Jump to content

Starchyld

Member
  • Posts

    0
  • Joined

  • Last visited

  • Country

    Canada
  • Donations

    0.00 USD 

Posts posted by Starchyld

  1. heres the details from the error in my event log.

     

    Error Log: Source - .Net Runtime ,event ID 1026

     

    Application: CustomsForgeSongManager.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.OverflowException
       at <Module>.‬‎‬‭‎‌‌‭‭‭‪‫‌‍‌‌​‭‎‏‭‌​‍‌‫‪‮(Byte[])
       at <Module>.‍‭‎‍‭‪​‏‍‍‌‏‮‮‭‍‎‬‮‌‏‬‮​‫‮()
       at <Module>..cctor()
     
    Exception Info: System.TypeInitializationException
     

    Error Log: Source - Application Error, Event ID 1000

     

    Faulting application name: CustomsForgeSongManager.exe, version: 1.5.3.1, time stamp: 0x5c856193
    Faulting module name: KERNELBASE.dll, version: 10.0.18356.1, time stamp: 0xc121897b
    Exception code: 0xe0434352
    Fault offset: 0x00113162
    Faulting process id: 0x9a98
    Faulting application start time: 0x01d4e28a28c1a260
    Faulting application path: C:\Program Files (x86)\CustomsForgeSongManager\CustomsForgeSongManager.exe
    Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
    Report Id: 13cf8871-ba8e-4849-8183-c5b8e5826f51
    Faulting package full name: 
    Faulting package-relative application ID: 
     
    Information log that was created in the event viewer registered as "Windows Event Viewer" event ID 1001
     
    Fault bucket 1419815900809450935, type 1
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0
     
    Problem signature:
    P1: CustomsForgeSongManager.exe
    P2: 1.5.3.1
    P3: 5c856193
    P4: KERNELBASE.dll
    P5: 10.0.18356.1
    P6: c121897b
    P7: e0434352
    P8: 00113162
    P9: 
    P10: 
     
    Attached files:
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFC4A.tmp.mdmp
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFD64.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFD94.tmp.xml
    WPR_initiated_DiagTrackMiniLogger_OneTrace User Logger 20190321 1 Event Collector_0_inject.etl
    \\?\C:\Users\Miranda\AppData\Local\Temp\WERFE31.tmp.etl
    WPR_initiated_DiagTrackMiniLogger_WPR System Collector_inject.etl
    \\?\C:\Users\Miranda\AppData\Local\Temp\WERFE32.tmp.etl
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE3E.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFEBC.tmp.txt
     
    These files may be available here:
    \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_CustomsForgeSong_b45b9bddc1f469b53257afcfaef59c9e9ac550_c089873b_6962b1fb-eb13-4902-a6ca-df5f102d9a33
     
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 13cf8871-ba8e-4849-8183-c5b8e5826f51
    Report Status: 268435456
    Hashed bucket: 082dc15aa3900649f3b4330a0e32d5b7
    Cab Guid: 0

     

     

    Contents of the appcrash WER file:

     

    Version=1
    EventType=APPCRASH
    EventTime=131979372126173063
    ReportType=2
    Consent=1
    UploadTime=131979372132718788
    ReportStatus=268435456
    ReportIdentifier=6962b1fb-eb13-4902-a6ca-df5f102d9a33
    IntegratorReportIdentifier=13cf8871-ba8e-4849-8183-c5b8e5826f51
    Wow64Host=34404
    Wow64Guest=332
    NsAppName=CustomsForgeSongManager.exe
    OriginalFilename=CustomsForgeSongManager.exe
    AppSessionGuid=00009a98-0001-0003-60a2-c1288ae2d401
    TargetAppId=W:00000d124996ece4299925c157fd75ca43350000ffff!000076d2df0a066af384ce2cca942c3d8048418da52b!CustomsForgeSongManager.exe
    TargetAppVer=2019//03//10:19:12:19!0!CustomsForgeSongManager.exe
    BootId=4294967295
    ServiceSplit=5439575
    TargetAsId=3311
    IsFatal=1
    Response.BucketId=082dc15aa3900649f3b4330a0e32d5b7
    Response.BucketTable=1
    Response.LegacyBucketId=1419815900809450935
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=CustomsForgeSongManager.exe
    Sig[1].Name=Application Version
    Sig[1].Value=1.5.3.1
    Sig[2].Name=Application Timestamp
    Sig[2].Value=5c856193
    Sig[3].Name=Fault Module Name
    Sig[3].Value=KERNELBASE.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=10.0.18356.1
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=c121897b
    Sig[6].Name=Exception Code
    Sig[6].Value=e0434352
    Sig[7].Name=Exception Offset
    Sig[7].Value=00113162
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=10.0.18356.2.0.0.256.48
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=2beb
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=2beba6fb4680d73a8c78ca7c24ccdb46
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=38f1
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=38f188970676639fe0b50eeee082a8fd
    UI[2]=C:\Program Files (x86)\CustomsForgeSongManager\CustomsForgeSongManager.exe
    LoadedModule[0]=C:\Program Files (x86)\CustomsForgeSongManager\CustomsForgeSongManager.exe
    LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\WINDOWS\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\WINDOWS\System32\KERNEL32.dll
    LoadedModule[4]=C:\WINDOWS\System32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\System32\hmpalert.dll
    LoadedModule[6]=C:\WINDOWS\SYSTEM32\apphelp.dll
    LoadedModule[7]=C:\WINDOWS\SYSTEM32\AcLayers.DLL
    LoadedModule[8]=C:\WINDOWS\System32\msvcrt.dll
    LoadedModule[9]=C:\WINDOWS\System32\USER32.dll
    LoadedModule[10]=C:\WINDOWS\System32\win32u.dll
    LoadedModule[11]=C:\WINDOWS\System32\GDI32.dll
    LoadedModule[12]=C:\WINDOWS\System32\gdi32full.dll
    LoadedModule[13]=C:\WINDOWS\System32\msvcp_win.dll
    LoadedModule[14]=C:\WINDOWS\System32\ucrtbase.dll
    LoadedModule[15]=C:\WINDOWS\System32\SHELL32.dll
    LoadedModule[16]=C:\WINDOWS\System32\cfgmgr32.dll
    LoadedModule[17]=C:\WINDOWS\System32\shcore.dll
    LoadedModule[18]=C:\WINDOWS\System32\RPCRT4.dll
    LoadedModule[19]=C:\WINDOWS\System32\SspiCli.dll
    LoadedModule[20]=C:\WINDOWS\System32\CRYPTBASE.dll
    LoadedModule[21]=C:\WINDOWS\System32\bcryptPrimitives.dll
    LoadedModule[22]=C:\WINDOWS\System32\sechost.dll
    LoadedModule[23]=C:\WINDOWS\System32\combase.dll
    LoadedModule[24]=C:\WINDOWS\System32\windows.storage.dll
    LoadedModule[25]=C:\WINDOWS\System32\advapi32.dll
    LoadedModule[26]=C:\WINDOWS\System32\profapi.dll
    LoadedModule[27]=C:\WINDOWS\System32\powrprof.dll
    LoadedModule[28]=C:\WINDOWS\System32\UMPDC.dll
    LoadedModule[29]=C:\WINDOWS\System32\shlwapi.dll
    LoadedModule[30]=C:\WINDOWS\System32\kernel.appcore.dll
    LoadedModule[31]=C:\WINDOWS\System32\cryptsp.dll
    LoadedModule[32]=C:\WINDOWS\System32\OLEAUT32.dll
    LoadedModule[33]=C:\WINDOWS\System32\SETUPAPI.dll
    LoadedModule[34]=C:\WINDOWS\System32\bcrypt.dll
    LoadedModule[35]=C:\WINDOWS\SYSTEM32\MPR.dll
    LoadedModule[36]=C:\WINDOWS\SYSTEM32\sfc.dll
    LoadedModule[37]=C:\WINDOWS\SYSTEM32\WINSPOOL.DRV
    LoadedModule[38]=C:\WINDOWS\SYSTEM32\PROPSYS.dll
    LoadedModule[39]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[40]=C:\WINDOWS\SYSTEM32\sfc_os.DLL
    LoadedModule[41]=C:\WINDOWS\SYSTEM32\SortWindows61.dll
    LoadedModule[42]=C:\WINDOWS\System32\IMM32.DLL
    LoadedModule[43]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    LoadedModule[44]=C:\WINDOWS\SYSTEM32\VERSION.dll
    LoadedModule[45]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    LoadedModule[46]=C:\WINDOWS\SYSTEM32\VCRUNTIME140_CLR0400.dll
    LoadedModule[47]=C:\WINDOWS\SYSTEM32\ucrtbase_clr0400.dll
    LoadedModule[48]=C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\2fd365eef9c2999c233994057e037e6b\mscorlib.ni.dll
    LoadedModule[49]=C:\WINDOWS\System32\ole32.dll
    LoadedModule[50]=C:\WINDOWS\system32\uxtheme.dll
    LoadedModule[51]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    LoadedModule[52]=C:\WINDOWS\SYSTEM32\wldp.dll
    LoadedModule[53]=C:\WINDOWS\System32\CRYPT32.dll
    LoadedModule[54]=C:\WINDOWS\System32\MSASN1.dll
    LoadedModule[55]=C:\WINDOWS\System32\WINTRUST.dll
    LoadedModule[56]=C:\WINDOWS\SYSTEM32\amsi.dll
    LoadedModule[57]=C:\WINDOWS\SYSTEM32\USERENV.dll
    LoadedModule[58]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    OsInfo[0].Key=vermaj
    OsInfo[0].Value=10
    OsInfo[1].Key=vermin
    OsInfo[1].Value=0
    OsInfo[2].Key=verbld
    OsInfo[2].Value=18356
    OsInfo[3].Key=ubr
    OsInfo[3].Value=16
    OsInfo[4].Key=versp
    OsInfo[4].Value=0
    OsInfo[5].Key=arch
    OsInfo[5].Value=9
    OsInfo[6].Key=lcid
    OsInfo[6].Value=1033
    OsInfo[7].Key=geoid
    OsInfo[7].Value=244
    OsInfo[8].Key=sku
    OsInfo[8].Value=48
    OsInfo[9].Key=domain
    OsInfo[9].Value=0
    OsInfo[10].Key=prodsuite
    OsInfo[10].Value=256
    OsInfo[11].Key=ntprodtype
    OsInfo[11].Value=1
    OsInfo[12].Key=platid
    OsInfo[12].Value=10
    OsInfo[13].Key=sr
    OsInfo[13].Value=0
    OsInfo[14].Key=tmsi
    OsInfo[14].Value=11546
    OsInfo[15].Key=osinsty
    OsInfo[15].Value=3
    OsInfo[16].Key=iever
    OsInfo[16].Value=11.16.18356.0-11.0.110
    OsInfo[17].Key=portos
    OsInfo[17].Value=0
    OsInfo[18].Key=ram
    OsInfo[18].Value=16326
    OsInfo[19].Key=svolsz
    OsInfo[19].Value=464
    OsInfo[20].Key=wimbt
    OsInfo[20].Value=0
    OsInfo[21].Key=blddt
    OsInfo[21].Value=190308
    OsInfo[22].Key=bldtm
    OsInfo[22].Value=1607
    OsInfo[23].Key=bldbrch
    OsInfo[23].Value=19h1_release
    OsInfo[24].Key=bldchk
    OsInfo[24].Value=0
    OsInfo[25].Key=wpvermaj
    OsInfo[25].Value=0
    OsInfo[26].Key=wpvermin
    OsInfo[26].Value=0
    OsInfo[27].Key=wpbuildmaj
    OsInfo[27].Value=0
    OsInfo[28].Key=wpbuildmin
    OsInfo[28].Value=0
    OsInfo[29].Key=osver
    OsInfo[29].Value=10.0.18356.16.amd64fre.19h1_release.190308-1607
    OsInfo[30].Key=buildflightid
    OsInfo[30].Value=E473DA16-643D-4ED7-823F-397545633DCC.1
    OsInfo[31].Key=edition
    OsInfo[31].Value=Professional
    OsInfo[32].Key=ring
    OsInfo[33].Key=expid
    OsInfo[34].Key=containerid
    OsInfo[35].Key=containertype
    OsInfo[36].Key=edu
    OsInfo[36].Value=0
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=CustomsForge Song Manager
    AppPath=C:\Program Files (x86)\CustomsForgeSongManager\CustomsForgeSongManager.exe
    NsPartner=windows
    NsGroup=windows8
    ApplicationIdentity=5AA8C85CBFD9A4BFDBB0E4B605460195
    MetadataHash=1350979927
  2. Doh! Missed critical information!!! I should know this!!

    Windows 10 most recent release, Sophos home is the AV.  Sophos home has not flagged CFSM at all, there was only that issue with windows defender, and I restored all the files that were flagged by it.  

    I have tried reinstalling it, tried running sfc/ scannow on windows, rebooting (everyone forgets this one...) heck I even tried some of the more obscure fixes for similar issues for other software on the internet (like reinstalling .net)

    I have always just ended up defaulting to reinstalling the last build of 1.4 that i have so i can use rocksmith.  

     

    I will get you info later when i am home and i can pull the error out of my event viewer

  3. I am having the same issue since updating to 1.5.x.x versions.   1.4.x.x versions work fine, even if i uninstall the newer version and reinstall the older versions.  

    In the event viewer reports the cause is Faulting Module:KERNELBASE.dll, 

     

    any thoughts? 

     

    If you need more information, just let me know and I will do my best to get you what you need (I am at work right now, so i cant pull the event log) My power of google has been failing me for this one. 

  4. I am assuming that it is flagging the shortcuts mainly because the reference the exe file.   that way you dont wonder where the exe file went....

     

    The exe is being flagged as threat detected:  Trojan:Win32/Zpevdo.A

     

    I reported it to microsoft as being a false positive.  Sophos home does not seem to think its a threat at all.  

  5. If CustomsForgeSongManager.exe already been taken out by windows defender (like mine was) you can do the following to restore the file

     

    - Hit the windows key, and type Security :"Windows security" will show up at the top of the start menu. hit enter

     

    - The window that pops up should say "security at a glance"  and right below that you should see a shield that says "virus & threat protection"

     

    - Click on the shield and then a new menu will show up

     

    - look under the heading "Current threats" and you should see a link called "Protection History" > click on it.

     

    - In this menu that comes up next, you will see "threat blocked", Threat quarantined" or "Threat removed or restored" >click on the arrow of the item that is closest to the time of you trying to open CFSM.

     

    - When you click on the arrow down it will pop up with a User Access Control window, click yes to allow access

     

    - After accepting the UAC window, In here is where it will give you details about what defender has blocked, and why. 

     

    - Under Affected items,  You should see the following (you might only see one of them, in which case go and look at the threat from the list below.  - These three are the shortcuts and the main program itself.)

    • file: C:\Program Files (x86)\CustomsForgeSongManager\CustomsForgeSongManager.exe
    • file: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CustomsForge Song Manager\CustomsForge Song Manager - Latest Build.lnk
    • startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CustomsForge Song Manager\CustomsForge Song Manager - Latest Build.lnk - Click on the arrow on the right side that says “Actions” then click “Restore” 

     

    It should then restore CustomForgeSongManager  and any associated links back to their original homes.

     

    Hope this helps!!! 

×
×
  • Create New...

Important Information

By using this site, you agree to our Guidelines. We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. - Privacy Policy