cancel
Showing results for 
Search instead for 
Did you mean: 
ungert
Level 8

Execution Denied - ntdl_c___.dll

Jump to solution

I have been getting events such as these every once in a while and i wanted to know if anyone knew exactly what they mean. After talking to tech support they suggested something was trying to overwrite the program..

Event Display NameExecution Denied
Event File Namec:\solidcore\ntdl_c__.dll
Event Generated TimeApr 12, 2012 4:36:29 PM Eastern Standard Time
Event Id20720
Event NameEXECUTION_DENIED
Event Seq No1,235,112
Generated by an UpdaterNo
Generated in an Update WindowNo
Object Namec:\solidcore\ntdl_c__.dll
Performed Byuser
Process ID2940
Program NameC:\test.exe

Event Display NameExecution Denied
Event File Namec:\solidcore\k32_c___.dll
Event Generated TimeApr 12, 2012 4:36:29 PM Eastern Standard Time
Event Id20720
Event NameEXECUTION_DENIED
Event Seq No1,235,113
Generated by an UpdaterNo
Generated in an Update WindowNo
Object Namec:\solidcore\k32_c___.dll
Performed Byuser
Process ID2940
Program NameC:\test.exe
Reconciliation StatusNot yet Reconciled
Reconciliation Ticket
Severity3



0 Kudos
1 Solution

Accepted Solutions
ungert
Level 8

Re: Execution Denied - ntdl_c___.dll

Jump to solution

Reported as BUG BZ 737261. They say it is just a reporting bug and will be fixed in 6.1

0 Kudos
4 Replies
ungert
Level 8

Re: Execution Denied - ntdl_c___.dll

Jump to solution

anyone know what it means when c:\solidcore\ntdl_c__.dll or c:\solidcore\k32_c___.dll appears as the object name in an execution denied event

0 Kudos
peebee
Level 7

Re: Execution Denied - ntdl_c___.dll

Jump to solution

If something was trying to overwrite the file this would be a File Write Denied event. Not an Execution Denied. If the file had already been overwritten by something that is not an Updater then the file is no longer solidified. Subsequent executions would then generate an Execution Denied event. Maybe this is what's happening?

Thanks,

Mike

0 Kudos
ungert
Level 8

Re: Execution Denied - ntdl_c___.dll

Jump to solution

I ran sadmin lu to get a list of non solidified files and none of the mentioned where listed.  The overwrite didn't sound good to me either but i didn't think about how it should be File Write Denied so thankyou for that. Currently i have an open ticket with tier 2 which should be going to tier 3 soon. They are now saying the events are being generated because my point of sale binaries are trying to access solidcore files. I am guessing it has to do something with how solidcore injects itself into the kernal.. we will see

0 Kudos
ungert
Level 8

Re: Execution Denied - ntdl_c___.dll

Jump to solution

Reported as BUG BZ 737261. They say it is just a reporting bug and will be fixed in 6.1

0 Kudos