Crash in slproto.exe on Windows 2008 R2 server

  • 7003178
  • 06-Apr-2012
  • 14-May-2013


Microsoft Windows 2008 R2 64 bit
Novell SecureLogin 7 SP2 HF7 installed in AD mode


In slproto.exe.14080.dmp the assembly instruction at urlmon!memset in
C:\Windows\SysWOW64\urlmon.dll from Microsoft Corporation has caused an access
violation exception (0xC0000005) when trying to write to memory location
0x761d1b2a on thread 0


Contact Citrix Support.  Alternatively, configure DEP on the Windows server to allow the SecureLogin process slproto.exe.  If this is not possible consider the following workarounds:
1. Disable DEP.  To disable DEP on Windows Server 2008 type the following on an elevated Command Line

bcdedit /set nx AlwaysOff
For more information see Microsoft MSDN Article "Boot Parameters to Configure DEP and PAE"
2. Rename "sfrhook.dll / sfrhook64.dll" (located in %program files%\citrix\system32\


This issue is caused by the Microsoft DEP (Data Execution Prevention) service blocking the SecureLogin process slproto.exe.