S
S
Sergey2020-04-21 12:35:58
Windows
Sergey, 2020-04-21 12:35:58

Why does Adobe Reader XI crash a minute after launch?

For users only on Windows 7, Adobe Acrobat began to close with an error, the problem appeared one day and for everyone, while those who work on Windows 10 did not find any problems.
There were definitely no updates to the OS, the antivirus was also not updated these days, with the antivirus disabled, the problem persists. I did not find the problem in the Windows log, I did not see any related errors or problems.

I tried to analyze the process dump through WinDBG, I found there are references to wow64cpu.dll, but unfortunately I don’t understand much in the analysis of dumps and I can’t localize what is causing the failure, I removed the contents of the analysis from WinDBG under the spoiler.

spoiler
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Tue Apr 21 13:24:05.000 2020 (UTC + 5:00)
System Uptime: 7 days 4:13:27.856
Process Uptime: 0 days 0:01:26.000
.............................WARNING: msvcp100 overlaps msvcr100
...............WARNING: rsaenh overlaps cpadvai
.WARNING: RpcRtRemote overlaps detoured
...................
............WARNING: dhcpcsvc6 overlaps wship6
...WARNING: nlaapi overlaps mswsock
....WARNING: FWPUCLNT overlaps winnsi
...............
For analysis of this file, run !analyze -v
wow64cpu!CpupSyscallStub+0x9:
00000000`750a2e09 c3 ret
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 0

Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on B001001152

Key : Analysis.DebugData
Value: CreateObject

Key : Analysis.DebugModel
Value: CreateObject

Key : Analysis.Elapsed.Sec
Value: 100

Key : Analysis.Memory.CommitPeak.Mb
Value: 75

Key : Analysis.System
Value: CreateObject

Key : Timeline.OS.Boot.DeltaSec
Value: 620007

Key : Timeline.Process.Start.DeltaSec
Value: 86

ADDITIONAL_XML: 1

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 0

FAULTING_THREAD: 00002690

PROCESS_NAME: AcroRd32.exe

ERROR_CODE: (NTSTATUS) 0x80000003 - { } .

EXCEPTION_CODE_STR: 80000003

DETOURED_IMAGE: 1

STACK_TEXT:
00000000`000ae618 00000000`750a283e : 00000000`75407286 00000000`ffed0023 00000000`00000246 00000000`0025dcbc : wow64cpu!CpupSyscallStub+0x9
00000000`000ae620 00000000`7511d286 : 00000000`00000000 00000000`750a1920 ffffffff`fffffffe 00000000`0000001d : wow64cpu!WaitForMultipleObjects32+0x3b
00000000`000ae6e0 00000000`7511c69e : 00000000`00000000 00000000`00000000 00000000`75114b10 00000000`7ffe0030 : wow64!RunCpuSimulation+0xa
00000000`000ae730 00000000`77a14393 : 00000000`004030d0 00000000`00000000 00000000`77b12e70 00000000`779e7550 : wow64!Wow64LdrpInitialize+0x42a
00000000`000aec80 00000000`77a796e0 : 00000000`00000000 00000000`77a86bdd 00000000`000af230 00000000`00000000 : ntdll!LdrpInitializeProcess+0x17e3
00000000`000af170 00000000`77a2373e : 00000000`000af230 00000000`00000000 00000000`fffdf000 00000000`00000000 : ntdll! ?? ::FNODOBFM::`string'+0x22770
00000000`000af1e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!LdrInitializeThunk+0xe

STACK_COMMAND: ~0s; .ecxr ; kb

SYMBOL_NAME: wow64cpu!CpupSyscallStub+9

MODULE_NAME: wow64cpu

IMAGE_NAME: wow64cpu.dll

FAILURE_BUCKET_ID: BREAKPOINT_80000003_wow64cpu.dll!CpupSyscallStub

OSPLATFORM_TYPE: x64

OSNAME: Windows 7

FAILURE_ID_HASH: {289a12fb-10fd-bb5b-3edc-4567046643a5}

Followup: MachineOwner
---------

In principle, the problem is solved by reinstalling to a new version, but the desire to understand why this problem occurs.

Answer the question

In order to leave comments, you need to log in

7 answer(s)
C
Chelobot, 2020-04-23
@7Yang7

Good afternoon!
The other day, the same problem with Acrobat Reader got out, and also, only on Windows 7.
Reinstallation is not an option at all, because due to recent events, employees, almost 1000 people, have been taken to a remote location, and software installation requires admin rights.
I won like this: I
downloaded a more recent library AcroRd32.dll, version 11.0.6.70 (our current version is 11.0.0.379) I
copied the folder from Reader to disk D, (there are no admin rights required), in the Reader folder I replaced the dll with the downloaded , launched AcroRd32.exe, opened any PDF through the File-Open menu, waited - made sure that AR did not crash. Closed.
After that, regular AR from drive C, with the original dll, works perfectly fine.
Pure scam...
Suspicion of a time bomb or motivation to upgrade to Windows 10..

M
Maxim Kersantinov, 2020-04-23
@Kersantinov

There were several problematic machines, both had version 11.0.0 Updated
to 11.0.23, while they work.

O
OlegSht, 2020-05-04
@OlegSht

The same problem, unequivocally forced to update
Solution: denied access to the Internet to the file AcroRd32.exe, after restarting it works without problems

A
antonstv, 2020-05-08
@antonstv

ardownload.adobe.com/pub/adobe/reader/win/11.x/11....
Updating reader 11 to 11.0.23
after the upgrade works fine.

B
BAHO161, 2020-06-30
@BAHO161

Closed access to *.teliacarrier-cust.com
Immediately everything was ok.

H
HitoAll, 2020-11-17
@HitoAll

The problem is exactly the same, only with the pro version. Blocked access to the site acroipm.adobe.com and the problem went away.

A
Adamos, 2020-04-21
@Adamos

Maybe it climbs to update and falls? Adobe claims that the update of its products can be forcibly turned off with this key:

[HKLM\Software\Policies\Adobe\<product name>\<version>\FeatureLockdown\cServices]
"bUpdater"=dword:00000000

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question