Error Message During Remove Reinstall

[crypticus]

This error message appears while doing "remove reinstalls". Error won't show up during creating an iso, or using system normally. Happened on fresly installed windows, so I assume its about my preset. If someone wants to take a look I attached preset... I think it might be because of error reporting removal or securty or vbs removal? but can't be sure. I also removed new hardware check component.... system doesn't have any security, defender or 3rd party softwares like antivirus etc.


translation is: the system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

 

[garlin]

Event class is DesktopWindows.XamlSource. That's a WPF (.NET) app trying draw widgets using UWP classes. Chances are it's some extension that Explorer needs to preview file types. HEIF, WEBP, Edge?

Check event viewer.

 

[crypticus]

made remove reinstalls, yeah it happened again, but nothing new in event logs

Spoiler: log

Günlük Adı: System
Kaynak: Application Popup
Tarih: 18.04.2022 19:34:00
Olay Kimliği: 26
Görev Kategorisi:Yok
Düzey: Bilgi
Anahtar sözcükler:
Kullanıcı: SYSTEM
Bilgisayar: Administrator
Açıklama:
Uygulama açılan penceresi: DesktopWindowXamlSource: explorer.exe - Sistem Hatası : Sistem, bu uygulamada yığın tabanlı bir arabelleğin taştığını algıladı. Bu taşma, kötü niyetli bir kullanıcının bu uygulamanın denetimini ele geçirmesine olanak verebilir.
Olay Xml'si:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Popup" Guid="{47bfa2b7-bd54-4fac-b70b-29021084ca8f}" />
<EventID>26</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-04-18T16:34:00.0124252Z" />
<EventRecordID>6183</EventRecordID>
<Correlation />
<Execution ProcessID="996" ThreadID="14424" />
<Channel>System</Channel>
<Computer>Administrator</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Caption">DesktopWindowXamlSource: explorer.exe - Sistem Hatası</Data>
<Data Name="Message">Sistem, bu uygulamada yığın tabanlı bir arabelleğin taştığını algıladı. Bu taşma, kötü niyetli bir kullanıcının bu uygulamanın denetimini ele geçirmesine olanak verebilir. </Data>
</EventData>
</Event>

Only thing i can see different is this event happened 1 second ago

Spoiler: 1 sec ago

Günlük Adı: Application
Kaynak: Microsoft-Windows-RestartManager
Tarih: 18.04.2022 19:33:59
Olay Kimliği: 10000
Görev Kategorisi:Yok
Düzey: Bilgi
Anahtar sözcükler:
Kullanıcı: Administrator\Administrator
Bilgisayar: Administrator
Açıklama:
Oturum başlatılıyor: 1 - ‎2022‎-‎04‎-‎18T16:33:59.801987300Z.
Olay Xml'si:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-RestartManager" Guid="{0888e5ef-9b98-4695-979d-e92ce4247224}" />
<EventID>10000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-04-18T16:33:59.8029095Z" />
<EventRecordID>9912</EventRecordID>
<Correlation />
<Execution ProcessID="3416" ThreadID="6252" />
<Channel>Application</Channel>
<Computer>Administrator</Computer>
<Security UserID="S-1-5-21-519012186-1894813392-211461228-1001" />
</System>
<UserData>
<RmSessionEvent xmlns="http://www.microsoft.com/2005/08/Windows/Reliability/RestartManager/">
<RmSessionId>1</RmSessionId>
<UTCStartTime>2022-04-18T16:33:59.8019873Z</UTCStartTime>
</RmSessionEvent>
</UserData>
</Event>

 

[garlin]

Uncheck all the UWP apps from reinstalls. If no errors, you can try process of elimination.

 

[crypticus]

btw it doesn't happen when you do 2nd remove reinstalls back to back. so i assume its an error that comes from a component that has ben reinstalled.

yeah i will try that but it will take to much time