We have users reporting that their sessions crash randomly during use, and I believe this has been happening ever since the Windows 11 24H2 update. I haven't seen many other threads or discussions regarding this issue.
Here's what we've tried so far:
Updated ACS client to the latest version
Updated Semeru to the latest version
Updated RVI to the latest version
Disabled and added exclusions for these apps in SentinelOne via hash and file path
Disabled OneDrive
Ran a memory test
Updated Windows (currently on the February 11, 2025-KB5051987 update)
Completely replaced PC
Looking at the dump logs in SentinelOne, it seems like SentinelOne is injecting its modules into almost every application.
We've attempted multiple troubleshooting steps, including completely replacing the workstation, but the sessions still crash.
Here's what the Event Viewer application logs show. There aren't any related hardware or system logs that correlate with this event-only application logs:
Faulting application name: acslaunch_win-64.exe, version: 9.64.7.0, time stamp: 0x6734c166
Faulting module name: ntdll.dll, version: 10.0.26100.2454, time stamp: 0x7cb6b6a8
Exception code: 0xc00000fd
Fault offset: 0x0000000000163df7
Faulting process id: 0x3C48
Faulting application start time: 0x1DB7D696D509026
Faulting application path: C:\Users\Public\IBM\ClientSolutions\Start_Programs\Windows_x86-64\acslaunch_win-64.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: eca110cb-ca19-4ae4-b7b6-17dcac73c1ce
Faulting package full name:
Faulting package-relative application ID:
Some have mentioned that the ntdll.dll error is related to memory/stack overflow issues, but I haven't seen any updates or announcements from the affected companies addressing this.
Has anyone else experienced this? Last week, we thought adding SentinelOne exclusions fixed the issue, but this week, the crashes have returned.
------------------------------
Manny Perez
------------------------------
#IBMiAccessClientSolutions