On one of our systems programs keep on crashing. It occurs in programs from Microsoft (Such as Outlook and Excel), but also with third party software (Such as Unit 4 Salaris, a salary administration application, and a program from Sonic Solutions). Using the dump files, I can see that most of the times the last call before the EIP gets messed up is ole32!CClassCache::CDllPat
hEntry::Ca
nUnload_rl
+0x3b. 7
Example stack traces:
OUTLOOK.EXE:
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0586fde8 7753004f 001868d8 0586fe08 00000000 0x7e1e2eec
0586fdfc 7753032f ffffffff 774e1ac0 00000000 ole32!CClassCache::CDllPat
hEntry::Ca
nUnload_rl
+0x3b
0586ff3c 7753028b ffffffff 087dda78 0586ff6c ole32!CClassCache::FreeUnu
sed+0x70
0586ff4c 775300b5 ffffffff 00000000 77596af5 ole32!CoFreeUnusedLibrarie
sEx+0x36
0586ff58 77596af5 00000000 77606a18 00002f20 ole32!CoFreeUnusedLibrarie
s+0x9
0586ff6c 77566ff9 00002f20 00007530 7c802550 ole32!CDllHost::MTAWorkerL
oop+0x25
0586ff8c 7752687c 0586ffb4 774fe3ee 77606a18 ole32!CDllHost::WorkerThre
ad+0xc1
0586ff94 774fe3ee 77606a18 0038002d 05946160 ole32!DLLHostThreadEntry+0
xd
0586ffa8 774fe456 00340035 0586ffec 7c80b713 ole32!CRpcThread::WorkerLo
op+0x1e
0586ffb4 7c80b713 05946160 0038002d 00340035 ole32!CRpcThreadCache::Rpc
WorkerThre
adEntry+0x
1b
0586ffec 00000000 774fe43b 05946160 00000000 kernel32!BaseThreadStart+0
x37
U4SMAIN.EXE (Unit 4 salaris, a salary administration program):
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fc98 7753004f 00167e74 0012fcb8 00000000 0x7e1e2eec
0012fcac 7753032f ffffffff 774e1ac0 00000000 ole32!CClassCache::CDllPat
hEntry::Ca
nUnload_rl
+0x3b
0012fdec 7753028b ffffffff 00145998 0012fe18 ole32!CClassCache::FreeUnu
sed+0x70
0012fdfc 775300b5 ffffffff 00000000 734829af ole32!CoFreeUnusedLibrarie
sEx+0x36
0012fe08 734829af 00ef3834 73482afe 0012fe48 ole32!CoFreeUnusedLibrarie
s+0x9
0012fe10 73482afe 0012fe48 734e6fc6 00ef37fc msvbvm60!CheckFreeUnusedLi
bs+0x2b
0012fe18 734e6fc6 00ef37fc 00ef1fa4 ffffffff msvbvm60!CMsoComponent::FD
oIdle+0x35
0012fe48 734e6e73 00000000 fffffffe 00000000 msvbvm60!SCM::FDoIdleLoop+
0x10a
0012fe6c 734e82ab ffffffff 7343d6db 00ef3764 msvbvm60!SCM::FDoIdle+0xd1
0012fe74 7343d6db 00ef3764 ffffffff ffffffff msvbvm60!SCM_MsoStdCompMgr
::FDoIdle+
0x10
00000000 00000000 00000000 00000000 00000000 msvbvm60!ThunderMsgLoop+0x
91
Should anyone need more information, feel free to ask. I used Google and had a look in the KB of Microsoft, but I did not find really anything matching this problem. I tried to attach some dump files, but these are refused by their extension. However, I can mail them on request.
Thanks for your help all,
Mariƫlla