Hi,

There is a pop up error of SCNotification.exe on Windows 7 64-bits computer.  We suspected .NET Framwork was corrupted.   We  reinstalled .NET Framework 4.x and ran "SFC /scannow" on the computer did not resolved the problem.  Any suggestion?

Below are the error from the event log:

Event ID: 1026  .NET Runtime
Application: SCNotification.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Net.Sockets.SocketException
Stack:
   at System.Net.Sockets.Socket.InitializeSockets()
   at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider, System.Runtime.Remoting.Channels.IAuthorizeRemotingConnection)
   at System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)
   at Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)
   at Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])
   at Microsoft.SoftwareCenter.Client.Notification.SingleInstanceApplication.Main(System.String[])

Event ID: 1000  Application Error
Faulting application name: SCNotification.exe, version: 5.0.7958.1000, time stamp: 0x5230d2bb
Faulting module name: KERNELBASE.dll, version: 6.1.7601.23418, time stamp: 0x5708a7e4
Exception code: 0xe0434352
Fault offset: 0x0000c54f
Faulting process id: 0x2174
Faulting application start time: 0x01d20250d00bdbb5
Faulting application path: C:\WINDOWS\CCM\SCNotification.exe
Faulting module path: C:\WINDOWS\syswow64\KERNELBASE.dll
Report Id: 155bbc0f-6e44-11e6-a63a-180373c52d37

Hi,

I need some pointers on how to approach a current task. Create hashes of passwords that are stored in a database. So after reading up on the subject I see that I should go for either PBKDF2 or BCrypt. And I have some question about these:

PBKDF:
The only supported solution is using HMAC SHA1 which does seems kinda old school. I could write my own that accepts SHA512 for example but I would rather find something proven. Does it exist? Second, what is the iteration recommendation in 2016 - 256000? 

I can see that there is a version 3 of Microsofts "PasswordHasher" (Microsoft.AspNetCore.Cryptography.KeyDerivation) which supports SHA512 and higher iterations. But looking at the implementation is seems that they use BCrypt behind (Win8Pbkdf2Provider). I guess that means this solution isn't "supported" by NIST?

BCrypt:
Still not supported by NIST - and we would expect customers in US to require this I guess. However I'm also reluctant to use BCrypt because I need something that is backed by a large company - all I can find are some old implementations that 1 guy updates (if ever). What are the iteration (workfactor) recommendation in 2016 - 12?

An alternative approach would be to just go with standard Rfc2898DeriveBytes using HMAC SHA1 and then using AES to encrypt the database values - storing the crypto key on disk.

What do you guys recommend? What do you do when looking into securing enterprise level software?

/Werner

Hi all , I am back to this forum after a long time..Now currently I am battling with .NET runtime error 1023 & the details are as below:

We have a .NET application which is developed using C#.NET language..In this application there is an option called "RUN" , which when used the application does some calculations in different modes (depending on how many modes we have selected)..When the calculation starts , a new windows appears on the screens & it displays the calculation information for each of the selected modes..

Our issue is that the calculation would kick off and then about 30% into that the run would stall for no reason.The CPU load would drop to 0 (Zero) in task manager while the  calculations are not done yet.When we check in the event viewer , then it shows a .NET RUNTIME 1023 ERROR..Below is what gets displayed in Event viewer..

Event Properties:

Event

Date: 10/23/2012                Source: .NET Runtime

Time: 5:57:17 PM                 Category: None

Type: Error                           Event ID: 1023

User: N/A

Computer: POPDB

Description:

.NET runtime version 2.0.50727.3634 Fatal Execution Engine Error (7A0BC6A6)(80131506)

Plz let me the possible solutions for the above issue . Also let me know how 1023 error can be handled at the source code level (source code is in C#.NET) using Visual studio , since I am new to .NET & paricularly this is the first time I am encountering this issue..Let me know if anything more needs to be furnished regarding this issue..

Hoping for best solutions..

regards,

Santhosh Ambale Venkatesh

Hi,

I need some pointers on how to approach a current task. Create hashes of passwords that are stored in a database. So after reading up on the subject I see that I should go for either PBKDF2 or BCrypt. And I have some question about these:

PBKDF:
The only supported solution is using HMAC SHA1 which does seems kinda old school. I could write my own that accepts SHA512 for example but I would rather find something proven. Does it exist? Second, what is the iteration recommendation in 2016 - 256000? 

I can see that there is a version 3 of Microsofts "PasswordHasher" (Microsoft.AspNetCore.Cryptography.KeyDerivation) which supports SHA512 and higher iterations. But looking at the implementation is seems that they use BCrypt behind (Win8Pbkdf2Provider). I guess that means this solution isn't "supported" by NIST?

BCrypt:
Still not supported by NIST - and we would expect customers in US to require this I guess. However I'm also reluctant to use BCrypt because I need something that is backed by a large company - all I can find are some old implementations that 1 guy updates (if ever). What are the iteration (workfactor) recommendation in 2016 - 12?

An alternative approach would be to just go with standard Rfc2898DeriveBytes using HMAC SHA1 and then using AES to encrypt the database values - storing the crypto key on disk.

What do you guys recommend? What do you do when looking into securing enterprise level software?

/Werner

I'm curious about the rationale behind the decision that gave life to Unicode "Code Pages". Was it all about the memory savings? Or was it more about the work involved with respect to the vast number of native fonts in the Windows OS systems?

I created a web service with Visual Studio 2015 .Net Framework 4.5. It uses RestSharp to call a REST service on an external system with a certificate. If I run it as an application on one of our servers (Windows Server 2012R2, IIS 8.5.9600.16384) it works perfectly. Running it on our target production server which is the same version of Windows, but IIS 8.0.9200.16384) the app crashes.
Certificates are installed on both machines on the Local Machine store and are properly read by the app. Both are running 4.5 application pools (the server where it works it says it is CLR 4.0.30319 and the one where it doesn't it says .NET Framework 4.0.30319. Both application pools are configured for both local and domain administrator access.

I have attached the output from the event log.

Any ideas?

+ System

  - Provider

   [ Name]  .NET Runtime

  - EventID 1026

   [ Qualifiers]  0

   Level 2

   Task 0

   Keywords 0x80000000000000

  - TimeCreated

   [ SystemTime]  2016-09-13T16:22:18.000000000Z

   EventRecordID 2659218

   Channel Application

   Computer XXXXXXXXXXXXXXXXXXX

   Security


- EventData

   Application: w3wp.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info:
System.AccessViolationException Stack: at System.Net.UnsafeNclNativeMethods+SafeNetHandles_SECURITY.AcquireCredentialsHandleW(System.String, System.String, Int32, Void*,
System.Net.SecureCredential ByRef, Void*, Void*, System.Net.SSPIHandle ByRef, Int64 ByRef) at System.Net.UnsafeNclNativeMethods+SafeNetHandles_SECURITY.AcquireCredentialsHandleW(System.String, System.String, Int32, Void*, System.Net.SecureCredential ByRef, Void*, Void*, System.Net.SSPIHandle
ByRef, Int64 ByRef) at System.Net.SafeFreeCredentials.AcquireCredentialsHandle(System.Net.SecurDll, System.String, System.Net.CredentialUse, System.Net.SecureCredential
ByRef, System.Net.SafeFreeCredentials ByRef) at System.Net.SSPIWrapper.AcquireCredentialsHandle(System.Net.SSPIInterface, System.String, System.Net.CredentialUse,
System.Net.SecureCredential) at System.Net.Security.SecureChannel.AcquireCredentialsHandle(System.Net.CredentialUse, System.Net.SecureCredential ByRef) at
System.Net.Security.SecureChannel.AcquireClientCredentials(Byte[] ByRef) at System.Net.Security.SecureChannel.GenerateToken(Byte[], Int32, Int32, Byte[] ByRef) at
System.Net.Security.SslState.StartSendBlob(Byte[], Int32, System.Net.AsyncProtocolRequest) at System.Net.Security.SslState.ProcessReceivedBlob(Byte[], Int32,
System.Net.AsyncProtocolRequest) at System.Net.Security.SslState.StartReceiveBlob(Byte[], System.Net.AsyncProtocolRequest) at System.Net.Security.SslState.StartSendBlob
(Byte[], Int32, System.Net.AsyncProtocolRequest) at System.Net.Security.SslState.ForceAuthentication(Boolean, Byte[], System.Net.AsyncProtocolRequest) at
System.Net.Security.SslState.ProcessAuthentication(System.Net.LazyAsyncResult) at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext,
System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback,
System.Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at
System.Net.TlsStream.ProcessAuthentication(System.Net.LazyAsyncResult) at System.Net.TlsStream.Write(Byte[], Int32, Int32) at System.Net.ConnectStream.WriteHeaders
(Boolean) at System.Net.HttpWebRequest.EndSubmitRequest() at System.Net.Connection.CompleteConnection(Boolean, System.Net.HttpWebRequest) at
System.Net.Connection.CompleteStartConnection(Boolean, System.Net.HttpWebRequest) at System.Net.Connection.CompleteStartRequest(Boolean, System.Net.HttpWebRequest,
System.Net.TriState) at System.Net.Connection.SubmitRequest(System.Net.HttpWebRequest, Boolean) at System.Net.ServicePoint.SubmitRequest(System.Net.HttpWebRequest,
System.String) at System.Net.HttpWebRequest.SubmitRequest(System.Net.ServicePoint) at System.Net.HttpWebRequest.GetRequestStream(System.Net.TransportContext ByRef) at
System.Net.HttpWebRequest.GetRequestStream() at RestSharp.Http.WriteRequestBody(System.Net.HttpWebRequest) at RestSharp.Http.PostPutInternal(System.String) at
RestSharp.RestClient.Execute(RestSharp.IRestRequest, System.String, System.Func`3<RestSharp.IHttp,System.String,RestSharp.HttpResponse>) at RestSharp.RestClient.Execute

I am trying to insert multiple records around 1000 from my list to MS SQL DB from my ASP.NET Core app using Entity framework. While inserting each record <g class="gr_ gr_30 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="30" id="30">i</g> am making few database interactions to check some values. It's taking <g class="gr_ gr_97 gr-alert gr_spell gr_run_anim ContextualSpelling" data-gr-id="97" id="97">a way</g> long time to insert the records.
SQLBulk Copy won't work as am checking conditions in between each insert. Is there any other way to do it?

Here's the code-

List<storecsv> insert = new List<storecsv>();

foreach (StoreCSV storecsv in insert)
{
    if (InsertOrUpdateStore(storecsv) == 0)
    {
        noninserted.Add(storecsv);
    }
}



private int InsertOrUpdateStore(StoreCSV dr){

    //Few DB interactions

    context.Markets.Add(Market);

}

Hi All,

I have requirement to Compare two lists.

For Ex: I have created two lists

Class Test

{

String Name;

String Type;

String Region;

String CustomerName;

String IPAddress;

String Values;

};

I have created two lists;

List<Test> Listdata1; List<Test> ListData2;

Listdata1 has 5 lakh records and List2data has 4.5 lakh record.

I need to compare two lists. Each member of each lists i have to do string comparison whether first list member is equal or not with the respective member of second list.

The result i should keep in the third list or in any container which is feasible as shown below:

Result Output be like:

Name   Type    Region   CustomerName   IpAddress       Values     CustomerName   IpAddress            Values

abc1     Male    UnitedAmerica Customer1        10.18.10.252        0.08         Customer1        10.18.10.252     0.9

abc1    Male    UnitedKingdom Customer2   10.18.10.2540.5       Customer3        10.18.10.252     0.76    

abc2    Female    India         Customer3   10.18.10.2420.05Customer510.18.10.245     0.6

abc3     Female    Uk                  Customer4          10.18.20.220       4.5            Customer6       10.18.19.225     12.9

I need to do string compare of each member of two list and somehow i have to  this member is different and this member is same. I have to keep both the list members in the any of the result container. 

Can anyone please give me a good algorithm or feasible solution for the above requirement.

Please give me some good algorithm because it has lakhs of record in both lists. 

You can suggests any other feasible solution also. Whether i can use two lists to compare or is it better to use Two datatables to compare.

Please give me some algorithm.

Thanks & Regards,

Lokesh

Instead of setting the system environmental variables such as COR_PROFILER and COR_ENABLE_PROFILING for enabling the dot Net profiler , is there any other way to enable it.?

If i set it in the environmental variables , then all the .net based processes (even mmc.exe .. etc) are trying to load my profiler(though I disallow it inside the dll). Each time some .net processes (other than IIS web apps) runs an error event is raised in event logs. This should not happen for my case.

I need the profiler to be loaded only for web applications. Is there any other alternative place to specify these COR_* values ?

I have Managed.dll written in C# and Unmaanaged.exe written in C++.

Trying to pass C++ function pointer and C++ obect to C#(com dll), 

Invoke / call this funtion pointer in C# and pass C++ object after  populating from C#.

Regards,

Lokesh

I'm stuck with the following error during the standard build process

Microsoft Windows [Versione 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. Tutti i diritti riservati.


C:\Git\coreclr>build -rebuild
BUILD: Commencing CoreCLR Repo build
BUILD: Checking prerequisites
BUILD: Using environment: "C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\\VsDevCmd.bat"
Tools are already initialized.
Running: C:\Git\coreclr\Tools\dotnetcli\dotnet.exe C:\Git\coreclr\Tools\run.exe build -Project=C:\Git\coreclr\build.proj -generateHeaderWindows -NativeVersionHeaderFile="C:\Git\coreclr\bin\obj\_version.h" -BuildOS=Window
s_NT -BuildType=Debug -BuildArch=x64  -rebuild

Unhandled Exception: System.IO.FileNotFoundException: Could not load file or assembly 'Newtonsoft.Json, Version=7.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed' or one of its dependencies. Impossibile trovare i
l file specificato.
   at Microsoft.DotNet.Execute.Executor.OpenFile()
   at Microsoft.DotNet.Execute.Executor.Main(String[] args)
BUILD: Commencing build of native components for Windows_NT.x64.Debug
BUILD: Using environment: "C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Tools\\..\..\VC\vcvarsall.bat" x86_amd64
BUILD: Regenerating the Visual Studio solution
-- VS_PLATFORM_TOOLSET is v140
-- VS_PLATFORM_NAME is x64
-- VS_WINDOWS_TARGET_PLATFORM_VERSION is
-- Configuring done
-- Generating done
-- Build files have been written to: C:/Git/coreclr/bin/obj/Windows_NT.x64.Debug
Tools are already initialized.
Running: C:\Git\coreclr\Tools\dotnetcli\dotnet.exe C:\Git\coreclr\Tools\run.exe build -Project=C:\Git\coreclr\bin\obj\Windows_NT.x64.Debug\install.vcxproj -MsBuildLog=/flp:Verbosity=normal;LogFile="C:\Git\coreclr\bin\Log
s\CoreCLR_Windows_NT__x64__Debug.log" -MsBuildWrn=/flp1:WarningsOnly;LogFile="C:\Git\coreclr\bin\Logs\CoreCLR_Windows_NT__x64__Debug.wrn" -MsBuildErr=/flp2:ErrorsOnly;LogFile="C:\Git\coreclr\bin\Logs\CoreCLR_Windows_NT__
x64__Debug.err" -configuration=Debug  -BuildOS=Windows_NT -BuildType=Debug -BuildArch=x64  -rebuild

Unhandled Exception: System.IO.FileNotFoundException: Could not load file or assembly 'Newtonsoft.Json, Version=7.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed' or one of its dependencies. Impossibile trovare i
l file specificato.
   at Microsoft.DotNet.Execute.Executor.OpenFile()
   at Microsoft.DotNet.Execute.Executor.Main(String[] args)
BUILD: Error: native component build failed. Refer to the build log files for details:
    "C:\Git\coreclr\bin\Logs\CoreCLR_Windows_NT__x64__Debug.log""C:\Git\coreclr\bin\Logs\CoreCLR_Windows_NT__x64__Debug.wrn""C:\Git\coreclr\bin\Logs\CoreCLR_Windows_NT__x64__Debug.err"

Dummy Question. Mistakenly submitted

Dummy Question. Mistakenly submitted

Dummy question Mistakenly submitted.

Dummy Question. Mistakenly submitted

I am injecting the entry and exit function call ILs into the .Net code from my profiler. 

The signature of the function that i inject is 

COR_SIGNATURE sigFunctionProbe4[] = {
		IMAGE_CEE_CS_CALLCONV_DEFAULT,      // default calling convention
		0x03,
		ELEMENT_TYPE_VOID,
		ELEMENT_TYPE_U8,
		ELEMENT_TYPE_I4,
		ELEMENT_TYPE_I4,
	};

and the corresponding function's definition in the helper assembly is 

public static void EnterFunction(UInt64 fID, int flag1, int flag2)
{
..
..
}

The application that i am profiling is "Citrix Director" . In this case when my profiler gets attached to the application  , the application does not even log in and throws an error in EventLog ("the w3wp.exe process is not crashed") as attached in the image 

But if i Add en extra argument in the signature of the method , then everything works fine - The highly confusing part. 

Works Fine with the following 

COR_SIGNATURE sigFunctionProbe4[] = {
		IMAGE_CEE_CS_CALLCONV_DEFAULT,      // default calling convention
		0x04,
		ELEMENT_TYPE_VOID,
		ELEMENT_TYPE_U8,
		ELEMENT_TYPE_I4,
		ELEMENT_TYPE_I4,
		ELEMENT_TYPE_I4,
	};

public static void EnterFunction(UInt64 fID, int flag1, int flag2, int flag3)
{
..
..
}

Should i inject an helper function call with four arguments only..? (this happens only for profiling few applications - for many other web applications profiler works flawlessly)

I need some suggestions as I am trying to isolate a problem in some very old code in old machine. Rewriting is out of the question. I only have small pieces of the whole puzzle. Therefore, please bear with me!!

1. We have com+ server running vb6 classes in one instance without recycling setting. It was running fine for years in win2003 OS within virtual machine.

2. In the last few months, the vb6 classes running in com+ server reported "out of memory" error. Once this error occurred, some methods (in different vb6 classes) always reported this error and others are running fine. Physical memory and dllhost.exe memory usage are both reasonable. The only way to fix it is to recycle the com+ server application.

3. We are in the midst of pinpointing the line in vb6 raising the problem. I reviewed those methods reporting errors. Following is what caught my eyes. They both invoke CCW coded in .net 2.0 framework dll. At least one the dll has very strong error reporting, but there is reported .net error correlated in time with the vb6 "out of memory" error.

4. There is a lot of info in the internet about CCW mscoree.dll not disposing .net objects as expected. Will such issue cause my observation inside a long running com+ server application?

Thanks in advance

Hello, 

I am writing an application that has to monitor EventLog for SharePoint related entries in particular. I am subscribing to and processing System.Diagnostics.EventLog.EntryWritten event. 

The problem is that System.Diagnostics.EventLogEntryType enumeration which defines theLevel column in the EventViewer, doesn't contain "Critical".  What I am receiving in theEntryWrittenEventArgs.Entry.EntryType for "Critical" SharePoint events is 0.

Is there any way to get the actual Level, not just zero? This is not SharePoint specific thing in fact, some other applications also use their own levels...

Thanks a lot!