Jump to content
Welcome to our new Citrix community!
  • 0

The Citrix Universal DLL Injection Driver has encountered an unexpected error


Cloud Mercury

Question

Recommended Posts

  • 1

There were no replies for a while now, but we were facing the exact same issues. We got the error on different versions from Virtual Apps 7.15 LTSR CU3 up to version 19.12 CU1

The CtxUvi error 1003 and 1005 is related to the Citrix Workspace Apps version. On both environments I installed the Workspace Apps on the Terminal Servers after GO Live and went with the newest Workspace Apps version 9002 and 9006. We now uninstalled it and reinstalled the Workspace Apps version which came with the installation ISO and it seems the error is gone...

 

As I was troubleshooting for a while now I just wanted to publish the solution which worked for me on two different environments.

 

 

 

 

  • Like 2
Link to comment
  • 0
We are seeing the same events on our XenApp servers, when a server has these events it will start sessions but not display the program to the user.  We have to reboot in order to fix this.  Sometimes no servers, sometimes one, and sometimes several.  We are on XenApp 7.13 and plan on installing 7.15 in a couple of weeks.  We are seeing two events every time this happens, details are below, any help would be appreciated.  We've tried disabling Session Reliability and that didn't work.

 

Log Name:      System

Source:        CtxUvi

Date:          10/5/2017 8:09:06 AM

Event ID:      1005

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      SERVERNAME

Description:

The Citrix Universal DLL Injection Driver has encountered an unexpected error.

 

Log Name:      System

Source:        CtxUvi

Date:          10/5/2017 8:09:06 AM

Event ID:      1003

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      SERVERNAME

Description:

The Citrix Universal DLL Injection Driver has detected an integrity error during process creation. The Citrix Universal DLL Injection Driver has been disabled.
Link to comment
  • 0

Hi Brett1980 and Cmercury,

 

Can you check in the details page on event ID 1005, and send me a screen shot of the binary data?

 

Can you test the following:

  1. reboot VDA
  2. confirm in the eventlog that CTXUVI starts successfully after the reboot
  3. run gpupdate /force
  4. confirm if you see errors 1005 followed by 1003 pretty much straight after running gpupdate

Kind regards,

 

Graeme

Link to comment
  • 0

Hello Graeme,

 

I appreciate you looking into this.  I've attached a screenshot of the binary data from event 1005.  Answers to your questions:

 

1.  Rebooting the VDA fixes the issue until it reoccurs.

2.  After a reboot we see CtxUvi event 1000 saying: "The Citrix Universal DLL Injection Driver has started."

3.  I ran gpupdate /force

4.  Running this command does not reproduce the events.

Event 1005 Binary Data.PNG

Link to comment
  • 0
On 11/6/2017 at 11:45 AM, Graeme Dunkley said:

Hi Brett1980 and Cmercury,

 

Can you check in the details page on event ID 1005, and send me a screen shot of the binary data?

 

Can you test the following:

  1. reboot VDA
  2. confirm in the eventlog that CTXUVI starts successfully after the reboot
  3. run gpupdate /force
  4. confirm if you see errors 1005 followed by 1003 pretty much straight after running gpupdate

Kind regards,

 

Graeme

We are seeing the same exact issue with our newly deployed 7.15.  Servers will work fine after reboot but then hours later they fail again and applications do not launch to the users.

 

Has any of you found a fix or a root cause?

Link to comment
  • 0
37 minutes ago, aamin64 said:

We are seeing the same exact issue with our newly deployed 7.15.  Servers will work fine after reboot but then hours later they fail again and applications do not launch to the users.

 

Has any of you found a fix or a root cause?

We've had a case open with Citrix for a few weeks and haven't really made any headway on it.  So we continue to reboot servers.  If we find a solution I'll be sure to post it here.

 

I've not had a change to look at the GPOs yet, but those are kind of hard to disable because we need them.

Link to comment
  • 0

For those of you who have found that disabling GPOs have resolved this issue, this is most likely because you have a policy that is making changes to the registry under HKLM\SOFTWARE\Citrix\ctxhook\appinit_dlls. You may not be running a policy that sets an exact reg key, it could be a policy that makes changes to all reg keys in HKLM\SOFTWARE, such as changing the default security permissions. It is recommended to do this via a base image, instead of setting it via a GPO.

 

See: https://support.citrix.com/article/CTX226605 for more details (step 1 of the solution is not necessary in 7.14 and above)

Link to comment
  • 0

Hi All,

 

We got the same issue after updating to VDA 7.15 caused by a GPO which sets the REG_SZ value "mfaphook64.dll" under SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs to avoid black screen issues on VDA 7.6.3 due to a 8.3 notation problem with server W2K8R2.

 

However, deleting the GPO and setting the UviEnabled key rectified the problem for some servers but not for all.

 

I just uninstalled the VDA on an affected server with the current version of the VDA Cleanup Utilitiy tool (which disables sometimes the RDP TCP connection after the uninstallation) and installed VDA 7.15.1. I don't know whether it is a bug or not but the servers are after a fresh VDA 7.15.x installation not available via Storefront but with Quick Launch tool.

VDA715error.thumb.jpg.b4784102b50456ecbe02de6d9911d295.jpg

VDA715error2.thumb.jpg.243d9d29a04a0c4c188bcb39b82e60dc.jpg

 

The problem goes away by itself after 15-30 minutes and the access via Storefront works again.

 

Regrettably, the CtxUvi error occured again. After that, I set the UviEnabled key again and rebooted the server but the problem is still not fixed.

 

I will downgrade the server to VDA 7.15 tonight and will observe the situation.

 

Does anyone also struggle with that CtxUvi problem although the recommended steps were done?

 

Best regards,
Serdar

 

 

 

Link to comment
  • 0

We have continued to work with Citrix support on this issue.  Since first seeing the issue in 7.13 we've upgraded to 7.15 and then to 7.15.1 without resolution.  As we worked with Citrix support they had us install the CDF monitoring service on the servers in order to catch CDF traces as the issue happened.  We would reproduce the issue but they were still unable to determine the cause.  They later provided us a private hotfix with custom mfaphook.dll, mfaphook64.dll, and ctxuvi.sys files that we updated, along with running 'bcdedit /set TESTSIGNING ON'.  The whole point of this was to provide more information in the CDF traces so they could narrow down the problem.  But since installing this on all of our VDA's we no longer get 1005 errors. 

 

So we are now kind of stuck because I feel that if we did upgrade the 1005 errors would come back.

Link to comment
  • 0

We have identified the root cause of the CtxUvi crash. The problem seems to be caused due to low virtual memory:

lowmemory.thumb.jpg.1e3e8269b00af588b6966d56efac7c37.jpg

 

Citrix Thinwire drive crashed just a few minutes later after the low virtual memory warning:

CtxThinWire.thumb.jpg.30471e854b375883d74f2b29b705198f.jpg

 

CtxUvi crash minutes later:

CtxUvi.thumb.jpg.b6577c0dafd72c261987a7aefb18b053.jpg

 

It is recommended to increase the total paging file size to avoid the low virtual memory problem and the CtxUvi crash since VDA 7.1x...

 

Regards,
Serdar

Link to comment
  • 0

mkameya600 our case number is 74709265.

 

stekin474, interesting find, I would be surprised if we had low virtual memory in every case of this error.  We do set the initial and maximum size for virtual memory versus letting Windows set it on our VDAs.  But we've seen the CtxUvi errors on servers with a couple of people on them (2 or 3) and I would guess virtual memory wouldn't be an issue in that case.  I did just spot check a couple of servers and virtual memory is fine.  Glad it was a fix for you, probably multiple causes for these errors.

Link to comment
  • 0

We continue to leave our configuration alone with the fear of this issue coming back.

 

  1. Currently running 7.15 CU1.
  2. Installed private hotfix from Citrix that updated mfaphook.dll, mfaphook64.dll, and ctxuvi.sys.
  3. Run 'bcdedit /set TESTSIGNING ON' on all servers.

We built a new test server a couple of months ago and did not run steps 2 and 3 on it and eventually we ran into CtxUvi crashing again.  Citrix has abandoned my case because the issue went away, but we don't feel comfortable upgrading either. 

 

At least we're on an LTSR release haha

Link to comment
  • 0
On 25.7.2018 at 4:39 PM, Brett Dodd said:

We continue to leave our configuration alone with the fear of this issue coming back.

 

  1. Currently running 7.15 CU1.
  2. Installed private hotfix from Citrix that updated mfaphook.dll, mfaphook64.dll, and ctxuvi.sys.
  3. Run 'bcdedit /set TESTSIGNING ON' on all servers.

We built a new test server a couple of months ago and did not run steps 2 and 3 on it and eventually we ran into CtxUvi crashing again.  Citrix has abandoned my case because the issue went away, but we don't feel comfortable upgrading either. 

 

At least we're on an LTSR release haha

 

Hi,

 

can you please name the private fix so we can reference it within an Citrix case?

Thanks!

 

Bye,

Andreas

Link to comment
  • 0
2 hours ago, Andreas Schott said:

 

Hi,

 

can you please name the private fix so we can reference it within an Citrix case?

Thanks!

 

Bye,

Andreas

 

I wasn't given a name for the private fix, our case was 74709265 and the version of mfaphook.dll and mfaphook64.dll is 7.15.0.10009 and CtxUvi.sys is version 7.15.1000.50.  Hopefully that helps.

 

Brett

Link to comment
  • 0
6 hours ago, Vishnu AK1709159754 said:

AFter upgrading VDA to LTSR 19.12 we are seeing this issue? any permanent fix for this problem?

 

I too am experiencing the same issue after upgrasing to 19.12

Can i confirm if you have any Trend AV software on your Server?

I found some posts around Trend AV( Apex one or DSaaS)

we have, on citrix Apex one, ive tried adding the processes to the excepetions list and it doesnt appear to make a difference, some time this can happen on a server 5 hours in, or 20 hours in, but it will happen (they are re-spawen each night)

I tried VDA cleanup and reinstalling the VDA, I need this version to deploy Teams, as 19.12 is the last VDI support for 2012r2 i need a fix in LTSR. 

Machine was on 7.15LTSR CU3.

Anyone ?? 

Link to comment
  • 0
On 5/4/2020 at 5:50 PM, Craig Walker1709156037 said:

 

I too am experiencing the same issue after upgrasing to 19.12

Can i confirm if you have any Trend AV software on your Server?

I found some posts around Trend AV( Apex one or DSaaS)

we have, on citrix Apex one, ive tried adding the processes to the excepetions list and it doesnt appear to make a difference, some time this can happen on a server 5 hours in, or 20 hours in, but it will happen (they are re-spawen each night)

I tried VDA cleanup and reinstalling the VDA, I need this version to deploy Teams, as 19.12 is the last VDI support for 2012r2 i need a fix in LTSR. 

Machine was on 7.15LTSR CU3.

Anyone ?? 

 

I  rasied a ticket with Citrix, uploaded lots of logs, didnt get much back.

 

in the end i updated to 19.12 CU1 (released May) and this appeared to resolve my issues!

 

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...