Solved

faulting application name spoolsv.exe windows server 2008r

Posted on 2014-11-13
3
499 Views
Last Modified: 2015-12-08
how do i recover from this. my print spooler will not start with the above error.
0
Comment
Question by:nmantime
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 17

Expert Comment

by:bigeven2002
ID: 40441624
Hello,

Can you provide some more information on the error?  On the error screen where it shows spoolsv.exe not working, there should be a view details link.  Also, can you check the event viewer for any events relating to Print Spooler or Spoolsv.exe.  Can you post them?

In the meantime, when was the last time it worked?  Did you apply any windows updates recently?  Did you install any additional apps?  Have you scanned for viruses and malware?
0
 

Author Comment

by:nmantime
ID: 40441650
Yes we have scanned for viruses and malware. We have not ran any windows updates recently.

Log Name:      Application
Source:        Application Error
Date:          11/13/2014 4:56:39 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ric841vm8print1.ric841.chevrontexaco.net
Description:
Faulting application spoolsv.exe, version 6.0.6002.18294, time stamp 0x4c6aa29a, faulting module HpTcpMon.dll, version 7.2.5.51, time stamp 0x4ab0e4d3, exception code 0xc0000005, fault offset 0x000000000000ad75, process id 0xbfc, application start time 0x01cfffa5d8f58692.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-11-14T00:56:39.000Z" />
    <EventRecordID>177143</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ric841vm8print1.ric841.chevrontexaco.net</Computer>
    <Security />
  </System>
  <EventData>
    <Data>spoolsv.exe</Data>
    <Data>6.0.6002.18294</Data>
    <Data>4c6aa29a</Data>
    <Data>HpTcpMon.dll</Data>
    <Data>7.2.5.51</Data>
    <Data>4ab0e4d3</Data>
    <Data>c0000005</Data>
    <Data>000000000000ad75</Data>
    <Data>bfc</Data>
    <Data>01cfffa5d8f58692</Data>
  </EventData>
.......................................................................................................................................



Log Name:      Application
Source:        Application Error
Date:          11/13/2014 4:56:29 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ric841vm8print1.ric841.chevrontexaco.net
Description:
Faulting application spoolsv.exe, version 6.0.6002.18294, time stamp 0x4c6aa29a, faulting module HpTcpMon.dll, version 7.2.5.51, time stamp 0x4ab0e4d3, exception code 0xc0000005, fault offset 0x000000000000ad75, process id 0x14fc, application start time 0x01cfffa5d2c8e6f0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-11-14T00:56:29.000Z" />
    <EventRecordID>177142</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ric841vm8print1.ric841.chevrontexaco.net</Computer>
    <Security />
  </System>
  <EventData>
    <Data>spoolsv.exe</Data>
    <Data>6.0.6002.18294</Data>
    <Data>4c6aa29a</Data>
    <Data>HpTcpMon.dll</Data>
    <Data>7.2.5.51</Data>
    <Data>4ab0e4d3</Data>
    <Data>c0000005</Data>
    <Data>000000000000ad75</Data>
    <Data>14fc</Data>
    <Data>01cfffa5d2c8e6f0</Data>
  </EventData>
</Event>
0
 
LVL 17

Accepted Solution

by:
bigeven2002 earned 500 total points
ID: 40441935
Ok thanks for posting.  Looks like HpTcpMon.dll is also involved in the crash.  So I assume you have an HP printer connected to the this server.

I found a Microsoft KB article related to this here.

From what I read there, there is a registry edit that needs to be done so let's try this.

Workaround for the problem that is caused by the HPtcpMon.dll file

    Start Registry Editor.
    Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\HP Standard TCP/IP Port
    On the File menu, click Export.
    In the File name box, type HPprinter, and then click Save.

    Note If you want to restore this registry subkey, double-click the HPprinter.reg file that you save in this step.
    Right-click the HP Standard TCP/IP Port registry entry, and then click Delete.
    Click Yes.
    Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port
    Double-click Driver, and then verify that the value of the Value data box is tcpmon.dll.

    Note If the Driver registry entry does not exist or its value is not tcpmon.dll, create the Driver registry entry, and then set its value to tcpmon.dll. To do this, follow these steps:
        On the Edit menu, point to New, and then click String Value.
        Type Driver, and then press ENTER.
        Right-click Driver, and then click Modify.
        In the Value data box, type tcpmon.dll, and then click OK.
    Exit Registry Editor, and then restart the computer.
    Rename the HPtcpMon.dll file to "HPtcpMon.old." The file is in the following location:
    C:\WINDOWS\system32\HPTcpMon.dll
0

Featured Post

[Webinar] Code, Load, and Grow

Managing multiple websites, servers, applications, and security on a daily basis? Join us for a webinar on May 25th to learn how to simplify administration and management of virtual hosts for IT admins, create a secure environment, and deploy code more effectively and frequently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction People like FTP.  It's a solid, stable, robust protocol for quickly transferring files between two hosts using TCP/IP.  In most cases it's much faster than SMB or CIFS, and certainly much easier to set up between organizations.  This…
Have you ever stumbled upon a software that is so great that you just love? It happened to me. Love at first sight. Filezilla Server.   Ok its not the most advanced ftp server I've came across. But its a fairly simple piece of software to get the …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question