Explorer.exe hangs X220 Intel HD 3000

I am dealing with an issue that is driving me crazy.  Explorer.exe hangs on mouse over or right/left click.  My computer is a Lenovo x220 thinkpad running windows 8.1 pro with 8 gb of ram.  All diagnostic scans come back clean.  Dual core intel i5 64 bit.  Only started after upgrading from windows 7 to 8.1 and a clean boot doesn't help either.
I don't get a crash per say (doesn't blue screen), the system just stops responding forcing a restart of explorer.exe.  I believe it only happens when my sony 19 inch monitor is connected.  I have done every type of fix approach imaginable - sfc /scannow clean, Dism returns no corruptions and healthy.  There are no viruses, malware, corruptions. 
Intel HD 3000 9.17.10.3517
Sony SDM-Hs95p monitor
All drivers are up to date and the windows assessment console returns no issues with any drivers.  Windows updates are all current.
Source
Windows Explorer
Summary
Stopped responding and was closed
Date
‎10/‎2/‎2014 12:14 PM
Status
Report sent
Description
A problem caused this program to stop interacting with Windows.
Faulting Application Path:   C:\Windows\explorer.exe
Problem signature
Problem Event Name:   AppHangB1
Application Name:   explorer.exe
Application Version:   6.3.9600.17284
Application Timestamp:   53f816dc
Hang Signature:   129d
Hang Type:   134217729
OS Version:   6.3.9600.2.0.0.256.48
Locale ID:   1033
Additional Hang Signature 1:   129d857229bf4e0019ee43a51c12fcda
Additional Hang Signature 2:   d346
Additional Hang Signature 3:   d346abb414dff47cffb65d82e7f16a4f
Additional Hang Signature 4:   1767
Additional Hang Signature 5:   1767546c0e7ec204c8f83543b7c79a87
Additional Hang Signature 6:   2622
Additional Hang Signature 7:   2622b1d68430c41344e53657423c10e5
Extra information about the problem
Bucket ID:   21f41e63fa7238068ba5bbcb5dd424e8 (94592681208)

Everything passes but the smart drive self test on the hitachi hard drive
Storage devices
Display name
Hitachi HTS723232A7A364 - 298.09 GBs
Manufacturer
Hitachi
Model
Hitachi HTS723232A7A364
Serial
E3X31X63K72YRN
Firmware
EC2OA60W
Size
298.09 GBs
Rotation Rate
7200 RPM
Cache
16.00 MBs
Temperature
38 C
Physical sector size
512
Logical sector size
512
Logical sectors
625142448
Supported standards
ATA8-ACS, ATA7-ATAPI, ATA6-ATAPI, ATA5-ATAPI, ATA4-ATAPI
Spec version
ATA8-ACS version 6
Partition schema
MBR
Index 1
Partition type
PRIMARY
File system
ntfs
Size
100.00 MBs
Index 2
Partition type
PRIMARY
File system
ntfs
Mount point
C:\
Serial
44648BC5
Size
297.99 GBs
Used
213.87 GBs
Free
84.12 GBs
Diagnostics
SMART status test
Passed
Targeted read test
Passed
Random seek test
Passed
Funnel seek test
Passed
SMART short self-test
Passed
SMART drive self-test
Warning
Result code: WVC005000-WJKVBE

Similar Messages

  • Explorer.exe hangs on resolution changes

    I seem to have to have a very persistant, very reproducable and very annoying problem with explorer.exe just completely "hanging" frequently. This started happening near the end of November, about a month after I used Windows 7 (professional x64) with no problems. To make a long story short, it happens nearly any time my display changes (resolution or anything else).
    Here's a more detailed description:
    Before late November, everything worked perfectly. I don't recall what could have caused the change. I uninstalled anything I installed during or after November. I do not have anything visible on my desktop. However, any time the resolution changes, explorer.exe hangs using 50% of my cpu, or 100% of one core. Clicking on the taskbar or desktop lets me know that "Explorer.exe has stopped responding", allowing me to restart it, which I occasionally also choose to do via Process Explorer. At first, I only noticed during or after playing games, but now I have tested this thoroughly and determined that it is in fact most likely a display problem, concluded from the following pretty exhaustive list:
    Unplugging my external monitor causes explorer.exe to hang.
    Plugging in my external monitor also does.
    Changing resolutions on either monitor, to any resolution, causes explorer.exe to hang.
    Changing resolutions on the internal monitor while the external monitor is unplugged also causes a hang.
    Uninstalling the ATI display drivers causes a hang.
    Changing resolutions with the default Windows display drivers between 800x600 and 1024x768 (the only two options) causes a hang. (Uninstalled and followed with Driver Sweeper so no trace of the ATI display drivers are available and the display is running purely on Windows defaults.)
    Installing updated ATI drivers causes a hang directly after the resolution is changed automatically.
    Unchecking all options in the "Perfermance Options" causes explorer.exe to hang.
    Unchecking all options but leaving visual styles on does not result in a hang (if it was on to start with).
    Turning off visual styles causes the display to blink briefly before displaying the "Please wait" box and, when it is finished and the desktop is displayed again, explorer.exe has been hanging approximately since the display blink.
    Running games that cause the resolution to change usually cause explorer.exe to hang, but not always. This is particularly odd. Opening the simple game Torchlight in full screen at 1280x800, does not pose a problem; however, Alt-Tabbing out of it causes the hang as well as closing it, which both revert the resolution to the desktop resolution (1920x1200). Running the game in a window is no problem. Running the game in full screen at 1920x1200 is also no problem, regardless of starting, using Alt-Tab or closing, even though the display blinks for a moment. Team Fortress 2 consistently causes explorer to hang when launching (hanging TF2 as well, until explorer has been killed). All goes well while TF2 is running, even with explorer restarted. When TF2 is closed, explorer hangs again. Thus, it always causes explorer to hang, whether opening or closing. In windowed mode, it causes no problems. I can give examples of a number of more games if it helps pinpoint the problem.
    The event viewer shows no errors or warnings after a hang (except for the standard ones that are generated if the "Explorer.exe has stopped responding" dialog shows up by clicking on the taskbar or desktop. If it is killed manually before showing the dialog, nothing shows up.) It does log some information specific to ATI functions in the ACEEventLogSource which seem to be specific to an explorer freeze. No information was generated when Torchlight changed resolutions without a resulting hang but the following was generated upon closing, with an explorer hang:
    0000000090: 2010-01-12 00:13:47:423 FAILED:ADL_Display_SLSGrid_Caps and return value is: -1
    Error Called by: ATI.ACE.CLI.Caste.Graphics.Runtime.RT_GraphicsAdapter_N::CheckSLSSupported processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Caste.Graphics.Runtime, Version=2.0.3615.38596, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000091: 2010-01-12 00:13:48:428 FAILED:ADL_Display_SLSGrid_Caps and return value is: -1
    Error Called by: ATI.ACE.CLI.Caste.Graphics.Runtime.RT_GraphicsAdapter_N::CheckSLSSupported processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Caste.Graphics.Runtime, Version=2.0.3615.38596, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000092: 2010-01-12 00:13:49:775 FAILED:ADL_Display_DisplayMapConfig_PossibleAddAndRemove is: -8
    Error Called by: ATI.ACE.CLI.Caste.Graphics.Runtime.RT_GraphicsCaste_N::GetAddOneRemoveOneDisplayIDList processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Caste.Graphics.Runtime, Version=2.0.3615.38596, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000093: 2010-01-12 00:13:49:967 FAILED:ADL_Display_SLSGrid_Caps and return value is: -1
    Error Called by: ATI.ACE.CLI.Caste.Graphics.Runtime.RT_GraphicsAdapter_N::CheckSLSSupported processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Caste.Graphics.Runtime, Version=2.0.3615.38596, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000094: 2010-01-12 00:13:49:970 FAILED:ADL_Display_SLSGrid_Caps and return value is: -1
    Error Called by: ATI.ACE.CLI.Caste.Graphics.Runtime.RT_GraphicsAdapter_N::CheckSLSSupported processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Caste.Graphics.Runtime, Version=2.0.3615.38596, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000095: 2010-01-12 00:13:50:496 _IDEMDeviceDFP2Settings_0812.GetDFP2ITCFlag failed with status 2
    Error Called by: ATI.ACE.CLI.Aspect.DeviceDFP.Graphics.Runtime.RT_DeviceDFP::PrivateRefresh processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Aspect.DeviceDFP.Graphics.Runtime, Version=2.0.3615.38640, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000096: 2010-01-12 00:13:50:499 FAILED: ADL.ADL.ADL_DFP_AllowOnlyCETimings_Get
    Error Called by: ATI.ACE.CLI.Aspect.DeviceDFP.Graphics.Runtime.RT_DeviceDFP::PrivateRefresh processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Aspect.DeviceDFP.Graphics.Runtime, Version=2.0.3615.38640, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    0000000097: 2010-01-12 00:13:50:517 Unable to obtain Color Correction information, dem status: -2
    Error Called by: ATI.ACE.CLI.Aspect.DeviceLCD.Graphics.Runtime.RT_DeviceLCD::Parse processID:03384 threadID:( ) domainName:(CCC.exe ) assemblyName:(CLI.Aspect.DeviceLCD.Graphics.Runtime, Version=2.0.3615.38647, Culture=neutral, PublicKeyToken=90ba9c70f846762e)
    Disabling all non-Microsoft Shell extensions (with ShellExView x64) didn't help.
    As of writing, I have the feeling it didn't happen in safe-mode but I would need to retest this to make sure.
    A clean boot yields no improvement. Changing the resolution following a clean boot still results in a hang.
    Using Process Explorer, I have also checked all non-Microsoft DLL's running in conjunction with Exlporer.exe and these were only db's (some related to BitTorrent), a Comodo antivirus DLL and a bunch of Broadcom Widcomm Bluetooth files. Thus, I uninstalled all of those including the bluetooth software and drivers, unfortunately, to no avail. Changing resolutions still crashes Explorer!
    My system is as follows:
    ASUS M51Va Notebook
    Windows 7 Professional x64
    ATI Radeon HD 3650
    Catalyst Version 09.12
    DirectX Version 11
    Direct3D Version 8.14.10.0716
    OpenGL Version 6.14.10.9232
    Internal monitor Generic PnP Monitor at 1200x800 32bit 61Hz
    External monitor Samsung SyncMaster 2433BW/2433GW, SyncMaster Magic at 1920x1200 32bit 59Hz connected by an HDMI to DVI-D cable
    Anti-virus is Comodo
    If any more information is needed I'll gladly provide it! This is truly a very aggrivating problem. Particularly when gaming or hooking up displays for presentations etc. I really can't think of any thing else that could be meddling with Explorer, causing it to crash. I would love to find the source of the problem, but I'm prepared to finally bite the bullet and reinstall Windows to get rid of this extremely annoying problem. Help would really be appreciated.
    If I figure anything out, I'll post the results.

    Hi Eric,
    I would like to suggest you update the BIOS and the hardware drivers first.
    If the issue persists, would you please send me more information for analyzing. For your convenience, I have created a workspace for you.  You can upload the information files to the following link.  (Please choose "Send Files to Microsoft")
    Workspace URL: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=c6554906-fc59-4afc-b248-15a77e6b766a
    Password: dPm84CYEytpieE8
    Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken.  Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.
    Collect the Windows Explorer dump files
    ========================
    1. Click Start, type Notepad in the Search bar and press Enter.
    2. Copy the following commands and then paste them into the open Notepad window.
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Explorer.exe]
    "DumpFolder"=hex(2):43,00,3a,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,44,00,75,\
      00,6d,00,70,00,73,00,00,00
    3. After pasting the above commands, please click File on the menu and click Save.
    4. Type in CollectDump.reg as the file name, select to save the file on the Desktop. Click Save.
    5. Go to the Desktop, and double click CollectDump.reg. A dialog box will pop-up saying "Are you sure you want to add the information in fix.reg to the registry?". Click Yes to confirm.
    Note: Administrative privileges are required to perform the above steps. Please click "Continue" when the User Account Control dialog-box appears.
    6. Reboot the computer and send the dump files in C:\LocalDumps to me after reproducing the Windows Explorer issue.
    Regards,
    Arthur Li - MSFT

  • Lenovo T61 (Product 6458-W2R): explorer.exe hangs after logon - WinXP SP2

    +++ english below +++
    [german/deutsch]
    Wir setzen in unserem Unternehmen mehrere ThinkPad T61 ein.  Bei einigen dieser ThinkPad T61 (und nur beim ThinkPad T61!) haben wir inzwischen ein seltsames Phänomen, welches im Laufe der letzten 1-2 Monate auftrat und noch auftritt.  Dieses Phänomen trat nicht gleichzeitig auf, sondern nacheinander.  Und es tritt willkürlich auf.  Der jüngste Fall ist gerade 1 Tag alt.  Inzwischen sind 6 ThinkPad T61 davon betroffen.
    Alle ThinkPad T61 sind Mitglieder einer Domäne (Windows Server 2003) und durchlaufen ein Loginscript.  Das Loginscript beinhaltet Batchbefehle, Kix32 (für das Mappen von Netzwerklaufwerken und Druckern) und Teile der Matrix42 Empirum Management Software (für Softwaredistribution und Inventarisierung).  Es werden Gruppenrichtlinien angewendet.  Es werden via Matrix42 Empirum automatisch die neuen Patches und Updates seitens Microsoft auf alle Computer verteilt.  Alle Computer erhalten eine unbeaufsichtigte/standardisierte Installation via Matrix42 Empirum Management Software (ähnlich einem Image und der unbeaufsichtigten Windows-Installation).  Auf allen Rechnern ist Windows XP mit Service Pack 2 installiert.  Spezielle Software ist in der Regel nicht drauf, nur Microsoft Office 2003, der aktuelle Acrobat Reader sowie die aktuellen Standardplayer: Windows Media Player, Quicktime Player, RealPlayer, VLC media player.  Ggf. noch Nero 7 Standard bzw. Platinum (Spezielle Version).  Alle IBM/Lenovo ThinkPad verwenden zusätzlich die IBM/Lenovo-Utilities „ThinkVantage“.  Das Phänomen tritt unabhängig davon auf, ob das ThinkPad T61 in einer Dockingstation betrieben wird oder nicht.  Es ist auf jedem Computer in der Windows Registrierung eingestellt, dass der Desktop erst geladen wird, wenn das Loginscript durchgelaufen ist.
    Nun zur genauen Fehlerbeschreibung:
    Manchmal kann es bei einem Kaltstart vorkommen, dass nach der Anmeldung und nach dem Loginscript –während der komplette Desktop und die Startleiste bereits sichtbar sind und noch einige Dienste geladen werden– sich die explorer.exe aufhängt.  Die Startleiste lässt sich nicht bedienen.  Ebenfalls lassen sich dann auch auf dem Desktop keine Symbole doppelklicken.
    Wir setzen auch andere Computer ein, wo dieses Phänomen nicht auftritt, u.a.:
    - HP-Computer (Desktops, Evo SFF Series)
    - Fujitsu-Siemens-Computer (Desktops, ESPRIMO E Series)
    - IBM ThinkPad T20/21
    - IBM ThinkPad T40/T41/T42
    - IBM/Lenovo ThinkPad T60
    Das Problem tritt nur auf den noch relativ neuen ThinkPad T61 auf.
    Wir haben bereits einen ziemlich ähnlichen Fall unter…
    http://forums.techarena.in/showthread.php?t=694888&page=1
    http://forums.techarena.in/showthread.php?t=694888&page=2
    http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22718276.html …gefunden.
    [english]
    Unfortunately, I’m not fluent in the english language.
    We use a few ThinkPad T61’s in our company.  Meanwhile, at some ThinkPad T61’s (only ThinkPad T61!) we have a strange problem. This problem appears since the last 1-2 months and it still does exist.  This problem does not appear at the same time, it does appear successive.  And it appears random.  The last case is 1 day old.  Meanwhile, 6 ThinkPad T61 are concerned.
    All ThinkPad T61 are members of a domain (Windows Server 2003) and do execute a logon script.  The logon script contains Batch commands, Kix32 (for mapping network drives and printers) and parts of the Matrix42 Empirum Management software (for software distribution and inventory scan).  Group policies will apply.  Patches and updates will install on every computer via Matrix42 Empirum automatically.  All computers get a default/unattended installation via Matrix42 Empirum Management software (everywhere between an image and an unattended Windows installation).  All computers have installed Windows XP with Service Pack 2.  As a rule, special software isn’t installed, only Microsoft Office 2003, the actual Acrobat Reader and the actual default players: Windows Media Player, Quicktime Player, RealPlayer, VLC media player.  Sometimes, there is installed the Nero 7 Standard or rather Platinum (Special Edition) yet.  All IBM/Lenovo ThinkPad use IBM/Lenovo-Utilities „ThinkVantage“ additionally.  The problem exists if the ThinkPad T61 is connected to a docking station and also if the ThinkPad T61 is disconnected from a docking station.  On every computer exists a registry key which arranges it that the desktop only will be loaded after the logon script did run.
    Now the detailed error description:
    Sometimes the explorer.exe hangs after the cold start.  i.e.: The desktop (with icons and task bar) appears complete.  But the computer hangs if you try to click on the task bar or double click on any icons.  The computer will only run if we kill the process ‘explorer.exe’ and if we restart the explorer.exe.
    We use also other computers with the same installation and the same group policies where the problem does not exist, for example:
    - HP-Computer (Desktops, Evo SFF Series)
    - Fujitsu-Siemens-Computer (Desktops, ESPRIMO E Series)
    - IBM ThinkPad T20/21
    - IBM ThinkPad T40/T41/T42
    - IBM/Lenovo ThinkPad T60
    Only the new ThinkPad T61’s have this problem.
    We have found a similar case at…
    http://forums.techarena.in/showthread.php?t=694888&page=1
    http://forums.techarena.in/showthread.php?t=694888&page=2
    http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22718276.html
    Vielen Dank / Many thanks!

    I would run System Update and make sure I had all the updates available.
    Another thing to try is:
    1. Right-click on My Computer and click Properties
    2. Click on the Advanced tab
    3. Click on Settings under Performance
    4. Click on Data Execution Prevention
    5. Click on Turn on DEP for all programs and services except those I select, then check Windows Explorer
    We had to do that to some machines here after a push from corporate of the new ScriptLogic.This solved the problem.
    ThinkPad T61 15 Widescreen with nVidia Quadro graphics 6459CTO
    Windows 7 Enterprise and Windows XP Pro

  • Explorer.exe hangs

    I've been loving my s10-3t for about almost a week now, but I'm wondering if anyone else is having explorer.exe hang? It seems to happen after changing screen rotation to or from tablet. I have upgraded to 2 GB of RAM, 7 Ultimate, and have been slowly uninstalling the Lenovo apps in an effort to narrow down the issue, and am down to Direct Share (never used), Energy Management, Screen Rotation, and One Key recovery.
    It seems to happen less with the auto rotation off, but that could just be because it doesn't rotate every time I move the wrong way. The Windows event logs just state that "explorer.exe stopped interacting with Windows" (Application hang 1002), which is pretty useless. Any advise would be appreciated. Thanks!
    Solved!
    Go to Solution.

    I uninstalled the rest of the applications I don't use and they hangs seem to be much less frequent. Thanks for your help.

  • IBM T61 explorer.exe hang when login

    I have this issues we just purchase 5 IMB T61 and all of then have issues when login into winodws they hang up.  And when you try to shut down it says explorer.exe not responding.  So what I do is I end task for explorer.exe and start a new task explorer.exe and this fix the issues but I can 't keep doing this. Not too sure what else is bothering it. Sometimes just user login and the same problem occurs from the start. The users are getting tired of this. I am thinking of removing all of IBM software. I am running in a Novel enviorment. But I don't think that is the problem.  Please Help.

    probally a virus ,torjan or malware, or it could be that you havent updated ..

  • Explorer.exe hangs at logoff?

    I experince the same problem as described in
    http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2rds/thread/fa5a6a70-3005-4690-b460-dde923fedd1d. That thread is now quite old, and locked, but without any answer. Mads Sörensen and IRQ experienced the problem - was there any resolution?

    Hi Kasper,
    Now I have reinstalled my terminal server without antivirus, without printer drivers, without OEM hardware drivers, without server tools, without backup tools, without server admin tools, without applications etc, actually I have TS-role + Dotnet 3.5 and
    4.0 + Citrix Xenapp6 +  Silverlight + Visual C++ Redistributable. That is all...
    And the behavour is exactly the same.
    Eventvwr information follows. When I have the problem I have 2 warning events, when everything is OK (ie: no desktop folder redirection) I only have one, see after the faulty log :
    With Desktop Folder Redirection:
    INFORMATION -
    3 user registry handles leaked from \Registry\User\S-1-5-21-1177238915-1645522239-725345543-6112_Classes:
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112_CLASSES
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112_CLASSES
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112_CLASSES\Local Settings\Software\Microsoft\Windows\Shell
    INFORMATION -
    10 user registry handles leaked from \Registry\User\S-1-5-21-1177238915-1645522239-725345543-6112:
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\Shell\Bags\1\Desktop
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\Shell\Bags\1\Desktop
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows NT\CurrentVersion
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\CurrentVersion\Explorer
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\CurrentVersion\Explorer
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
    Process 1804 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Software\Microsoft\Windows\Shell
    No Desktop Folder Redirection:
    INFORMATION -
    1 user registry handles leaked from \Registry\User\S-1-5-21-1177238915-1645522239-725345543-6112:
    Process 1512 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1177238915-1645522239-725345543-6112\Printers\DevModePerUser
    My domain is 2003, but the AD is 2000-mode due to anothe domain in the tree still running Windows 2000 on the DC. Could that be the cause?
    Greetings
    Daniel
    Daniel SR Systems engineer Sweden

  • X220 Tablet and Windows 8.1 - Limited Touch drops with Intel HD 3000 is installed?

    I have installed Windows 8.1 Professional on on a Lenovo X220 Tablet and everything seems to have installed correctly, although my system, which supported limited touch with 2 touch points in Windows 7, only has Pen Support in 8.1.
    I have been able to get the system to be recognized as "Pen and Limited Touch Support with 2 Touch Points" but only if I disable/unintall the Intel HD 3000 driver, and use Microsoft Basic Display Adapter instead.  The problem is that the resolution isn't as crisp.  
    Any recommendations as to what I can do to get the limted touch to be recognized with the Intel HD 3000 driver?  This one is baffling.  
    Any help would be appreciated. 
    The X220 Tablet's type is 4296-2WU
    Also, the Intel HD Graphics 3000 driver is the latest version compatible with 8.1 64bit - 9.17.10.3517.
    Update: I have also tried the previous Intel driver release, 9.17.10.3347, as well as the recommend Intel driver from the support page 9.17.10.2843 and non of them allow my screen to do Limited Touch Support with 2 Touch Points.  Yet, if I disable the Intel driver, and restart, I can.  

    Troy,
    Thanks for sharing your expeirences and the details of the driver version.
    Officially, I don't think Lenovo provided full support for Win 8 on the X220, but as you note it (and the upgrade to 8.1) can work with some limitations.   I'll check with one of our software engineers to see if he may have some suggestions on this one.
    I expect you will probably draw some responses from the community as the X220 was a very popular system with a good following.
    Best regards,
    Mark
    ThinkPads: S30, T43, X60t, X1, W700ds, IdeaPad Y710, IdeaCentre: A300, IdeaPad K1
    Mark Hopkins
    Program Manager, Lenovo Social Media (Services)
    twitter @lenovoforums
    English Community   Deutsche Community   Comunidad en Español   Русскоязычное Сообщество

  • Numerous Explorer.exe processes run on Server 2012 reboot causing server to hang

    I have recently installed Server 2012 as a Domain Controller.  AD, DNS and WINS services as well as Hyper-V manager.
    I am facing a very strange issue which does not occur every time I reboot the machine (but on most times).
    The machine boots to Windows and hangs, I can notice a large number of explorer.exe processes (that start without any user intervention). The server hangs completely and I am unable to kill the processes manually.
    I have to restart the server remotely via shutdown /i.
    On reboot the server works fine, If i reboot the server by switching off the hardware manually the same issue may occur..
    Any idea what might be causing this behaviour?
    Thanks and Regards

    Hi Carlos082,
    I would recommend you to check the event logs which generated during the server hangs.
    Please also try to set up a Performance Monitor log and let it run for a while.  At the very minimum, add the counters for Memory, Process, Processor and System.  The length of time that you need to let it run will depend on how long the system
    takes to hang (assuming that this is happening repeatedly).  Set the interval so that you can capture at least a hundred samples over the life of the log.  Any low memory condition should be readily apparent - especially if it is a steady leak. 
    Finally, follow the steps in
    KB Article 244139 to prepare the system to capture a complete memory dump for analysis if needed.
    To troubleshoot the server hangs, please follow this article:
    Troubleshooting Server Hangs - Part One
    I hope this helps.

  • Wine and Intel HD 3000 with lib32-intel-dri

    I have a HP ProBook 4530s with Intel HD 3000 graphics. Wine doesn't find the graphics card. Usually lib32-intel-dri has solved this, however this time it didn't.
    fixme:d3d:wined3d_guess_card No card selector available for GL vendor 0x4 and card vendor 0000 (using GL_RENDERER "Gallium 0.4 on llvmpipe (LLVM 0x301)").
    I don't recognize the Gallium/llvmpipe part. Is it some new part of the graphics driver architechture that wine can't recognize?

    I have this problem too (ati radeon hd 6670 with ati-dri drivers here). On clean wine:
    $ WINEPREFIX=$(mktemp -d) wine dxdiag
    fixme:storage:create_storagefile Storage share mode not implemented.
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    fixme:storage:create_storagefile Storage share mode not implemented.
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    err:mscoree:LoadLibraryShim error reading registry key for installroot
    fixme:iphlpapi:NotifyAddrChange (Handle 0xefe308, overlapped 0xefe320): stub
    fixme:storage:create_storagefile Storage share mode not implemented.
    fixme:iphlpapi:NotifyAddrChange (Handle 0x101e8e0, overlapped 0x101e8ec): stub
    wine: configuration in '/tmp/tmp.moZglmSWXW' has been updated.
    fixme:d3d:wined3d_guess_card No card selector available for GL vendor 0x4 and card vendor 0000 (using GL_RENDERER "Gallium 0.4 on llvmpi
    pe (LLVM 0x301)").
    wine: Unhandled page fault on read access to 0xffffffff at address 0xf2905535 (thread 0009), starting debugger...
    Unhandled exception: page fault on read access to 0xffffffff in 32-bit code (0xf2905535).
    Register dump:
    CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
    EIP:f2905535 ESP:0032cb68 EBP:7e1ddd30 EFLAGS:00210202( R- -- I - - - )
    EAX:0000001c EBX:00000054 ECX:7e1f2780 EDX:00000000
    ESI:00000038 EDI:7e2bc4b4
    Stack dump:
    0x0032cb68: 7e246f48 7e244020 00000000 f583eff4
    0x0032cb78: 7e1f83d0 7e1f83d0 00000003 00000004
    0x0032cb88: 00000000 00000000 f75a8420 f583d810
    0x0032cb98: 7e1f83d0 00000000 7e1f83d0 f542fc38
    0x0032cba8: 7e1f83d0 7e246f48 00000005 f5c23ff4
    0x0032cbb8: 7e1f83d0 7e23deb8 7e23de88 f5b8c8af
    000c: sel=0067 base=00000000 limit=00000000 16-bit --x
    Backtrace:
    =>0 0xf2905535 (0x7e1ddd30)
    0xf2905535:
    Modules:
    Module Address Debug info Name (76 modules)
    ELF 7b800000-7ba3d000 Deferred kernel32<elf>
    \-PE 7b810000-7ba3d000 \ kernel32
    ELF 7bc00000-7bcd3000 Deferred ntdll<elf>
    \-PE 7bc10000-7bcd3000 \ ntdll
    ELF 7bf00000-7bf04000 Deferred <wine-loader>
    ELF 7e3f6000-7e3fc000 Deferred libxfixes.so.3
    ELF 7e3fc000-7e407000 Deferred libxcursor.so.1
    ELF 7e5a2000-7e5cb000 Deferred libexpat.so.1
    ELF 7e5cb000-7e600000 Deferred libfontconfig.so.1
    ELF 7e600000-7e610000 Deferred libxi.so.6
    ELF 7e610000-7e614000 Deferred libxcomposite.so.1
    ELF 7e614000-7e61d000 Deferred libxrandr.so.2
    ELF 7e61d000-7e627000 Deferred libxrender.so.1
    ELF 7e627000-7e62d000 Deferred libxxf86vm.so.1
    ELF 7e62d000-7e631000 Deferred libxinerama.so.1
    ELF 7e631000-7e655000 Deferred imm32<elf>
    \-PE 7e640000-7e655000 \ imm32
    ELF 7e655000-7e677000 Deferred libxcb.so.1
    ELF 7e677000-7e67d000 Deferred libuuid.so.1
    ELF 7e67d000-7e697000 Deferred libice.so.6
    ELF 7e67d000-7e697000 Deferred libice.so.6
    ELF 7e697000-7e7ce000 Deferred libx11.so.6
    ELF 7e7ce000-7e7e0000 Deferred libxext.so.6
    ELF 7e7e0000-7e7e9000 Deferred libsm.so.6
    ELF 7e7e9000-7e877000 Deferred winex11<elf>
    \-PE 7e7f0000-7e877000 \ winex11
    ELF 7e877000-7e88e000 Deferred libz.so.1
    ELF 7e88e000-7e92a000 Deferred libfreetype.so.6
    ELF 7e958000-7ea83000 Deferred oleaut32<elf>
    \-PE 7e970000-7ea83000 \ oleaut32
    ELF 7ea83000-7eb02000 Deferred rpcrt4<elf>
    \-PE 7ea90000-7eb02000 \ rpcrt4
    ELF 7eb02000-7eb1c000 Deferred version<elf>
    \-PE 7eb10000-7eb1c000 \ version
    ELF 7eb1c000-7ebe9000 Deferred gdi32<elf>
    \-PE 7eb30000-7ebe9000 \ gdi32
    ELF 7ebe9000-7ed3c000 Deferred user32<elf>
    \-PE 7ec00000-7ed3c000 \ user32
    ELF 7ed3c000-7eda7000 Deferred advapi32<elf>
    \-PE 7ed50000-7eda7000 \ advapi32
    ELF 7eda7000-7eecf000 Deferred ole32<elf>
    \-PE 7edc0000-7eecf000 \ ole32
    ELF 7ef7e000-7ef8b000 Deferred libnss_files.so.2
    ELF 7ef8b000-7efd2000 Deferred libm.so.6
    ELF 7efd5000-7efe5000 Deferred libbz2.so.1.0
    ELF 7efe5000-7f000000 Deferred dxdiag<elf>
    \-PE 7eff0000-7f000000 \ dxdiag
    ELF f4989000-f5b2a000 Deferred swrast_dri.so
    ELF f5b2a000-f5b44000 Deferred libgcc_s.so.1
    ELF f5c2c000-f6fdf000 Deferred r600_dri.so
    ELF f6fdf000-f6fe8000 Deferred librt.so.1
    ELF f6fe8000-f6ff5000 Deferred libdrm.so.2
    ELF f6ff5000-f700e000 Deferred libxcb-glx.so.0
    ELF f700e000-f7011000 Deferred libx11-xcb.so.1
    ELF f7011000-f7015000 Deferred libxdamage.so.1
    ELF f7015000-f702b000 Deferred libglapi.so.0
    ELF f702b000-f7081000 Deferred libgl.so.1
    ELF f70af000-f718d000 Deferred opengl32<elf>
    \-PE f70d0000-f718d000 \ opengl32
    ELF f718d000-f71a1000 Deferred psapi<elf>
    \-PE f7190000-f71a1000 \ psapi
    ELF f71a1000-f7213000 Deferred ddraw<elf>
    \-PE f71b0000-f7213000 \ ddraw
    ELF f7213000-f7359000 Deferred wined3d<elf>
    \-PE f7220000-f7359000 \ wined3d
    ELF f7359000-f7396000 Deferred d3d9<elf>
    \-PE f7360000-f7396000 \ d3d9
    ELF f7396000-f73bb000 Deferred dxdiagn<elf>
    \-PE f73a0000-f73bb000 \ dxdiagn
    ELF f73d3000-f73d8000 Deferred libdl.so.2
    ELF f73d9000-f73e0000 Deferred libxdmcp.so.6
    ELF f7402000-f7406000 Deferred libxau.so.6
    ELF f7406000-f75ac000 Deferred libc.so.6
    ELF f75ac000-f75c7000 Deferred libpthread.so.0
    ELF f75c7000-f770a000 Dwarf libwine.so.1
    ELF f770b000-f772d000 Deferred ld-linux.so.2
    ELF f772d000-f772e000 Deferred [vdso].so
    Threads:
    process tid prio (all id:s are in hex)
    00000008 (D) C:\windows\system32\dxdiag.exe
    00000009 0 <==
    0000000c services.exe
    00000045 0
    00000030 0
    0000000e 0
    0000000d 0
    00000012 explorer.exe
    00000013 0
    0000002d winedevice.exe
    00000034 0
    00000033 0
    0000002f 0
    0000002e 0
    I tried wine-git from aur, fails with same error. I can't get trace with gdb, but running wine with
    WINEDEBUG=+all wine dxdiag
    gives something similar. Log is quite big (62Mb) and from different executable, but i think all revelant info is here:
    19.337:0009:trace:module:load_dll Found L"C:\\windows\\system32\\ddraw.dll" for L"DDRAW.DLL" at 0x7dfb0000, count=3
    19.337:0009:trace:heap:RtlFreeHeap (0x110000,70000062,0x1c2ad0): returning TRUE
    19.337:0009:Ret KERNEL32.LoadLibraryA() retval=7dfb0000 ret=10001b82
    19.337:0009:Call KERNEL32.GetProcAddress(7dfb0000,1000e1bc "DirectDrawCreate") ret=10001bb1
    19.337:0009:Ret KERNEL32.GetProcAddress() retval=7dfb1b0c ret=10001bb1
    19.337:0009:Call ddraw.DirectDrawCreate(00000000,0033f240,00000000) ret=10001be6
    19.337:0009:trace:ddraw:DirectDrawCreate driver_guid (null), ddraw 0x33f240, outer_unknown (nil).
    (lots of text)
    20.396:0009:Ret ddraw.DirectDrawCreate() retval=00000000 ret=10001be6
    20.396:0009:trace:ddraw:ddraw1_QueryInterface iface 0x1980cc, riid {b3a6f3e0-2b43-11cf-a2de-00aa00b93356}, object 0x33f248.
    20.396:0009:trace:ddraw:ddraw7_QueryInterface iface 0x1980c0, riid {b3a6f3e0-2b43-11cf-a2de-00aa00b93356}, object 0x33f248.
    20.396:0009:Call wined3d.wined3d_mutex_lock() ret=7dfbb2cc
    20.396:0009:Ret wined3d.wined3d_mutex_lock() retval=00000000 ret=7dfbb2cc
    20.396:0009:trace:ddraw:ddraw7_QueryInterface (0x1980c0) Returning IDirectDraw2 interface at 0x1980c8
    20.396:0009:trace:ddraw:ddraw2_AddRef 0x1980c0 increasing refcount to 1.
    20.396:0009:Call wined3d.wined3d_mutex_unlock() ret=7dfbb31a
    20.396:0009:Ret wined3d.wined3d_mutex_unlock() retval=00000000 ret=7dfbb31a
    20.396:0009:trace:ddraw:ddraw2_Release 0x1980c0 decreasing refcount to 0.
    20.396:0009:trace:ddraw:ddraw1_SetCooperativeLevel iface 0x1980cc, window (nil), flags 0x8.
    20.396:0009:trace:ddraw:ddraw7_SetCooperativeLevel iface 0x1980c0, window (nil), flags 0x8.
    20.396:0009:trace:ddraw:DDRAW_dump_cooperativelevel - DDSCL_NORMAL
    20.396:0009:Call wined3d.wined3d_mutex_lock() ret=7dfbd7b7
    20.396:0009:Ret wined3d.wined3d_mutex_lock() retval=00000000 ret=7dfbd7b7
    20.396:0009:Call wined3d.wined3d_get_adapter_display_mode(001ba280,00000000,0033f1b4) ret=7dfbd987
    20.396:0009:trace:d3d:wined3d_get_adapter_display_mode wined3d 0x1ba280, adapter_idx 0, display_mode 0x33f1b4, rotation 0x18c.
    20.396:0009:Call user32.EnumDisplaySettingsExW(001baaf4 L"\\\\.\\DISPLAY1",ffffffff,0033efd4,00000000) ret=7de1eaaa
    20.396:0009:trace:x11settings:X11DRV_EnumDisplaySettingsEx mode -1 (current) -- getting current mode (desktop)
    20.396:0009:trace:x11settings:X11DRV_EnumDisplaySettingsEx mode 0 -- 800x600x32bpp @60 Hz (desktop)
    20.396:0009:Ret user32.EnumDisplaySettingsExW() retval=00000001 ret=7de1eaaa
    20.396:0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7de1eb46 ip=7de1eb46 tid=0009
    20.396:0009:trace:seh:raise_exception info[0]=00000001
    20.396:0009:trace:seh:raise_exception info[1]=0000018c
    20.396:0009:trace:seh:raise_exception eax=0000018c ebx=7deefff4 ecx=00000000 edx=0033f1b4 esi=001ba290 edi=0033f0b0
    20.396:0009:trace:seh:raise_exception ebp=0033f0c8 esp=0033ef90 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210297
    20.396:0009:trace:seh:call_stack_handlers calling handler at 0x403988 code=c0000005 flags=0
    20.396:0009:Call KERNEL32.UnhandledExceptionFilter(0033eb24) ret=00402baa
    0009: create_event( access=001f0003, attributes=00000002, manual_reset=1, initial_state=0, objattr={rootdir=0000,sd={},name=L""} )
    0009: create_event() = 0 { handle=0058 }
    wine: Unhandled page fault on write access to 0x0000018c at address 0x7de1eb46 (thread 0009), starting debugger...
    For me native apps works too (glxgears and glxgears32 from mesa-demos and lib32-mesa-demos). I don't have any 64-bit windows apps to test. Here is similar bug report (closed): https://bugs.archlinux.org/task/27645.
    edit: typo
    Last edited by hiciu (2012-07-11 07:15:25)

  • Explorer.exe - Using up high CPU

    Hello community!
    I'm writing this on my desktop as the laptop which has the problem is unusable.
    Windows Explorer (explorer.exe) is using high cpu (30-60%), and crashes after about 30 seconds.
    This started happening a couple of days ago, and I cannot remember any action from my part that might have triggered this problem; one day it was perfect, the other day it had the problem.
    Here is an HiJackThis report:
    Hello community!
    I'm writing this on my desktop as the laptop which has the problem is unusable.
    Windows Explorer (explorer.exe) is using high cpu (30-60%), and crashes after about 30 seconds.
    This started happening a couple of days ago, and I cannot remember any action from my part that might have triggered this problem; one day it was perfect, the other day it had the problem.
    Here is an HiJackThis report:
    [quote]
    Logfile of Trend Micro HijackThis v2.0.5
    Scan saved at 12:40:59 PM, on 2013-11-29
    Platform: Unknown Windows (WinNT 6.02.1008)
    MSIE: Internet Explorer v10.0 (10.00.9200.16537)
    Boot mode: Normal
    Running processes:
    C:\Users\emili_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
    C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    C:\ÉMILIE\Download\HijackThis.exe
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource=10&CUI=UN32722210862607114&UM=2&ctid=CT3289847&UP=SPAAE27309-59AC-46A1-85ED-D84EE5E06B0D&SSPV=
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com/?f=1&a=irmsd62&cd=2XzuyEtN2Y1L1Qzu0C0A0FyBtAtAyCzy0DtCtDtB0EtByCyDtN0D0Tzu0SyDyEtDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1QyCtB&cr=686344045&ir=
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
    R3 - URLSearchHook: WhiteSmoke New Toolbar - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll
    F2 - REG:system.ini: UserInit=userinit.exe
    O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll
    O2 - BHO: WebCake Layers - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\Tepfel\WebCakeIEClient.dll
    O2 - BHO: WhiteSmoke New - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    O2 - BHO: TidyNetwork.com - {7736C7FA-512D-11E2-B871-DEC36088709B} - C:\Users\emili_000\AppData\Local\TidyNetwork.com\tidy2ie.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\program files (x86)\mcafee\siteadvisor\mcieplg.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\program files (x86)\mcafee\siteadvisor\mcieplg.dll
    O3 - Toolbar: WhiteSmoke New Toolbar - {739df940-c5ee-4bab-9d7e-270894ae687a} - C:\Program Files (x86)\WhiteSmoke_New\prxtbWhit.dll
    O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
    O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
    O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
    O4 - HKLM\..\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
    O4 - HKCU\..\Run: [WebCake Desktop] C:\Users\emili_000\AppData\Roaming\Movdap\WebCakeDesktop.exe
    O4 - HKCU\..\Run: [Facebook Update] "C:\Users\emili_000\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
    O4 - HKUS\S-1-5-18\..\Run: [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe (User 'Default user')
    O4 - Startup: Dropbox.lnk = emili_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
    O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
    O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
    O8 - Extra context menu item: Send to Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
    O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
    O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
    O9 - Extra button: Send to Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Send to Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
    O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files (x86)\Druide\Antidote 8\Texteurs\Internet Explorer\Antidote.InternetExplorer.K.P109.htm (HKCU)
    O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files (x86)\Druide\Antidote 8\Texteurs\Internet Explorer\Antidote.InternetExplorer.D.P109.htm (HKCU)
    O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files (x86)\Druide\Antidote 8\Texteurs\Internet Explorer\Antidote.InternetExplorer.G.P109.htm (HKCU)
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O15 - Trusted Zone: *.clonewarsadventures.com
    O15 - Trusted Zone: *.freerealms.com
    O15 - Trusted Zone: *.soe.com
    O15 - Trusted Zone: *.sony.com
    O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files (x86)\mcafee\siteadvisor\mcieplg.dll
    O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files (x86)\mcafee\siteadvisor\mcieplg.dll
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\program files (x86)\mcafee\msc\mcsniepl.dll
    O20 - AppInit_DLLs: C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll C:\Program Files
    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: McAfee Personal Firewall (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
    O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
    O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
    O23 - Service: Stardock Start8 (Start8) - Stardock Software, Inc - C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
    End of file - 11774 bytes
    I hope this helps.
    Jelly

    Hi,
    Since this started happening a couple of days ago, have you installed some 3rd party software recently? That may cause this issue.
    Please try clean boot to check the issue. If the issue disappears in the Clean Boot environment, you can continue to narrow down which entry is causing the issue.
    How to perform a clean boot in Windows 8.1, Windows 8, Windows 7, or Windows Vista
    http://support.microsoft.com/kb/929135/en-us
    I also suggest you use Process Explorer to capture the abnormal process.
    Please refer to this blog:
    http://blogs.technet.com/b/markrussinovich/archive/2008/04/07/3031251.aspx
    If issue persists, please upload the event log here for further analyzing.
    Yolanda
    TechNet Community Support

  • Windows 8 explorer.exe keeps crashing and I can't use Windows update as a result!

    I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains,
    but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second,
    and then goes away.
    I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This
    means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop
    crashes, and I have to click on the screen every 6 seconds. ARGH!

    I crash is caused by the Intel driver:
    Call Site
    ntdll!NtWaitForSingleObject
    ntdll!RtlReportExceptionEx
    ntdll!RtlReportException
    verifier!AVrfpVectoredExceptionHandler
    ntdll!RtlpCallVectoredHandlers
    ntdll!RtlDispatchException
    ntdll!KiUserExceptionDispatch
    verifier!VerifierStopMessage
    verifier!AVrfpDphReportCorruptedBlock
    verifier!AVrfpDphCheckNormalHeapBlock
    verifier!VerifierCheckPageHeapAllocation
    verifier!AVrfpHeapFree
    hccutils!DllUnregisterServer
    hccutils!GetCUICustomizationKey
    hccutils!GetCUICustomizationKey
    hccutils!GetCUICustomizationKey
    hccutils!CreateThisKey
    hccutils!FindResources
    hccutils!LoadSTRING
    hccutils!SaveString
    hccutils!LoadICON
    hccutils!LoadIMAGE
    igfxcpl!CPlApplet
    shell32!CPL_CallEntry
    shell32!_InitializeControl
    shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''
    shell32!CPL_LoadCPLModule
    shell32!_LoadCPLModuleAndAdd
    shell32!CPLD_InitModule
    shell32!CControlPanelEnum::_NextNonCachedCpl
    shell32!CControlPanelEnum::Next
    shell32!CRegFolderEnum::Next
    shell32!CControlPanelAppletList::_AddAppletsToCategories
    shell32!CControlPanelAppletList::LoadSlowApplets
    shell32!CControlPanelDataWorkItem::_LoadSlowData
    shell32!CControlPanelDataWorkItem::DoWork
    shell32!CFrameTask::InternalResumeRT
    shell32!CRunnableTask::Run
    shell32!CShellTask::TT_Run
    shell32!CShellTaskThread::ThreadProc
    shell32!CShellTaskThread::s_ThreadProc
    SHCore!ExecuteWorkItemThreadProc
    ntdll!RtlpTpWorkCallback
    ntdll!TppWorkerThread
    kernel32!BaseThreadInitThunk
    ntdll!RtlUserThreadStart
    0:031> lmvm igfxcpl
    start end module name
    00000001`80000000 00000001`80025000 igfxcpl (export symbols) igfxcpl.cpl
    Loaded symbol image file: igfxcpl.cpl
    Image path: C:\Windows\System32\igfxcpl.cpl
    Image name: igfxcpl.cpl
    Timestamp: Mon Sep 03 04:50:21 2012 (50441AED)
    CheckSum: 00022721
    ImageSize: 00025000
    File version: 8.15.10.2849
    Product version: 8.15.10.2849
    File flags: 0 (Mask 3F)
    File OS: 4 Unknown Win32
    File type: 2.0 Dll
    File date: 00000000.00000000
    Translations: 0409.04b0
    CompanyName: Intel Corporation
    ProductName: Intel(R) Common User Interface
    InternalName: IGFXCPL
    OriginalFilename: IGFXCPL.DLL
    ProductVersion: 8.15.10.2849
    FileVersion: 8.15.10.2849
    PrivateBuild: 8.15.10.2849
    SpecialBuild: 8.15.10.2849
    FileDescription: igfxcpl Module
    LegalCopyright: Copyright 1999-2006, Intel Corporation
    LegalTrademarks: Copyright 1999-2006, Intel Corporation
    Comments: Copyright 1999-2006, Intel Corporation
    0:031> lmvm hccutils
    start end module name
    00000000`09ee0000 00000000`09eff000 hccutils (export symbols) hccutils.dll
    Loaded symbol image file: hccutils.dll
    Image path: C:\Windows\System32\hccutils.dll
    Image name: hccutils.dll
    Timestamp: Mon Sep 03 04:49:28 2012 (50441AB8)
    CheckSum: 00023677
    ImageSize: 0001F000
    File version: 8.15.10.2849
    Product version: 8.15.10.2849
    File flags: 0 (Mask 3F)
    File OS: 4 Unknown Win32
    File type: 2.0 Dll
    File date: 00000000.00000000
    Translations: 0409.04b0
    CompanyName: Intel Corporation
    ProductName: Intel(R) Common User Interface
    InternalName: HCCUTILS
    OriginalFilename: HCCUTILS.DLL
    ProductVersion: 8.15.10.2849
    FileVersion: 8.15.10.2849
    PrivateBuild: 8.15.10.2849
    SpecialBuild: 8.15.10.2849
    FileDescription: hccutils Module
    LegalCopyright: Copyright 1999-2006, Intel Corporation
    LegalTrademarks: Copyright 1999-2006, Intel Corporation
    Comments: Copyright 1999-2006, Intel Corporation
    So update the driver or use ShellExView to disable the Intel shell extension.
    The second crash looks like a corrupted shel32.dll on the HDD:
    CHKIMG_EXTENSION: !chkimg -lo 50 -d !shell32
    7fcac39c000-7fcac39c059 90 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43944
    [ 4d d8 e8 09 77 b1 ff 48:16 00 00 00 02 00 00 00 ]
    7fcac39c05b-7fcac39c07a 32 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4399f (+0x5b)
    [ 8b d8 7c 1d 48 8b 4d e0:00 00 00 00 00 00 00 00 ]
    7fcac39c07c-7fcac39c0af 52 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439c0 (+0x21)
    [ 48 8d 4d e0 e8 8b 76 b1:00 00 00 00 00 00 00 00 ]
    7fcac39c0b1-7fcac39c0bb 11 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439f5 (+0x35)
    [ a9 ff 48 8b 06 4c 8d 05:00 00 00 00 00 00 00 00 ]
    7fcac39c0bd-7fcac39c0c4 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a01 (+0x0c)
    [ 8b d3 48 8b ce ff 90 98:00 00 00 00 00 00 00 00 ]
    7fcac39c0c8-7fcac39c0ca 3 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a0c (+0x0b)
    [ 90 e9 16:00 00 00 ]
    7fcac39c0cc-7fcac39c0e6 27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a10 (+0x04)
    [ a9 ff cc 48 8b 07 48 8b:00 00 00 00 98 e0 53 ae ]
    7fcac39c0e8-7fcac39c0ef 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a2b (+0x1c)
    [ 8b d3 48 8b cf ff 90 98:00 00 00 00 00 00 00 00 ]
    7fcac39c0f3-7fcac39c0fa 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a36 (+0x0b)
    [ 90 e9 be 05 a9 ff bb 18:04 00 00 00 00 00 00 00 ]
    7fcac39c0fd-7fcac39c118 28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a40 (+0x0a)
    [ 80 e9 b4 05 a9 ff cc 48:00 00 00 d0 e0 53 ae fc ]
    7fcac39c11c-7fcac39c13c 33 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a5e (+0x1f)
    [ ff 10 90 e9 7c 78 a8 ff:00 00 00 00 00 00 00 04 ]
    7fcac39c13f-7fcac39c175 55 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a80 (+0x23)
    [ 80 e9 7d e4 a8 ff cc 48:00 00 f4 53 ae fc 07 00 ]
    7fcac39c179-7fcac39c189 17 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ab8 (+0x3a)
    [ 85 c0 75 14 8d 50 01 44:00 00 00 00 00 00 00 ff ]
    7fcac39c18b-7fcac39c1b5 43 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43aca (+0x12)
    [ 90 e9 0b cf b5 ff 8b d3:ff 00 00 00 00 00 00 00 ]
    7fcac39c1b7-7fcac39c1c9 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43af5 (+0x2c)
    [ 07 80 e9 61 e9 a8 ff 4c:00 00 00 00 00 00 00 00 ]
    7fcac39c1cb-7fcac39c1e9 31 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b09 (+0x14)
    [ 10 48 85 db 0f 84 4a e9:ff 00 00 00 00 00 00 00 ]
    7fcac39c1eb-7fcac39c1f4 10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b27 (+0x20)
    [ 07 80 e9 db b3 a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c1f6-7fcac39c208 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b31 (+0x0b)
    [ 07 80 e9 28 f4 a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c20a-7fcac39c237 46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b42 (+0x14)
    [ 50 08 33 c0 e9 81 b4 a8:ff ff 00 00 00 00 00 00 ]
    7fcac39c239-7fcac39c240 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b65 (+0x2f)
    [ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 00 ]
    7fcac39c243-7fcac39c248 6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b6f (+0x0a)
    [ 41 83 c8 ff ba 01:00 00 00 00 00 00 ]
    7fcac39c24c-7fcac39c25e 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b78 (+0x09)
    [ e8 4f 70 b0 ff 83 f8 ff:00 00 00 00 10 00 00 00 ]
    7fcac39c260-7fcac39c361 258 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b8c (+0x14)
    [ 80 e9 2d b2 a8 ff 48 8d:00 00 00 00 00 00 00 00 ]
    7fcac39c363-7fcac39c36c 10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c8d (+0x103)
    [ 07 80 e9 b5 bb a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c36e-7fcac39c39b 46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c97 (+0x0b)
    [ 07 80 e9 c1 da a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c39d-7fcac39c3eb 79 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43cc5 (+0x2f)
    [ 3a 90 ff 84 c0 0f 84 cd:00 00 00 00 00 00 00 00 ]
    7fcac39c3ed-7fcac39c3f8 12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d14 (+0x50)
    [ 90 e9 fb e3 b8 ff cc ff:00 00 00 00 00 00 00 00 ]
    7fcac39c3fa-7fcac39c405 12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d20 (+0x0d)
    [ 85 c0 0f 8e 42 8a a8 ff:00 00 00 00 00 00 00 00 ]
    7fcac39c408-7fcac39c489 130 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d2e (+0x0e)
    [ 07 80 e9 35 8a a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c48b-7fcac39c4a5 27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43daf (+0x83)
    [ 48 85 db 74 09 48 8b 13:ff 00 00 00 00 00 00 00 ]
    7fcac39c4a8-7fcac39c4b5 14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dc8 (+0x1d)
    [ 00 ff 50 40 85 c0 0f 88:3f 00 00 00 2d 22 04 0b ]
    7fcac39c4b9-7fcac39c4bd 5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dd9 (+0x11)
    [ eb 12 ba 01 00:00 00 00 09 04 ]
    7fcac39c4c0-7fcac39c4e7 40 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43de0 (+0x07)
    [ ff 50 40 85 c0 0f 88 cb:10 00 00 00 01 00 00 00 ]
    7fcac39c4ea-7fcac39c4ff 22 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e06 (+0x2a)
    [ c0 41 8d 51 01 ff 15 43:00 00 00 00 00 00 00 00 ]
    7fcac39c501-7fcac39c508 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e1d (+0x17)
    [ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 3f ]
    7fcac39c50b-7fcac39c510 6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e27 (+0x0a)
    [ 41 83 c8 ff ba 01:00 e4 04 00 00 3f ]
    7fcac39c514-7fcac39c526 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e30 (+0x09)
    [ e8 87 6d b0 ff 83 f8 ff:00 00 00 00 00 00 00 00 ]
    7fcac39c528-7fcac39c5a8 129 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e44 (+0x14)
    [ 80 e9 c1 b8 a8 ff 48 8d:f0 d3 bc ab fc 07 00 00 ]
    7fcac39c5aa-7fcac39c5ab 2 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec6 (+0x82)
    [ cc 83:fe ff ]
    7fcac39c5ad-7fcac39c5b9 13 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec8 (+0x03)
    [ 01 0f 85 40 7d a8 ff 48:07 00 00 b0 ad 0d 7b 95 ]
    7fcac39c5bb-7fcac39c5d6 28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ed6 (+0x0e)
    [ 48 8b 11 ff 52 10 90 e9:00 00 00 00 00 02 00 00 ]
    7fcac39c5d8-7fcac39c695 190 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ef2 (+0x1d)
    [ 48 8b 11 ff 52 08 90 e9:00 00 00 00 00 00 00 00 ]
    7fcac39c699-7fcac39c6eb 83 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43faa (+0xc1)
    [ 48 8b ce 41 ff 53 40 8b:00 00 00 00 00 00 00 00 ]
    7fcac39c6ef-7fcac39c6f5 7 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ffd (+0x56)
    [ ff 50 60 c7 07 02 00:00 4a 06 b7 af f7 07 ]
    7fcac39c6f8-7fcac39c705 14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44006 (+0x09)
    [ eb 18 48 8b 01 4c 8d 05:00 00 00 00 00 00 00 00 ]
    7fcac39c708-7fcac39c70c 5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44016 (+0x10)
    [ 00 ff 50 60 c7:22 02 b6 af f7 ]
    7fcac39c70e - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401c (+0x06)
    [ 03:00 ]
    7fcac39c710-7fcac39c71e 15 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401e (+0x02)
    [ 00 00 44 8b c8 e9 a9 a1:40 9d 26 69 e8 00 00 00 ]
    7fcac39c720-7fcac39c75c 61 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4402c (+0x10)
    [ 00 00 e9 17 74 a8 ff c7:10 74 0d 7b 95 00 00 00 ]
    7fcac39c75e-7fcac39c7c1 100 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44068 (+0x3e)
    [ 80 e9 a5 d8 ae ff cc b8:00 00 60 87 53 ae fc 07 ]
    WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
    8192 errors : !shell32 (7fcac39c000-7fcac3aeebb)
    APP: explorer.exe
    FAULTING_THREAD: 0000000000000f0c
    ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
    LAST_CONTROL_TRANSFER: from 000007fcabcc02f5 to 000007fcac39cd00
    BUGCHECK_STR: APPLICATION_FAULT_MEMORY_CORRUPTION_INVALID_POINTER_WRITE_LARGE_EXPLOITABLE
    PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE_EXPLOITABLE
    DEFAULT_BUCKET_ID: MEMORY_CORRUPTION_LARGE_EXPLOITABLE
    STACK_TEXT:
    00000000`00000000 00000000`00000000 memory_corruption!shell32+0x0
    SYMBOL_STACK_INDEX: 0
    SYMBOL_NAME: memory_corruption!shell32
    Repair the DLL with DISM:
    http://social.technet.microsoft.com/Forums/en-US/w8itprogeneral/thread/5c651c1b-f800-47c4-801d-98996eaf99a4/#c280a27b-7bc9-43ac-9c1a-2ad97230a9ea
    "A programmer is just a tool which converts caffeine into code"

  • Explorer.exe uses too much CPU cycles (roughly 50%)... How can I fix this?

    Hi everyone,
    In the last two days I have noticed a serious loss in system performance.  The first thing I do when I come accross a performance issue is to make sure that I don't have any scheduled automatic scans running in the background, such as my antivirus.  If they aren't, I then open the task manager and check to see what process(es) is(are) causing the performance issue based on CPU usage.  I discovered that explorer.exe is now regularly using approximately 50% of my CPU power AT ALL TIMES (with fluctuations ranging from as low as 35% to as high as 99%, but 45%-55% is the most common range).
    Now I thought this might have been some sort of fluke, so I rebooted several times, and in all cases I find explorer.exe continues to use this hefty amount of CPU power.  This persists even if I leave the system alone (running, but not being used) for 15 minutes or more.
    This is causing major performance issues with trying to run any/all other applications on the system, and even worse performance issues if I try to use explorer for something such as directory navigation, file searching, or file access.
    I recently made an update to Windows (about a day before this problem arose), so I thought that might be the cause of this, so I ran a system restore to the restore point made before the install.  That didn't fix the problem.  Since the problem has only started in the last two days, I restored to a point three days ago.  That didn't fix it either.  I have since tried to restore to points 5 and 7 days old, and neither of those worked to fix this problem either.
    I can use the task manager to end-task explorer.exe, and then restart it using "new task" from the file menu, and this seems to correct the problem.  After doing such a "restart" of explorer.exe, the process no longer uses 50% of my CPU power, and instead uses only 0%-20% depending on what I'm doing.  This, however, is not a viable long-term solution for a couple of reasons:  1) it screws up my tray icons, causing many to disappear even though their parent programs/processes are still running, and causing others to appear even though they shouldn't be there; and 2) subsequent instances of explorer.exe such as for directory navigation still have some performance problems and are prone to crashes.
    I need to know how to repair or replace explorer.exe without having to format my hard drive and re-install (either from scratch or using a system recovery disc).  I can try using some sort of shell replacement such as Aston, Emerge, or GeoShell, but I shouldn't have to do that.
    It may be that one of my other startup applications is causing some sort of compatibility issue, but that seems unlikely since I haven't made any changes to the system, nor installed any new software other than standard windows updates.
    I need help, advice, suggestions, etc., or really anything at all that I can try that might fix this problem.  In the meantime, I am going to boot into safe mode to see if explorer.exe has problems even then (which would solidly indicate a corruption of explorer.exe rather than a compatibility issue or anything else).
    Please help if you can.  For reference, I am using an HP Pavilion dv9700 CTO Entertainment Notebook PC, running Windows Vista Home Premium 32-bit with Service Pack 1.  I have an Intel Core2 Duo T9300 2.5GHz CPU and 3GB of RAM.  My explorer.exe file gives the following information from the Details tab of its Properties window:  file version is 6.0.6001.18000; product version is 6.0.6000.16386; file size is 2.79MB; and modification date is 1/20/2008 at 6:24pm.  As far as I know, that is all correct information and does not indicate that the program file has been replaced by any sort of malicious software.  I also ran a complete scan with AVG Antivirus and found no viruses or other malicious software anywhere on the system (unless you count tracking cookies).
    Thank you in advance for any help

     Edward Lin wrote:
    I have exactly the same problem!!!  And I concluded that the “AUTO CONNECT” function is the main reason of causing the CPU usage.  If I uncheck the “AUTO CONNECT” from the saved wi-fi connection, then the CPU would remain claim.
    But.. Still, it’s very annoying.  So I formatted the hard drive and restore to the original factory condition.  Initially, it was working ok.  But after WINDOW UPDATES, the same problem happens again!!!!!!  May this be the bug from Microsoft??
    Any thought??  Any Fix?  Please help!!!! 
    Yes, I did notice that the problem started after I did a Windows Update.  I can't remember which update it was, but the strange thing about it was that I couldn't fix the problem by restoring the system to a restore point that was made BEFORE the update.  Since I hadn't made any other changes to the system between when it worked and when it stopped working, I can only assume that the update caused the problem, and as such I believe it IS Microsoft's fault.
    As to the Auto-Connect feature, I hadn't even thought of that, but since I use my internet ALL THE TIME, it would be really annoying to have to manually connect every boot up.
    Which brings me back to the workaround.  If you have Auto-Connect enabled, and you disable WLAN AutoConfig and set it to Manual in your Services interface, then reboot the system, does it solve the CPU issues?  If the answer is yes, then you can do what I'm doing:
    1.  Go to Start, then in the search box type "task" and you should see the Task Scheduler come up as an option.
    2.  Open the Task Scheduler and click on "Create Task..." (by default this should be on the right-hand side of the window in the Actions pane).
    3.  In the General tab, give the task a name and (optionally) a description, and put a check mark in the box at the lower left that says "Run with highest privileges".
    4.  In the Triggers tab, add a trigger.  In the new window, choose "At log on" from the dropdown box at the top, set it to run for "Any user", and then head to the advanced settings section of the window.  Put a check mark in the box for "Delay task for:" and set the delay for one minute.  Make sure that there is a check mark in the box for "Enabled".  Then click OK.
    5.  In the Actions tab, add an action.  In the new window, make sure that "Start a program" is selected in the drop down box at the top (should be the default choice).  In the field where you specify the program to run, type in "SC".  In the "Add arguments (optional):" field, type in "Start wlansvc".  Then click OK.
    6.  Go through the other tabs to make sure you're happy with all of the other settings.  The default values should be just fine, but feel free to change them if you want to.  Then click OK.
    7.  Make sure that WLAN AutoConfig is still set to Manual.
    8.  Re-enable your Auto-Connect feature.
    9.  Reboot the system.
    About 60 seconds after you log into your user account you should see a black command window flash onto the screen and then disappear again.  That is your automatic task running and starting up the WLAN AutoConfig servicve.  Another 30-60 seconds later and you should have access to your wireless network and the internet, and you don't have to interact with it or manually start anything.  You can also try setting the task delay to 30 seconds rather than 1 minute, but on my system that wasn't a long enough delay to prevent the CPU usage issues, whereas 1 minute was sufficient.  On my system, it enables the wireless before the system even finishes loading up my normal startup applications like my antivirus, so Idon't even notice a slowdown on the bootup process, let alone any wait time before I can use my internet.
    This isn't a fix, and what we really need is for Microsoft to figure out what they did wrong, and fix it, but in the meantime, this works.
    Good luck
    On a side note:  Unless Microsoft gets busy on fixing Vista so that it's backwards compatible with my old games, I'm still going to downgrade to XP (like a LOT of people have been doing for various reasons)... assuming I can find XP compatible hardware drivers anyway.  Right now I can get more of my games to run under Linux than I can under Vista, despite the fact that they were programmed to run in a DirectX Windows environment only... that's simply unacceptable.

  • AMD Radeon 6770m and Intel HD 3000 Driver for Windows 8.1 Pro 64 Bit

    Hi, I use
    Laptop : HP Pavilion DV 6 - 6019 TX.
    OS : Windows 8.1 Pro 64 Bit.
    VGA : - AMD Radeon 6770m
               - Intel HD 3000
    Now, the graphic was error,  each after booting, the windows logo appears then to black screen (can't get the desktop).
    In device manager - display adapters, only AMD problem (Microsoft Basic Display Adapter), then I uninstall the driver to be able to install AMD drivers.
    I tried with "14-4-mobility-win7-Win8-win8.1-64-dd-ccc-WHQL", it is said that the last AMD drivers, but when at the end of install, it said failed to complete. 
    i also update driver Intel HD 3000 from this " https://downloadcenter.intel.com/Detail_Desc.aspx?​DwnldID=23764 "
    File name: win64_152822.exe
    Version: 15.28.22.64.3517 (Latest)
    Date: 04/10/2014
    Size: 138.68 MB
    OS: Windows 7 (64-bit), Win 8 (64-bit), Win 8.1 (64-bit)
    anyone please help me? i already try 5 days to try some driver but still black screen because AMD driver can't install. if you know the driver, please write the link. thanks a lot

    1. In bios, do you found fixed and dynamic? if you don't found, install bios mod. Use dynamic
    2. Uninstall all programs and drivers previously, before of "Advanced Micro Devices, Inc. - Graphic Adapter WDDM1.3 - AMD Radeon HD 6700M Series" Release July 2014. You can use http://www.wagnardmobile.com/DDU, for example. 
    3. Do you install windows 8.1 on windows 8.0? do you use windows 8.1 fresh installation? Can you testing install a new copy of windows 8.0 fresh? install drivers and later install updates... or fresh install windows 8.1?
    4. You testing install Windows 7 with http://ftp.hp.com/pub/softpaq/sp55001-55500/sp5509​2.exe and update to windows 8?
    5. You testing install http://ftp.hp.com/pub/softpaq/sp55001-55500/sp5509​2.exe in windows 8 initially?
    NOTE: Excuse me my bad english, I try to help you. You should install drivers in order: Intel Chipset Device Software, Intel Rapid Storage Technology, Intel Management Engine Interface (6-series / 7-series / 8-series / 9-series) and then AMD software: http://forum.notebookreview.com/hp-drivers-softwar​e-forum/556469-drivers-hp-dv6-4xxx-dv6-6xxx-dv7-5x​...
    NOTE 2: My computer support Windows 8.1 native, but your computer not... http://h10025.www1.hp.com/ewfrf/wc/softwareCategor​y?os=4063&lc=en&cc=us&dlc=en&sw_lang=&product=5077​... will be no new official drivers for these devices
    NOTE 3. Test leshcat or guru3d drivers, and review forum respectively

  • Explorer.exe crashing frequently

    The following is obtained from an error in displayed in Event Viewer
    Log Name:      Application
    Source:        Application Error
    Date:          19/2/2014 06:04:48 م
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      Zork
    Description:
    Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d672ee4
    Faulting module name: atiumd64.dll, version: 9.14.10.926, time stamp: 0x50895e0e
    Exception code: 0xc0000005
    Fault offset: 0x00000000001908db
    Faulting process id: 0x22c0
    Faulting application start time: 0x01cf2d834155d983
    Faulting application path: C:\Windows\explorer.exe
    Faulting module path: C:\Windows\system32\atiumd64.dll
    Report Id: 2c205388-9977-11e3-a115-5c260a726598
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-02-19T15:04:48.000000000Z" />
        <EventRecordID>76045</EventRecordID>
        <Channel>Application</Channel>
        <Computer>Zork</Computer>
        <Security />
      </System>
      <EventData>
        <Data>explorer.exe</Data>
        <Data>6.1.7601.17567</Data>
        <Data>4d672ee4</Data>
        <Data>atiumd64.dll</Data>
        <Data>9.14.10.926</Data>
        <Data>50895e0e</Data>
        <Data>c0000005</Data>
        <Data>00000000001908db</Data>
        <Data>22c0</Data>
        <Data>01cf2d834155d983</Data>
        <Data>C:\Windows\explorer.exe</Data>
        <Data>C:\Windows\system32\atiumd64.dll</Data>
        <Data>2c205388-9977-11e3-a115-5c260a726598</Data>
      </EventData>
    </Event>
    Here is my sys info:
    System Information
    Time of this report: 2/12/2014, 04:06:25
           Machine name: ZORK
       Operating System: Windows 7 Ultimate 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.130828-1532)
               Language: Arabic (Regional Setting: Arabic)
    System Manufacturer: Alienware
           System Model: M18xR1
                   BIOS: InsydeH2O Version 1.0 A05
              Processor: Intel(R) Core(TM) i7-2760QM CPU @ 2.40GHz (8 CPUs), ~2.4GHz
                 Memory: 16384MB RAM
    Available OS Memory: 16366MB RAM
              Page File: 5993MB used, 26736MB available
            Windows Dir: C:\Windows
        DirectX Version: DirectX 11
    DX Setup Parameters: Not found
       User DPI Setting: Using System DPI
     System DPI Setting: 96 DPI (100 percent)
        DWM DPI Scaling: Disabled
         DxDiag Version: 6.01.7601.17514 32bit Unicode

    Hi,
    Use ShellExView to disable 3rd party shell extension.
    http://www.nirsoft.net/utils/shexview.html
    If Explorer.exe still crashes, please try collecting crash dump to help fix this problem.
    Please download .reg from my OneDrive:
    http://1drv.ms/1mgTZsT
    Following this, please make a double click on the file to import it.When the Windows Explorer crashes, Windows Error Reporting Service creates a dmp file under C:\Localdumps.
    Then upload the dump with OneDrive.
    Note This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on
    these sites. Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.
    Andy Altmann
    TechNet Community Support

  • Explorer.exe keeps restarting randomly

    My Explorer.exe will randomly restart. when it does i get the following event log under Application in the event veiwer:
    Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
    Faulting module name: avgloga.dll, version: 15.0.0.5863, time stamp: 0x55128c82
    Exception code: 0xc0000005
    Fault offset: 0x000000000000450d
    Faulting process id: 0x1bf8
    Faulting application start time: 0x01d073b74efbdf24
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: C:\Program Files (x86)\AVG\AVG2015\avgloga.dll
    Report Id: e817ecb6-dfbd-11e4-a853-005056c00008
    It is always the same error. I have uninstalled and reinstalled my anti-virus software run multiple sfc scans.
    My system specs are as follows:
    i7-4770K
    32Gb of DDR3 Memory
    Nvidia GTX 780ti
    1TB SSD HDD
    Windows 7 64-bit

    Hello bwbutler,
    Is this issue still exist when the AVG is removed?
    If so, this issue is caused by the AVG.
    If the issue still exists when the AVG is removed, please try to use clean boot.
    If the issue doesn’t exist in the clean boot, please check the third-party software.
    https://support.microsoft.com/en-us/kb/929135
    For more information, please refer to the following KB about Windows 7 hangs.
    https://support.microsoft.com/en-us/kb/2681286
    Best regards,
    Fangzhou CHEN
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Maybe you are looking for