Crash in slproto.exe on Windows 2008 R2 server

  • 7003178
  • 06-Apr-2012
  • 14-May-2013

Environment

Microsoft Windows 2008 R2 64 bit
Novell SecureLogin 7 SP2 HF7 installed in AD mode

Situation

In slproto.exe.14080.dmp the assembly instruction at urlmon!memset in
C:\Windows\SysWOW64\urlmon.dll from Microsoft Corporation has caused an access
violation exception (0xC0000005) when trying to write to memory location
0x761d1b2a on thread 0

Resolution

Contact Citrix Support.  Alternatively, configure DEP on the Windows server to allow the SecureLogin process slproto.exe.  If this is not possible consider the following workarounds:
 
1. Disable DEP.  To disable DEP on Windows Server 2008 type the following on an elevated Command Line

bcdedit /set nx AlwaysOff
 
For more information see Microsoft MSDN Article "Boot Parameters to Configure DEP and PAE"
 
2. Rename "sfrhook.dll / sfrhook64.dll" (located in %program files%\citrix\system32\

Cause

This issue is caused by the Microsoft DEP (Data Execution Prevention) service blocking the SecureLogin process slproto.exe.