Disable Fault Tolerant Heap (FTH)

SneWs's picture

This only applies to Windows 7 and Windows Server 2008 R2.
Snip from MSDN on what FTH is:
The Fault Tolerant Heap (FTH) is a subsystem of Windows 7 responsible for monitoring application crashes and autonomously applying mitigations to prevent future crashes on a per application basis. For the vast majority of users, FTH will function with no need for intervention or change on their part. However, in some cases, application developers and software testers may need to override the default behavior of this system.

The following actions is only useful if you write code in C or C++, not managed code.

You can view the logs for FTH and what it has detected via [Event Viewer > Applications and Services Logs > Microsoft > Windows > Fault-Tolerant-Heap].

To disable FTH completely.
To disable Fault Tolerant Heap entirely on a system, set the REG_DWORD value [HKLM\Software\Microsoft\FTH\Enabled] to 0.

After changing this value, restart the system. FTH will no longer activate for new applications.

Or you can reset the FTH tracking list via a command for temporary debugging. (Must be running cmd with elevated privileges):
C:\Rundll32.exe fthsvc.dll,FthSysprepSpecialize

MSDN reference: http://msdn.microsoft.com/en-us/library/dd744764%28VS.85%29.aspx

To get to know FTH in depth, please take some time and watch this channel9 video with Silviu Calinoiu: http://channel9.msdn.com/shows/Going+Deep/Silviu-Calinoiu-Inside-Windows-7-Fault-Tolerant-Heap/

Tags: 

Add new comment

Filtered HTML

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.