|
Question : mqsvc.exe has generated errors - message at startup - what does it mean and why etc.?
|
|
On boot-up with Win2k SP4, after the splash screen, and before most anything loads up, I get the message:
"mqsvc.exe has generated errors and will be closed by Windows. You will need to restart the program. An error log is being created."
I click OK, and the boot-up continues normally, no problems.
Nothing else seems to be a problem, and I can't seem to pinpoint what may be causing this. Doesn't happen on simple logoff/login, but only on bootup/restart. Only found 3 info links on MS's database about this Microsoft Message Queue service file that normally gets loaded and stays active as a process file that stays running, but the MS database doesn't have anything specifically relevant to this. (I checked on another Win2kSP-4 machine that's running fine at home here, and this process loads normally, and stays on - can't quite figure out what it does.)
I've done a search on the C-drive for a *.log file to find out what the error is - of the 31 log files that had been written to today over the course of half a dozen or so boot-ups, several log files showed currently in use (ntuser.dat.LOG, UsrClass.dat.LOG, default.LOG, SAM.LOG, SECURITY.LOG, software.LOG, , so I couldn't read them. Of the other 25 or so log files, only one showed up anything suspicious: the drwtsn32.log file (Dr. Watson?, I presume?), with the following contents:
"Application exception occurred:
App: mqsvc.exe (pid=1508)
When: 6/25/2004 @ 19:49:57.468
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: GIGABYTE-MB
User Name: SYSTEM
Number of Processors: 1
Processor Type: x86 Family 6 Model 6 Stepping 2
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Uniprocessor Free
Registered Organization: Home-1
Registered Owner: Dana Jones
*----> Task List <----*
0 Idle.exe
8 System.exe
228 SMSS.exe
256 CSRSS.exe
276 WINLOGON.exe
308 SERVICES.exe
320 LSASS.exe
448 Smc.exe
512 svchost.exe
548 spoolsv.exe
592 msdtc.exe
764 mainserv.exe
776 ati2sgag.exe
788 DefWatch.exe
800 DKService.exe
824 svchost.exe
848 gearsec.exe
860 PDS.exe
876 IomegaAccess.ex.exe
936 Rtvscan.exe
964 NscTop.exe
1096 regsvc.exe
1100 mstask.exe
1172 tcpsvcs.exe
1188 SNMP.exe
1248 WinMgmt.exe
1284 WTSrv.exe
1296 svchost.exe
1312 ZipToA.exe
1340 inetinfo.exe
388 HNDLRSVC.exe
1396 MSGSYS.exe
1476 XFR.exe
1508 mqsvc.exe
1740 DRWTSN32.exe
0 _Total.exe
(00400000 - 00406000)
(77F80000 - 77FFB000)
(6B950000 - 6B9C8000)
(6B900000 - 6B914000)
(7C4E0000 - 7C599000)
(77E10000 - 77E75000)
(77F40000 - 77F7C000)
(7C2D0000 - 7C332000)
(77D30000 - 77DA1000)
(77440000 - 774B8000)
(78000000 - 78045000)
(77430000 - 77440000)
(75500000 - 75504000)
(7C340000 - 7C34F000)
(75170000 - 751BF000)
(751C0000 - 751C6000)
(75150000 - 7515F000)
(75030000 - 75044000)
(75020000 - 75028000)
(77950000 - 7797A000)
(77980000 - 779A4000)
(75050000 - 75058000)
(76840000 - 7685F000)
(782F0000 - 78538000)
(63180000 - 631CC000)
(716F0000 - 7177A000)
(77A50000 - 77B47000)
(779B0000 - 77A4B000)
(780C0000 - 7814D000)
(74FF0000 - 75002000)
(7CA00000 - 7CA23000)
(7C0F0000 - 7C152000)
(6BAD0000 - 6BAED000)
State Dump for Thread Id 0x5e0
eax=00144000 ebx=00000000 ecx=0012f7d4 edx=00000000 esi=00000000 edi=000000a8
eip=77f8c55d esp=0012fc0c ebp=0012fc7c iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwReadFile
77f8c552 b8a1000000 mov eax,0xa1
77f8c557 8d542404 lea edx,[esp+0x4] ss:00ba9af3=????????
77f8c55b cd2e int 2e
77f8c55d c22400 ret 0x24
77f8c560 55 push ebp
77f8c561 8bec mov ebp,esp
77f8c563 8b550c mov edx,[ebp+0xc] ss:00ba9b62=????????
77f8c566 8b4a04 mov ecx,[edx+0x4] ds:00a79ee6=????????
77f8c569 8b02 mov eax,[edx] ds:00000000=????????
77f8c56b 8901 mov [ecx],eax ds:0012f7d4=77f98191
77f8c56d 894804 mov [eax+0x4],ecx ds:00bbdee6=????????
77f8c570 8b4d08 mov ecx,[ebp+0x8] ss:00ba9b62=????????
77f8c573 3909 cmp [ecx],ecx ds:0012f7d4=77f98191
77f8c575 0f843e52ffff je RtlAppendAsciizToString+0x80 (77f817b9)
77f8c57b 3bc1 cmp eax,ecx
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0012FC7C 7C2E0135 000000A8 0012FD44 00000216 0012FCA4 ntdll!ZwReadFile
0012FCA8 7C2DFFBB 000000A8 0012FD44 00000216 0012FCE0 advapi32!StartServiceCtrlDispatcherW
0012FD24 7C2E1995 000000A8 0012FD44 00000216 0006F944 advapi32!StartServiceCtrlDispatcherW
0012FF60 00401D3C 00518980 004027F2 0012FFC0 00402B7F advapi32!StartServiceCtrlDispatcherA
005188DC 575C3A43 544E4E49 7379535C 336D6574 716D5C32 mqsvc!
00000000 00000000 00000000 00000000 00000000 00000000
*----> Raw Stack Dump <----*
0012fc0c 0d 66 4e 7c a8 00 00 00 - 00 00 00 00 00 00 00 00 .fN|............
0012fc1c 00 00 00 00 54 fc 12 00 - 44 fd 12 00 16 02 00 00 ....T...D.......
0012fc2c 00 00 00 00 00 00 00 00 - e0 fc 12 00 82 65 4e 7c .............eN|
0012fc3c 44 fd 12 00 00 00 00 00 - 01 00 00 00 01 00 00 00 D...............
0012fc4c 0c 00 00 00 00 00 00 00 - b4 00 00 00 a8 fc 12 00 ................
0012fc5c e4 05 00 00 00 00 00 00 - 34 fc 12 00 14 fd 12 00 ........4.......
0012fc6c 14 fd 12 00 b4 f0 4f 7c - 40 66 4e 7c ff ff ff ff ......O|@fN|....
0012fc7c a8 fc 12 00 35 01 2e 7c - a8 00 00 00 44 fd 12 00 ....5..|....D...
0012fc8c 16 02 00 00 a4 fc 12 00 - 00 00 00 00 01 00 00 00 ................
0012fc9c 44 fd 12 00 00 00 00 00 - 00 00 00 00 24 fd 12 00 D...........$...
0012fcac bb ff 2d 7c a8 00 00 00 - 44 fd 12 00 16 02 00 00 ..-|....D.......
0012fcbc e0 fc 12 00 44 f9 06 00 - 01 00 00 00 00 00 00 00 ....D...........
0012fccc 41 c0 d3 77 58 2e 14 00 - 58 fd 12 00 00 00 00 00 A..wX...X.......
0012fcdc 10 fd 12 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................
0012fcec b0 bd 13 00 b0 bf 13 00 - 90 03 00 00 70 00 65 00 ............p.e.
0012fcfc 32 00 37 00 01 00 00 00 - e9 02 2e 7c 00 00 00 00 2.7........|....
0012fd0c c0 fc 12 00 58 2e 14 00 - b0 ff 12 00 8e 13 2e 7c ....X..........|
0012fd1c b0 04 2e 7c ff ff ff ff - 60 ff 12 00 95 19 2e 7c ...|....`......|
0012fd2c a8 00 00 00 44 fd 12 00 - 16 02 00 00 44 f9 06 00 ....D.......D...
0012fd3c 5c c3 fc 77 00 f0 fd 7f - 22 00 00 00 51 00 00 00 \..w...."...Q...
State Dump for Thread Id 0x664
eax=6b97d92c ebx=00000000 ecx=00000000 edx=00000000 esi=77f94086 edi=000000f0
eip=77f94091 esp=00c4ff60 ebp=00c4ff84 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: ZwWaitForSingleObject
77f94086 b8ea000000 mov eax,0xea
77f9408b 8d542404 lea edx,[esp+0x4] ss:016c9e47=????????
77f9408f cd2e int 2e
77f94091 c20c00 ret 0xc
77f94094 8a5001 mov dl,[eax+0x1] ds:6c3f7812=??
77f94097 3a5101 cmp dl,[ecx+0x1] ds:00a79ee6=??
77f9409a 0f8598c7ffff jne RtlEqualPrefixSid+0x44 (77f90838)
77f940a0 84d2 test dl,dl
77f940a2 7410 jz RtlQueryAtomInAtomTable+0x31 (77f94fb4)
77f940a4 0fb6d2 movzx edx,dl
77f940a7 33ff xor edi,edi
77f940a9 8d72ff lea esi,[edx+0xff] ds:00a79ee6=????????
77f940ac 85f6 test esi,esi
77f940ae 0f8f04100100 jnle RtlEraseUnicodeString+0x4e (77fa50b8)
77f940b4 b001 mov al,0x1
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00C4FF84 7C4F1B1B 000000F0 FFFFFFFF 00000000 6B97D94F ntdll!ZwWaitForSingleObject
00C4FFB0 6B97D935 7C4E987C 00519DA0 0051004D 00430041 kernel32!WaitForSingleObject
00C4FFEC 00000000 6B97D92C 00519DA0 00000000 CECECECE mqqm!SetMachineSecurityCache
*----> Raw Stack Dump <----*
00c4ff60 c2 c4 4f 7c f0 00 00 00 - 00 00 00 00 00 00 00 00 ..O|............
00c4ff70 4d 00 51 00 a0 9d 51 00 - a0 9d 51 00 a0 9d 51 00 M.Q...Q...Q...Q.
00c4ff80 a0 9d 51 00 b0 ff c4 00 - 1b 1b 4f 7c f0 00 00 00 ..Q.......O|....
00c4ff90 ff ff ff ff 00 00 00 00 - 4f d9 97 6b f0 00 00 00 ........O..k....
00c4ffa0 ff ff ff ff 41 00 43 00 - a0 9d 51 00 a0 9d 51 00 ....A.C...Q...Q.
00c4ffb0 ec ff c4 00 35 d9 97 6b - 7c 98 4e 7c a0 9d 51 00 ....5..k|.N|..Q.
00c4ffc0 4d 00 51 00 41 00 43 00 - a0 9d 51 00 00 b0 fd 7f M.Q.A.C...Q.....
00c4ffd0 00 00 00 00 c0 ff c4 00 - 00 00 00 00 ff ff ff ff ................
00c4ffe0 b4 f0 4f 7c 60 d3 4e 7c - 00 00 00 00 00 00 00 00 ..O|`.N|........
00c4fff0 00 00 00 00 2c d9 97 6b - a0 9d 51 00 00 00 00 00 ....,..k..Q.....
00c50000 ce ce ce ce a8 01 00 00 - 40 00 00 00 a4 08 00 00 ........@.......
00c50010 00 00 00 00 a5 08 00 00 - 00 00 00 00 64 00 00 00 ............d...
00c50020 09 00 00 00 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
00c50030 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00c50040 28 00 00 00 a6 08 00 00 - 00 00 00 00 a7 08 00 00 (...............
00c50050 00 00 00 00 00 00 00 00 - 64 00 00 00 00 00 01 00 ........d.......
00c50060 04 00 00 00 04 00 00 00 - 28 00 00 00 a8 08 00 00 ........(.......
00c50070 00 00 00 00 a9 08 00 00 - 00 00 00 00 00 00 00 00 ................
00c50080 64 00 00 00 00 00 01 00 - 04 00 00 00 08 00 00 00 d...............
00c50090 28 00 00 00 aa 08 00 00 - 00 00 00 00 ab 08 00 00 (...............
State Dump for Thread Id 0x668
eax=00000201 ebx=00000000 ecx=00000201 edx=00000001 esi=00d5fee8 edi=11cfe580
eip=6b968a7d esp=00d5febc ebp=00d5fec8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000246
function: CPerf::EnableUpdate
6b968a59 89461c mov [esi+0x1c],eax ds:017d9dce=????????
6b968a5c 894620 mov [esi+0x20],eax ds:017d9dce=????????
6b968a5f 894624 mov [esi+0x24],eax ds:017d9dce=????????
6b968a62 7416 jz SetMachineSecurityCache+0xaea8 (6b97897a)
6b968a64 ff7510 push dword ptr [ebp+0x10] ss:017d9dae=????????
6b968a67 ff35b4099b6b ds:6b9b09b4=00400000
push dword ptr [QMSetupLogFile+0x1f185 (6b9b09b4)]
6b968a6d e8770f0000 call CPerf::EnableUpdate+0x62e8 (6b9699e9)
6b968a72 85c0 test eax,eax
6b968a74 0f84a9010000 je CPerf::EnableUpdate+0x5522 (6b968c23)
6b968a7a 8b4608 mov eax,[esi+0x8] ds:017d9dce=????????
FAULT ->6b968a7d 8a4802 mov cl,[eax+0x2] ds:00a7a0e7=??
6b968a80 8b7808 mov edi,[eax+0x8] ds:00a7a0e7=????????
6b968a83 c0e903 shr cl,0x3
6b968a86 03f8 add edi,eax
6b968a88 8d5010 lea edx,[eax+0x10] ds:00a7a0e7=????????
6b968a8b f6c101 test cl,0x1
6b968a8e 0f8588010000 jne CPerf::EnableUpdate+0x551b (6b968c1c)
6b968a94 8b4808 mov ecx,[eax+0x8] ds:00a7a0e7=????????
6b968a97 8d5a30 lea ebx,[edx+0x30] ds:00a79ee7=????????
6b968a9a 03c8 add ecx,eax
6b968a9c 3bd9 cmp ebx,ecx
6b968a9e 7604 jbe CPerf::EnableUpdate+0x86a3 (6b96bda4)
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00D5FEC8 6B97169E 00000201 00000000 00000001 11CFE580 mqqm!CPerf::EnableUpdate
00D5FF3C 6B971B9D 00000201 05000000 00000020 00000220 mqqm!SetMachineSecurityCache
00D5FF80 6B972539 00519E00 11CFE580 C00055A5 000000CC mqqm!SetMachineSecurityCache
00D5FFB4 7C4E987C 000000CC 11CFE580 C00055A5 000000CC mqqm!SetMachineSecurityCache
00D5FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!SetThreadExecutionState
State Dump for Thread Id 0x66c
eax=6b9724fc ebx=00000000 ecx=001493b0 edx=00000000 esi=77f89153 edi=00e5fe80
eip=77f8915e esp=00e5fe6c ebp=00e5fe88 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
function: ZwDelayExecution
77f89153 b832000000 mov eax,0x32
77f89158 8d542404 lea edx,[esp+0x4] ss:018d9d53=????????
77f8915c cd2e int 2e
77f8915e c20800 ret 0x8
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00E5FE88 7C4FAC79 000003E8 00000000 6B9722D4 000003E8 ntdll!ZwDelayExecution
00E5FF80 6B972539 00519F80 11CFE580 C00055A5 000000CC kernel32!Sleep
00E5FFB4 7C4E987C 000000CC 11CFE580 C00055A5 000000CC mqqm!SetMachineSecurityCache
00E5FFEC 00000000 00000000 00000000 00000000 00000000 kernel32!SetThreadExecutionState
State Dump for Thread Id 0x670
eax=6b9724fc ebx=00000000 ecx=001493b0 edx=00000000 esi=77f89153 edi=00f5fe80
eip=77f8915e esp=00f5fe6c ebp=00f5fe88 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
function: ZwDelayExecution
77f89153 b832000000 mov eax,0x32
77f89158 8d542404 lea edx,[esp+0x4] ss:019d9d53=????????
77f8915c cd2e int 2e
77f8915e c20800 ret 0x8
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00F5FE88 7C4FAC79 000003E8 00000000 6B9722D4 000003E8 ntdll!ZwDelayExecution
00F5FF80 6B972539 0051A480 11CFE580 C00055A5 000000CC kernel32!Sleep
00F5FFB4 7C4E987C 000000CC 11CFE580 C00055A5 000000CC mqqm!SetMachineSecurityCache
00F5FFEC 00000000 6B9724FC 000000CC 00000000 00000008 kernel32!SetThreadExecutionState
*----> Raw Stack Dump <----*
00f5fe6c a5 ac 4f 7c 00 00 00 00 - 80 fe f5 00 80 e5 cf 11 ..O|............
00f5fe7c 80 a4 51 00 80 69 67 ff - ff ff ff ff 80 ff f5 00 ..Q..ig.........
00f5fe8c 79 ac 4f 7c e8 03 00 00 - 00 00 00 00 d4 22 97 6b y.O|.........".k
00f5fe9c e8 03 00 00 80 e5 cf 11 - a5 55 00 c0 cc 00 00 00 .........U......
00f5feac 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5febc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5fecc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5fedc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5feec 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5fefc 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5ff0c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5ff1c 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
00f5ff2c 20 30 9c f8 80 e5 cf 11 - a5 55 00 c0 48 ff f5 00 0.......U..H...
00f5ff3c cc 00 00 00 4a d0 f8 77 - 20 01 00 c0 70 ff f5 00 ....J..w ...p...
00f5ff4c 0d bc 4e 7c e3 03 00 00 - a5 55 00 c0 d1 d9 4e 7c ..N|.....U....N|
00f5ff5c 20 01 00 c0 00 00 00 00 - 00 00 00 00 20 01 00 c0 ........... ...
00f5ff6c 00 00 00 00 a0 fe f5 00 - a8 ff f5 00 b7 bb 99 6b ...............k
00f5ff7c ff ff ff ff b4 ff f5 00 - 39 25 97 6b 80 a4 51 00 ........9%.k..Q.
00f5ff8c 80 e5 cf 11 a5 55 00 c0 - cc 00 00 00 00 00 00 00 .....U..........
00f5ff9c 00 00 00 00 80 a4 51 00 - 8c ff f5 00 dc ff f5 00 ......Q........."
Ok, I know most of the file contents don't help much, but I've run out of leads. Any help will be most appreciated.
I can't seem to find a "DrWatson" program running, that would generate this log file, and checking the administrative event viewer log, I read a service control manager originated event described as "The O&O Defrag 2000 service failed to start due to the following error: The system cannot find the path specified." I don't have that defragmentation program loaded (don't see it available to uninstall anymore, anyway). And the next event from "server" is "The value named IRPStackSize in the server's Registry key LanmanServer\Parameters was invalid. The value was ignored, and processing continued."
Not sure if these only two error events have a connection or not (No other error events, just warnings about overloaded drives, etc.)
Also, I did the usual virus check of everything on the C-drive, spy-bot, adaware, registry-cleaning, etc., and nothing showed up.
Any ideas?
Thanks in advance for your help.
|
|
|
Answer : mqsvc.exe has generated errors - message at startup - what does it mean and why etc.?
|
|
gonzo,
this is the message queing service, i don't use it if you don't use it you can to to control panel-->admin tools--> services find it and disable it.
hope this helps
|
|
|
|
|
