NSD Log File help

I have a user who crashes twice every morning but on the third attempt Notes opens. It creates a nsd crash file with these as the “Fatal” sections of the log file. I do not know what it’s pointing to? Anyone help?

############################################################

FATAL THREAD 4/5 [ NLNOTES: 0f8c: 10cc]

FP=0x18beb694, PC=0x18ab52ee, SP=0x03ebf4c4

stkbase=03ec0000, total stksize=20480, used stksize=2876

EAX=0x00000000, EBX=0x00000000, ECX=0x77dd6a87, EDX=0x00000002

ESI=0x03ba2d40, EDI=0x03ebf936, CS=0x0000001b, SS=0x00000023

DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000 Flags=0x00010246

Exception code: c0000005 (ACCESS_VIOLATION)

############################################################

[ 1] 0x18ab52ee NCScan.CThreadManager::CThreadManager+1246 (720067,0,4d0045,2d0020)

############################################################

PASS 2 : FATAL THREAD with STACK FRAMES 4/5 [ NLNOTES: 0f8c: 10cc]

FP=18beb694, PC=18ab52ee, SP=03ebf4c4

stkbase=03ec0000, total stksize=20480, used stksize=2876

Exception code: c0000005 (ACCESS_VIOLATION)

############################################################

Disassembly of c. 10 instructions before and after faulting address 18ab52ee:



    18ab52be 6825ac188d       push    0x8d18ac25

    18ab52c3 4c               dec     esp

    18ab52c4 242c             and     al,0x2c

    18ab52c6 c78424880a000005000000                             ss:03ebff4c=18ac1437

                              mov     dword ptr [esp+0xa88],0x5

    18ab52d1 e8fa2afdff       call    18a87dd0

    18ab52d6 8d4c2451         lea     ecx,[esp+0x51]            ss:056b9ce7=????????

    18ab52da c78424880a0000ffffffff                             ss:03ebff4c=18ac1437

                              mov     dword ptr [esp+0xa88],0xffffffff

    18ab52e5 e8e631fdff       call    18a884d0

    18ab52ea 8b4632           mov     eax,[esi+0x32]            ds:0539d562=????????

    18ab52ed 50               push    eax

FAULT ->18ab52ee 8b10 mov edx,[eax] ds:00000000=???

    18ab52f0 ff5224           call    dword ptr [edx+0x24]      ds:017fa824=00000000

    18ab52f3 6a44             push    0x44

    18ab52f5 e8d2780000       call    18abcbcc

    18ab52fa 83c404           add     esp,0x4

    18ab52fd 89442410         mov     [esp+0x10],eax            ss:056b9ce7=????????

    18ab5301 3bc3             cmp     eax,ebx

    18ab5303 c78424880a000006000000                             ss:03ebff4c=18ac1437

                              mov     dword ptr [esp+0xa88],0x6

    18ab530e 7409             jz      18ab5319

    18ab5310 8bc8             mov     ecx,eax

    18ab5312 e85916feff       call    18a96970

    18ab5317 eb02             jmp     18ab531b

[ 1] 0x18ab52ee NCScan.CThreadManager::CThreadManager+1246 (720067,0,4d0045,2d0020)

Detected truncated call stack (small number of frames)

Subject: NSD

Hi,

Are you running mcafee av on that pc? looks very similar to a know issue with mcafee killing notes?

Subject: That may have been it

Yes he had Mcafee 8.5 on there I removed it and put on Trend Micro and he stopped receiving the error.