I am a Quicken (quicken.ca) user on Windows 7 SP1. The latest patch for Quicken (2015 R5 or 2016 R4) has added EO object .dlls and now Quicken silently closes on my main computer rendering Quicken unusable.
This does not happen on other machines, so I would like to determine the problem. Quicken support phone calls have not been able to determine the problem.
Quicken includes these .dlls (I believe it is 17.0.64 based on the eowp###.exe later described)
3,723,208 EO.Base.dll
421,832 EO.WebBrowser.dll
22,984 EO.WebBrowser.Wpf.dll
46,863,304 EO.WebEngine.dll
Quicken silently closes on the main computer, while on other test machines it opens a web browser window to securely log on to the quicken account.
In the Quicken DotNetLoger.log the following backtrace indicates the error is in EO objects which then causes Quicken to silently close.
Code:
ERROR:An unhandled exception event invoked in the Dispatcher Execution
Exception details:
EO.Internal.jq+e: Child process exited unexpectedly.
at EO.Internal.jq.a(Exception A_0, Boolean A_1)
at EO.Internal.jq.a(p4 A_0)
at EO.Internal.jq.a(Boolean& A_0, String[] A_1, String A_2, String A_3, String A_4, String A_5)
at EO.Internal.jq.a(String[] A_0, String A_1, String A_2, String A_3, String A_4)
at EO.Internal.aqh.a(String A_0, String A_1)
at EO.Internal.apr.g()
at EO.WebEngine.Engine.Start()
at EO.Internal.apr.d()
at EO.Internal.cr..ctor(WebView A_0)
at EO.WebBrowser.WebView.x()
at EO.WebBrowser.WebView.a(IntPtr A_0, Boolean A_1)
at EO.WebBrowser.WebView.Create(IntPtr hWnd)
at EO.Wpf.WebViewHost.a.a(HandleRef A_0)
at System.Windows.Interop.HwndHost.BuildWindow(HandleRef hwndParent)
at System.Windows.Interop.HwndHost.BuildOrReparentWindow()
at System.Windows.Interop.HwndHost.OnSourceChanged(Object sender, SourceChangedEventArgs e)
at System.Windows.SourceChangedEventArgs.InvokeEventHandler(Delegate genericHandler, Object genericTarget)
at System.Windows.RoutedEventArgs.InvokeHandler(Delegate handler, Object target)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised)
at System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args)
at System.Windows.UIElement.RaiseEvent(RoutedEventArgs e)
at System.Windows.PresentationSource.UpdateSourceOfElement(DependencyObject doTarget, DependencyObject doAncestor, DependencyObject doOldParent)
at System.Windows.PresentationSource.OnVisualAncestorChanged(DependencyObject uie, AncestorChangedEventArgs e)
at System.Windows.UIElement.OnVisualAncestorChanged(Object sender, AncestorChangedEventArgs e)
at System.Windows.Media.Visual.ProcessAncestorChangedNotificationRecursive(DependencyObject e, AncestorChangedEventArgs args)
at System.Windows.Media.Visual.FireOnVisualParentChanged(DependencyObject oldParent)
at System.Windows.Media.Visual.AddVisualChild(Visual child)
at System.Windows.Controls.Decorator.set_Child(UIElement value)
at EO.Wpf.WebViewHost.OnApplyTemplate()
at System.Windows.FrameworkElement.ApplyTemplate()
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Controls.Border.MeasureOverride(Size constraint)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Controls.Grid.MeasureCell(Int32 cell, Boolean forceInfinityV)
at System.Windows.Controls.Grid.MeasureCellsGroup(Int32 cellsHead, Size referenceSize, Boolean ignoreDesiredSizeU, Boolean forceInfinityV, Boolean& hasDesiredSizeUChanged)
at System.Windows.Controls.Grid.MeasureCellsGroup(Int32 cellsHead, Size referenceSize, Boolean ignoreDesiredSizeU, Boolean forceInfinityV)
at System.Windows.Controls.Grid.MeasureOverride(Size constraint)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at MS.Internal.Helper.MeasureElementWithSingleChild(UIElement element, Size constraint)
at System.Windows.Controls.ContentPresenter.MeasureOverride(Size constraint)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Documents.AdornerDecorator.MeasureOverride(Size constraint)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Controls.Border.MeasureOverride(Size constraint)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Window.MeasureOverrideHelper(Size constraint)
at System.Windows.Window.MeasureOverride(Size availableSize)
at System.Windows.FrameworkElement.MeasureCore(Size availableSize)
at System.Windows.UIElement.Measure(Size availableSize)
at System.Windows.Interop.HwndSource.SetLayoutSize()
at System.Windows.Interop.HwndSource.set_RootVisualInternal(Visual value)
at System.Windows.Interop.HwndSource.set_RootVisual(Visual value)
at System.Windows.Window.SetRootVisual()
at System.Windows.Window.SetRootVisualAndUpdateSTC()
at System.Windows.Window.SetupInitialState(Double requestedTop, Double requestedLeft, Double requestedWidth, Double requestedHeight)
at System.Windows.Window.CreateSourceWindow(Boolean duringShow)
at System.Windows.Window.CreateSourceWindowDuringShow()
at System.Windows.Window.SafeCreateWindowDuringShow()
at System.Windows.Window.ShowHelper(Object booleanBox)
at System.Windows.Window.Show()
at System.Windows.Window.ShowDialog()
at QuickenWindow.ViewModels.MainViewModel.SignInExecution(EventArgs e)
at QuickenWindow.ViewModels.MainViewModel.AuthorizationStateCheck(Object sender, AuthEventArgs e)
at Intuit.Ctg.Services.Authentication.AuthenticationServices.SignInUserFlow(EventArgs e)
at Intuit.Ctg.Services.Authentication.AuthenticationServices.HandleAuthorizationFlow(EventArgs args)
at Intuit.Ctg.Services.Authentication.AuthenticationServices.RequestAuthHeaders(RequestAuthHeadersEventArgs e)
at Intuit.Ctg.Services.Authentication.AuthenticationServices.RequestAuthHeadersManaged(WebHeaderCollection& authHeaders, Boolean bRestartSession)
at Intuit.Ctg.Services.Authentication.AuthenticationServices.GetUserInfoExternal(SignUpRequest& userDetails, Boolean bRestartSession)
at QuickenWindow.ViewModels.MainViewModel.OnUnmanagedGetUserInfo(Object sender, GetUserInfoEventArgs eventArgs)
at QuickenInteropNS.CQWAppManager.raise_GetUserInfoEvent(Object value0, GetUserInfoEventArgs value1)
at QuickenInteropNS.CQWAppManager.handleGetUserInfo(Object sender, GetUserInfoEventArgs e)
at QuickenInteropNS.CQMainManager.raise_GetUserInfo(Object value0, GetUserInfoEventArgs value1)
at QuickenInteropNS.CQMainManager.FireGetUserInfoEvent(IntPtr fpCallBack, Void* pUserData, Boolean bStartUpdateSession)
at QMainEvents.GetUserInfo(IntPtr fpCallBackFunc, Void* pUserDatas, Boolean bStartUpdateSession)
at SendMessageA(HWND__* , UInt32 , UInt32 , Int32 )
at QuickenInteropNS.CQWAppManager.HandleMenuEvent(IntPtr window, Int32 iID)
at QuickenWindow.ViewModels.InputGestureViewModel`1.<>c__DisplayClass3.<HandleMenuUid>b__1()
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Int32 numArgs, Delegate catchHandler)
Forcefully terminating application.
The following post suggests that the first thing to check for is Anti-virus software killing off the rundll32 process.
https://www.essentialobjects.com/forum/postst10074_Child-process-exited-unexpectedly-crash.aspxI have uninstalled Microsoft Security Essentials and the problem persists. It is the only security software that I can find on the system. MSE is installed on other systems which do not experience this problem.
I have tried disabling all start-up applications and non-MS services according to this Clean Boot procedure:
https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windowsBut the problem persists.
I have used SysInternals Process Explorer to look for any hidden security software that might be killing the process but haven't found any.
https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorerI have used SysInternals Process Monitor to try and figure out what is causing it to fail. I can see that it "Process Start"s these:
rundll32.exe --eoim
rundll32.exe --enable-speech-input --auto-scan-plugin --lang=en-US --enable-media-stream
eowp.17.0.64.0.exe --enable-speech-input --auto-scan-plugin --lang=en-US --enable-media-stream --eo_init_data=eo.ipc.temp.2044.1.6
but nothing indicates why it fails to open the web browser and let me log in as it does on other machines.
I have tried to compare the Process Monitor logs from a system where it opens the web browser with the system where it fails. On the one where it fails both rundll32 and eowp.17.0.64.0.exe test for a non-existant icudtl.dat in the TEMP directory and shortly after the rundll32/eowp thread exits, while on the working systems this icudtl.dat file is never consulted and the rundll32 process continues and opens a web window.
Here is a short sample to explain what I mean. Process monitor logs are large:
Non Working Machine:
Code:
rundll32 CloseFile SUCCESS ....Quicken\EO.WebEngine.DLL
rundll32 RegQueryValue NAME NOT FOUND HKLM\System\CurrentControlSet\Control\WMI\Security\d2d578d9-2936-45b6-a09f-30e32715f42d
rundll32 CreateFile NAME NOT FOUND T:\icudtl.dat
rundll32 CreateFile SUCCESS C:\Windows\SysWOW64\tzres.dll
... more with tzres.dll
rundll32 RegOpenKEY HKLM\Software\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR
... more with Windows Error Reporting...
... more with tzres.dll
rundll32 Thread Exit
qw.exe (quicken) then consults the registry for TCPIP parameters info and spawns eowp.17.0.64.0.exe which also looks for icudtl.dat and thread exits exactly like rundll32 ...
Working Machine
Code:
rundll32 CloseFile SUCCESS ....Quicken\EO.WebEngine.DLL
rundll32 RegQueryValue NAME NOT FOUND HKLM\System\CurrentControlSet\Control\WMI\Security\d2d578d9-2936-45b6-a09f-30e32715f42d
rundll32 RegQueryKey SUCCESS HKLM
rundll32 RegQueryKey SUCCESS HKLM\SOFTWARE\Wow6432Node\Macromedia\FlashPlayerPepper
rundll32 RegQueryKey SUCCESS HKLM
rundll32 RegQueryKey SUCCESS HKLM
rundll32 RegOpenKey SUCCESS HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
and it continues to get WinSock options ..
rundll32 RegOpenKey REPARSE HKLM\System\CurrentControlSet\Services\WinSock2\Parameters
and rundll32 continues to create more threads.... and gets the TCP parameters and opens the Web window and TCP connects to quicken's https server.
.....
I don't know if that is relevant nor how to determine what the real issue is by comparing two process monitor logs. This was a shot in the dark.
Is there anything I can do as an end user to definitively figure out why the EO "Child process exited unexpectedly." on this one machine so Quicken can work again?