🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: adobe.reader
Article #6764

Re: Reader 9.0 AcroRd32.exe caused Microsoft Visual C++ Runtime Library error

#6764
From: CH!
Date: Wed, 16 Jul 2008 14:18
66 lines
7248 bytes
Hey All,

Same problem here, seems to be directly related to folder redirection....

Tried filing this as a bug, but they don't allow more than 2000 characters.... my trace files are way bigger than that.... I'm going to file a bug and link them to this thread as I'm going to put some of my trace info in here.

This has been tested on multiple machines, with multiple users. It does not occur for users without folder re-direction.

In our tests, XP doesn't have the problem with Roaming Profiles, but Vista and folder redirections does.

Steps to re-produce (Vista):

Set the following policy settings (GPMC/Local Sec Policy) with adjustments for server, etc.

User Configuration (Enabled)hide
Policieshide
Windows Settingshide
Folder Redirectionhide
AppData(Roaming)hide
Setting: Advanced (Specify locations for various user groups)hide
Group Path
my_group_here \\server\users\dept\%USERNAME%\AppData\Roaming

Optionshide
Grant user exclusive rights to AppData(Roaming) Disabled
Move the contents of AppData(Roaming) to the new location Disabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Leave contents

2) Install Acrobat Reader 9.

3) Launch without admin priviliges

When debugging with ProcessMon (Sysinternals) on Vista SP1 x64 I see it calls \device\mup and then a createfile at the root of C:\ which fails with access denied (as it should in vista), and then the program calls the Windows Error Reporting.

This is lines 9378 to lines 9406 in the processmon trace, sanitized.

342417	01:10.7	AcroRd32.exe	460	CloseFile	\\server\users\dept\username\AppData\Roaming\Adobe\Acrobat\9.0	SUCCESS	
342419	01:10.7	AcroRd32.exe	460	SetEAFile	C:\Windows\CSC\v2.0.6\namespace\server\users\dept\username\AppData\Roaming\Adobe\Acrobat\9.0	SUCCESS	
342420	01:10.7	AcroRd32.exe	460	ReadFile	C:\Windows\CSC\v2.0.6\pq	SUCCESS	Offset: 269,632, Length: 208
342421	01:10.7	AcroRd32.exe	460	WriteFile	C:\Windows\CSC\v2.0.6\pq	SUCCESS	Offset: 269,632, Length: 208
342422	01:10.7	AcroRd32.exe	460	CloseFile	C:\Windows\CSC\v2.0.6\namespace\server\users\dept\username\AppData\Roaming\Adobe\Acrobat\9.0	SUCCESS	
342424	01:10.7	AcroRd32.exe	460	CloseFile	C:\Windows\CSC\v2.0.6\namespace\server\users\dept\username\AppData\Roaming\Adobe\Acrobat\9.0	SUCCESS	
342426	01:10.7	AcroRd32.exe	460	CreateFile	C:\	SUCCESS	Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
342427	01:10.7	AcroRd32.exe	460	CloseFile	C:\	SUCCESS	
342429	01:10.7	AcroRd32.exe	460	CreateFile	\Device\Mup\	NAME INVALID	Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
342430	01:10.7	AcroRd32.exe	460	CreateFile	C:\	SUCCESS	Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
342431	01:10.7	AcroRd32.exe	460	CloseFile	C:\	SUCCESS	
342433	01:10.7	AcroRd32.exe	460	CreateFile	C:\	ACCESS DENIED	Access: Read Data/List Directory, Synchronize, Disposition: Create, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0
342434	01:10.7	AcroRd32.exe	460	RegOpenKey	HKU\S-1-5-21-1669273076-1836279104-1734353810-3328\Software\Adobe\Adobe Acrobat\9.0	SUCCESS	Desired Access: Read
342435	01:10.7	AcroRd32.exe	460	RegQueryValue	HKU\S-1-5-21-1669273076-1836279104-1734353810-3328\Software\Adobe\Adobe Acrobat\9.0\Crashlog	NAME NOT FOUND	Length: 144
342436	01:10.7	AcroRd32.exe	460	RegCloseKey	HKU\S-1-5-21-1669273076-1836279104-1734353810-3328\Software\Adobe\Adobe Acrobat\9.0	SUCCESS	
342437	01:10.7	AcroRd32.exe	460	QueryNameInformationFile	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe	SUCCESS	Name: \Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
342438	01:10.7	AcroRd32.exe	460	RegOpenKey	HKLM\Software\Wow6432Node\Microsoft\Windows\Windows Error Reporting\Escalation	NAME NOT FOUND	Desired Access: Read
342448	01:10.7	AcroRd32.exe	460	QueryOpen	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\imageres.dll	FAST IO DISALLOWED	
342449	01:10.7	AcroRd32.exe	460	CreateFile	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\imageres.dll	NAME NOT FOUND	Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
342454	01:10.7	AcroRd32.exe	460	QueryOpen	C:\Windows\SysWOW64\imageres.dll	FAST IO DISALLOWED	
342455	01:10.7	AcroRd32.exe	460	CreateFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a
342457	01:10.7	AcroRd32.exe	460	QueryBasicInformationFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	CreationTime: 11/2/2006 6:16:57 AM, LastAccessTime: 11/2/2006 7:03:20 AM, LastWriteTime: 11/2/2006 3:39:37 AM, ChangeTime: 11/17/2006 11:11:23 AM, FileAttributes: A
342459	01:10.7	AcroRd32.exe	460	CloseFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	
342464	01:10.7	AcroRd32.exe	460	CreateFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a
342466	01:10.7	AcroRd32.exe	460	QueryStandardInformationFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	AllocationSize: 15,822,848, EndOfFile: 15,821,312, NumberOfLinks: 2, DeletePending: False, Directory: False
342470	01:10.7	AcroRd32.exe	460	CloseFile	C:\Windows\SysWOW64\imageres.dll	SUCCESS	
342472	01:10.7	AcroRd32.exe	460	CreateFile	C:\Windows\SysWOW64\en-US\imageres.dll.mui	SUCCESS	Access: Generic Read, Disposition: Open, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a
342474	01:10.7	AcroRd32.exe	460	QueryStandardInformationFile	C:\Windows\SysWOW64\en-US\imageres.dll.mui	SUCCESS	AllocationSize: 12,288, EndOfFile: 12,288, NumberOfLinks: 2, DeletePending: False, Directory: False
345240	01:12.0	AcroRd32.exe	460	Thread Exit		SUCCESS	User Time: 0.0156001, Kernel Time: 0.0156001
Technical Details
Message-ID: <59b5c482.7@webcrossing.la2eafNXanI>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news2.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!nx01.iad01.newshosting.com!newshosting.com!newsfeed.icl.net!newsfeed.fjserv.net!colt.net!feeder.news-service.com!feeder.visyn.net!news.svengo.de!news4us.nl!webcrossing
References: <59b5c482.-1@webcrossing.la2eafNXanI>

Show Full Headers
Complete Article Headers
X-Google-Thread: 10273d,b29bacb6ee47c4d5
X-Google-Attributes: gid10273d,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
From: CH!@adobeforums.com
Newsgroups: adobe.reader
Subject: Re: Reader 9.0 AcroRd32.exe caused Microsoft
 Visual C++ Runtime Library error
Message-ID: <59b5c482.7@webcrossing.la2eafNXanI>
Date: Wed, 16 Jul 2008 07:18:16 -0700
References: <59b5c482.-1@webcrossing.la2eafNXanI>
Lines: 65
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news2.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!nx01.iad01.newshosting.com!newshosting.com!newsfeed.icl.net!newsfeed.fjserv.net!colt.net!feeder.news-service.com!feeder.visyn.net!news.svengo.de!news4us.nl!webcrossing
X-Original-Lines: 127