Hello,
Still trying to understand the remaining PB exe process on the client site.
We still suspect an exception message to block the end of the process, but they mysteriously can't provide UI display on their batch server.
With process explorer they have monitored the process named : cfmarche.exe.
There is 3 threads attached to it. (I join a screenshot)
Here is the stacks of of the 3 threads :
7640
0 ntoskrnl.exe!KeSynchronizeExecution+0x2106
1 ntoskrnl.exe!KeWaitForMultipleObjects+0x135e
2 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
3 ntoskrnl.exe!KeWaitForMutexObject+0x373
4 ntoskrnl.exe!KeStallWhileFrozen+0x1feb
5 ntoskrnl.exe!__misaligned_access+0x13fd
6 ntoskrnl.exe!KeWaitForMultipleObjects+0x152f
7 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
8 ntoskrnl.exe!KeWaitForMultipleObjects+0x9a5
9 ntoskrnl.exe!ObWaitForMultipleObjects+0x289
10 ntoskrnl.exe!PsResumeProcess+0x292
11 ntoskrnl.exe!_setjmpex+0x6553
12 wow64cpu.dll!TurboDispatchJumpAddressEnd+0x598
13 wow64cpu.dll!TurboDispatchJumpAddressEnd+0xac
14 wow64.dll!Wow64LdrpInitialize+0x23a
15 wow64.dll!Wow64LdrpInitialize+0x172
16 ntdll.dll!LdrInitializeThunk+0x12b
17 ntdll.dll!LdrInitializeThunk+0xe
18 ntdll.dll!ZwWaitForMultipleObjects+0xc
19 USER32.dll!MsgWaitForMultipleObjectsEx+0x163
20 USER32.dll!MsgWaitForMultipleObjects+0x1f
21 gdiplus.dll+0x33ba
22 gdiplus.dll!GdipAlloc+0x14f5
23 ntdll.dll!RtlInitializeExceptionChain+0x8f
24 ntdll.dll!RtlInitializeExceptionChain+0x5a
7740
0 ntoskrnl.exe!KeSynchronizeExecution+0x2106
1 ntoskrnl.exe!KeWaitForMultipleObjects+0x135e
2 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
3 ntoskrnl.exe!KeWaitForMutexObject+0x373
4 ntoskrnl.exe!KeStallWhileFrozen+0x1feb
5 ntoskrnl.exe!__misaligned_access+0x13fd
6 ntoskrnl.exe!KeWaitForMultipleObjects+0x152f
7 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
8 ntoskrnl.exe!KeWaitForMultipleObjects+0x9a5
9 ntoskrnl.exe!ObWaitForMultipleObjects+0x289
10 ntoskrnl.exe!PsResumeProcess+0x292
11 ntoskrnl.exe!_setjmpex+0x6553
12 wow64cpu.dll!TurboDispatchJumpAddressEnd+0x598
13 wow64cpu.dll!TurboDispatchJumpAddressEnd+0xac
14 wow64.dll!Wow64LdrpInitialize+0x23a
15 wow64.dll!Wow64LdrpInitialize+0x172
16 ntdll.dll!LdrInitShimEngineDynamic+0x23d5
17 ntdll.dll!memset+0xde9e
18 ntdll.dll!LdrInitializeThunk+0xe
19 ntdll.dll!ZwWaitForMultipleObjects+0xc
20 USER32.dll!MsgWaitForMultipleObjectsEx+0x163
21 USER32.dll!MsgWaitForMultipleObjects+0x1f
22 PBVM170.dll!ob_set_external_message_loop+0xbc1
23 PBVM170.dll!ob_run_dispatch_loop+0xc3
24 PBVM170.dll!FN_PluginPollLoop+0x1a2
25 PBVM170.dll!FN_RunExecutableEx+0x3fa
26 PBVM170.dll!FN_RunExecutable+0x5c
27 cfmarche.exe+0x1080
28 cfmarche.exe+0x11f6
29 ntdll.dll!RtlInitializeExceptionChain+0x8f
30 ntdll.dll!RtlInitializeExceptionChain+0x5a
8724
0 ntoskrnl.exe!KeSynchronizeExecution+0x2106
1 ntoskrnl.exe!KeWaitForMultipleObjects+0x135e
2 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
3 ntoskrnl.exe!KeWaitForMutexObject+0x373
4 ntoskrnl.exe!KeStallWhileFrozen+0x1feb
5 ntoskrnl.exe!__misaligned_access+0x13fd
6 ntoskrnl.exe!KeWaitForMultipleObjects+0x152f
7 ntoskrnl.exe!KeWaitForMultipleObjects+0xdd9
8 ntoskrnl.exe!KeWaitForMutexObject+0x373
9 ntoskrnl.exe!NtWaitForSingleObject+0xb2
10 ntoskrnl.exe!_setjmpex+0x6553
11 wow64cpu.dll!TurboDispatchJumpAddressEnd+0x598
12 wow64cpu.dll!TurboDispatchJumpAddressEnd+0x3e4
13 wow64.dll!Wow64LdrpInitialize+0x23a
14 wow64.dll!Wow64LdrpInitialize+0x172
15 ntdll.dll!LdrInitializeThunk+0x12b
16 ntdll.dll!LdrInitializeThunk+0xe
17 KERNEL32.DLL!BaseThreadInitThunk+0x24
18 ntdll.dll!RtlInitializeExceptionChain+0x8f
19 ntdll.dll!RtlInitializeExceptionChain+0x5a