Vista - Thunking spooler - the return

I've seen many issues regarding the "thunking spooler" stopping unexpectedly, which was apparently fixed with SP1. However, I have a different issue.

When I tried to open an Office 2007 PowerPoint file from work (created on an XP machine) on my Vista 64 laptop, hundreds of thunking spooler processes started opening, and eventually used up all of my RAM, at which point I had to do a hard shutdown (holding the power button down) because nothing was able to run anymore.

I tried a couple more times and the same thing happened. I watched the number of processes tick up by the hundreds in the Task Manager. I can't seem to find any way to stop it, and I have not been able to find anyone else having this same issue.

If anyone can help out I would greatly appreciate it.

"Thunking" is the act of converting data so that it can traverse the interface between 16 and 32-bit code, or in your case the 64-bit OS and (very likely) a 32-bit user-mode printer driver.

The fact that the spooler is having issues "thunking" suggests to me that you've got a buggy printer driver.

If you can find updated, 64-bit drivers for your printer(s), these issues will probably go away.

Thanks. My laptop is brand new and I actually have not even installed a printer driver yet, so that might be the issue. I believe the only "printer driver" available is the Microsoft XPS document writer, which might be causing the issue.

No, it wouldn't be a lack of printer drivers or the "XPS document writer". Gazillions of machines are in that state without experiencing your somewhat exotic symptom, so I'm afraid that you've got the distinction of being somehow special

What are the exact error messages you see, if any?

What's the name of the process listed in task manager?

What is the title of all the windows that pop up?

Is this issue specific to one PPT document? Can you successfully create PPTs on your machine and open them without this symptom? What about if you create another brand new (and mostly empty) PPT at work and then bring it home - same problem?

I tried opening a blank PowerPoint on my laptop (so, taking work out of the equation) and opened the Task Manager. I cut and pasted multiple blank slides. Each time I pasted, the number of Thunking Spooler processes started ticking up. I then started pasting empty text boxes. Sure enough, several more Thunking processes opened up with each new object. The PPT from work was pretty complicated, so I can see why all of my RAM was eventually used.

No additional windows pop up, but I have attached a screenshot of my Task Manager.

try to open the power point in safe mode by typing powerpnt.exe /safe in run. Is this happening in safe mode also?

Yes, I just tried it. Safe mode has no effect. The Thunking Spooler processes are started as they did before.

Very interesting. Can you try typing this into a CMD prompt after you've got a few instances of splwow64.exe running and then pasting back the output? I'm interested to see what DLLs are loaded into the POWERPNT and SPLWOW64 processes.

tasklist /m /fi "imagename eq powerpnt.exe"

tasklist /m /fi "imagename eq splwow64.exe"

Sure thing. Here's the output:

tasklist /m /fi "imagename eq powerpnt.exe"

Image Name PID Modules
========================= ======== ============================================
POWERPNT.EXE 2728 ntdll.dll, wow64.dll, wow64win.dll,
wow64cpu.dll


tasklist /m /fi "imagename eq splwow64.exe"

Image Name PID Modules
========================= ======== ====================================
splwow64.exe 2940 N/A
splwow64.exe 4812 N/A
splwow64.exe 3444 N/A
splwow64.exe 3964 N/A
splwow64.exe 3816 N/A
splwow64.exe 604 N/A
splwow64.exe 2772 N/A
splwow64.exe 2776 N/A
splwow64.exe 4776 N/A
splwow64.exe 2404 N/A
splwow64.exe 3868 N/A
splwow64.exe 3092 N/A
splwow64.exe 3740 N/A
splwow64.exe 4844 N/A
splwow64.exe 4920 N/A
splwow64.exe 776 N/A
splwow64.exe 4924 N/A
splwow64.exe 4288 N/A
splwow64.exe 3424 N/A
splwow64.exe 3196 N/A
splwow64.exe 4304 N/A
splwow64.exe 3352 N/A
splwow64.exe 2972 N/A
splwow64.exe 2408 N/A
splwow64.exe 1364 N/A
splwow64.exe 3736 N/A
splwow64.exe 4152 N/A
splwow64.exe 4916 N/A
splwow64.exe 5088 N/A
splwow64.exe 2632 N/A
splwow64.exe 576 N/A
splwow64.exe 2456 N/A
splwow64.exe 632 N/A
splwow64.exe 4196 N/A
splwow64.exe 4616 N/A
splwow64.exe 2496 N/A
splwow64.exe 532 N/A
splwow64.exe 1632 N/A
splwow64.exe 1972 N/A
splwow64.exe 1548 N/A
splwow64.exe 2700 N/A
splwow64.exe 2572 N/A
splwow64.exe 3648 N/A
splwow64.exe 3548 N/A
splwow64.exe 1072 N/A
splwow64.exe 5068 N/A
splwow64.exe 2312 N/A
splwow64.exe 2032 N/A
splwow64.exe 2620 N/A
splwow64.exe 2708 N/A
splwow64.exe 4868 N/A
splwow64.exe 1688 N/A
splwow64.exe 5084 N/A
splwow64.exe 1660 N/A
splwow64.exe 2712 N/A
splwow64.exe 2124 N/A
splwow64.exe 4316 N/A
splwow64.exe 4708 N/A
splwow64.exe 3412 N/A
splwow64.exe 1404 N/A
splwow64.exe 4068 N/A
splwow64.exe 1288 N/A

Make a copy of wow64win.dll, wow64cpu.dll, rename these two dlls and try. i never seen these two dlls in my directory.

those dlls will be located in c:\windows\system32\.

Let me know he result