Audiodg.exe appcrash ntdll.dll

Hi Daniel,

Sorry for the late response.

"audiodg.exe" is a part of Windows. System services like audio drivers run in different and isolated login session from the locally logged-in user in Windows. This ensures that content and plug-ins cannot be modified by other applications (e.g. by spyware).

Note: The audiodg.exe file is located in the folder C:\Windows\System32.

Let’s try these methods and check if it helps.

Method 1: Place the computer in a clean boot state and check if there are any software conflicts.

http://support.microsoft.com/kb/929135

Note: To reset the computer to normal mode after troubleshooting, please refer to “How to reset the computer to start as usual” from the above article.

Method 2: Run a system file checker scan and check.

http://support.microsoft.com/kb/929833

To ensure your computer is free from virus and malware, you may run an online scan.

http://www.microsoft.com/security/scanner/en-us/default.aspx

Note: Any data files that are infected may only be cleaned by deleting the file entirely, which means there is a potential for data loss.

Please update us the results. We will be happy to glad you.

Hi

Thanks, but nothing works.

I tried a lot of versions of realtek HD drivers, but without luck. Problem persists.
Now I upgrated to windows 8.1, but problem persists. I removed avira and use only native windows defender. Sound stil crashing. 

More error information:

Nome do Log: System
Fonte: Application Popup
Data: 27/05/2014 21:13:14
Identificação do Evento:26
Categoria da Tarefa:Nenhum
Nível: Informações
Palavras-chave:
Usuário: SISTEMA
Computador: computer_name
Descrição:
Pop-up de aplicativo: Windows - Erro de aplicativo : A instrução no 0xed7bc79e fez referência à memória no 0x00000000. A memória não pôde ser read.


Clique em 'OK' para finalizar o programa
XML de Evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Popup" Guid="{47BFA2B7-BD54-4FAC-B70B-29021084CA8F}" />
<EventID>26</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-05-28T01:13:14.460425000Z" />
<EventRecordID>12297</EventRecordID>
<Correlation />
<Execution ProcessID="628" ThreadID="676" />
<Channel>System</Channel>
<Computer>computer_name</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Caption">Windows - Erro de aplicativo</Data>
<Data Name="Message">A instrução no 0xed7bc79e fez referência à memória no 0x00000000. A memória não pôde ser read.


Clique em 'OK' para finalizar o programa</Data>
</EventData>
</Event>




==============




Nome do Log: Application
Fonte: Windows Error Reporting
Data: 27/05/2014 21:13:14
Identificação do Evento:1001
Categoria da Tarefa:Nenhum
Nível: Informações
Palavras-chave:Clássico
Usuário: N/D
Computador: computer_name
Descrição:
Falha no bucket , tipo 0
Nome do Evento: APPCRASH
Resposta: Não disponível
ID do CAB: 0


Assinatura do problema:
P1: AUDIODG.EXE
P2: 6.3.9600.17090
P3: 53413821
P4: ntdll.dll
P5: 6.3.9600.17031
P6: 530895af
P7: c0000005
P8: 000000000009c79e
P9: 
P10: 


Arquivos anexados:


Esses arquivos podem estar disponíveis em:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_AUDIODG.EXE_4d1fdac7a5347eb2ef9e1d94ce81bd 6b8116d3_5bd22b66_1775db49


Símbolo da análise: 
Verificando novamente solução: 0
ID do Relatório: 3da08dea-e605-11e3-beb5-2c44fdfac142
Status do Relatório: 4100
Bucket com hash: 
XML de Evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-05-28T01:13:14.000000000Z" />
<EventRecordID>14018</EventRecordID>
<Channel>Application</Channel>
<Computer>computer_name</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>APPCRASH</Data>
<Data>Não disponível</Data>
<Data>0</Data>
<Data>AUDIODG.EXE</Data>
<Data>6.3.9600.17090</Data>
<Data>53413821</Data>
<Data>ntdll.dll</Data>
<Data>6.3.9600.17031</Data>
<Data>530895af</Data>
<Data>c0000005</Data>
<Data>000000000009c79e</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_AUDIODG.EXE_4d1fdac7a5347eb2ef9e1d94 ce81bd6b8116d3_5bd22b66_1775db49</Data>
<Data>
</Data>
<Data>0</Data>
<Data>3da08dea-e605-11e3-beb5-2c44fdfac142</Data>
<Data>4100</Data>
<Data>
</Data>
</EventData>
</Event>

Daniel,

Try these steps and see if it fixes the issue.

a. Click Start, type services.msc and press Enter.
b. Double-click "Windows Audio" service.
c. Click the Log On tab.
d. Click Local System account, and then click OK.
e. Right-click "Windows Audio" service, and then click Start.
f. Follow the same steps for "Windows Audio Endpoint Builder" service.

Hope it helps.

Also, the ntdll.dll, a component of Windows, is unlikely the actual cause of the crash.

What third party software is installed that may be related to audio?

What software is installed that may be from Andrea Electronics?

Daniel,

Try these steps and see if it fixes the issue.

a. Click Start, type services.msc and press Enter.
b. Double-click "Windows Audio" service.
c. Click the Log On tab.
d. Click Local System account, and then click OK.
e. Right-click "Windows Audio" service, and then click Start.
f. Follow the same steps for "Windows Audio Endpoint Builder" service.

Hope it helps.

Hi, thas for response.

In "windows Audio" service, when I change to "Local System Account" and try to start the service, I receive this error:

"Error 1079: The account specified for this service is different from the account specified for other services running in the same process"

with the "Windows Audio Endpoint Builder" service, its already set with local system account. 

Also, the ntdll.dll, a component of Windows, is unlikely the actual cause of the crash.

What third party software is installed that may be related to audio?

What software is installed that may be from Andrea Electronics?

Hi, thanks for response

is a HP notebook, default windows. I installed basic software only. K-lite codec pack, power dvd

And yes, I see "Andrea Electronics" when I access microphone improovements. I see Andrea logomark, and two checked options:  improve voice and echo cancelation. Is impossible to use skype, etc, without echo cancelation option.

You think the problem is with Andrea Electronics?

Thanks

And yes, I see "Andrea Electronics" when I access microphone improovements. I see Andrea logomark, and two checked options:  improve voice and echo cancelation. Is impossible to use skype, etc, without echo cancelation option.

It is possible the Andrea software may be causing the issue, it appears to be loading a couple of modules during the crash (AERTAC64.dll, AERTAR64.dll).

Are you able to obtain an update for the Andrea software or, at least, uninstall and reinstall the current version?

What is the name of Andrea software you are using, is it the following?:

http://www.andreaelectronics.com/audiocommander.html

Also, can you obtain the following two files (bolded)?:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\WERDF30.tmp.secure.hdmp

C:\Windows\ServiceProfiles\LocalService\AppData\Local\WERE24F.tmp.secure.dmp

And yes, I see "Andrea Electronics" when I access microphone improovements. I see Andrea logomark, and two checked options:  improve voice and echo cancelation. Is impossible to use skype, etc, without echo cancelation option.

It is possible the Andrea software may be causing the issue, it appears to be loading a couple of modules during the crash (AERTAC64.dll, AERTAR64.dll).

Are you able to obtain an update for the Andrea software or, at least, uninstall and reinstall the current version?

What is the name of Andrea software you are using, is it the following?:

http://www.andreaelectronics.com/audiocommander.html

Also, can you obtain the following two files (bolded)?:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\WERDF30.tmp.secure.hdmp

C:\Windows\ServiceProfiles\LocalService\AppData\Local\WERE24F.tmp.secure.dmp

Hi

this Andrea comes with Realtek HD audio drivers by default. I not installed anything more. 

Please see screehshot below. In control panel -> realtek audio  appers "Andrea" in mic efects. And clicking right mouse in sound icon -> record devives->Microphone proprierties -> effects.

Im using up to date Realtek HD audio drivers downloaded from realtek site (http://www.realtek.com.tw/downloads/  ->  High Definition Audio Codecs (Software)

I dont know howto remove this  Andrea filters  from realtek drivers.

And about 2 files from Windows error report:

 I could found this two files because I updated to windows 8.1 and loose this files. But when the error appears again, I will try to get generated files.

Thanks