Error cause by Scanner redirection in FP 6.0.2

[VirtualSven]

I have a new desktop (Windows 8.1 x64) installed with View Agent 6.0.2 with scanner redirection feature enabled. When I try to start Google Chrome, the application will not start. In the eventlog, I get the following error:

Application error: faulting application name ftnlsv.exe

The ftnlsv.exe is from the View Agent and take cares of the Scanner redirection. When I uninstall View Agent, Chrome starts. Anyone else having issues with this new feature installed (even if it is not used).

regards.

[peterbrown05]

sorry that you have run into this issue. This is the first I have heard of such a problem.

I will go and investigate a bit on my side, and see if I can reproduce.

cheers

peterB

[chengs]

I tried on Win81x64 agent with 6.0.2 build, google chrome can be launched successfully. I didn't see any error. Would you mind letting me know what's your client platform, view client version, chrome version? any other details?

[VirtualSven]

View desktop:

- Windows 8.1 x64 with all latest updates

- VMware Tools latest version

- VMware View Agent

- Google Chrome for Business 64-bit 40.0.2214.91

Client is Windows 8.1 with, but Chrome also doesn't work when I acces the desktop from the vSphere console.

Error in event viewer:

Log Name:      Application

Source:        Application Error

Date:          28-1-2015 14:17:48

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      VDIWXXX

Description:

Faulting application name: chrome.exe, version: 40.0.2214.93, time stamp: 0x54c46557

Faulting module name: ftapihook64.dll, version: 2.1.2.0, time stamp: 0x544a333d

Exception code: 0xc0000005

Fault offset: 0x0000000000000000

Faulting process id: 0x10a0

Faulting application start time: 0x01d03afccf875c04

Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Faulting module path: C:\windows\SYSTEM32\ftapihook64.dll

Report Id: 0d5c6fbd-a6f0-11e4-825e-005056b30468

Faulting package full name:

Faulting package-relative application ID:

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Error" />

    <EventID Qualifiers="0">1000</EventID>

    <Level>2</Level>

    <Task>100</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2015-01-28T13:17:48.000000000Z" />

    <EventRecordID>1273</EventRecordID>

    <Channel>Application</Channel>

    <Computer>VDIW8XXX</Computer>

    <Security />

  </System>

  <EventData>

    <Data>chrome.exe</Data>

    <Data>40.0.2214.93</Data>

    <Data>54c46557</Data>

    <Data>ftapihook64.dll</Data>

    <Data>2.1.2.0</Data>

    <Data>544a333d</Data>

    <Data>c0000005</Data>

    <Data>0000000000000000</Data>

    <Data>10a0</Data>

    <Data>01d03afccf875c04</Data>

    <Data>C:\Program Files (x86)\Google\Chrome\Application\chrome.exe</Data>

    <Data>C:\windows\SYSTEM32\ftapihook64.dll</Data>

    <Data>0d5c6fbd-a6f0-11e4-825e-005056b30468</Data>

    <Data>

    </Data>

    <Data>

    </Data>

  </EventData>

</Event>

[peterbrown05]

hi, this is very interesting.

I'm having problems reproducing here, but could I ask you to try something for me? this will help me narrow down whether what I suspect is happening is indeed causing an issue;

specifically, could you on the guest vm, launch regedit (run  regedit.exe)

and navigate to the following registry key;

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ftsjail

find the key:     ExcludeProcesses   (its a REG_MULTI_SZ)

then, edit it and ADD to the bottom the following:

   \*\Google\Chrome\Application\*.exe

click OK. Then reboot the vm, and try and reproduce the issue.

Let me know if the problem still occurs or not.

many thanks,

peterB

[VirtualSven]

Hi Peter, excluding the google Chrome process works. Is this a temporary workaround?

[peterbrown05]

i will talk to the team here to try and figure out what is going wrong.

for now though then this is a valid workaround for you. (please note that if you upgrade the agent then this change won't persist).

thanks for confirming this with me,

cheers

peterB

[gmtx]

I can confirm the same behavior also occurs on a Windows 7 64-bit machine. The reg key workaround fixes it for me as well.

Geoff

[chsa_topsoe]

I can confirm the same behavior also occurs on a Windows 10 1909 64-bit machine with Horizon 7.13 agent and Connection Server 7.13. 

I added an exclusion registry for an engineering application called HtriGui.exe. The reg key workaround fixes it for me as well. Thanks a lot @peterbrown05 

Earlier I was getting similar event raised in EventViewer for the faulting application HtriGui.exe as faced by @VirtualSven.

[chsa_topsoe]

Dear community,

One more Engineering application (Conval) found blocked today with same event id. And, solved with the same exclusion method.

Just wanted to share an observation in both of the application blocks that we faced, that both these application had multiple versions of them installed on this same machine, with the same .exe name, in case that helps!

So, HTRI ver.7.3 and ver.8.2 (both named HTRIGui.exe), similarly Conval ver.9.2 and ver.10.1 (both named Conval.exe) had this issue. Also, one pattern that, in both cases, it was the higher version, which blocked.

And, now seeing two instances of this, I have completely removed the feature of scanner redirection.

May be this helps someone!