Can't create AMP Instance with 1.8.3.2

  • 322 Views
  • Last Post 13 August 2019
  • Topic Is Solved
lxp17 posted this 01 August 2019

OS Windows 10 64bit 1903 Latest AMP Instance Manager

Add instance(First instance with professional licence,ADS module), after create Instance it only displays "Create AMP Instance Please Wait ...."

Tried on 2 seperate machines, always with the same result.

AMP already had been installed and working on one of the machines, but wouldn't let me add another instance after installing 1.8.3.2. So I uninstalled and haven't been able to get it working again.

THX for your input in advance

lx

Order By: Standard | Newest | Votes
Mike posted this 01 August 2019

So you've got an ADS instance created okay?

maggi373 posted this 01 August 2019

Hey, got the same problem. I cant create any instances both of my servers (one of them is a fresh install of windows) but I can update instances tho with the update. I simply used an older instance manager to create the ADS i needed on the new machine to get around.

I'm running Windows server 2019 on both of them

Best regards maggi373

lxp17 posted this 02 August 2019

Hi, no it was not possible to create an instance BR lx

Mike posted this 02 August 2019

Try running ampinstmgr quickstart on the command line instead.

lxp17 posted this 02 August 2019

this resulted in:

[Info] Using cached archive: C:\AMPDatastore\Instances\AMPCache-1832.zip

[Info] Instance creation failed. AMP configuration failed with return code -532462766

Mike posted this 05 August 2019

Interesting. I will have to look into this.

Mike posted this 05 August 2019

Is there anything in the Windows event log?

Pugnator posted this 05 August 2019

Same here. This is what I found in the event log:

  • System

    • Provider

      [ Name] .NET Runtime

    • EventID 1026

      [ Qualifiers] 0

      Level 2

      Task 0

      Keywords 0x80000000000000

    • TimeCreated

      [ SystemTime] 2019-08-05T16:35:24.582558400Z

      EventRecordID 3184

      Channel Application

      Computer Name

      Security

  • EventData

    Anwendung: AMP.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: Ausnahmecode e0434352, Ausnahmeadresse 00007FFD4863A839 Stapel:

Mike posted this 05 August 2019

Is there anything else? The message says something about an unhandled exception so there should be more information.

WanderCat posted this 06 August 2019

I got the same problem, Fail link as C:\WINDOWS\System32\KERNELBASE.dll

Mike posted this 07 August 2019

I need more information, the event log should show more information about what the specific exception was.

lxp17 posted this 07 August 2019

  • System

    • Provider

    [ Name] .NET Runtime

    • EventID 1026

    [ Qualifiers] 0

    Level 2

    Task 0

    Keywords 0x80000000000000

    • TimeCreated

    [ SystemTime] 2019-08-07T12:24:02.813625100Z

    EventRecordID 1086

    Channel Application

    Computer DESKTOP-PEUEHM3

    Security

  • EventData

    Anwendung: AMP.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: Ausnahmecode e0434352, Ausnahmeadresse 00007FFCF2CEA839 Stapel:

lxp17 posted this 07 August 2019

  • System

    • Provider

    [ Name] Application Error

    • EventID 1000

    [ Qualifiers] 0

    Level 2

    Task 100

    Keywords 0x80000000000000

    • TimeCreated

    [ SystemTime] 2019-08-07T12:24:03.032368300Z

    EventRecordID 1087

    Channel Application

    Computer DESKTOP-PEUEHM3

    Security

  • EventData

    AMP.exe 1.8.3.2 5d419a72 KERNELBASE.dll 10.0.18362.239 b6f4b059 e0434352 000000000003a839 2688 01d54d1afed35392 C:\AMPDatastore\Instances\ADS01\AMP.exe C:\WINDOWS\System32\KERNELBASE.dll 77ca8609-5427-4eff-b696-c2fd292f3930

lxp17 posted this 07 August 2019

  • System

    • Provider

    [ Name] Windows Error Reporting

    • EventID 1001

    [ Qualifiers] 0

    Level 4

    Task 0

    Keywords 0x80000000000000

    • TimeCreated

    [ SystemTime] 2019-08-07T12:24:09.125936400Z

    EventRecordID 1088

    Channel Application

    Computer DESKTOP-PEUEHM3

    Security

  • EventData

    1999173242450389162 4 APPCRASH Nicht verfĂĽgbar 0 AMP.exe 1.8.3.2 5d419a72 KERNELBASE.dll 10.0.18362.239 b6f4b059 e0434352 000000000003a839

    \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER88CE.tmp.dmp \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER895B.tmp.WERInternalMetadata.xml \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER897C.tmp.xml \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER897A.tmp.csv \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER89C9.tmp.txt \?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrashAMP.exe2fa1809113cc5f5668655daa53714f33d78639325ddfe562579cac-0e94-4f27-ac7b-cb5a6b2c7dca

    0 77ca8609-5427-4eff-b696-c2fd292f3930 268435456 f49bb4c191444b960bbe7d78d0b8a8aa 0

lxp17 posted this 07 August 2019

Content of Crashreport

Version=1 EventType=APPCRASH EventTime=132096542430948664 ReportType=2 Consent=1 UploadTime=132096542433761079 ReportStatus=268435456 ReportIdentifier=62579cac-0e94-4f27-ac7b-cb5a6b2c7dca IntegratorReportIdentifier=77ca8609-5427-4eff-b696-c2fd292f3930 Wow64Host=34404 NsAppName=AMP.exe OriginalFilename=AMP.exe AppSessionGuid=00002688-0002-0006-9253-d3fe1a4dd501 TargetAppId=W:00060bfbfe5b66c082a1c0952f1945038af700000000!0000cd0803446e28c54227aca7a3d9242be56d5fe3f1!AMP.exe TargetAppVer=2019//07//31:13:41:06!103849!AMP.exe BootId=4294967295 TargetAsId=508646 IsFatal=1 EtwNonCollectReason=1 Response.BucketId=f49bb4c191444b960bbe7d78d0b8a8aa Response.BucketTable=4 Response.LegacyBucketId=1999173242450389162 Response.type=4 Sig[0].Name=Anwendungsname Sig[0].Value=AMP.exe Sig[1].Name=Anwendungsversion Sig[1].Value=1.8.3.2 Sig[2].Name=Anwendungszeitstempel Sig[2].Value=5d419a72 Sig[3].Name=Fehlermodulname Sig[3].Value=KERNELBASE.dll Sig[4].Name=Fehlermodulversion Sig[4].Value=10.0.18362.239 Sig[5].Name=Fehlermodulzeitstempel Sig[5].Value=b6f4b059 Sig[6].Name=Ausnahmecode Sig[6].Value=e0434352 Sig[7].Name=Ausnahmeoffset Sig[7].Value=000000000003a839 DynamicSig[1].Name=Betriebsystemversion DynamicSig[1].Value=10.0.18362.2.0.0.768.98 DynamicSig[2].Name=Gebietsschema-ID DynamicSig[2].Value=3079 DynamicSig[22].Name=Zusatzinformation 1 DynamicSig[22].Value=4243 DynamicSig[23].Name=Zusatzinformation 2 DynamicSig[23].Value=42430f7f76c5697546cc695361aad7f7 DynamicSig[24].Name=Zusatzinformation 3 DynamicSig[24].Value=a98b DynamicSig[25].Name=Zusatzinformation 4 DynamicSig[25].Value=a98b3667de0fa7eaea5e8bf2c9a7670e UI[2]=C:\AMPDatastore\Instances\ADS01\AMP.exe LoadedModule[0]=C:\AMPDatastore\Instances\ADS01\AMP.exe LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll LoadedModule[2]=C:\WINDOWS\SYSTEM32\MSCOREE.DLL LoadedModule[3]=C:\WINDOWS\System32\KERNEL32.dll LoadedModule[4]=C:\WINDOWS\System32\KERNELBASE.dll LoadedModule[5]=C:\WINDOWS\System32\ADVAPI32.dll LoadedModule[6]=C:\WINDOWS\System32\msvcrt.dll LoadedModule[7]=C:\WINDOWS\System32\sechost.dll LoadedModule[8]=C:\WINDOWS\System32\RPCRT4.dll LoadedModule[9]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll LoadedModule[10]=C:\WINDOWS\System32\SHLWAPI.dll LoadedModule[11]=C:\WINDOWS\System32\combase.dll LoadedModule[12]=C:\WINDOWS\System32\ucrtbase.dll LoadedModule[13]=C:\WINDOWS\System32\bcryptPrimitives.dll LoadedModule[14]=C:\WINDOWS\System32\GDI32.dll LoadedModule[15]=C:\WINDOWS\System32\win32u.dll LoadedModule[16]=C:\WINDOWS\System32\gdi32full.dll LoadedModule[17]=C:\WINDOWS\System32\msvcpwin.dll LoadedModule[18]=C:\WINDOWS\System32\USER32.dll LoadedModule[19]=C:\WINDOWS\System32\IMM32.DLL LoadedModule[20]=C:\WINDOWS\System32\kernel.appcore.dll LoadedModule[21]=C:\WINDOWS\SYSTEM32\VERSION.dll LoadedModule[22]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll LoadedModule[23]=C:\WINDOWS\SYSTEM32\VCRUNTIME140CLR0400.dll LoadedModule[24]=C:\WINDOWS\SYSTEM32\ucrtbaseclr0400.dll LoadedModule[25]=C:\WINDOWS\assembly\NativeImagesv4.0.3031964\mscorlib\5bf3aec1e2354e12f9476c318d90a261\mscorlib.ni.dll LoadedModule[26]=C:\WINDOWS\System32\ole32.dll LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll LoadedModule[28]=C:\WINDOWS\SYSTEM32\wldp.dll LoadedModule[29]=C:\WINDOWS\System32\CRYPT32.dll LoadedModule[30]=C:\WINDOWS\System32\MSASN1.dll LoadedModule[31]=C:\WINDOWS\System32\WINTRUST.dll LoadedModule[32]=C:\WINDOWS\SYSTEM32\amsi.dll LoadedModule[33]=C:\WINDOWS\System32\cryptsp.dll LoadedModule[34]=C:\WINDOWS\SYSTEM32\USERENV.dll LoadedModule[35]=C:\WINDOWS\System32\profapi.dll LoadedModule[36]=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MpOav.dll LoadedModule[37]=C:\WINDOWS\System32\OLEAUT32.dll LoadedModule[38]=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MPCLIENT.DLL LoadedModule[39]=C:\WINDOWS\SYSTEM32\gpapi.dll LoadedModule[40]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll State[0].Key=Transport.DoneStage1 State[0].Value=1 OsInfo[0].Key=vermaj OsInfo[0].Value=10 OsInfo[1].Key=vermin OsInfo[1].Value=0 OsInfo[2].Key=verbld OsInfo[2].Value=18362 OsInfo[3].Key=ubr OsInfo[3].Value=239 OsInfo[4].Key=versp OsInfo[4].Value=0 OsInfo[5].Key=arch OsInfo[5].Value=9 OsInfo[6].Key=lcid OsInfo[6].Value=1031 OsInfo[7].Key=geoid OsInfo[7].Value=14 OsInfo[8].Key=sku OsInfo[8].Value=98 OsInfo[9].Key=domain OsInfo[9].Value=0 OsInfo[10].Key=prodsuite OsInfo[10].Value=768 OsInfo[11].Key=ntprodtype OsInfo[11].Value=1 OsInfo[12].Key=platid OsInfo[12].Value=10 OsInfo[13].Key=sr OsInfo[13].Value=0 OsInfo[14].Key=tmsi OsInfo[14].Value=47807 OsInfo[15].Key=osinsty OsInfo[15].Value=3 OsInfo[16].Key=iever OsInfo[16].Value=11.239.18362.0-11.0.135 OsInfo[17].Key=portos OsInfo[17].Value=0 OsInfo[18].Key=ram OsInfo[18].Value=8021 OsInfo[19].Key=svolsz OsInfo[19].Value=930 OsInfo[20].Key=wimbt OsInfo[20].Value=0 OsInfo[21].Key=blddt OsInfo[21].Value=190318 OsInfo[22].Key=bldtm OsInfo[22].Value=1202 OsInfo[23].Key=bldbrch OsInfo[23].Value=19h1release OsInfo[24].Key=bldchk OsInfo[24].Value=0 OsInfo[25].Key=wpvermaj OsInfo[25].Value=0 OsInfo[26].Key=wpvermin OsInfo[26].Value=0 OsInfo[27].Key=wpbuildmaj OsInfo[27].Value=0 OsInfo[28].Key=wpbuildmin OsInfo[28].Value=0 OsInfo[29].Key=osver OsInfo[29].Value=10.0.18362.239.amd64fre.19h1_release.190318-1202 OsInfo[30].Key=buildflightid OsInfo[30].Value=91712D02-7DCF-478A-ACFC-6E4C474FC754.1 OsInfo[31].Key=edition OsInfo[31].Value=CoreN OsInfo[32].Key=ring OsInfo[32].Value=Retail OsInfo[33].Key=expid OsInfo[33].Value=RS:3945 OsInfo[34].Key=containerid OsInfo[35].Key=containertype OsInfo[36].Key=edu OsInfo[36].Value=0 FriendlyEventName=Nicht mehr funktionsfähig ConsentKey=APPCRASH AppName=AMP Core Runtime AppPath=C:\AMPDatastore\Instances\ADS01\AMP.exe NsPartner=windows NsGroup=windows8 ApplicationIdentity=0481AB5D34E72BBFB0AFCF27651612F7 MetadataHash=-189941178

Mike posted this 07 August 2019

Try installing this specific version of .Net : https://dotnet.microsoft.com/download/dotnet-framework/net462 - also if its a new Windows installation triple-check that there are no pending Windows Updates.

flagoss posted this 07 August 2019

I have the exact same issue on Windows Server 2016. Tried intalling the .NET Framework and it says thats it's already up to date.

Mike posted this 08 August 2019

The issue is being looked into.

Mike posted this 08 August 2019

@Flagoss is your system language set to English perchance, or is yours also German?

Mike posted this 08 August 2019

The issue is being caused by Windows Defender. Add an exception for the AMP Datastore.

lxp17 posted this 08 August 2019

Hi, also need to allow AMP.exe which is identified as "Trojan:Win32/Fuery.B!cl." by defender. Thanks for pointing out windows defender though!

Mike posted this 08 August 2019

You can just add the entire datastore directory and it should work. Tested on Windows 10 and Server 2016

flagoss posted this 10 August 2019

The Thing is that Windows Defender has always been disabled on my Server 2016 and yes my system language is english

Mike posted this 12 August 2019

Double check that it's disabled, because this issue has been tested and verified to be operating as expected.

flagoss posted this 13 August 2019

Didn't change anything on my server and with the latest AMP version everything is working well. Thanks alot for your works.

Close