ntdll.dll error

[TimStone]

I have a program that runs 24/7 to automatically update my distributed software.

At one of my client locations, sometimes it encounters a Windows error with the file ntdll.dll. I have researched this and found this is likely caused by a defective .dll file, which is part of the windows operating system files distributed by Microsoft.

I do not distribute or knowingly interact with this file in my application.

So here is my question: Are there known FWH calls that would address ntdll.dll ?.

This is happening only at one client's location, is not consistent, and causes a Windows, rather than FWH, error. It would not be possible to write a sample that creates the problem, so I strictly want to know about possible calls to this .dll from within FWH. Also, I know that a wide variety of non-FWH programs can also get this same error message, and it has occurred for years.

Thanks for sharing your knowledge on this topic.

[karinha]

Just look at using eventvwr.msc / s and you will see the cause of the program that is giving problems.

https://www.lifewire.com/how-to-fix-ntdll-dll-errors-2624474

Regards.

[Antonio Linares]

Tim,

You can inspect your EXE using this tool to know what DLLs/functions are used:

https://bitbucket.org/fivetech/fivewin-contributions/downloads/peinfo.exe

[TimStone]

This program use the CDXRDD, FTP services, and the xharbour ZIP routine to create an archive. In some cases it could originate emails to an SMTP server.

It does not use a displayed window, or dialogs, nor does it use buttons, or any form of browse. It's pretty basic. It queries a server, downloads some very small ( 2KB ) files, and sometimes downloads larger ( 23 MB ) files. Once per day, it creates an archive of about 150 dbf/fpt files, and stores it locally. Is has the ability to send automatic follow up emails daily, but this site does not use that capability. It sends reports to 3rd party vendors by creating XML files, then using an http transfer, but again, on this site that feature is very limited.

That is why I asked what FWH functions/classes would be making calls to ntdll.dll. That will allow me to know if any of those may be called within the routines run here.

This is the message we find on the computer when the error occurs:

Code: Select all  Expand view  RUN

MLS10aus.exe has stopped working
 
Problem signature:
  Problem Event Name:                        APPCRASH
  Application Name:                             MLS10aus.exe
  Application Version:                           0.0.0.0
  Application Timestamp:                     591f1993
  Fault Module Name:                          ntdll.dll
  Fault Module Version:                        6.1.7601.23915
  Fault Module Timestamp:                  59b94a16
  Exception Code:                                  c00000fd
  Exception Offset:                                0002df76
  OS Version:                                          6.1.7601.2.1.0.272.7
  Locale ID:                                             1033
  Additional Information 1:                  522b
  Additional Information 2:                  522bb16173724810b9b4e274bbfa35e1
  Additional Information 3:                  05b2
  Additional Information 4:                  05b2bd8f22096ef6d5a203b7013091d3
 

[karinha]

Maybe,

https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_programs/programs-close-faulting-module-ntdlldll/54aaaec5-2b53-4e9f-b9a7-b7889a1cd4b6?auth=1

Regards.

[TimStone]

Antonio,

Thanks for the link. I ran that utility ... and it shows absolutely no calls to the file. I suppose it gets tricky now because some other .dll could call it, and that is not tracked in the utility ...

Tim

[TimStone]

I read that response from Microsoft Answers previously, along with about every other article on the web citing this problem. There are no definitive answers, but the common thread seems to focus on a corrupt .dll on the computer.

My problem is simple. The customer uses an IT company that refuses to follow my installation instructions, has done crazy stuff, and I find the performance on their installed network is the slowest I have ever seen. In fact it is slower than what we experienced under the earliest days of networking with DOS.

[Rick Lipkin]

Tim

This may be a nvidia driver problem on your clients machine ..



Here is the link to a thread that may help you ..

https://answers.microsoft.com/en-us/win ... 4b6?auth=1

Rick Lipkin

[TimStone]

Rich,

I also saw that article. The problem is the IT folks see this client as a cash cow, yet have a terrible system in place. Whenever they have problems ( which none of my other clients experience ) the IT guys will blame it on me, though I can show the client ample documentation to back up my concerns. I have a hunch the owner of the business is related to the IT company head, because he's giving them a ton of money to do the worst work I've ever seen. I suggested they get a 2nd opinion from another IT company and they won't even consider it.

The point is I have no input into the process.

Tim