Hello.
I have a strange problem with the print spooler on a Windows Server 2008 R2 VM.
The machine is used for generating (and printing) reports and the like.
Users are connecting to the server via RDP.
However, whenever a user closes its RDP connection (i.e. disconnect, not logoff), the print spooler will almost always crash and restart.
The crash is noticable because documents won't print in the short period of time the spooler isn't running (obviously).
I can also see records of the crash in the event viewer. For every crash, there's an event 7031 (Print Spooler terminated unexpectedly).
Also, an AppCrash report is generated by WER in C:\ProgramData\Microsoft\Windows\WER\ReportQueue.
Here's an example of such a report (Report.wer):
Version=1
EventType=APPCRASH
EventTime=130286608721167940
ReportType=2
Consent=1
UploadTime=130286608795267465
ReportIdentifier=3541cedd-4aee-11e3-9dca-005056890019
IntegratorReportIdentifier=3541cedc-4aee-11e3-9dca-005056890019
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=spoolsv.exe
Sig[1].Name=Anwendungsversion
Sig[1].Value=6.1.7601.17777
Sig[2].Name=Anwendungszeitstempel
Sig[2].Value=4f35fc1d
Sig[3].Name=Fehlermodulname
Sig[3].Value=StackHash_d5ab
Sig[4].Name=Fehlermodulversion
Sig[4].Value=6.1.7601.17725
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Value=4ec4aa8e
Sig[6].Name=Ausnahmecode
Sig[6].Value=c0000374
Sig[7].Name=Ausnahmeoffset
Sig[7].Value=00000000000c40f2
DynamicSig[1].Name=Betriebsystemversion
DynamicSig[1].Value=6.1.7601.2.1.0.272.7
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Value=3079
DynamicSig[22].Name=Zusatzinformation 1
DynamicSig[22].Value=d5ab
DynamicSig[23].Name=Zusatzinformation 2
DynamicSig[23].Value=d5abc976d4e425dbf233e73c71fa1102
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Value=836a
DynamicSig[25].Name=Zusatzinformation 4
DynamicSig[25].Value=836a3c296019f9ef7e68c9a10a14d0a8
UI[2]=C:\Windows\System32\spoolsv.exe
UI[5]=Online nach einer Lösung suchen (empfohlen)
UI[6]=Später nach einer Lösung suchen (empfohlen)
UI[7]=Schließen
UI[8]=Spoolersubsystem-Anwendung wurde beendet und geschlossen.
UI[9]=Die Anwendung wird aufgrund eines Problems nicht mehr richtig ausgeführt. Sie erhalten Nachricht, wenn eine Lösung verfügbar ist.
UI[10]=S&chließen
LoadedModule[0]=C:\Windows\System32\spoolsv.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\system32\kernel32.dll
LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\system32\msvcrt.dll
LoadedModule[5]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[6]=C:\Windows\system32\RPCRT4.dll
LoadedModule[7]=C:\Windows\system32\USER32.dll
LoadedModule[8]=C:\Windows\system32\GDI32.dll
LoadedModule[9]=C:\Windows\system32\LPK.dll
LoadedModule[10]=C:\Windows\system32\USP10.dll
LoadedModule[11]=C:\Windows\System32\POWRPROF.dll
LoadedModule[12]=C:\Windows\system32\SETUPAPI.dll
LoadedModule[13]=C:\Windows\system32\CFGMGR32.dll
LoadedModule[14]=C:\Windows\system32\ADVAPI32.dll
LoadedModule[15]=C:\Windows\system32\OLEAUT32.dll
LoadedModule[16]=C:\Windows\system32\ole32.dll
LoadedModule[17]=C:\Windows\system32\DEVOBJ.dll
LoadedModule[18]=C:\Windows\System32\DNSAPI.dll
LoadedModule[19]=C:\Windows\system32\WS2_32.dll
LoadedModule[20]=C:\Windows\system32\NSI.dll
LoadedModule[21]=C:\Windows\system32\IMM32.DLL
LoadedModule[22]=C:\Windows\system32\MSCTF.dll
LoadedModule[23]=C:\Windows\System32\CRYPTBASE.dll
LoadedModule[24]=C:\Windows\System32\slc.dll
LoadedModule[25]=C:\Windows\System32\RpcRtRemote.dll
LoadedModule[26]=C:\Windows\system32\mswsock.dll
LoadedModule[27]=C:\Windows\System32\wshtcpip.dll
LoadedModule[28]=C:\Windows\System32\wship6.dll
LoadedModule[29]=C:\Windows\System32\secur32.dll
LoadedModule[30]=C:\Windows\System32\SSPICLI.DLL
LoadedModule[31]=C:\Windows\System32\credssp.dll
LoadedModule[32]=C:\Windows\System32\WTSAPI32.dll
LoadedModule[33]=C:\Windows\System32\WINSTA.dll
LoadedModule[34]=C:\Windows\System32\clusapi.dll
LoadedModule[35]=C:\Windows\System32\cryptdll.dll
LoadedModule[36]=C:\Windows\System32\IPHLPAPI.DLL
LoadedModule[37]=C:\Windows\System32\WINNSI.DLL
LoadedModule[38]=C:\Windows\System32\rasadhlp.dll
LoadedModule[39]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[40]=C:\Windows\system32\CLBCatQ.DLL
LoadedModule[41]=C:\Windows\system32\umb.dll
LoadedModule[42]=C:\Windows\system32\ATL.DLL
LoadedModule[43]=C:\Windows\system32\WINTRUST.dll
LoadedModule[44]=C:\Windows\system32\CRYPT32.dll
LoadedModule[45]=C:\Windows\system32\MSASN1.dll
LoadedModule[46]=C:\Windows\System32\localspl.dll
LoadedModule[47]=C:\Windows\System32\SPOOLSS.DLL
LoadedModule[48]=C:\Windows\System32\srvcli.dll
LoadedModule[49]=C:\Windows\system32\winspool.drv
LoadedModule[50]=C:\Windows\System32\PrintIsolationProxy.dll
LoadedModule[51]=C:\Windows\System32\HPMPW081.DLL
LoadedModule[52]=C:\Windows\System32\VERSION.dll
LoadedModule[53]=C:\Windows\System32\HPMPM081.DLL
LoadedModule[54]=C:\Windows\System32\USERENV.dll
LoadedModule[55]=C:\Windows\System32\profapi.dll
LoadedModule[56]=C:\Windows\System32\dbghelp.dll
LoadedModule[57]=C:\Windows\System32\hppmopjl.dll
LoadedModule[58]=C:\Windows\System32\hpz3lw71.dll
LoadedModule[59]=C:\Windows\System32\tcpmon.dll
LoadedModule[60]=C:\Windows\System32\snmpapi.dll
LoadedModule[61]=C:\Windows\System32\wsnmp32.dll
LoadedModule[62]=C:\Windows\System32\msxml6.dll
LoadedModule[63]=C:\Windows\system32\SHLWAPI.dll
LoadedModule[64]=C:\Windows\System32\usbmon.dll
LoadedModule[65]=C:\Windows\system32\wls0wndh.dll
LoadedModule[66]=C:\Windows\System32\WSDMon.dll
LoadedModule[67]=C:\Windows\System32\wsdapi.dll
LoadedModule[68]=C:\Windows\System32\webservices.dll
LoadedModule[69]=C:\Windows\System32\FirewallAPI.dll
LoadedModule[70]=C:\Windows\system32\FunDisc.dll
LoadedModule[71]=C:\Windows\system32\fdPnp.dll
LoadedModule[72]=C:\Windows\system32\spool\PRTPROCS\x64\winprint.dll
LoadedModule[73]=C:\Windows\System32\GPAPI.dll
LoadedModule[74]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp118.dll
LoadedModule[75]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppw71.dll
LoadedModule[76]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppwn7.dll
LoadedModule[77]=C:\Windows\system32\spool\PRTPROCS\x64\TPWinPrn.dll
LoadedModule[78]=C:\Windows\System32\WSOCK32.dll
LoadedModule[79]=C:\Windows\System32\RESUTILS.dll
LoadedModule[80]=C:\Windows\system32\NLAapi.dll
LoadedModule[81]=C:\Windows\system32\napinsp.dll
LoadedModule[82]=C:\Windows\System32\winrnr.dll
LoadedModule[83]=C:\Windows\System32\netapi32.dll
LoadedModule[84]=C:\Windows\System32\netutils.dll
LoadedModule[85]=C:\Windows\System32\wkscli.dll
LoadedModule[86]=C:\Windows\System32\SAMCLI.DLL
LoadedModule[87]=C:\Windows\System32\SAMLIB.dll
LoadedModule[88]=C:\Windows\System32\dsrole.dll
LoadedModule[89]=C:\Windows\System32\DEVRTL.dll
LoadedModule[90]=C:\Windows\System32\SPINF.dll
LoadedModule[91]=C:\Windows\System32\win32spl.dll
LoadedModule[92]=C:\Windows\System32\CRYPTSP.dll
LoadedModule[93]=C:\Windows\system32\rsaenh.dll
LoadedModule[94]=C:\Windows\System32\cscapi.dll
LoadedModule[95]=C:\Windows\system32\kerberos.DLL
LoadedModule[96]=C:\Windows\System32\bcrypt.dll
LoadedModule[97]=C:\Windows\system32\bcryptprimitives.dll
LoadedModule[98]=C:\Windows\System32\ntmarta.dll
LoadedModule[99]=C:\Windows\system32\WLDAP32.dll
LoadedModule[100]=C:\Windows\system32\SHELL32.dll
LoadedModule[101]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll
LoadedModule[102]=C:\Windows\system32\COMDLG32.dll
LoadedModule[103]=C:\Windows\System32\SPFILEQ.dll
LoadedModule[104]=C:\Windows\System32\ncrypt.dll
LoadedModule[105]=C:\Windows\System32\cryptnet.dll
LoadedModule[106]=C:\Windows\System32\Cabinet.dll
LoadedModule[107]=C:\Windows\System32\sfc.dll
LoadedModule[108]=C:\Windows\System32\sfc_os.DLL
LoadedModule[109]=C:\Windows\System32\logoncli.dll
LoadedModule[110]=C:\Windows\system32\spool\DRIVERS\x64\3\ZDNui56.dll
LoadedModule[111]=C:\Windows\system32\spool\DRIVERS\x64\3\ZDNdrv56.dll
LoadedModule[112]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_D7754.DLL
LoadedModule[113]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DCD1F.DLL
LoadedModule[114]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DFB05.DLL
LoadedModule[115]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_D561A.DLL
LoadedModule[116]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_D89A9.DLL
LoadedModule[117]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DFC82.DLL
LoadedModule[118]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DE1E7.DLL
LoadedModule[119]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DB051.DLL
LoadedModule[120]=C:\Windows\system32\spool\DRIVERS\x64\3\CNWACMUI.DLL
LoadedModule[121]=C:\Windows\system32\mscms.dll
LoadedModule[122]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DAFCE.DLL
LoadedModule[123]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DBB31.DLL
LoadedModule[124]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_D2A11.DLL
LoadedModule[125]=C:\Windows\system32\spool\DRIVERS\x64\3\ss#zpl-u.d64
LoadedModule[126]=C:\Windows\system32\spool\DRIVERS\x64\3\UNIDRVUI.DLL
LoadedModule[127]=C:\Windows\system32\spool\DRIVERS\x64\3\BTARDUI.DLL
LoadedModule[128]=C:\Windows\system32\spool\DRIVERS\x64\3\CNP50407_DFB05.DLL
File[0].CabName=AppCompat.txt
File[0].Path=WER7BDE.tmp.appcompat.txt
File[0].Flags=65538
File[0].Type=5
File[0].Original.Path=C:\Windows\Temp\WER7BDE.tmp.appcompat.txt
File[1].CabName=WERInternalMetadata.xml
File[1].Path=WER7BFF.tmp.WERInternalMetadata.xml
File[1].Flags=65538
File[1].Type=5
File[1].Original.Path=C:\Windows\Temp\WER7BFF.tmp.WERInternalMetadata.xml
File[2].CabName=memory.hdmp
File[2].Path=WER7C00.tmp.hdmp
File[2].Flags=2097152
File[2].Type=3
File[2].Original.Path=C:\Windows\Temp\WER7C00.tmp.hdmp
File[3].CabName=minidump.mdmp
File[3].Path=WER9673.tmp.mdmp
File[3].Flags=2162690
File[3].Type=2
File[3].Original.Path=C:\Windows\Temp\WER9673.tmp.mdmp
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=APPCRASH
AppName=Spoolersubsystem-Anwendung
AppPath=C:\Windows\System32\spoolsv.exe
Sorry about my localized installation, I hope this is useful.
I think the important part is "Fehlermodulname", which translates to Fault module.
Has anybody got any clue how I could go about debugging this?
Thanks in advance!
I have a strange problem with the print spooler on a Windows Server 2008 R2 VM.
The machine is used for generating (and printing) reports and the like.
Users are connecting to the server via RDP.
However, whenever a user closes its RDP connection (i.e. disconnect, not logoff), the print spooler will almost always crash and restart.
The crash is noticable because documents won't print in the short period of time the spooler isn't running (obviously).
I can also see records of the crash in the event viewer. For every crash, there's an event 7031 (Print Spooler terminated unexpectedly).
Also, an AppCrash report is generated by WER in C:\ProgramData\Microsoft\Windows\WER\ReportQueue.
Here's an example of such a report (Report.wer):
Version=1
EventType=APPCRASH
EventTime=130286608721167940
ReportType=2
Consent=1
UploadTime=130286608795267465
ReportIdentifier=3541cedd-4aee-11e3-9dca-005056890019
IntegratorReportIdentifier=3541cedc-4aee-11e3-9dca-005056890019
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=spoolsv.exe
Sig[1].Name=Anwendungsversion
Sig[1].Value=6.1.7601.17777
Sig[2].Name=Anwendungszeitstempel
Sig[2].Value=4f35fc1d
Sig[3].Name=Fehlermodulname
Sig[3].Value=StackHash_d5ab
Sig[4].Name=Fehlermodulversion
Sig[4].Value=6.1.7601.17725
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Value=4ec4aa8e
Sig[6].Name=Ausnahmecode
Sig[6].Value=c0000374
Sig[7].Name=Ausnahmeoffset
Sig[7].Value=00000000000c40f2
DynamicSig[1].Name=Betriebsystemversion
DynamicSig[1].Value=6.1.7601.2.1.0.272.7
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Value=3079
DynamicSig[22].Name=Zusatzinformation 1
DynamicSig[22].Value=d5ab
DynamicSig[23].Name=Zusatzinformation 2
DynamicSig[23].Value=d5abc976d4e425dbf233e73c71fa1102
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Value=836a
DynamicSig[25].Name=Zusatzinformation 4
DynamicSig[25].Value=836a3c296019f9ef7e68c9a10a14d0a8
UI[2]=C:\Windows\System32\spoolsv.exe
UI[5]=Online nach einer Lösung suchen (empfohlen)
UI[6]=Später nach einer Lösung suchen (empfohlen)
UI[7]=Schließen
UI[8]=Spoolersubsystem-Anwendung wurde beendet und geschlossen.
UI[9]=Die Anwendung wird aufgrund eines Problems nicht mehr richtig ausgeführt. Sie erhalten Nachricht, wenn eine Lösung verfügbar ist.
UI[10]=S&chließen
LoadedModule[0]=C:\Windows\System32\spoolsv.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\system32\kernel32.dll
LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\system32\msvcrt.dll
LoadedModule[5]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[6]=C:\Windows\system32\RPCRT4.dll
LoadedModule[7]=C:\Windows\system32\USER32.dll
LoadedModule[8]=C:\Windows\system32\GDI32.dll
LoadedModule[9]=C:\Windows\system32\LPK.dll
LoadedModule[10]=C:\Windows\system32\USP10.dll
LoadedModule[11]=C:\Windows\System32\POWRPROF.dll
LoadedModule[12]=C:\Windows\system32\SETUPAPI.dll
LoadedModule[13]=C:\Windows\system32\CFGMGR32.dll
LoadedModule[14]=C:\Windows\system32\ADVAPI32.dll
LoadedModule[15]=C:\Windows\system32\OLEAUT32.dll
LoadedModule[16]=C:\Windows\system32\ole32.dll
LoadedModule[17]=C:\Windows\system32\DEVOBJ.dll
LoadedModule[18]=C:\Windows\System32\DNSAPI.dll
LoadedModule[19]=C:\Windows\system32\WS2_32.dll
LoadedModule[20]=C:\Windows\system32\NSI.dll
LoadedModule[21]=C:\Windows\system32\IMM32.DLL
LoadedModule[22]=C:\Windows\system32\MSCTF.dll
LoadedModule[23]=C:\Windows\System32\CRYPTBASE.dll
LoadedModule[24]=C:\Windows\System32\slc.dll
LoadedModule[25]=C:\Windows\System32\RpcRtRemote.dll
LoadedModule[26]=C:\Windows\system32\mswsock.dll
LoadedModule[27]=C:\Windows\System32\wshtcpip.dll
LoadedModule[28]=C:\Windows\System32\wship6.dll
LoadedModule[29]=C:\Windows\System32\secur32.dll
LoadedModule[30]=C:\Windows\System32\SSPICLI.DLL
LoadedModule[31]=C:\Windows\System32\credssp.dll
LoadedModule[32]=C:\Windows\System32\WTSAPI32.dll
LoadedModule[33]=C:\Windows\System32\WINSTA.dll
LoadedModule[34]=C:\Windows\System32\clusapi.dll
LoadedModule[35]=C:\Windows\System32\cryptdll.dll
LoadedModule[36]=C:\Windows\System32\IPHLPAPI.DLL
LoadedModule[37]=C:\Windows\System32\WINNSI.DLL
LoadedModule[38]=C:\Windows\System32\rasadhlp.dll
LoadedModule[39]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[40]=C:\Windows\system32\CLBCatQ.DLL
LoadedModule[41]=C:\Windows\system32\umb.dll
LoadedModule[42]=C:\Windows\system32\ATL.DLL
LoadedModule[43]=C:\Windows\system32\WINTRUST.dll
LoadedModule[44]=C:\Windows\system32\CRYPT32.dll
LoadedModule[45]=C:\Windows\system32\MSASN1.dll
LoadedModule[46]=C:\Windows\System32\localspl.dll
LoadedModule[47]=C:\Windows\System32\SPOOLSS.DLL
LoadedModule[48]=C:\Windows\System32\srvcli.dll
LoadedModule[49]=C:\Windows\system32\winspool.drv
LoadedModule[50]=C:\Windows\System32\PrintIsolationProxy.dll
LoadedModule[51]=C:\Windows\System32\HPMPW081.DLL
LoadedModule[52]=C:\Windows\System32\VERSION.dll
LoadedModule[53]=C:\Windows\System32\HPMPM081.DLL
LoadedModule[54]=C:\Windows\System32\USERENV.dll
LoadedModule[55]=C:\Windows\System32\profapi.dll
LoadedModule[56]=C:\Windows\System32\dbghelp.dll
LoadedModule[57]=C:\Windows\System32\hppmopjl.dll
LoadedModule[58]=C:\Windows\System32\hpz3lw71.dll
LoadedModule[59]=C:\Windows\System32\tcpmon.dll
LoadedModule[60]=C:\Windows\System32\snmpapi.dll
LoadedModule[61]=C:\Windows\System32\wsnmp32.dll
LoadedModule[62]=C:\Windows\System32\msxml6.dll
LoadedModule[63]=C:\Windows\system32\SHLWAPI.dll
LoadedModule[64]=C:\Windows\System32\usbmon.dll
LoadedModule[65]=C:\Windows\system32\wls0wndh.dll
LoadedModule[66]=C:\Windows\System32\WSDMon.dll
LoadedModule[67]=C:\Windows\System32\wsdapi.dll
LoadedModule[68]=C:\Windows\System32\webservices.dll
LoadedModule[69]=C:\Windows\System32\FirewallAPI.dll
LoadedModule[70]=C:\Windows\system32\FunDisc.dll
LoadedModule[71]=C:\Windows\system32\fdPnp.dll
LoadedModule[72]=C:\Windows\system32\spool\PRTPROCS\x64\winprint.dll
LoadedModule[73]=C:\Windows\System32\GPAPI.dll
LoadedModule[74]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp118.dll
LoadedModule[75]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppw71.dll
LoadedModule[76]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppwn7.dll
LoadedModule[77]=C:\Windows\system32\spool\PRTPROCS\x64\TPWinPrn.dll
LoadedModule[78]=C:\Windows\System32\WSOCK32.dll
LoadedModule[79]=C:\Windows\System32\RESUTILS.dll
LoadedModule[80]=C:\Windows\system32\NLAapi.dll
LoadedModule[81]=C:\Windows\system32\napinsp.dll
LoadedModule[82]=C:\Windows\System32\winrnr.dll
LoadedModule[83]=C:\Windows\System32\netapi32.dll
LoadedModule[84]=C:\Windows\System32\netutils.dll
LoadedModule[85]=C:\Windows\System32\wkscli.dll
LoadedModule[86]=C:\Windows\System32\SAMCLI.DLL
LoadedModule[87]=C:\Windows\System32\SAMLIB.dll
LoadedModule[88]=C:\Windows\System32\dsrole.dll
LoadedModule[89]=C:\Windows\System32\DEVRTL.dll
LoadedModule[90]=C:\Windows\System32\SPINF.dll
LoadedModule[91]=C:\Windows\System32\win32spl.dll
LoadedModule[92]=C:\Windows\System32\CRYPTSP.dll
LoadedModule[93]=C:\Windows\system32\rsaenh.dll
LoadedModule[94]=C:\Windows\System32\cscapi.dll
LoadedModule[95]=C:\Windows\system32\kerberos.DLL
LoadedModule[96]=C:\Windows\System32\bcrypt.dll
LoadedModule[97]=C:\Windows\system32\bcryptprimitives.dll
LoadedModule[98]=C:\Windows\System32\ntmarta.dll
LoadedModule[99]=C:\Windows\system32\WLDAP32.dll
LoadedModule[100]=C:\Windows\system32\SHELL32.dll
LoadedModule[101]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll
LoadedModule[102]=C:\Windows\system32\COMDLG32.dll
LoadedModule[103]=C:\Windows\System32\SPFILEQ.dll
LoadedModule[104]=C:\Windows\System32\ncrypt.dll
LoadedModule[105]=C:\Windows\System32\cryptnet.dll
LoadedModule[106]=C:\Windows\System32\Cabinet.dll
LoadedModule[107]=C:\Windows\System32\sfc.dll
LoadedModule[108]=C:\Windows\System32\sfc_os.DLL
LoadedModule[109]=C:\Windows\System32\logoncli.dll
LoadedModule[110]=C:\Windows\system32\spool\DRIVERS\x64\3\ZDNui56.dll
LoadedModule[111]=C:\Windows\system32\spool\DRIVERS\x64\3\ZDNdrv56.dll
LoadedModule[112]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_D7754.DLL
LoadedModule[113]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DCD1F.DLL
LoadedModule[114]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DFB05.DLL
LoadedModule[115]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_D561A.DLL
LoadedModule[116]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_D89A9.DLL
LoadedModule[117]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DFC82.DLL
LoadedModule[118]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DE1E7.DLL
LoadedModule[119]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DB051.DLL
LoadedModule[120]=C:\Windows\system32\spool\DRIVERS\x64\3\CNWACMUI.DLL
LoadedModule[121]=C:\Windows\system32\mscms.dll
LoadedModule[122]=C:\Windows\system32\spool\DRIVERS\x64\3\Cnp50MUI_DAFCE.DLL
LoadedModule[123]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_DBB31.DLL
LoadedModule[124]=C:\Windows\system32\spool\DRIVERS\x64\3\CNLB0MUI_D2A11.DLL
LoadedModule[125]=C:\Windows\system32\spool\DRIVERS\x64\3\ss#zpl-u.d64
LoadedModule[126]=C:\Windows\system32\spool\DRIVERS\x64\3\UNIDRVUI.DLL
LoadedModule[127]=C:\Windows\system32\spool\DRIVERS\x64\3\BTARDUI.DLL
LoadedModule[128]=C:\Windows\system32\spool\DRIVERS\x64\3\CNP50407_DFB05.DLL
File[0].CabName=AppCompat.txt
File[0].Path=WER7BDE.tmp.appcompat.txt
File[0].Flags=65538
File[0].Type=5
File[0].Original.Path=C:\Windows\Temp\WER7BDE.tmp.appcompat.txt
File[1].CabName=WERInternalMetadata.xml
File[1].Path=WER7BFF.tmp.WERInternalMetadata.xml
File[1].Flags=65538
File[1].Type=5
File[1].Original.Path=C:\Windows\Temp\WER7BFF.tmp.WERInternalMetadata.xml
File[2].CabName=memory.hdmp
File[2].Path=WER7C00.tmp.hdmp
File[2].Flags=2097152
File[2].Type=3
File[2].Original.Path=C:\Windows\Temp\WER7C00.tmp.hdmp
File[3].CabName=minidump.mdmp
File[3].Path=WER9673.tmp.mdmp
File[3].Flags=2162690
File[3].Type=2
File[3].Original.Path=C:\Windows\Temp\WER9673.tmp.mdmp
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=APPCRASH
AppName=Spoolersubsystem-Anwendung
AppPath=C:\Windows\System32\spoolsv.exe
Sorry about my localized installation, I hope this is useful.
I think the important part is "Fehlermodulname", which translates to Fault module.
Has anybody got any clue how I could go about debugging this?
Thanks in advance!