Microsoft Visual C++ Runtime Lirary Runtime Error
I keep getting this error message on my server.
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 1/24/2012
Time: 11:19:23 AM
User: N/A
Computer: SERVER5
Description:
Application popup: Microsoft Visual C++ Runtime Library : Runtime Error!
Program: C:\Program Fi...
R6025
- pure virtual function call
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
=============
I've figured out that the process is csrss.exe - Client Server Runtime Process but that's about it.
Any ideas on how to figure out what - Program: C:\Program Fi... references to?
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 1/24/2012
Time: 11:19:23 AM
User: N/A
Computer: SERVER5
Description:
Application popup: Microsoft Visual C++ Runtime Library : Runtime Error!
Program: C:\Program Fi...
R6025
- pure virtual function call
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
=============
I've figured out that the process is csrss.exe - Client Server Runtime Process but that's about it.
Any ideas on how to figure out what - Program: C:\Program Fi... references to?
Davis McCarn
Is this it? http://support.microsoft.com/kb/891194
I'd use sysinternals process explorer and see what are the child objects of csrss.exe, you may want to uninstall the runtime and see if it breaks anything, you can always reinstall it again.
i searched for cssrs.exe and some entries told that it is a trojan with a 70% probability.
you might search for cssrs in windows registry where it might be registered in Run section. you also might look at your c drive, for example by opening a cmd window, and typing
at the commandline.
if you found a cssrs somewhere you should run a up-to-date antivirus from a write-protected usb stick which should be able to solve the issue if it is one.
the 'C:\Program Fi' probably is an output error only where a program tried to resolve a path beginning with %Programfiles% but did not provide a sufficient large buffer for that.
Sara
you might search for cssrs in windows registry where it might be registered in Run section. you also might look at your c drive, for example by opening a cmd window, and typing
c:
cd \
dir /s cssrs.* at the commandline.
if you found a cssrs somewhere you should run a up-to-date antivirus from a write-protected usb stick which should be able to solve the issue if it is one.
the 'C:\Program Fi' probably is an output error only where a program tried to resolve a path beginning with %Programfiles% but did not provide a sufficient large buffer for that.
Sara
ASKER
DavisMcCarn - http://support.microsoft.com/kb/891194 is not relevant to my issue.
ve3ofa - In sysinternals I don't see any child objects for csrss.exe. I'm assuming you mean uninstalling Microsoft VIsual C++ Redistributable, is that a correct assumption?
sarabande - I have verified that the csrss.exe process is a Microsoft Windows Component. Path to file is c:\WINDOWS\system32\crss.e
ve3ofa - In sysinternals I don't see any child objects for csrss.exe. I'm assuming you mean uninstalling Microsoft VIsual C++ Redistributable, is that a correct assumption?
sarabande - I have verified that the csrss.exe process is a Microsoft Windows Component. Path to file is c:\WINDOWS\system32\crss.e
Yes that was a correct assumption.
the error "R6025 pure virtual function call" is non-likely a normal bug but either is because of corrupted memory or because the cssrs.exe was hijacked by some malware.
did you find any entries in registry regarding cssrs?
if you have calls of cssrs.exe below HKLM\Software\Microsoft\Wi
Sara
did you find any entries in registry regarding cssrs?
if you have calls of cssrs.exe below HKLM\Software\Microsoft\Wi
Sara
ASKER
sarabande -One thing to note in both of your posts you have put cssrs.exe. The exe filename is csrss.exe.
In addition, csrss.exe is not listed in HKLM\Software\Microsoft\Wi
Is there any tools that can monitor a process for errors that might shed more light into this issue?
In addition, csrss.exe is not listed in HKLM\Software\Microsoft\Wi
Is there any tools that can monitor a process for errors that might shed more light into this issue?
the csrss.exe is a client server service of microsoft. it could be used to access the internet. if it is true that this process reported the error R6025, then you should find out why the csrss was started and whether it does any communication on your system. the error actually should/could not happen for a normal c++ program, so somewhat is strange with that. i would use a net sniffer to check what the process does before it dies.
Sara
Sara
ASKER
Csrss stands for Client/Server Run-Time Subsystem, and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and implementing some portions of the 16-bit virtual MS-DOS environment. - from http://www.neuber.com/taskmanager/process/csrss.exe.html
I'm just curious... Why would the process die out if it runs at all times?
I'm just curious... Why would the process die out if it runs at all times?
ASKER
FYI... I have setup Process Monitor to capture all events from csrss.exe where the operation contains a value of TCP. This should capture all TCP traffic and show if csrss.exe is sending any traffic to the net. I have also enabled Dr. Watson which should show the program that is causing the R6025 - pure virtual function call error message. I will keep you posted. Some additional info... these errors have only occurred twice on this server. The first error was 1/9/2012 and the second occurrence was 1/24/2010. So it could be a while before this error is regenerated.
as told a pure virtual call hardly could happen by a bug. it is more likely that there was a memory corruption somehow. however, that should lead to more and varying errors.
another possibility for a pure virtual call is when the derived object which should provide the valid virtual call was destroyed somehow nearly same time - for example by another thread or as consequence of another failure - such that the virtual call failed.
but if it happens only every two years, you hardly will find out what happens. that is so rare that it also could be a hardware issue.
Sara
another possibility for a pure virtual call is when the derived object which should provide the valid virtual call was destroyed somehow nearly same time - for example by another thread or as consequence of another failure - such that the virtual call failed.
but if it happens only every two years, you hardly will find out what happens. that is so rare that it also could be a hardware issue.
Sara
ASKER
Correction the second occurrence was 1/24/2012.
Our solution was to uncheck "Show pop-up description for folder and desktop items" in Folder Options.
1) Open Folder Options
Windows XP: Click Start - Control Panel - Appearance and Themes - Folder Options (or Open My Computer and click View - Folder Options)
Windows 7: Click Start - Control Panel - Appearance and Personalization - Folder Options (or Open Computer, click Alt and click View - Folder Options)
2) Click the View tab
3) Uncheck "Show pop-up description for folder and desktop items"
4) Click OK
1) Open Folder Options
Windows XP: Click Start - Control Panel - Appearance and Themes - Folder Options (or Open My Computer and click View - Folder Options)
Windows 7: Click Start - Control Panel - Appearance and Personalization - Folder Options (or Open Computer, click Alt and click View - Folder Options)
2) Click the View tab
3) Uncheck "Show pop-up description for folder and desktop items"
4) Click OK
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ended up finding the issue - posted in last response.