open the report.wer file in notepad
look for the Fault Module Name.
Version=1
EventType=APPCRASH
EventTime=128556963484732107
ReportType=2
Consent=1
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=spoolsv.exe
Sig[1].Name=Application Version
Sig[1].Value=6.0.6001.18000
Sig[2].Name=Application Timestamp
Sig[2].Value=4791956c
Sig[3].Name=Fault Module Name
Sig[3].Value=msvcrt.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=7.0.6001.18000
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=4791a727
Sig[6].Name=Exception Code
Sig[6].Value=c0000005
Sig[7].Name=Exception Offset
Sig[7].Value=0001225d
to investigate the dump file, you will need ntsd.exe and internet access
other than dialup
http://www.microsoft.com/whdc/devtoo...tallx86.mspx#a
after installing the debugger files
launch ntsd -z WER####.tmp.hdmp
this will open a window and leave you at a prompt with a thread ID
type
..symfix
..reload
k
0:022> .symfix
0:022> .reload
.................................................. ........................................
...............................
Loading unloaded module list
.................................................. ...............
0:022> k
ChildEBP RetAddr
03cb7884 77bc9244 ntdll!KiFastSystemCallRet
03cb7888 7783c3e4 ntdll!ZwWaitForMultipleObjects+0xc
03cb7924 7783c64e kernel32!WaitForMultipleObjectsEx+0x11d
03cb7940 778adb5d kernel32!WaitForMultipleObjects+0x18
03cb79ac 778add89 kernel32!WerpReportFaultInternal+0x16d
03cb79c0 7788f54d kernel32!WerpReportFault+0x70
03cb7a4c 77be85b7 kernel32!UnhandledExceptionFilter+0x1b5
03cb7a54 77b79a14 ntdll!__RtlUserThreadStart+0x6f
03cb7a68 77b740f4 ntdll!_EH4_CallFilterFunc+0x12
03cb7a90 77bc9b99 ntdll!_except_handler4+0x8e
03cb7ab4 77bc9b6b ntdll!ExecuteHandler2+0x26
03cb7b64 77bc99f7 ntdll!ExecuteHandler+0x24
03cb7b64 76f1225d ntdll!KiUserExceptionDispatcher+0xf
03cb813c 69dab854 msvcrt!strstr+0x1e
03cb8474 69daa5e7 HPZUILHN!CHPPrintUI::VHandleInputTraysUIWIPCH+0xc4
03cbb27c 69da9de1 HPZUILHN!CHPPrintUI::UpdatePrintPropSettingsWIPCH+ 0x7a7
03cbb29c 69d9e10a HPZUILHN!CHPPrintUI::VProcessEACwIPCH+0x51
03cbeed0 69d971e7 HPZUILHN!CHPPrintUI::BOEMPrinterEvent+0xc1a
03cbeee8 71b0460e HPZUILHN!CHPPrintUI::PrinterEvent+0x27
03cbef10 71affaa3 unidrvui!HComOEMPrinterEvent+0x33
0:022>
--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1
This posting is provided "AS IS" with no warranties, and confers no rights.
"AndyW68" <> wrote in message
news:...
>
> I can see no WER in the folder ReportQueue but there are 5 in the Report
> Archive (also in the WER folder you mention).
>
> However could you advise which program I should use to open them? I
> receive the message 'Windows cannot open this file - please select from
> a list' when I tried to.
>
> Apologies for my lack of knowledge on this. Thanks for you help.
>
> 'Alan Morris [MSFT Wrote:
>> ;734104']The PnP service can't install a print driver when the spooler
>> is not
>> running.
>>
>> is there a WER (Windows Error Report) file for the failure?
>>
>> %systemroot%\programdata\Microsoft\Windows\WER\Rep ortQueue\Report[#####]
>>
>> if you see spooler.xml and the *.tmp.hmp then you have a full memory
>> dump of
>> the spooler service as it failed
>>
>> Report.wer
>> spooler.xml
>> SpoolerETW.etl
>> WERAF80.tmp.version.txt
>> WERAF81.tmp.appcompat.txt
>> WERAFA2.tmp.hdmp
>> WERC42C.tmp.mdmp
>> --
>> Alan Morris
>> Windows Printing Team
>> Search the Microsoft Knowledge Base he
>> 'Advanced Search' (http://support.microsoft.com/search/?adv=1)
>
>
>
>
> --
> AndyW68