crash at 1:30am almost every night

[johnsonx42]

For quite awhile now I've had an NRecord crash almost every night at 1:30am as it starts two recordings (but sometimes it does work). I had been hoping that maybe by some miracle the new version would solve this, but it has not. These same shows are recorded at other times during the day on the same channels without incident.

It seems that usually if the system was restarted during the day, the crash won't happen the first night; it waits until the second night.

The resulting .ts files for both shows are just a few seconds long, but playable. If I don't record anything at 1:30am, then the crash doesn't occur.

It did occur to me that maybe WMC was trying to take the tuners at 1:30am to do a channel scan, even though I had all it's services disabled, so I uninstalled WMC to no effect.

NRecord log attached.

From the Windows Event Log:

Code:

Log Name:      Application
Source:        Application Error
Date:          7/14/2011 1:30:07 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      gbpvr
Description:
Faulting application name: NRecord.exe, version: 1.0.0.0, time stamp: 0x4e1a9269
Faulting module name: NPVRTSMon.ax, version: 0.0.0.0, time stamp: 0x4e010e22
Exception code: 0xc0000005
Fault offset: 0x0000c8ae
Faulting process id: 0x71c
Faulting application start time: 0x01cc41afec2fac32
Faulting application path: C:\Program Files\NPVR\NRecord.exe
Faulting module path: C:\Program Files\NPVR\NPVRTSMon.ax
Report Id: 7a550fa0-adf3-11e0-8329-0015583f2cdc
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-14T08:30:07.000000000Z" />
    <EventRecordID>9905</EventRecordID>
    <Channel>Application</Channel>
    <Computer>gbpvr</Computer>
    <Security />
  </System>
  <EventData>
    <Data>NRecord.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>4e1a9269</Data>
    <Data>NPVRTSMon.ax</Data>
    <Data>0.0.0.0</Data>
    <Data>4e010e22</Data>
    <Data>c0000005</Data>
    <Data>0000c8ae</Data>
    <Data>71c</Data>
    <Data>01cc41afec2fac32</Data>
    <Data>C:\Program Files\NPVR\NRecord.exe</Data>
    <Data>C:\Program Files\NPVR\NPVRTSMon.ax</Data>
    <Data>7a550fa0-adf3-11e0-8329-0015583f2cdc</Data>
  </EventData>
</Event>

which is followed by:

Code:

Log Name:      Application
Source:        Windows Error Reporting
Date:          7/14/2011 1:30:30 AM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      gbpvr
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: NRecord.exe
P2: 1.0.0.0
P3: 4e1a9269
P4: NPVRTSMon.ax
P5: 0.0.0.0
P6: 4e010e22
P7: c0000005
P8: 0000c8ae
P9:
P10:

Attached files:
C:\Windows\Temp\WERB651.tmp.appcompat.txt
C:\Windows\Temp\WERB8A4.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WERB8A5.tmp.hdmp
C:\Windows\Temp\WERDFD5.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_NRecord.exe_575c8d7998ec96eed55693f7c6e2e8c531cbd29e_cab_070ef6b5

Analysis symbol:
Rechecking for solution: 0
Report Id: 7a550fa0-adf3-11e0-8329-0015583f2cdc
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-14T08:30:30.000000000Z" />
    <EventRecordID>9906</EventRecordID>
    <Channel>Application</Channel>
    <Computer>gbpvr</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>NRecord.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>4e1a9269</Data>
    <Data>NPVRTSMon.ax</Data>
    <Data>0.0.0.0</Data>
    <Data>4e010e22</Data>
    <Data>c0000005</Data>
    <Data>0000c8ae</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WERB651.tmp.appcompat.txt
C:\Windows\Temp\WERB8A4.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WERB8A5.tmp.hdmp
C:\Windows\Temp\WERDFD5.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_NRecord.exe_575c8d7998ec96eed55693f7c6e2e8c531cbd29e_cab_070ef6b5</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>7a550fa0-adf3-11e0-8329-0015583f2cdc</Data>
    <Data>4</Data>
  </EventData>
</Event>

and finally:

Code:

Log Name:      Application
Source:        Windows Error Reporting
Date:          7/14/2011 1:30:50 AM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      gbpvr
Description:
Fault bucket 9, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: NRecord.exe
P2: 1.0.0.0
P3: 4e1a9269
P4: NPVRTSMon.ax
P5: 0.0.0.0
P6: 4e010e22
P7: c0000005
P8: 0000c8ae
P9:
P10:

Attached files:
C:\Windows\Temp\WERB651.tmp.appcompat.txt
C:\Windows\Temp\WERB8A4.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WERB8A5.tmp.hdmp
C:\Windows\Temp\WERDFD5.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_NRecord.exe_575c8d7998ec96eed55693f7c6e2e8c531cbd29e_09935c93

Analysis symbol:
Rechecking for solution: 0
Report Id: 7a550fa0-adf3-11e0-8329-0015583f2cdc
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-14T08:30:50.000000000Z" />
    <EventRecordID>9907</EventRecordID>
    <Channel>Application</Channel>
    <Computer>gbpvr</Computer>
    <Security />
  </System>
  <EventData>
    <Data>9</Data>
    <Data>1</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>NRecord.exe</Data>
    <Data>1.0.0.0</Data>
    <Data>4e1a9269</Data>
    <Data>NPVRTSMon.ax</Data>
    <Data>0.0.0.0</Data>
    <Data>4e010e22</Data>
    <Data>c0000005</Data>
    <Data>0000c8ae</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WERB651.tmp.appcompat.txt
C:\Windows\Temp\WERB8A4.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WERB8A5.tmp.hdmp
C:\Windows\Temp\WERDFD5.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_NRecord.exe_575c8d7998ec96eed55693f7c6e2e8c531cbd29e_09935c93</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>7a550fa0-adf3-11e0-8329-0015583f2cdc</Data>
    <Data>0</Data>
  </EventData>
</Event>

[sub]

Can you zip and attach the c:\temp\crash.mdmp file?

[johnsonx42]

I don't seem to have that file in any of my temp directories, though I don't have a C:\temp. In fact none of the files listed in the error reports are available, I'm not sure why.

The only file I can find pertaining to this crash is "N:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_NRecord.exe_575c8d7998ec96eed55693f7c6e2e8c531cbd29e_09935c93\Report.wer", attached. Probably not much use.

[sub]

It'll only create the crash.mdmp file if a c:\temp directory exists, so you'll probably need to create that directory, then let it happen again so you can capture the dump file.

[johnsonx42]

done. I'll post it as soon as it happens again (probably saturday morning).

[pBS]

would C:\Windows\Temp\WERDFD5.tmp.mdmp be the same thing? [from his logs]

[johnsonx42]

as I said, none of those files were actually present. There were a couple of older WER*.tmp.mdmp files there, but not the current ones. I don't know why it doesn't create the files it claims it's created; perhaps because the c:\temp directory wasn't there it never created the .mdmp file in the first place and therefore had nothing to work with, except that the c:\temp has never existed on this machine to my knowledge, and certainly did not exist at the time the older WER*.tmp.mdmp files were created (just a month ago). It's a mystery.

As I expected, since I rebooted the machine yesterday, it didn't crash last night. I expect it to crash tonight... stay tuned for the crash.mdmp.

[BrettB]

as I said, none of those files were actually present. There were a couple of older WER*.tmp.mdmp files there, but not the current ones. I don't know why it doesn't create the files it claims it's created; perhaps because the c:\temp directory wasn't there it never created the .mdmp file in the first place and therefore had nothing to work with, except that the c:\temp has never existed on this machine to my knowledge, and certainly did not exist at the time the older WER*.tmp.mdmp files were created (just a month ago). It's a mystery.

I'm going to guess that it gets created in the C:\Windows\Temp\ directory, then something tries to copy it over to C:\Temp\ (if it exists), and then deletes the copy in C:\Windows\Temp\ (whether or not it was copied). Or, it could try to rename it to the C:\Temp\ directory, but if that fails, to delete the copy from the C:\Windows\Temp\ directory.

[sub]

I'm going to guess that it gets created in the C:\Windows\Temp\ directory, then something tries to copy it over to C:\Temp\ (if it exists), and then deletes the copy in C:\Windows\Temp\ (whether or not it was copied).

No, thats not what happens. The one that gets created in c:\temp is created by me. The one that is in c:\Windows\Temp is a Windows one, with not quite the same info (but still very useful if you can get it).

[johnsonx42]

ah, I see. I still don't get why the ones Windows claimed it created in c:\windows\temp were missing, but it's not worth worrying about now.