[63]=C:\Windows\syswow64\CLBCatQ.DLL
    LoadedModule[64]=C:\Windows\system32\msimtf.dll
    LoadedModule[65]=S:\Program Files (x86)\Microsoft Office\Office12\MSOSTYLE.DLL
    LoadedModule[66]=C:\Windows\system32\imjp10k.dll
    LoadedModule[67]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\msxml5.dll
    LoadedModule[68]=C:\Program Files (x86)\Common Files\Microsoft Shared\office12\riched20.dll
    LoadedModule[69]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ACECORE.DLL
    LoadedModule[70]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\1033\ACEWSTR.DLL
    LoadedModule[71]=C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\VBE6.DLL
    LoadedModule[72]=C:\PROGRA~2\COMMON~1\MICROS~1\VBA\VBA6\1033\VBE6INTL.DLL
    LoadedModule[73]=C:\Windows\system32\SXS.DLL
    LoadedModule[74]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[75]=C:\Windows\system32\rsaenh.dll
    LoadedModule[76]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ACEERR.DLL
    LoadedModule[77]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\1033\ACEINTL.DLL
    LoadedModule[78]=C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\ACEES.DLL
    LoadedModule[79]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[80]=C:\Windows\system32\MSWSTR10.DLL
    LoadedModule[81]=S:\Program Files (x86)\Microsoft Office\Office12\acedao.dll
    LoadedModule[82]=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
    LoadedModule[83]=C:\Program Files (x86)\Common Files\System\ado\msado15.dll
    LoadedModule[84]=C:\Windows\system32\MSDART.DLL
    LoadedModule[85]=C:\Program Files (x86)\Common Files\System\Ole DB\oledb32.dll
    LoadedModule[86]=C:\Windows\system32\bcrypt.dll
    LoadedModule[87]=C:\Program Files (x86)\Common Files\System\Ole DB\OLEDB32R.DLL
    LoadedModule[88]=C:\Windows\system32\comsvcs.dll
    LoadedModule[89]=C:\Windows\system32\ATL.DLL
    LoadedModule[90]=C:\Windows\SysWOW64\bcryptprimitives.dll
    LoadedModule[91]=C:\Windows\SysWOW64\msjetoledb40.dll
    LoadedModule[92]=C:\Windows\SysWOW64\msjet40.dll
    LoadedModule[93]=C:\Windows\SysWOW64\msjter40.dll
    LoadedModule[94]=C:\Windows\SysWOW64\MSJINT40.DLL
    LoadedModule[95]=C:\Program Files (x86)\Common Files\System\ado\msadrh15.dll
    LoadedModule[96]=C:\Windows\system32\WINSPOOL.DRV
    Sec[0].Key=LCID
    Sec[0].Value=1033
    Sec[1].Key=Brand
    Sec[1].Value=Office12Crash
    Sec[2].Key=skulcid
    Sec[2].Value=1033
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=Microsoft Office Access
    AppPath=S:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
    >>>>>>>>>>>>>>>>>>>
    Log Name:      OSession
    Source:        Microsoft Office 12 Sessions
    Date:          8/4/2013 9:19:38 PM
    Event ID:      7001
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      S-WHSDDPTS1.win.root.sonoma.gov
    Description:
    ID: 2, Application Name: Microsoft Office Access, Application Version: 12.0.6606.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 91 seconds with 60 seconds of active time.  This session ended with a crash.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft Office 12 Sessions" />
        <EventID Qualifiers="0">7001</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-08-05T04:19:38.000000000Z" />
        <EventRecordID>12621</EventRecordID>
        <Channel>OSession</Channel>
        <Computer>S-WHSDDPTS1.win.root.sonoma.gov</Computer>
        <Security />
      </System>
      <EventData>
        <Data>2</Data>
        <Data>Microsoft Office Access</Data>
        <Data>12.0.6606.1000</Data>
        <Data>12.0.6612.1000</Data>
        <Data>91</Data>
        <Data>60</Data>
      </EventData>
    </Event

    Tuesday, August 27, 2013 1:24 PM