steptoe

Apps crash with ntdll.dll error

Recommended Posts

I have this serious problem with portable apps I use now crashing with an error that access to ntdll.dll is denied, this is also happening with some software I use that is installed normally, one piece of software that I use a lot is IMGBurn but this is also happening with other software

I reinstalled windows a day ago and checked the same software before installing the firewall software after a fresh install of Win7 Ultimate 64-bit, everything worked perfectly

I installed the firewall, and it still worked perfectly, so I thought I had cured the issues

Once the system reset, and auto learning had finished, the software failed with ntdll.dll access denied error

If I disable the firewall it works fine again, I eventually found out how to set an exception for the software in question to disallow the firewall for that piece of software, it now works again but is not an ideal situation as I shouldn't have to set an exception

Checking the logs it shows that the firewall is having 'issues' with ntdll.dll, so I tried various options with allowing unrestricted access for ntdll.dll but nothing seems to work. Deleting the firewall rule for ntdll.dll doesn't work as it automatically adds it back to its list, even trying to force learn ntdll.dll doesn't work as again the firewall automatically creates its own rule

I'm using Armor Firewall premium registered 5.0.0.1097 and also Emsisoft Anti-Malware registered 5.1.0.16, the issues seem to point to the firewall and blocking ntdll.dll when software requests to load the dll

Thanks

Share this post


Link to post
Share on other sites

I've reported the same problem (with newer beta builds) and also don't like setting an exception (for ImgBurn).

The developers already promised looking into this.

Share this post


Link to post
Share on other sites

Just installed 5.1.0.1315 beta last night, still the exact same issue with ntdll.dll and 'some' executables, but not everything falls over with an error, and setting an exception doesn't work for all software that is having 'issues' with why the firewall is blocking ntdll.dll

Share this post


Link to post
Share on other sites

Thanks, it appears to be an issue with the program guard, so have turned that off

As I also have installed emsisoft anti-malware, that should cover me for everything, maybe they are clashing with each others program guards ??

Share this post


Link to post
Share on other sites

Have been experiencing this problem (on Windows 7 Ultimate 64-bit). Upgraded to latest stable release v5.1.0.1331

Found that I could now install & run Google Picasa (one of the programs that was causing the error for me).

However, an automated update & run of Thunderbird causes my machine to repeatedly Blue Screen.

Uninstalled Online Armor Premium (by booting in Windows Safe Mode) & machine returns to running Thunderbird without a problem.

Share this post


Link to post
Share on other sites

Hi

Attached are the files from the last Blue Screen crash.

Regards,

Mark

Hi Mark,

Thanks for posting the dump.

I've taken a look and must say that the BSOD is caused by a Virtual Box network driver as shown in the dump analysis:

fffff800`00ba2838 fffff800`0307d1e9 : 00000000`0000000a 00000000`00001858 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff800`00ba2840 fffff800`0307be60 : fffffa80`0a8ed8b0 00000000`00000001 00009b41`0000cce4 fffffa80`0b853020 : nt!KiBugCheckDispatch+0x69
fffff800`00ba2980 fffff800`031acdd3 : fffffa80`0ba830b0 fffffa80`0b7e01a0 fffffa80`0ba898d0 00000000`00000001 : nt!KiPageFault+0x260
fffff800`00ba2b10 fffff880`0167a195 : fffffa80`0ba830b0 fffffa80`0b7c5800 00000000`00000000 00000000`00001868 : nt!ExFreePoolWithTag+0x43
fffff800`00ba2bc0 fffff880`02f77aca : fffffa80`0b852a50 fffffa80`0b852a50 fffffa80`0ba830b0 fffffa80`0b31a1a0 : ndis!NdisFreeMemory+0x15
fffff800`00ba2bf0 fffffa80`0b852a50 : fffffa80`0b852a50 fffffa80`0ba830b0 fffffa80`0b31a1a0 fffffa80`0d26fc20 : VBoxNetFlt+0x3aca
fffff800`00ba2bf8 fffffa80`0b852a50 : fffffa80`0ba830b0 fffffa80`0b31a1a0 fffffa80`0d26fc20 fffffa80`0b31a1a0 : 0xfffffa80`0b852a50
fffff800`00ba2c00 fffffa80`0ba830b0 : fffffa80`0b31a1a0 fffffa80`0d26fc20 fffffa80`0b31a1a0 00000000`00000000 : 0xfffffa80`0b852a50
fffff800`00ba2c08 fffffa80`0b31a1a0 : fffffa80`0d26fc20 fffffa80`0b31a1a0 00000000`00000000 fffff880`0173564e : 0xfffffa80`0ba830b0
fffff800`00ba2c10 fffffa80`0d26fc20 : fffffa80`0b31a1a0 00000000`00000000 fffff880`0173564e fffffa80`0d26fc00 : 0xfffffa80`0b31a1a0
fffff800`00ba2c18 fffffa80`0b31a1a0 : 00000000`00000000 fffff880`0173564e fffffa80`0d26fc00 fffffa80`0b852a50 : 0xfffffa80`0d26fc20
fffff800`00ba2c20 00000000`00000000 : fffff880`0173564e fffffa80`0d26fc00 fffffa80`0b852a50 fffffa80`0ba158d0 : 0xfffffa80`0b31a1a0

I think that Virtual Box devs'd appreciate if you'd send them this crash dump.

Best regards,

Andrey.

Share this post


Link to post
Share on other sites

Hi Mark,

Thanks for posting the dump.

I've taken a look and must say that the BSOD is caused by a Virtual Box network driver as shown in the dump analysis:

I think that Virtual Box devs'd appreciate if you'd send them this crash dump.

Best regards,

Andrey.

Thanks for the quick reply.

I have uninstalled VirtualBox on one of my Win7 installations & indeed it no longer appears to blue screen.

Have asked on the VirtualBox forum how I can send the dump file to the VirtualBox Dev's (they don't allow .dmp files to be uploaded to their forum!)

I am now waiting for a response from their forum.

Share this post


Link to post
Share on other sites

I have been getting this ntdll.dll error when i am trying access Network and Sharing, Control Panel, and other system properties.

Edited by andrewf
Please do not post live links

Share this post


Link to post
Share on other sites

I have been getting this ntdll.dll error when i am trying access Network and Sharing, Control Panel, and other system properties.

The error that this thread relates to was fixed some time ago. Please start your own thread and be sure to provide all the information requested in the Information to include in your support requests sticky.

  • Upvote 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.