Link to home
Start Free TrialLog in
Avatar of JamesonJendreas
JamesonJendreas

asked on

icaapi.dll Faults on boot up - Windows 2003 Server SP2

I've got a server box, running windows 2003 server SP2 and on boot we get a generic win32 error.  On looking into the event viewer, it shows svchost crashing on module icaapi.dll.   I've copied the icaapi.dll from my c:\windows\servicepacks\i386 to c:\windows\system32 and overwritten, but it still faults on boot.  I'm looking to see a)if there's a fix, b)what this module actually does (sounds like it is associated with the api)
Any Suggestions
JJ
Avatar of YiHateu
YiHateu
Flag of United States of America image

icaapi.dll (DLL Interface to TermDD Device Driver) is a component from the software Microsoft(R) Windows (R) 2000 Operating System version 5.0.6654 by Microsoft Corporation.
If you are running Terminnal Services or Citrix on this box you may want to disable these for testing purposes
Avatar of JamesonJendreas
JamesonJendreas

ASKER

Interesting, this is a 2003 box w/o terminal services installed - why would it be trying then to run a DLL for term services I don't know.  Not too sure if it is related, but I am unable to connect to the unit via RDP
Terminal Services
Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.

In general there are better tools available and this service can be disabled.

Control Panel - Administrative Tools - Services
We use RDP heavily for management of our servers.  Granted we also use Dameware for console based logins but RDP is very useful to us (the server is in a satellite office over a VPN).  I'm disabling and restarting to see how that effects the error

Disabling Terminal services and reboot, we still get teh error on boot.  Checking autoruns from sysinternals to see if it is running from seem rouge process.
Interestingly we also see the following errors in the event viewer:
Event Type:      Error
Event Source:      LoadPerf
Event Category:      None
Event ID:      3011
Date:            4/20/2010
Time:            1:03:12 PM
User:            N/A
Computer:      2K3RL
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 6e 05 00 00   ò...n...

AND

Event Type:      Error
Event Source:      LoadPerf
Event Category:      None
Event ID:      3012
Date:            4/20/2010
Time:            1:03:12 PM
User:            N/A
Computer:      2K3RL
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 37 07 00 00 00 00 00 00   7.......
0008: 00 00 00 00 09 03 00 00   ........


ASKER CERTIFIED SOLUTION
Avatar of YiHateu
YiHateu
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial