Recent crush/bug report + conflict with mouse clicks

64 bit bug reports
1

I’ve sent you a mail cause cfp resognised a bug. After that - and some hours(?) - i also got an error with the “servicelayer module” (see picture).

Additionaly, i wanted to take a screenshot of the error message: soon as i activated the hypersnap’s screenshot buttons, the hypersnap crashed, cause nor i could caputre a picture or answer the firewall to allow the run. The cfp permission window remained there after the crash and i set up the HS as a truted application and the problem has gone.

I forgot to mention - maybe not important - i did a full scan to set up profile list before the problems (the problems weren’t happened right after this).

Error reports at event viewer:

Napló neve:    Application
Forrás:        Application Error
Dátum:         2007.08.24. 16:45:30
Eseményazonosító:1000
Feladatkategória:(100)
Szint:         Hiba
Kulcsszavak:   Klasszikus
Felhasználó:   n.a.
Számítógép:    [i]computernamehere...[/i]
Leírás:
A hibát okozó alkalmazás: ServiceLayer.exe, verzió: 6.83.78.3, időbélyeg: 0x46079b1e, a hibát okozó modul: SETUPAPI.dll_unloaded, verziószám: 0.0.0.0, időbélyeg: 0x4549bdb0, kivételkód: 0xc0000005, hiba pozíciója: 0x76286fa5, folyamatazonosító: 0x994, az alkalmazás indításának időpontja: 0x01c7e62e1c84c4be.
Esemény XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2007-08-24T14:45:30.000Z" />
    <EventRecordID>5694</EventRecordID>
    <Channel>Application</Channel>
    <Computer>[i]computernamehere[/i]...</Computer>
    <Security />
  </System>
  <EventData>
    <Data>ServiceLayer.exe</Data>
    <Data>6.83.78.3</Data>
    <Data>46079b1e</Data>
    <Data>SETUPAPI.dll_unloaded</Data>
    <Data>0.0.0.0</Data>
    <Data>4549bdb0</Data>
    <Data>c0000005</Data>
    <Data>76286fa5</Data>
    <Data>994</Data>
    <Data>01c7e62e1c84c4be</Data>
  </EventData>
</Event>


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="ServiceLayer" /> 
  <EventID Qualifiers="0">0</EventID> 
  <Level>4</Level> 
  <Task>0</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2007-08-24T16:16:40.000Z" /> 
  <EventRecordID>5695</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>[i]computer[/i]..</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>Service started</Data> 
  </EventData>
  </Event>

 <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Hang" /> 
  <EventID Qualifiers="0">1002</EventID> 
  <Level>2</Level> 
  <Task>101</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2007-08-24T16:20:13.000Z" /> 
  <EventRecordID>5696</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>[i]computer[/i]..</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>HprSnap6.exe</Data> 
  <Data>6.21.1.0</Data> 
  <Data>e94</Data> 
  <Data>01c7e62e1684067e</Data> 
  <Data>288</Data> 
  <Binary>55006E006B006E006F0077006E0000000000</Binary> 
  </EventData>
  </Event>


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" /> 
  <EventID Qualifiers="0">1000</EventID> 
  <Level>2</Level> 
  <Task>100</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2007-08-24T16:20:48.000Z" /> 
  <EventRecordID>5697</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>[i]compputer[/i]..</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>TsHelper64.exe</Data> 
  <Data>1.0.0.1</Data> 
  <Data>469cef5f</Data> 
  <Data>unknown</Data> 
  <Data>0.0.0.0</Data> 
  <Data>00000000</Data> 
  <Data>c0000005</Data> 
  <Data>0000000000000000</Data> 
  <Data>e0c</Data> 
  <Data>01c7e66ababb08d0</Data> 
  </EventData>
  </Event>

Some other entries after these:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" /> 
  <EventID Qualifiers="0">1001</EventID> 
  <Level>4</Level> 
  <Task>0</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2007-08-24T16:25:04.000Z" /> 
  <EventRecordID>5698</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>[i]computer[/i]...</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>72972989</Data> 
  <Data>5</Data> 
  <Data>BEX</Data> 
  <Data>Nincs</Data> 
  <Data>0</Data> 
  <Data>ServiceLayer.exe</Data> 
  <Data>6.83.78.3</Data> 
  <Data>46079b1e</Data> 
  <Data>SETUPAPI.dll_unloaded</Data> 
  <Data>0.0.0.0</Data> 
  <Data>4549bdb0</Data> 
  <Data>76286fa5</Data> 
  <Data>c0000005</Data> 
  <Data>00000008</Data> 
  <Data /> 
  <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report05a3e557\WERFF5A.tmp.version.txt C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report05a3e557\WER26.tmp.appcompat.txt C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report05a3e557\WER61E7.tmp.hdmp C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Report05a3e557\WERD9D5.tmp.mdmp</Data> 
  <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report12e01990</Data> 
  </EventData>
  </Event>

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Windows Error Reporting" /> 
  <EventID Qualifiers="0">1001</EventID> 
  <Level>4</Level> 
  <Task>0</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2007-08-24T16:25:56.000Z" /> 
  <EventRecordID>5699</EventRecordID> 
  <Channel>Application</Channel> 
  <Computer>[i]computer[/i]...</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>61131344</Data> 
  <Data>5</Data> 
  <Data>BEX64</Data> 
  <Data>Nincs</Data> 
  <Data>0</Data> 
  <Data>TsHelper64.exe</Data> 
  <Data>1.0.0.1</Data> 
  <Data>469cef5f</Data> 
  <Data>StackHash_b7d8</Data> 
  <Data>0.0.0.0</Data> 
  <Data>00000000</Data> 
  <Data>0000000000000000</Data> 
  <Data>c0000005</Data> 
  <Data>0000000000000008</Data> 
  <Data /> 
  <Data>C:\Users\[i]user[/i]\AppData\Local\Temp\WER3856.tmp.version.txt C:\Users\[i]user[/i]\AppData\Local\Temp\WER4FCD.tmp.appcompat.txt C:\Users\[i]user[/i]\AppData\Local\Temp\WER53B5.tmp.hdmp</Data> 
  <Data>C:\Users\[i]user[/i]\AppData\Local\Microsoft\Windows\WER\ReportArchive\Report0684e853</Data> 
  </EventData>
  </Event>

Computer and user name replaced.

[attachment deleted by admin]

2

I reviewed the events and found another, not reported issue with restore point, too. I haven’t had this problem before.

3

Well, for the tshelper problem i got a solution: i’ve added the file to the computer security policy, then the firewall asked what to do when i’ve started the hypersnap application.