Skip to content
View in the app

A better way to browse. Learn more.

Kaspersky Support Forum

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

KART (avpui.exe) throws error popup during system shutdown | KART(avpui.exe)在关机时弹出错误提示框

English version / 英文版本

Issue Description:
Every time I shut down my PC, during the shutdown process a brief error popup appears (something like "unknown hard error" or just "Error"), then it disappears immediately, and the PC shuts down normally.

I checked the Windows Event Viewer and found the following error log pointing to KART's process avpui.exe:

```

Application: avpui.exe
CoreCLR Version: 8.0.1926.11001
.NET Version: 8.0.19-kl.7.9.855.0
Description: The application requested process termination through System.Environment.FailFast.
Message: Terminate on shutting down of the current session
Description: The process was terminated due to an unhandled exception.System.ArgumentException: Value does not fall within the expected range.
Stack:
   at System.Environment.FailFast(System.String, System.Exception)
   at KasperskyLab.UI.Core.ExceptionPolicy.ProcessFirstChanceException(System.Object, System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
   at MS.Win32.Penimc.IPimcManager3.GetTablet(UInt32, MS.Win32.Penimc.IPimcTablet3 ByRef)
   at System.Windows.Input.PenThreadWorker+WorkerOperationGetTabletInfo.OnDoWork()
   at System.Windows.Input.PenThreadWorker+WorkerOperation.DoWork()
   at System.Windows.Input.PenThreadWorker.ThreadProc()
   at System.Threading.Thread+StartHelper.Callback(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.Thread.StartCallback()

 

```

Environment:

· KART version: 14.0.0.510
· Windows version: Windows 11 25H2

What I've tried:

· Disabled Windows "Fast Startup" – no change.
· The issue persists.

Question: Is this a known issue? Is there any workaround or fix available? Thank you!

---

中文版本 / Chinese Version

问题描述:
每次关闭电脑时,关机过程中会短暂弹出一个错误提示框(内容类似“unknown hard error”或“Error”),随后立刻消失,电脑能正常关机。

在 Windows 事件查看器中找到如下错误日志,指向 KART 的进程 avpui.exe:

```

Application: avpui.exe
CoreCLR Version: 8.0.1926.11001
.NET Version: 8.0.19-kl.7.9.855.0
Description: The application requested process termination through System.Environment.FailFast.
Message: Terminate on shutting down of the current session
Description: The process was terminated due to an unhandled exception.System.ArgumentException: Value does not fall within the expected range.
Stack:
   at System.Environment.FailFast(System.String, System.Exception)
   at KasperskyLab.UI.Core.ExceptionPolicy.ProcessFirstChanceException(System.Object, System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
   at MS.Win32.Penimc.IPimcManager3.GetTablet(UInt32, MS.Win32.Penimc.IPimcTablet3 ByRef)
   at System.Windows.Input.PenThreadWorker+WorkerOperationGetTabletInfo.OnDoWork()
   at System.Windows.Input.PenThreadWorker+WorkerOperation.DoWork()
   at System.Windows.Input.PenThreadWorker.ThreadProc()
   at System.Threading.Thread+StartHelper.Callback(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.Thread.StartCallback()

 

```

环境信息:

· KART 版本:14.0.0.510
· Windows 版本:Windows 11 25H2

已尝试的解决方法:

· 关闭 Windows 的“快速启动”功能,问题依旧。

请问: 这是已知问题吗?是否有临时解决方案或修复补丁?谢谢!

Featured Replies

  • Author

English Version

Additional Reproduction Steps and Conflicting Software Clue

Thank you for your attention. After further investigation, I found that this issue is strongly related to the "NetEase UU Remote" software. Below are the stable reproduction steps for your reference:

Reproduction Steps:

1. Environment Setup: Install KART 14.0.0.510 and the latest version of "NetEase UU Remote". Ensure UU Remote is running in the background (e.g., with a remote device session in "suspended" state).
2. Trigger Shutdown: Click the Windows Shutdown button.
3. Critical Operation: Within a very short time window (approximately 400 milliseconds) after clicking Shutdown, quickly click "Cancel Shutdown".
4. Verify Result: After performing this operation, the avpui.exe error popup will likely appear stably during every subsequent normal shutdown.

Temporary Workaround:
Manually exit "UU Remote" from the system tray before shutting down. This will temporarily prevent the error popup.

This issue closely matches the previously reported Bug 8847044、卡巴斯基关机报错 - 家用产品支持 - Kaspersky Support Forum、卡巴斯基神奇bug 会在我每次关机时弹个弹窗,卡我一小会,我没招了 - 家用产品支持 - Kaspersky Support Forum in the community. I hope the official team can take notice and help drive a resolution. Please let me know if you need more logs or system information.

---

中文版本/Chinese language

补充复现步骤与冲突软件线索

感谢各位的关注。经过进一步排查,我发现该问题与 “网易UU远程” 软件存在强关联。以下是稳定的复现方法,供官方参考:

复现步骤:

1. 确保环境:安装 KART 14.0.0.510 与最新版“网易UU远程”,并确保UU远程处于后台运行状态(例如,挂起一个远程设备会话)。
2. 触发关机:点击Windows关机按钮。
3. 关键操作:在点击关机后的极短时间内(约400毫秒内),迅速点击“取消关机”。
4. 验证结果:执行此操作后,系统通常会在此后的每次正常关机时,都稳定地弹出 avpui.exe 的错误提示框。

临时解决方案:
在关机前,手动从系统托盘退出“UU远程”软件,即可暂时避免该错误弹窗。

此问题与此前社区报告的 Bug 8847044、卡巴斯基关机报错 - 家用产品支持 - Kaspersky Support Forum、卡巴斯基神奇bug 会在我每次关机时弹个弹窗,卡我一小会,我没招了 - 家用产品支持 - Kaspersky Support Forum 高度吻合,希望官方能重视并推动解决。如需更多日志或系统信息,请随时告知。

  • Author

English Version

Correction: My Scenario Does NOT Involve "Cancel Shutdown"

I'd like to clarify my previous reply regarding the reproduction steps.

In my actual scenario, I perform a normal system shutdown. I click "Shutdown" and do NOT click "Cancel" at any point during the entire process. The error popup appears stably during every normal shutdown as long as "UU Remote" is running in the background.

The "quickly click Cancel" method mentioned earlier is not applicable to my situation and is not the trigger for this error on my system. The conflict is directly triggered by the mere presence of "UU Remote" in the background during a standard shutdown sequence.

I hope this clarification helps. Thank you.


中文版本/Chinese language

更正说明:我的场景与“点击取消”无关

我想对上一条回复中的复现步骤做一个重要更正。

在我的实际场景中,是正常的系统关机。我点击“关机”后,全程从未点击过“取消”。只要“UU远程”在后台运行,每次正常关机都会稳定弹出错误提示框。

之前提到的“快速点击取消”的复现方法并不适用于我的情况,也不是我触发此错误的原因。该冲突的直接触发条件,就是“UU远程”在标准关机流程中处于后台运行状态。

希望此澄清能帮助官方更准确地定位问题。谢谢。

  • 2 weeks later...

My PC also experienced this issue. After Claude checked it once by himself, he determined from the system logs and program logs that the error was caused by a conflict between Kaspersky's avpui.exe program and the virtual HID tablet driver in the installed Sunlogin remote control software.

Finally, Claude provided me with the possible causal chain:

avpui.exe is a WPF program written in .NET 8. There is a PenThreadWorker background thread in the input stack of WPF, which will enumerate the digital board devices in the system through the PenIMC COM interface of Windows Ink. When the machine is shut down, the WISP / PenIMC COM component and the virtual HID device in the session are removed first. At this time, GetTablet cannot get the device and returns to E_INVALIDARG. On the .NET side, it is shown as ArgumentException : Value does not fall within the expected range ( another case is that the COM server has been offline, CoCreateInstance throws E_NOINTERFACE ).

Under normal circumstances, WPF only treats COMException as a recoverable error, and this ArgumentException will bubble into an unhandled exception. Kaspersky hung an ExceptionPolicy.ProcessFirstChanceException on AppDomain.FirstChanceException.It detects that ' the session is shutting down ' and intentionally calls Environment.FailFast ( ' Terminate on shutting down of the current session ' ) to end the process.

FailFast triggers the Windows fail-fast exception, and a hard error dialog box pops up by csrss.exe. This status code has no corresponding copy in the system message table, so the title bar shows the process name avpui.exe, and the text can only show Unknown Hard Error.

Finally, I uninstalled all the virtual device drivers of Sunlogin remote control software in the task manager, and this error report pop-up window never appeared again.

Combining feedback from other users in the community, similar errors have occurred with the NetEase mumu emulator and NetEase UU remote software. I also suspect that there is a conflict between Kaspersky and the virtual device drivers in multiple remote control software, and this has been an issue for a year.

Although it is harmless, I hope the official team can resolve it as soon as possible.


我的PC也出现了这种情况,在claude自检了一遍后,他从系统日志和程序日志里查明了是卡巴斯基的avpui.exe程序和安装的向日葵远程软件里的虚拟HID数位板驱动发生冲突导致报错。
最后claude给了我可能的因果链:

avpui.exe 是 .NET 8 写的 WPF 程序。WPF 的输入栈里有个 PenThreadWorker 后台线程,会通过 Windows Ink 的 PenIMC COM 接口去枚举系统里的数位板设备。关机时,会话内的 WISP/PenIMC COM 组件和虚拟 HID 设备被先行拆除,此时 GetTablet 拿不到设备,返回 E_INVALIDARG,在 .NET 侧就表现为 ArgumentException: Value does not fall within the expected range(另一种情况是 COM 服务器已经下线,CoCreateInstance 抛 E_NOINTERFACE)。

正常情况下 WPF 只把 COMException 当可恢复错误处理,而这个 ArgumentException 会冒泡成未处理异常。卡巴斯基挂了一个 ExceptionPolicy.ProcessFirstChanceException 在 AppDomain.FirstChanceException 上,它检测到"会话正在关机",就故意调用 Environment.FailFast("Terminate on shutting down of the current session") 结束进程。

FailFast 会触发 Windows 的 fail-fast 异常,由 csrss.exe 弹出硬错误对话框。这个状态码在系统消息表里没有对应文案,所以标题栏显示进程名 avpui.exe,正文只能显示 Unknown Hard Error。

最后我在任务管理器中卸载了向日葵远程控制的所有虚拟设备驱动,这个报错弹窗再也没有出现。

结合社区其他用户反映过的网易mumu模拟器、网易uu远程软件都出现过这类报错,我也怀疑是卡巴斯基与多款远程操控软件里的虚拟设备驱动产生冲突,且是一个出现一年的问题。

虽然无害但是希望官方能够尽快解决。

Please sign in to comment

You will be able to leave a comment after signing in

Sign In Now

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.