Question

Difficulty: Very hardTroubleshooting Windows Performance and Application Crashes

A Windows 11 workstation running a legacy inventory application experiences frequent crashes upon startup. A CompTIA A+ technician reviews the Windows Logs in Event Viewer and identifies an Application Error entry with Event ID 1000. The log details specify a faulting module path of C:\Windows\System32\msvcp140.dll and an exception code of 0xc0000005 (Access Violation). Which of the following actions should the technician perform first to resolve the application crash?

  1. Repair or reinstall the Microsoft Visual C++ 2015-2022 Redistributable package on the workstation.Answer
  2. B
    Run the command sfc /scannow /offbootdir=c:\ /offwindir=c:\windows from an elevated Command Prompt.
  3. C
    Open the System Control Panel applet and increase the custom initial size of the virtual memory pagefile.
  4. D
    Perform a clean re-installation of the Windows 11 operating system using installation media.

Answer

Repair or reinstall the Microsoft Visual C++ 2015-2022 Redistributable package on the workstation.
The correct action is to repair or reinstall the Microsoft Visual C++ Redistributable package. In Event Viewer, Event ID 1000 combined with a faulting module of msvcp140.dll indicates that the application crashed because of a corrupted, missing, or incompatible C++ runtime library. Repairing the Redistributable package via Settings/Control Panel restores the proper DLL files without disrupting the operating system.

Step-by-Step Solution

1
Analyze the Event Viewer Application Error log details.
Identified Event ID 1000, faulting module msvcp140.dll, and exception code 0xc0000005.
Event ID 1000 logs application crashes, and msvcp140.dll indicates a dependency on the C++ runtime environment.
2
Determine the underlying software component associated with the faulting module.
Recognized msvcp140.dll as a component of Microsoft Visual C++ Redistributable packages.
Applications compiled with C++ rely on shared redistributable DLL files in System32 to execute code properly.
3
Apply targeted remediation by repairing or reinstalling the redistributable package.
The missing or corrupted DLL is replaced, resolving the access violation crash without altering the operating system core.
Targeted package repair directly fixes the root cause identified in the crash log.

Key Concept

Troubleshooting Windows Application Crashes via Event Viewer Faulting Module Analysis
Estimated Time:1m 30s
Rate this question