9879: GDI Objects resource leak in explorer.exe (directly affects Taskbar)

Update 1 (Nov 18): The leak seems to be exacerbated by the use of a progress bar within a given program's taskbar icon. For example, downloads with a browser show such status. In particular, media players often do this too, and since people
tend to use media players for an hour or two at a time, the problem can worsen quickly when in use.
===========(Original message below)
Twice in one day I've seen GDI Objects (as shown in Task Manager--if you add the column on the Details tab--and Process Explorer) hit 10K for Explorer.exe. The first time was after about 15 hours, the second time about 4.
What caused me to look was a misbehaving taskbar: icons for some running programs were suddenly either blank or changed, some would do nothing when clicked, the Start menu was barely functional, my quicklaunch shortcut menu didn't work, etc.
Killing explorer.exe and restarting it allows you to proceed as usual.
This definitely didn't happen in the preceding builds.
Further details provided if this turns out to be something that others see.

Same for PS
GDIView.ps1
$path = Split-Path -parent $MyInvocation.MyCommand.Definition
$searchfor = "explorer"
$maxGDI = 6000
$sig = @'
[DllImport("User32.dll")]
public static extern int GetGuiResources(IntPtr hProcess, int uiFlags);
Add-Type -MemberDefinition $sig -name NativeMethods -namespace Win32
$processes = [System.Diagnostics.Process]::GetProcesses()
ForEach ($p in $processes)
# Check for process
if ($p.Name -ne $searchfor) { continue }
try{
$gdiHandles = [Win32.NativeMethods]::GetGuiResources($p.Handle, 0)
# Check for maxGDI
if ($gdiHandles -lt $maxGDI) { continue }
try{
# Log
"$(Get-Date) The process $searchfor ($($p.id)) had $gdiHandles GDI Objects, so it is closed for sanity" | Out-File $path\Leak.log -Append
#Write-Output "kill $($p.Id)"
kill $p.Id -Force
#Write-Output "start $searchfor"
Start-Process $searchfor
catch {
#"Error"
catch {
#"Error accessing " + $p.Name
And to start it hidden
GDIView.vbs
Const HIDDEN_WINDOW = 0
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set objStartup = objWMIService.Get("Win32_ProcessStartup")
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = HIDDEN_WINDOW
Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
objProcess.Create "powershell -file GDIView.ps1", null, objConfig, intProcessID

Similar Messages

  • Explorer.exe (?) crashing without warning, closing all open programs

    Hello! I recently got a windows 8.1 computer and have been using it for only a week, but I've been having issues with what I can only assume is explorer.exe.  
    The taskbar will randomly completely disappear, leaving only a blue empty space at the bottom of the screen (possibly getting rid of my desktop background as well), close every program I have open without warning aside from the one I'm using at the time
    (generally google chrome) and doesn't seem to restart itself on its own. I have to ctrl+alt+del to get to the task manager to manually start explorer.exe again, which works without an issue aside from possible lost unsaved progress from the closed
    programs. I don't get any pop up saying windows has encountered any errors, it just does it for maybe no reason.
    I can't think of why it would be doing this because again, I've only been using it for a week. It doesn't happen often, it's done it maybe two or three times but it seems it might not be stopping any time soon. I checked the reliability monitor and
    it doesn't seem to recognise this issue as anything, nothing shows up for this. Any help to resolve this would be much appreciated, or even just finding out why it's doing it. Thank you!

    Please provide us with your Event Viewer administrative logs by following these steps:
    Click Start Menu
    Type eventvwr into Search programs and files (do not hit enter)
    Right click eventvwr.exe and click Run as administrator
    Expand Custom Views
    Click Administrative Events
    Right click Administrative Events
    Save all Events in Custom View As...
    Save them in a folder where you will remember which folder and save as Errors.evtx
    Go to where you saved Errors.evtx
    Right click Errors.evtx -> send to -> compressed (zipped) folder
    Upload the .zip file to Onedrive or a file sharing service and put a link to it in your next post
    If you have updated to win 8.1 and you get the error message "the system cannot find the file specified" it is a known problem.
     The work around is to edit the registry.  If you are not comfortable doing this DONT.  If you are, backup the key before you do
    Press Win+"R" and input regedit
    Navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels. Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"
    Wanikiya and Dyami--Team Zigzag

  • GDI object leak using an applet with Java Plugin 1.4.2_02

    We have an application where we use an applet to draw some graphs. The applet has an interface to update the graphical data using Javascripts. Now duing every graphical update of the graph there a leak of the GDI objects. Over time the display on the machine gets frozen due to lack of resources.
    This problem is happening with IE 6.0 using Sun Java Plug-in 1.4.2_02.
    Has anybody else seen this problem. Is there any work aorund for this issue.

    The code is not leaking. This has been verified.
    The problem has been fixed in 1.5.0 (5.0) Beta 2 version but I don't know then final release of this is going to be. Also using a beta version now is not an option.
    The 1.4.2_04 did not fix the GDI leak that I am seeing, I was hoping it would.

  • Applet using JVM 1.5.0_06 causes GDI Object Leaks

    Hi,
    Since the release of 1.5.0_06 our applet has developed a GDI Object leak. Basically, our applet draws on a panel when ever an update is available. The previous versions of the JVM seem fine and th e GDI Objects are stable, but this new version eats the GDIs up really quickly, and never releases them.
    The problem occurs when the applet repaints itself. Calling repaint() or paint() from code works ok with no leaks but as soon as the applet is forced to repaint because of a resize, or because another window has moved over it the GDIs go up by multiples of 10.
    Here is some sample code:
    import java.awt.*;
    import java.applet.*;
    import java.util.Date;
    * <p>Copyright: Copyright (c) 2005</p>
    * <p>Company: </p>
    * @author not attributable
    * @version 1.0
    public class GDIApplet extends Applet {
        //Construct the applet
        public GDIApplet() {
        //Initialize the applet
        public void init() {
            try {
                jbInit();
            } catch (Exception e) {
                e.printStackTrace();
        //Component initialization
         private void jbInit() throws Exception {
             this.setLayout(new BorderLayout());
             this.add(new GDIPanel(), BorderLayout.CENTER);
         public class GDIPanel extends Panel implements Runnable{
        public GDIPanel() {
            Thread t = new Thread(this,"SPGPaintTimer");
            t.start();
        public void paint(Graphics g){
            if( g == null){
                return;
            System.out.println("Paint on thread: " + Thread.currentThread().getName());
            Date d = new Date();
            Rectangle bounds = getBounds();
            g.setColor(Color.black);
            g.fillRect(0,0, bounds.width, bounds.height);
            FontMetrics fm = g.getFontMetrics();
            String val = d.toString();
            int width = fm.stringWidth(val);
            int height = fm.getHeight();
            int x = (bounds.width - width) /2;
            int y = (bounds.height/2) - height;
            g.setColor(Color.yellow);
            g.drawString(val,x,y);
        public void run(){
            while(true){
                try {
                    Thread.sleep(1000);
                } catch (InterruptedException ex) {
                repaint();
    }

    Hi there.
    I've found this page by googling.
    I am not a Java developer, but am using a third party java applet on my web page for mapping.
    Funnily enough, I've been trying to hunt down a memory leak thats occuring in IE (not any other browser).
    It only occurs when the applet is physically visible on the page, and the user is using the Sun JVM (1.5.0_06). The GDI object count increases every time I mouseover a link in a tree.
    This does not occur with the MS JVM.
    Unfortunately I do not have access to the applet source code, but I'm wondering if its related to your problem.
    Have you had any success on this?
    Thanks.

  • CrystalReportViewer 2008 does not release GDI objects after closing.

    We need help in resolving an issue with a WinForms application we have developed that makes use of the Crystal Reports 2008 viewer control to both generate reports based on various parameters the user supplies and to view these same reports having been previously saved in crystal 2008 format.
    The issue we are seeing is that GDI objects are being created during the report generation process but some are not being released when the report viewer window is closed down. This leads to the system running out of GDI objects (seen by using the Windows task manager) and ultimately the application crashes. It is only when the application is closed completely that GDI resources are returned to the system.
    In an effort to isolate the cause of this problem we created a much simplified WinForms application that simply allowed us to systematically open and close a WinForm  that contains a CrystalReportViewer  to display one of our example reports. We found that the behaviour is the same for this application too.
    Browsing the crystal reports forums reveals there have been a few questions about u201Cmemory leaksu201D like this (see "Thread: CrystalReportViewer memory usage increases until out of memory" as an example) and there has been a good deal of talk about manually "disposing" of report documents and viewers but trying this does not correct this issue
    The extent of the "GDI Object leak" does depend upon the kind of report that is pulled in. One report we have that is 360 pages long and contains graphs and tables of data leaks 390 object per test iteration.
    Is this a known issue with the Crystal Report Viewer and if so is there an update or a workaround available?
    Are we performing all the correct initialisation prior to using the viewer? For example we are supplying the report to the viewer through a ReportDocument object; is there something special we need to do with that?
    Do we have to do anything special when closing the viewer?
    Could it be to do with the design of our reports? We are using the Crystal Reports 2008 editor (sp1) to do this design.
    We urgently need to help in understanding why this is happening and to be able implement a solution that will address this problem.
    I have provided the following code snippets of this sample application to give a flavour of what we are doing and hopefully you can see that it is not complex. The example shows the crystal viewer being presented with a ReportDocument as a Report Source ... this is how our proper application does things but if you try supplying the filename of the crystal report directly, the problem is the same.
    This C# code was written using Visual Studio 2008.
    // ===================================================================================
    //                                                  Sample Code Snippets  
    // ===================================================================================
        static class Program
            /// <summary>
            /// The main entry point for the application.
            /// </summary>
            [STAThread]
            static void Main()
                Application.EnableVisualStyles();
                Application.SetCompatibleTextRenderingDefault(false);
                Application.Run(new MDIParent1());
    // ===================================================================================
    // ===================================================================================
        public partial class MDIParent1 : Form
            private int childFormNumber = 0;
            public MDIParent1()
                InitializeComponent();
            private void ShowNewForm(object sender, EventArgs e)
                Form childForm = new TestForm();
                childForm.MdiParent = this;
                childForm.Text = "Window " + childFormNumber++;
                childForm.Show();
            private void OpenFile(object sender, EventArgs e)
                OpenFileDialog openFileDialog = new OpenFileDialog();
                openFileDialog.InitialDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Personal);
                openFileDialog.Filter = "Text Files (.txt)|.txt|All Files (.)|.";
                if (openFileDialog.ShowDialog(this) == DialogResult.OK)
                    string FileName = openFileDialog.FileName;
            private void SaveAsToolStripMenuItem_Click(object sender, EventArgs e)
                SaveFileDialog saveFileDialog = new SaveFileDialog();
                saveFileDialog.InitialDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Personal);
                saveFileDialog.Filter = "Text Files (.txt)|.txt|All Files (.)|.";
                if (saveFileDialog.ShowDialog(this) == DialogResult.OK)
                    string FileName = saveFileDialog.FileName;
            private void ExitToolsStripMenuItem_Click(object sender, EventArgs e)
                this.Close();
            private void CutToolStripMenuItem_Click(object sender, EventArgs e)
            private void CopyToolStripMenuItem_Click(object sender, EventArgs e)
            private void PasteToolStripMenuItem_Click(object sender, EventArgs e)
            private void ToolBarToolStripMenuItem_Click(object sender, EventArgs e)
                toolStrip.Visible = toolBarToolStripMenuItem.Checked;
            private void StatusBarToolStripMenuItem_Click(object sender, EventArgs e)
                statusStrip.Visible = statusBarToolStripMenuItem.Checked;
            private void CascadeToolStripMenuItem_Click(object sender, EventArgs e)
                LayoutMdi(MdiLayout.Cascade);
            private void TileVerticalToolStripMenuItem_Click(object sender, EventArgs e)
                LayoutMdi(MdiLayout.TileVertical);
            private void TileHorizontalToolStripMenuItem_Click(object sender, EventArgs e)
                LayoutMdi(MdiLayout.TileHorizontal);
            private void ArrangeIconsToolStripMenuItem_Click(object sender, EventArgs e)
                LayoutMdi(MdiLayout.ArrangeIcons);
            private void CloseAllToolStripMenuItem_Click(object sender, EventArgs e)
                foreach (Form childForm in MdiChildren)
                    childForm.Close();
    // ===================================================================================
    // ===================================================================================
        public partial class TestForm : Form
            private ReportDocument crDocument;
            public TestForm()
                InitializeComponent();
            private void TestForm_Load(object sender, EventArgs e)
                crDocument = new ReportDocument();
                crDocument.Load(@"C:\Reports\Sample1.rpt");
                this.crystalReportViewer1.ReportSource = crDocument;
    //            this.crystalReportViewer1.ReportSource = @"C:\Reports\Sample1.rpt";
            private void TestForm_FormClosing(object sender, FormClosingEventArgs e)
                this.crDocument.Dispose();
    // ===================================================================================

    Hi Martyn,
    I tested this and found after using this code to re-initialize the report viewer there we still 400 GDI objects not getting released. This may or may not be a CR issue. Still testing.
    Try this also, I simply created a close button but you should be able to do this in your form close method also depending on how you do it:
            private void CloseReport_Click(object sender, EventArgs e)
                rptClientDoc.Close();
                crystalReportViewer1.Dispose();
                GC.Collect();
                this.crystalReportViewer1 = new CrystalDecisions.Windows.Forms.CrystalReportViewer();
                InitializeComponent();
                crystalReportViewer1.ShowExportButton = true;
                crystalReportViewer1.EnableRefresh = true;
                crystalReportViewer1.Controls.Count.ToString();
                crystalReportViewer1.BackColor.IsNamedColor.ToString();
                crystalReportViewer1.EnableToolTips = true;
                crystalReportViewer1.Refresh();
    The issue has now been tracked - Problem_Report:  ADAPT01301248
    Thanks again
    Don
    Edited by: Don Williams on Sep 15, 2009 11:01 AM

  • Memory Leak in NK.exe

    Hi All,
    OS: Windows Embedded Compact 7 with updates till Feb 2015.
    Hardware: AM335x based 
    Applications running: one serial port application and one tcpclient and tcpserver apps. all are managed (C#) applications
    I am facing memory leak issue with our headless device. 
    When I connect the device to LAN network, memory usage keep increases and after few hour (some times <1 hour, some times 4-5 hour) devices go to hang state due to low memory.
    I also tried to run the resource leak detector and found
           1. NK.exe heap is increasing
           2. on startup : API Handle Count = 4118, DuplicatedHandle - Count : 4,082, Size : 4,082 bytes
    After few minutes: APIHandle - Count : 49,172, Size : 49,172 bytes, DuplicatedHandle - Count : 48,810, Size : 48,810 bytes
    NK.exe heap increases as available RAM decreases.
    our application heap is constant only. please find below memory snapshots taken by devhealth.
     1. On device start up after all apps started
    2. After 1 hour of device running. - refer attachment
     where exactly might be this leak, any Guess?
    Thank you...
    rakesh

    Hi tomleijen,
    Thanks for your suggestions.
    Even we tried without any user apps, then also we found ~1 MB increase in NK.exe heap every 30-40 min.
    we have 2 images 1. with all WEC7 updates (Till feb 2015) and 2. without any of the WEC7 updates
    almost same problem we are facing with both images.
    rakesh

  • DIAdem is amassing GDI-Objects

    Hi,
    I got a problem with a measuring application in DIAdem 8.1.
    The application is using a DAC-Block-diagramm for the measuring process. At the end of a measuring cycle the DAC is stopped and a script saves the measured data and restarts the blockdiagramm for the next measuring cylce. The script also creates a picture, using picload/picupdate/picexport, with the name and some general data that is displayed in the block diagramm. Each time the appliaction restarts the GDI-Objects used by DIAdem grow by 2. The memory used by DIAdem will also grow. This growth is constant and since the application is running constantly it will lead to a crash at some point.
    The memory is only released when DIAdem is closed.
    This problem is occurs on 2 different computers, one running windows 2000 and one running windows xp. The program communicates with the outside world via opc and dde, but removing those blocks wont fix the leak.

    Hi Walter,
    thanks for the reply. I did install the latest application SP, but not the driver. Although I am not 100% sure it was the latest SP, I will check that tomorrow when I am back at the company.
    The application gets the data from the measuring system via an Profibus-Server (OPC-Protocol). The measuring hardware isnt on the computer running DIAdem. The problem does also occur with simulated signals. I removed the OPC-In and Outputs to test the software on another pc and I got the same problem on that one.
    I dont reload the DAC-Scheme, I just do a schemecheck every cylce. I did test reloading it though and it didnt help.
    I did some further testing and the problem seems to be connected to saving the picture with picexport. Every time I call that function the gdi-objects raise by 2 (the displayed value changes but the maximum value raises by 2). The same happens when I use picprint as an alternative. I also tried various combinations with and without picdelete, picload or picupdate but only not saving the picture seems to stop the problem.
    The picture itself is made up of static text and 5 variables that describe the current measured item (3 Strings and 2 Reals). 
    Right now I am running a test version where I use buttons to display the data and its been stable for about 2 days now.
    I hope that helps tracking the problem down.
    Best regards
    Utz

  • Finalize prevents "resource leak"?

    As far as I can tell, " +Effective Java+ " (by Joshua Bloch) is the most recommended Java text. Therefore, I am assuming the author is credible, maybe on par with the best on this forum. Then, here is a quote from the book:
    ".... there is a severe performance penalty for using finalizers... So what should you do instead of writing a finalizer for a class whose objects encapsulate resources that require termination, such as files or threads? Just provide an explicit termination method, and require clients of the class to invoke this method on each instance when it is no longer needed."
    I question the advisability of designing a class such that the design says "oh. by the way. when you are done using an instance of it, don't forget to call this method." Would not such a design lead to hard to find, easy to forget, resource leaks (same idea as memory leaks ). Is such a (dangerous?) practice used in real-world apps?
    btw:
    The issue of finalizers arose while reading about java.awt.Graphics . I read that if "g.dispose()" was not called on every instance of Graphics , if run long enough, with 100% certainity, an app would come crashing down. Some resource is exhausted. Know when it must be explicitly called, and then always put that method in a finalize block.

    tatsuke wrote:
    try {
    ArrayList<Double> list = new ArrayList<Double>();
    for(int d = 0; d < Double.MAX_VALUE;d++) {  list.add(new Double(d));  }
    } catch (java.lang.OutOfMemoryError e) {
    // forces gc to kill all possible objects, each's finalize block is executed?
    // next, not sure what to do in any practical sense.
    // just checking that i understand what is going on.
    First of all, If I ever find any code like this in an production environment during a code review, then the author of that code will get a very strict talking-to at least.
    I can't begin to tell you how wrong this is and at how many levels.
    First of all: Who tells you that the OOM-Error is thrown in this code and not in an entirely unrelated code in another Thread that happens to be the first one to request too large a block of memory? (Not unlikely, since you allocate a lot of tiny objects and the OOM-barrier can easily be hit by another thread that tries to allocate a 512k buffer for some I/O operation.
    Next: you're taxing the memory settings of the JVM, forcing it to go up to its maximum size, even when the actual requirement would a fraction of the maximum size and thus potentially forcing your application (and others) into swap and slowing them down to a grinding halt, effectively producing a denial-of-service.
    Next: you produce an infinite loop, because you'll never reach Double.MAX_VALUE (try printing "Double.MAX_VALUE" and "Double.MAX_VALUE - 1d" and tell me the difference).
    Next: no-one said that it's possible that the object is never collected and never finalized in all situations. Of course there are situations when it has to be collected (OOM is about the only one that comes to my mind, at the moment). But that doesn't mean that you can rely on finalize() being called in all situations. Note that nothing in the spec tells you that the GC must run when you run out of file descriptors. Running the GC could help, if someone forgot to close a stream, but it is not enforced.
    Next: yes, I'm pissed of at something entirely unrelated and you just happen to be there. Sorry for that. I still think the content of my comments is correct.

  • HELP! Does Javascript need the explorer.exe process?

    Here is a sample of javascript code in my web application:
    <script language="javascript">
    function redirect() {
    eval("parent.ObjReview_Object.update();");
    </script>
    Does someone know why this code runs perfectly when the Windows process "explorer.exe" is running on my computer (which is the client of the web app), but doesn't work anymore when I remove this process?
    The fact is that unfortunately, for a specific reason, I cannot have the process "explorer.exe" running on my computer. So the whole web application runs correctly on my computer except this code... and I really don't know why.
    Thanks a lot for your help.

    As I said before, considering how tightly IE and the Windows OS are tied together, it doesn't surprise me at all to hear this as being a problem. Even if you technically "uninstall" IE, it's my understanding that you are not really removing any code, DLLs, etc, just removing some shortcuts. This is cus the OS itself uses all the same things for so many functions. So it's probably that the OS (explorer.exe) has those functions, DLLs, whatever, and that IE just uses them directly.
    One question, though... What is ObjReview_Object? Is this a real JS object or is it like a COM object or something? Just wondering if things like a simple alert() call would work in it's place as a test.

  • Is explorer.exe generic? Can I restore from another (identical) windows 7 ultimate build?

    Hi
    I'm trying to use the Start Button Text Changer. It was working ok... but has stopped. I don't know why.
    I have several Windows 7 Ultimate builds, I'm trying to configure different native virtual machines for different purposes (Power User, Testbed, Barebones etc) 
    The program has ceased working, whilst (on a clean install, drivers only) the changes are effective.
    I wondered if I could compare the explorer.exe files, to see differences (ideally 'translated',like with resource hacker), or if I could simply replace explorer.exe in the builds that have stopped 'behaving'.
    Thanks

    Hi,
    Do you mean that the the program (Start Button Text Changer, a 3 rd party program?) stops working which causes the explorer.exe broken? If the program is broken, uninstall it if possible, and re-create the process by click "File" in task manager,
    new task, type "explorer.exe", OK.
    If doesn't work, run sfc/scannow, check and fix if there're some missing or corrupted system files.
    Or use a restore point if you have as mentioned in the first reply.
    Yolanda Zhu
    TechNet Community Support

  • What is meant by a resource leak ?

    What is meant by a resource leak ?

    Garbage collection manages only memory, not other system resources. If your Java program has plenty of free memory, garbage collection will not be triggered automatically. Usually, however, there are other resources that are more limited than memory. For example, all OSes have limits on the number of sockets, file handles, etc. that can be open. Sometimes this limit is quite low. This is true even on a desktop, e.g. if your system has 128KB of memory, your Java program can easily allocate all the available file handles without coming near to filling up the heap. If this happens, your Java program will fail. This is what we call a resource leak; the unintentional maintenence of references to non-memory resources.
    This is why it is important in Java to explicitly manage non-memory resources. Classes which utilize non-memory resources should provide ways to explicitly allocate/deallocate those resources, independent of garbage collection. For example Socket, InputStream and OutputStream each provide explicit close() methods for deallocation of file descriptors, Window provides a dispose() method to free the window handle, etc. The way to properly use these classes is to allocate using the constructor, then deallocate using the appropriate method (deallocation is preferably done in a finally{} block, so it will execute whether or not an exception is thrown during use). These classes do release these non-memory resources in their finalize() method, but remember that the finalizer only gets called by the garbage collector, and if the object is never collected, it will never be finalized, hence will never release the resources.

  • Numerous Explorer.exe processes run on Server 2012 reboot causing server to hang

    I have recently installed Server 2012 as a Domain Controller.  AD, DNS and WINS services as well as Hyper-V manager.
    I am facing a very strange issue which does not occur every time I reboot the machine (but on most times).
    The machine boots to Windows and hangs, I can notice a large number of explorer.exe processes (that start without any user intervention). The server hangs completely and I am unable to kill the processes manually.
    I have to restart the server remotely via shutdown /i.
    On reboot the server works fine, If i reboot the server by switching off the hardware manually the same issue may occur..
    Any idea what might be causing this behaviour?
    Thanks and Regards

    Hi Carlos082,
    I would recommend you to check the event logs which generated during the server hangs.
    Please also try to set up a Performance Monitor log and let it run for a while.  At the very minimum, add the counters for Memory, Process, Processor and System.  The length of time that you need to let it run will depend on how long the system
    takes to hang (assuming that this is happening repeatedly).  Set the interval so that you can capture at least a hundred samples over the life of the log.  Any low memory condition should be readily apparent - especially if it is a steady leak. 
    Finally, follow the steps in
    KB Article 244139 to prepare the system to capture a complete memory dump for analysis if needed.
    To troubleshoot the server hangs, please follow this article:
    Troubleshooting Server Hangs - Part One
    I hope this helps.

  • Why is Explorer.exe reading my program files at startup?

    Every time I boot my computer, if I open Resource Monitor, I will inevitably find, under the "Disk Activity" section, the process explorer.exe "reading" my program files.
    When I say "program files", I mean the executable files for applications stored in the "C:\Program Files (x86)" or the "C:\Program Files" directories.
    Other files seem to get "read" a lot too. PNF files for example.
    I have indexing turned OFF on all drives, and yet the process SearchIndexer.exe is almost always running too.

    Hi,
    Firstly, did you installed MSE in your system, this phenomenon can be caused by MSE security scanning disk.
    Secondly, this problem can also be caused by 3rd program, it would be better to use AutoRuns to check system startup items if there is any 3rd process or dll file start with system.
    AutoRuns:http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
    Roger Lu
    TechNet Community Support

  • IE and explorer.exe issue

    Hello,
    I have a strange problem with the newest build of Windows 10. I installed the windows 10 x64 on my old laptop (2gb RAM DDR2, Intel core2 duo x64 T5800 2GHZ processor).
    I also have the latest build on my work computer (desktop PC, 4gb RAM, Intel celeron E3300 2.5 GHZ).
    The problem which I have is quite strange. I don't have these problems on my work computer first at all. On that computer I installed first the x64 9841 build and then the computer automatically updated it to x64 9879 build.
    So, let me explain the problem. After installation of 9879 build on my laptop, my explorer crashes without any information and restarts. I don't quite have any log in eventvwr.msc and more importantly, I cannot install firefox on the computer from explorer.
    When I use the explorer to navigate to the install setup and i double click it nothing happens. (I can right click--->open, or run it as administrator but nothing is happening). The only way in which I am able to start the setup is to run it from command
    prompt, from where it works without any problem. Also, I have problem with IE. When I start IE it does not load any page. I can open a new tab and write any address but it does not open anything. I don't get any error (no connection and so on) just a blank
    page. The IE says that the page is unresponsive. In task manager the IE has just around 5 Mb of memory used and it does not increase no matter if I leave it for hours.
    The strange fact is that I don't have any of these problems on my work PC. Could be a laptop problem? The point is that I had before W7 on the laptop which worked without any problem. No any setup error, and so on. The firefox install file works on my work
    pc and on w7 (the other laptop).
    I don't have any pending updates.
    Did anyone of you had this problem?
    Thank you in advance for any comments,
    Best regards,
    Treitli Sebastian

    Hello again,
    Since nobody suggested me anything I came back with a short update on the problem.
    The last updates via Windows update solved my problem with explorer.exe. There is no any issue with the explorer anymore. I am able to launch the installation files and browse the computer without any crashing of the explorer.
    However the problem with the internet explorer is not solved. Even if I don't use it I still try report this issue.
    Regarding the internet explorer, the problem consists in the fact that that after computer start up, I can launch internet explorer but does not load anything. Just a blank page, I am able to open new tab but does not load any address which I type in. In
    the task manager it uses around 5 MB and no error is given. I saw (by mistake when my wifi router restarted) that if I disconnect the internet, IE will give me a no connection error. After this, if I reconnect, it will work with no problem. Moreover, if I
    close the IE and restart it with the internet connected, it will work. However, if I restart the computer (during startup it connects to the wifi) and start again the IE the problem is still there as it was described above. Again, if I disconnect the internet,
    I get the connection error from IE and then it will work till the next restart.
    I strongly believe that actually is not a problem of the IE itself but a windows service which fail to give some access for the IE (I am not good at explanation since I am not programmer/computer technician).
    Anyone had this strange problem? Does anyone has any idea what could be the problem?
    Thank you in advance,
    Best regards,
    Treitli Sebastian

  • Searchindexer.exe and explorer.exe errors

    A few days ago I uninstalled Norton with Revo Uninstaller and installed malwarebytes pro. I restarted my computer only to find that approximately every 3 seconds, explorer.exe crashed and restarted. This went on for about 3 days. The event viewer showed
    the "The Windows Search service terminated unexpectedly.  It has done this 7864 time(s)" message that I've seen in other threads.
    http://social.technet.microsoft.com/Forums/windows/en-US/38a0ac31-501d-4b84-9b75-5d64fd684e10/workaround-windows-search-service-terminated-unexpectedly-faulting-application-searchindexerexe?forum=w7itprogeneral
      Here's what I've done so far.
    ran malwarebytes full system scan - found a few problems but after fixing them the main issues persisted.
    ran sfc/ scannow (7-8 times... found issues at first but now returns the message "Windows Resource Protection did not find any integrity violations.")
    Set 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\SetupCompletedSuccessfully' from 1 to 0
    left computer on overnight (windows explorer still crashing every few seconds)
    hard reset by removing the battery. Now windows explorer won't load at all. (no desktop, no modern UI or Taskbar)
    attempted to rebuild the index, which didn't work.
    Here's the what the event viewer shows
    Faulting application name: SearchIndexer.exe, version: 7.0.9600.16384, time stamp: 0x5215d4c4
    Faulting module name: PROPSYS.dll, version: 7.0.9600.16504, time stamp: 0x52c84647
    Exception code: 0xc0000005
    Fault offset: 0x000000000002e7cf
    Faulting process ID: 0x12cc
    Faulting application start time: 0x01cf2ce75776bd39
    Faulting application path: C:\WINDOWS\system32\SearchIndexer.exe
    Faulting module path: C:\WINDOWS\system32\PROPSYS.dll
    Report ID: 9558cdec-98da-11e3-bf19-ccaf78ef940c
    Faulting package full name:
    Faulting package-relative application ID:
    and
    Faulting application name: explorer.exe, version: 6.3.9600.16441, time stamp: 0x5265dec8
    Faulting module name: PROPSYS.dll, version: 7.0.9600.16504, time stamp: 0x52c84647
    Exception code: 0xc0000005
    Fault offset: 0x000000000002e7cf
    Faulting process ID: 0x4038
    Faulting application start time: 0x01cf2c003f8be4cd
    Faulting application path: C:\WINDOWS\explorer.exe
    Faulting module path: C:\WINDOWS\SYSTEM32\PROPSYS.dll
    Report ID: 7f1c8601-97f3-11e3-bf18-ccaf78ef940c
    Faulting package full name:
    Faulting package-relative application ID:
    I can't run Microsoft's fix it because explorer.exe won't load, so trying to save any installer results in Firefox crashing.
    Not really sure what do do at this point.
    Edit: did a system restore. returned with an error saying system restore error failed while deleting c:\$MFT\
    An unspecified error occurred during system resotre (0x8007007b)

    I have a very similar problem involving this module. It has errors and eventually the system reboots with a Kernal error 41 which I believe is from this application, the error code is
    Faulting application name: SearchIndexer.exe, version: 7.0.9600.16384, time stamp: 0x5215d4c4
    Faulting module name: MSSRCH.DLL, version: 7.0.9600.16384, time stamp: 0x5215d425
    Exception code: 0xc0000005
    Fault offset: 0x0000000000006dbe
    Faulting process ID: 0x1b84
    Faulting application start time: 0x01cf4f7e92d28b12
    Faulting application path: C:\WINDOWS\system32\SearchIndexer.exe
    Faulting module path: C:\WINDOWS\system32\MSSRCH.DLL
    Report ID: d0dab473-bb71-11e3-bf22-001fd0ada17a
    Faulting package full name:
    Faulting package-relative application ID:

Maybe you are looking for

  • Sql Server Express 2012 install failure

    I have attempted to install sql server 2012 express and keep getting the same error "Attempted to perform an unauthorised operation"  It appears to happen while installing "SqlBrowserConfigAction_repair_ConfigNonRC_Cpu32". The Log has the following:

  • HRMD_A status 53 with NO ACTUAL DATA TO SAP t-code PA30

    Hi, We are trying to load the HR minimaster reocord from a flat data file to R/3. I have created an iDoc through WE19 for message type hrmd_a and basic type hrmd_a06. Populated infotypes for 0000, 0001, 0002 and 0003. idoc created with status 53 (gre

  • Write DVD/CD unit to a G4

    Have a Mac G4 running OS 10.4.11 with the play only DVD/CD unit installed still. Can a write DVD/CD or a unit similar to a super drive be installed? Easily that is.

  • Converting Ship-to-Party

    Hi Friends, I am working on Ale idoc scenario in which i need to create sales order from customer purchase order. for this i need to maintain ship-to-party number in advance. Customer is providing me with list of ship to party number, but i dont want

  • IPhoto MobileMe uploaded picture orientation problem

    Hi, I scanned a number of old photos into iPhoto and moved the photos to upright orientations (portrait and landscape). I then organized them under a single event and published to the MobileMe Gallery. Once uploaded, however, the orientations of some