WDContextMenuHandler.dll crashes Explorer.exe
After updating to the latest WDSmartware on my laptop running Windows 7 x64 the Explorer.exe process crashes once in a while with the following error in the event log. Any suggestions as how I can fix this? Error: (03/30/2015 08:51:38 AM) (Source: Application Error) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: WDContextMenuHandler.dll, version: 2.0.0.3, time stamp: 0x54dd49f6
Exception code: 0xc0000005
Fault offset: 0x000000000001f786
Faulting process id: 0x15c0
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3
Hi... I have run into the same problem today... and I've found a solution... kind of. I hope it's not too late for my answer. 1) download ShellExView from here: http://www.nirsoft.net/utils/shexview.html#DownloadLinks 2) disable the two items highlighted in the image: The context menu problem will be solved... for a little benefit of (probably) not having those shortcuts for WD utilities in the context right-click menu, but I guess you can still use them elsehow. Hope this helped you. I've found the solution myself and it worked for me.
Similar Messages
-
App crash: explorer.exe faulting module: fundisc
Hello.
I've been having issues with 4 computers now. All of them Windows 7 Professional 32 bits.
The error they're having is the same on each PC: explorer.exe fails and restarts after clicking Ok to the dialog.
Level: Error
Source: Application Error
Event ID: 1000
Faulting application: explorer.exe, version: 6.1.7601.175xx, time stamp: <changes>
faulting module: unknown, version: 0.0.0.0, time stamp: 0x00000000
exception code : 0xc0000005
fault offset: <changes>
process id: <changes>
application start time: <changes>
The oldest issue is november 6th (there's not a single instance of the error before that date); since then the issue is happening at least once a day but more like 5-10 times a day.
I ran Windbg and for almost all errors it point to fundisc.dll as the culprit.
This is one of the dumps:
Loading Dump File [C:\Users\<user>\Desktop\<other_user>\explorer.exe.680.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: srv*;D:\WinDbg\Symbols\Win7AMD64;D:\WinDbg\Symbols\Win7x86;D:\WinDbg\Symbols\XPSP3
Executable search path is: D:\WinDbg\Image\XPSP3
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Tue Nov 20 09:43:21.000 2012 (UTC - 6:00)
System Uptime: not available
Process Uptime: 0 days 0:06:02.000
Loading unloaded module list
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(2a8.884): Access violation - code c0000005 (first/second chance not available)
eax=00000000 ebx=0472f040 ecx=00000400 edx=00000000 esi=00000002 edi=00000000
eip=77c57094 esp=0472eff0 ebp=0472f08c iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
77c57094 c3 ret
0:012> !analyze -v
* Exception Analysis *
Unable to load image C:\Windows\System32\ieframe.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ieframe.dll
FAULTING_IP:
+0
0472f64c fc cld
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0472f64c
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 0472f64c
Attempt to execute non-executable address 0472f64c
DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - La instrucci n en 0x%08lx hace referencia a la memoria en 0x%08lx. La memoria no se pudo %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - La instrucci n en 0x%08lx hace referencia a la memoria en 0x%08lx. La memoria no se pudo %s.
EXCEPTION_PARAMETER1: 00000008
EXCEPTION_PARAMETER2: 0472f64c
WRITE_ADDRESS: 0472f64c
FOLLOWUP_IP:
fundisc!CNotificationQueue::ThreadProc+31b
728963ee bfc0808a72 mov edi,offset fundisc!WPP_GLOBAL_Control (728a80c0)
FAILED_INSTRUCTION_ADDRESS:
+31b
0472f64c fc cld
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: explorer.exe
LAST_CONTROL_TRANSFER: from 76aa5d3f to 0472f64c
FAULTING_THREAD: 00000884
PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT
BUGCHECK_STR: APPLICATION_FAULT_SOFTWARE_NX_FAULT
IP_ON_STACK:
+31b
0472f64c fc cld
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0472f64c 76aa5d3f 00000008 03207428 fffffffe 0x472f64c
0472f7fc 76ad8f82 2246d5ac 03207428 00000000 ole32!COIDTable::ThreadCleanup+0xcb
0472f840 76ad8ec3 00000000 0472f890 76bd7724 ole32!FinishShutdown+0x9d
0472f860 76acbac3 00000000 728945f0 03207428 ole32!ApartmentUninitialize+0x96
0472f878 76ad88e8 0472f890 00000000 728a810c ole32!wCoUninitialize+0x153
0472f894 728963ee 00000000 00000000 0015c9d0 ole32!CoUninitialize+0x72
0472f8b0 77aded6c 0015c9d0 0472f8fc 77c7377b fundisc!CNotificationQueue::ThreadProc+0x31b
0472f8bc 77c7377b 0015c9d0 73c46ab8 00000000 kernel32!BaseThreadInitThunk+0xe
0472f8fc 77c7374e 72895224 0015c9d0 00000000 ntdll!__RtlUserThreadStart+0x70
0472f914 00000000 72895224 0015c9d0 00000000 ntdll!_RtlUserThreadStart+0x1b
STACK_COMMAND: .ecxr ; kb ; ~12s; .ecxr ; kb
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: fundisc!CNotificationQueue::ThreadProc+31b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: fundisc
IMAGE_NAME: fundisc.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bd9ff
FAILURE_BUCKET_ID: SOFTWARE_NX_FAULT_c0000005_fundisc.dll!CNotificationQueue::ThreadProc
BUCKET_ID: APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_IP_fundisc!CNotificationQueue::ThreadProc+31b
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/explorer_exe/6_1_7601_17567/4d6727a7/unknown/0_0_0_0/bbbbbbb4/c0000005/0472f64c.htm?Retriage=1
Followup: MachineOwner
There's another similar error but points to "NetworkItemFactory" module instead of "fundisc", but i'm not sure they're related yet.
I already:
Ran viruschecks and spywarescans and the computers are clean.
clean booted and the issue persists.
sfc'd and no files were corrupt.
They all are HP Compaq 8000 series; besides that, the only other thing i can think of that could be common between those particular machines is that not all of them may had been wiped out when bought and the problems came from the bloatware and some update.
The only updates they had installed were security and critical updates via WSUS.
I'm starting to worry and i'm out of ideas.
Any help will be appreciated.
"When something is not working as it is supposed to, then it is working as expected" -RHi,
Event ID: 1000; Source: Application Error; please refer to:
http://www.eventid.net/display-eventid-1000-source-Application%20Error-eventno-1475-phase-1.htm
I would recommend you try
some general steps about troubleshooting explorer.exe crash Issues.
Bug Check 0xC5, please refer to:
http://msdn.microsoft.com/en-us/library/windows/hardware/ff560192(v=vs.85).aspx
Hope this helps.
Regards.
Spencer
TechNet Community Support -
Jmc.dll crashes java.exe
First of thanks Sun's engineers for hard work on Java and JavaFX! I really enjoyed the features and demos from javafx.com.
Unfortunatly all of the demos involving media playback are crashing java.exe with jmc.dll being guilty (probably access violation - jmc.dll in the error dialog reports 0.0.0.0 version - but not sure). Well, I think it is my system's fault, because when I got rid of all codecs that could play mp3, java.exe stopped crashing (at least for DraggableMP3Player demo, SimpleVideoPlayer crashes without writing hs_err), but gave me MediaUnsupportedException. Regarding fixing my system - I'd like to avoid the pleasure of reinstalling Windows and I think it would be good for others having this problem to nail the cause of it. Could you explain how jmc.dll is dealing with platform codecs? How it checks what is installed? Does anyone else seen jmc.dll crashing java? Could it be hardware issue (I have nforce2 sound card)?
I've created issue [http://javafx-jira.kenai.com/browse/RT-2530] if you have the same problem please vote for it (you first need to register for free :))I sure have put some work in this bug. I hope this will be gone soon :). I'm somewhat surprised that nobody seen it beside me - no votes, no blogs about it. But UnsupportedMediaException is known for sure and I believe it is related (that's why I've voted for it). Thanks for all your sweat, tears and blood you put in JavaFX! :)
-
Installing creative cloud package crashes explorer.exe
Need help
Did you find a solution to this problem? I've seen a couple similar reports in the forums, and can confirm explorer.exe is killed (and does not consistently, and in a timely fashion, successfully restart) on Win7 installs of Creative Cloud applications in our environment. The installation does succeed and I have found no errors logged in the Adobe install logs, or system event logs.
-
Macbook pro crashes (as windows crashes explorer.exe) and closes all programs
Hi,
My macbook pro mid 2010 is crashing every time. It goes blue screen and start again with all programs closed. I don't know what is happening. Please Help me.Hi,
My macbook pro mid 2010 is crashing every time. It goes blue screen and start again with all programs closed. I don't know what is happening. Please Help me. -
EXPLORER.EXE crashing in SHELL32.DLL
I have a brand new X1 Carbon 20A7 with Windows 8.1 Professional. EXPLORER.EXE is crashing constantly. I disabled non-Microsoft shell extensions, applied all updates, even restored back to the factory image, but nothing works. This is a very expensive new machine that is basically an unstable paperweight.
Can someone look at the following minidump analysis, and give me some ideas, please?
* Exception Analysis *
FAULTING_IP:
shell32!Microsoft::WRL::ComPtr<ISyncStatusCacheEntry>::As<IUnknown>+22
00007ffb`535771d2 488b01 mov rax,qword ptr [rcx]
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00007ffb535771d2 (shell32!Microsoft::WRL::ComPtr<ISyncStatusCacheEntry>::As<IUnknown>+0x0000000000000022)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000000
Attempt to read from address 0000000000000000
CONTEXT: 0000000000000000 -- (.cxr 0x0;r)
rax=00000000139b0000 rbx=0000000000000003 rcx=00000000139b0000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000003
rip=00007ffb54586b2a rsp=00000000194fbd58 rbp=00000000194ffa90
r8=0000000000001000 r9=0000000000000000 r10=0000000000000040
r11=0000000000000286 r12=0000000000000010 r13=00000000194fc128
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246
ntdll!NtWaitForMultipleObjects+0xa:
00007ffb`54586b2a c3 ret
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
READ_ADDRESS: 0000000000000000
FOLLOWUP_IP:
shell32!Microsoft::WRL::ComPtr<ISyncStatusCacheEntry>::As<IUnknown>+22
00007ffb`535771d2 488b01 mov rax,qword ptr [rcx]
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: explorer.exe
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) x86fre
FAULTING_THREAD: 00000000000007fc
BUGCHECK_STR: APPLICATION_FAULT_NULL_POINTER_READ_BEFORE_CALL
PRIMARY_PROBLEM_CLASS: NULL_POINTER_READ_BEFORE_CALL
DEFAULT_BUCKET_ID: NULL_POINTER_READ_BEFORE_CALL
LAST_CONTROL_TRANSFER: from 00007ffb5313d131 to 00007ffb535771d2
STACK_TEXT:
00000000`194fd630 00007ffb`5313d131 : 00000000`00000000 00007ffb`52ec9ce7 00000000`14a36180 00000000`00000000 : shell32!Microsoft::WRL::ComPtr<ISyncStatusCacheEntry>::As<IUnknown>+0x22
00000000`194fd660 00007ffb`5313c71a : 00000000`00000000 00000000`00000000 00000000`194fd700 00000000`194fd700 : shell32!`Microsoft::WRL::Module<1,Microsoft::WRL:etails:efaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+0x95b3d
00000000`194fd6a0 00007ffb`5301e455 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`2446ea40 : shell32!`Microsoft::WRL::Module<1,Microsoft::WRL:etails:efaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+0x9510b
00000000`194fd740 00007ffb`53020174 : 00000000`00000001 00000000`241e5998 00000000`241e5998 00000000`00000000 : shell32!CSyncIntegrationManager::_GetValueAndStateFromCache+0x85
00000000`194fd7e0 00007ffb`53018930 : 00000000`00000000 00000000`194ff680 00000000`00000000 00000000`00000000 : shell32!CSyncIntegrationManager::GetSyncStatusByIdList+0x88
00000000`194fd8b0 00007ffb`5301d0dc : 00000000`00000000 00000000`087e18d0 00000000`00000000 00000000`00000000 : shell32!CSyncStatusHandler::GetValue+0x70
00000000`194fd910 00007ffb`52d42a12 : 00000000`194ff698 00000000`00000000 00000000`00000000 00007ffb`52ec338d : shell32!CFSFolder::_GetSyncStatusProperties+0xc8
00000000`194fd990 00007ffb`4cea6656 : 00000000`14d82000 00007ffb`4cea2930 00000000`194ff690 00007ffb`4cea2930 : shell32!CFSFolderPropertyStore::GetValue+0x5e8
00000000`194fef10 00007ffb`4cea6656 : 00000000`14d82000 00000000`00000001 00000000`00000001 00007ffb`4cea2930 : propsys!CMultiplexPropertyStore::GetValue+0x186
00000000`194ff190 00007ffb`4cea32ff : 00007ffb`52f0b4f0 00000000`00514b80 00000000`24519398 00000000`194ff680 : propsys!CMultiplexPropertyStore::GetValue+0x186
00000000`194ff410 00007ffb`4cea56ca : 00000000`00000000 00000000`194ff680 00000000`194ff680 00000000`00000000 : propsys!PSGetValueAndPath+0x5f
00000000`194ff490 00007ffb`5301ca14 : 00000000`00000000 00000000`04e30000 00007ffb`53048050 00000000`194ff680 : propsys!CPropertyProvider::GetValue+0xca
00000000`194ff630 00007ffb`5301b7a5 : 00000000`00000000 00000000`242823e0 00000000`80004005 00007ffb`52fd93eb : shell32!CStatusBarPropertyStore::GetValue+0x78
00000000`194ff660 00007ffb`5301b623 : 00000000`242823e0 00000000`00000003 00000000`194ff720 00000000`1271cab0 : shell32!CGetPropertiesWorkItem::_CacheProperty+0x55
00000000`194ff6e0 00007ffb`530215d2 : 00000000`00000000 00007ff6`b23b9000 00000000`242823e0 00000000`00000002 : shell32!CGetPropertiesWorkItem::_CachePropertyList+0x77
00000000`194ff750 00007ffb`52fd90c7 : 00000000`12645b30 00000000`243122c0 00000000`00000000 00000000`087e0e30 : shell32!CGetPropertiesWorkItem:oWork+0x8e
00000000`194ff7a0 00007ffb`52ebb565 : 00000000`00000ca0 00000000`243122c0 00000000`0000000f 00000000`0000000b : shell32!CFrameTask::InternalResumeRT+0x17
00000000`194ff7d0 00007ffb`52efe6b0 : 00000000`00000000 00000000`00000000 ffffffff`fffffffe 00000000`00200000 : shell32!CRunnableTask::Run+0x95
00000000`194ff800 00007ffb`52efe887 : 00000000`2444ef80 00000000`2444ef80 00000000`00424270 00000000`00486d48 : shell32!CShellTaskThread::ThreadProc+0x284
00000000`194ff950 00007ffb`4e041637 : 00007ff6`b223c000 00000000`00000000 0000f3e1`90eaa829 00000000`00000000 : shell32!CShellTaskThread::s_ThreadProc+0x2b
00000000`194ff980 00007ffb`5451a122 : 00000000`14cb0750 00000000`00486d48 00000000`00000000 00000000`00000017 : SHCore!ExecuteWorkItemThreadProc+0xf
00000000`194ff9b0 00007ffb`5452bddb : 00000001`00010004 00000000`1664ea50 00000000`00486d48 00000000`00424270 : ntdll!RtlpTpWorkCallback+0x11e
00000000`194ffa90 00007ffb`52bf15cd : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x81b
00000000`194ffe80 00007ffb`545643d1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`194ffeb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: shell32!Microsoft::WRL::ComPtr<ISyncStatusCacheEntry>::As<IUnknown>+22
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: shell32
IMAGE_NAME: shell32.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 5279002b
STACK_COMMAND: ~67s; .ecxr ; kb
FAILURE_BUCKET_ID: NULL_POINTER_READ_BEFORE_CALL_c0000005_shell32.dll!Microsoft::WRL::ComPtr_ISyncStatusCacheEntry_::As_IUnknown_
BUCKET_ID: APPLICATION_FAULT_NULL_POINTER_READ_BEFORE_CALL_shell32!Microsoft::WRL::ComPtr_ISyncStatusCacheEntry_::As_IUnknown_+22
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:null_pointer_read_before_call_c0000005_shell32.dll!microsoft::wrl::comptr_isyncstatuscacheentry_::as_iunknown_
FAILURE_ID_HASH: {4b7ac51a-a918-f7d6-8b9f-6758c5666bf4}
Followup: MachineOwnerI was able to repro the crash which happens after approx 120 iterations of "Enter - right arrow - down arrow" in File Explorer.
First I reproduced the crash using a Lenovo Win8.1 factory preload.
Then I reproduced the crash using a clean install of Win8.1 without any Lenovo software at all.
Finally I downloaded and install the Windows 8.1 update from Microsoft (released yesterday) but the crash can still be reproduced.
So in my opinion you have found a Win8.1 bug. Could you try to report it to a Microsoft forum to see if you could get help that way?
Anyway, I don't have any other suggestions or ideas about how to help. -
Explorer.exe crashing - twinui.dll?
With some relative frequency (several times an hour) explorer.exe is faulting and restarting. I only noticed because the system tray repaints. I am not sure if this is related to the applications I have installed, or is unrelated.
Has anyone else encountered this? Any ideas as to what is going on?
Below are the event log details:
Faulting application name: explorer.exe, version: 6.2.9200.16384, time stamp: 0x50107dbc
Faulting module name: twinui.dll, version: 6.2.9200.16384, time stamp: 0x50109442
Exception code: 0xc0000005
Fault offset: 0x0000000000340849
Faulting process id: 0x1584
Faulting application start time: 0x01cd7c8733f184a6
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\System32\twinui.dll
Report Id: 50dc242a-e87b-11e1-be6f-6c626ddcca27
Faulting package full name:
Faulting package-relative application ID:
I do not have a lot of applications installed at the moment, so if it is application-related, then at least there is a short list of possible causes.
AMD Catalyst Install Manager (and Catalyst Control Center)
AuthenTec WinBio Fingerprint Software x64
EventGhost 0.4.1.r1572
LastPass x64
RealTek High Definition Audio Driver
Microsoft Visual C++ 2010 x64 Distributable 10.0.30319
SharpKeysplease download this reg file from my SkyDrive:
http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg
and make a double click on the file to import it. If you can't do this, run regedit.exe and import the registry file there!
When the Windows Explorer crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the created file (cmpressed as 7z or RAR) to your public Skydrive [2] folder and post the link here. I take a look at the dump with
the Debugger, maybe I can see the cause.
André
[1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
[2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
"A programmer is just a tool which converts caffeine into code" -
Explorer.exe crash, twinui.dll
For a couple of weeks, everytime i login into my account, explorer.exe keeps crashing and restarting.During this loop, the system is laggy and it only shows the taskbar, without the icons i put on it.
Here is the report from event viewer:
Faulting application name: explorer.exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: twinui.dll, version: 6.3.9600.17324, time stamp: 0x53f822bf
Exception code: 0xc0000006
Fault offset: 0x00000000000e87c7
Faulting process id: 0xb20
Faulting application start time: 0x01d06eb0d68fe96f
Faulting application path: C:\WINDOWS\explorer.exe
Faulting module path: C:\WINDOWS\system32\twinui.dll
Report Id: 19f958ba-daa4-11e4-82aa-448a5bcfcd05
Faulting package full name:
Faulting package-relative application ID:
I also downloaded autoruns from sysinternals, there are some dll's, but only from winrar and poweriso, which i deactivated.I ran sfc /scannow and chkdsk /f, no changes.The system runs fine in safe mode, without any crashes.Hello Retegan Andrei (Andrew),
As this issue doesn’t exist in the safe mode, it is caused by driver or third-party software.
Please try to perform a clean boot in Windows.
https://support.microsoft.com/en-us/kb/929135
If this issue doesn’t occur in clean boot, it is caused by third-party drivers.
If this issue occurs in clean boot too, it is cuased by drivers, please update drivers from the manufacturer website.
Best regards,
Fangzhou CHEN
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
Explorer.exe is crashing/restarting every minute - faulting module ntdll.dll
I upgraded to Windows 8 on 11/18 and started having problems where explorer.exe is restarting every minute or so. Here is the error from the event log:
Faulting application name: explorer.exe, version: 6.2.9200.16433, time stamp: 0x50763312
Faulting module name: ntdll.dll, version: 6.2.9200.16420, time stamp: 0x505ab405
Exception code: 0xc000071f
Fault offset: 0x000000000011808f
Faulting process id: 0x12c8
Faulting application start time: 0x01cdc8c32effec36
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 9220779c-34b6-11e2-be72-e06995f1e71a
Faulting package full name:
Faulting package-relative application ID:
I worked with Microsoft Tech Support for 4 days and ended up doing a clean install of Windows 8. I had been told by Microsoft that they would escalate me to Tier 2, but they called back and said it was an HP/Hardware issue and I would have to
work with them. Chatted with HP, they said it was an OS issue.
Anyone have any thoughts?
DanHere is the dump file. Any assistance is greatly appreciated!
http://sdrv.ms/XyPNrE
google drive is the cause:
FAULTING_IP:
ntdll!RtlReportCriticalFailure+89
000007f8`47d9a485 eb00 jmp ntdll!RtlReportCriticalFailure+0x8b (000007f8`47d9a487)
EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007f847d9a485 (ntdll!RtlReportCriticalFailure+0x0000000000000089)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 000007f847defd60
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000374 - Ein Heap wurde besch digt.
EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - Ein Heap wurde besch digt.
EXCEPTION_PARAMETER1: 000007f847defd60
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: explorer.exe
MANAGED_STACK: !dumpstack -EE
OS Thread Id: 0x6bc (50)
Current frame:
Child-SP RetAddr Caller, Callee
BUGCHECK_STR: APPLICATION_FAULT_WRONG_SYMBOLS_clr.dll_UNEXPECTED_UNKNOWN_INDEX_RESULT
PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS_clr.dll_UNEXPECTED_UNKNOWN_INDEX_RESULT
DEFAULT_BUCKET_ID: WRONG_SYMBOLS_clr.dll_UNEXPECTED_UNKNOWN_INDEX_RESULT
LAST_CONTROL_TRANSFER: from 000007f847d9f2a0 to 000007f847d9a485
STACK_TEXT:
ntdll!NtWaitForSingleObject
ntdll!RtlReportExceptionEx
ntdll!RtlReportException
ntdll!RtlReportCriticalFailure
ntdll!_C_specific_handler
ntdll!_GSHandlerCheck_SEH
ntdll!RtlpExecuteHandlerForException
ntdll!RtlDispatchException
ntdll!RtlRaiseException
ntdll!RtlReportCriticalFailure
ntdll!RtlpLogHeapFailure
ntdll! ?? ::FNODOBFM::`string'
msvcr90!free
googledrivesync64!DllCanUnloadNow
shell32!CFSIconOverlayManager::_GetFileOverlayInfo
shell32!CFSIconOverlayManager::GetFileOverlayInfo
shell32!CFSFolder::_GetOverlayInfo
shell32!CIconOverlayTask::InternalResumeRT
shell32!CRunnableTask::Run
shell32!CShellTask::TT_Run
shell32!CShellTaskThread::ThreadProc
shell32!CShellTaskThread::s_ThreadProc
SHCore!ExecuteWorkItemThreadProc
ntdll!RtlpTpWorkCallback
ntdll!TppWorkerThread
kernel32!BaseThreadInitThunk
ntdll!RtlUserThreadStart
FOLLOWUP_IP:
googledrivesync64!DllCanUnloadNow+cd8
000007f8`32602dc8 488d542430 lea rdx,[rsp+30h]
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: googledrivesync64!DllCanUnloadNow+cd8
FOLLOWUP_NAME: wintriag
MODULE_NAME: googledrivesync64
IMAGE_NAME: googledrivesync64.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 50cfe78c
STACK_COMMAND: ~50s; .ecxr ; kb
FAILURE_BUCKET_ID: WRONG_SYMBOLS_clr.dll_UNEXPECTED_UNKNOWN_INDEX_RESULT_c0000374_googledrivesync64.dll!DllCanUnloadNow
BUCKET_ID: APPLICATION_FAULT_WRONG_SYMBOLS_clr.dll_UNEXPECTED_UNKNOWN_INDEX_RESULT_googledrivesync64!DllCanUnloadNow+cd8
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/explorer_exe/6_2_9200_16433/50763312/ntdll_dll/6_2_9200_16420/505ab405/c0000374/000ea485.htm?Retriage=1
Followup: wintriag
0:050> lmvm googledrivesync64
start end module name
000007f8`32600000 000007f8`326bb000 googledrivesync64 (export symbols) googledrivesync64.dll
Loaded symbol image file: googledrivesync64.dll
Image path: C:\Program Files (x86)\Google\Drive\googledrivesync64.dll
Image name: googledrivesync64.dll
Timestamp: Tue Dec 18 04:48:28 2012 (50CFE78C)
CheckSum: 000BE686
ImageSize: 000BB000
File version: 1.7.4018.3496
Product version: 1.7.4018.3496
File flags: 0 (Mask 3F)
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Google
ProductName: Google Drive
ProductVersion: 1.7.4018.3496
FileVersion: 1.7.4018.3496
FileDescription: Google Drive shell extension
LegalCopyright: Google
disable the sharing overlay icons in the google drive options.
"A programmer is just a tool which converts caffeine into code" -
I have built a new RDS farm on Windows Server 2012 R2 with two Session Hosts and a combined Connect Broker/Web Access server. I had the farm up and running with User Profile Disks and all seemed OK. However, as soon as I installed the App-V 5.0 SP2 RDS
client on the session hosts, the explorer.exe process started crashing for any user logging in via the Web Access site. The process crashes and restarts every five to ten seconds. It's the same for administrators. If they log in via Web Access explorer.exe
crashes, but if they RDP directly to one of the session hosts explorer.exe is fine. If I reboot the session hosts, then the first user to log in via Web Access has a stable desktop session (and appears to have a new profile as well). However, if that user
logs out and back in again, explorer.exe starts crashing again. The only applications I have packaged at the moment are Office 2013 and Firefox.
I tried disabling User Profile Disks, but this caused a whole bunch of other problems and I eventually lost the ability to log in at all via Web Access (errors about the user profile service). As this is a small pre-production environment I completed scrapped
all of the servers and rebuilt from scratch. Again, everything appeared fine until I installed the App-V client, then explorer.exe started crashing repeatedly for all users.
Has anyone come across this issue before? I have tried installing the App-V 5.0 SP2 Hotfix Package 2, but this didn't help. I have read in a few forums that App-V doesn't work very well with User Profile Desks, but I have not heard of this particular issue.
Similarly, SP2 seems to have a lot of problems, so I am going to try removing App-V RDp Client SP2 and installing SP1. I ahev also deleted User Profile Disks for the test users to recreate their profiles, but this didn't help either.
Any other suggestions welcome!I forgot to include the application event log entry for explorer.exe crashing:
Faulting application name: explorer.exe, version: 6.3.9600.17039, time stamp: 0x53156588
Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532954fb
Exception code: 0xc06d007e
Fault offset: 0x0000000000005bf8
Faulting process id: 0xae8
Faulting application start time: 0x01cfab3a273787fd
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 69210d77-172d-11e4-80c6-0050560102d1
Faulting package full name: -
Windows 8 explorer.exe keeps crashing and I can't use Windows update as a result!
I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains,
but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second,
and then goes away.
I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This
means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop
crashes, and I have to click on the screen every 6 seconds. ARGH!I crash is caused by the Intel driver:
Call Site
ntdll!NtWaitForSingleObject
ntdll!RtlReportExceptionEx
ntdll!RtlReportException
verifier!AVrfpVectoredExceptionHandler
ntdll!RtlpCallVectoredHandlers
ntdll!RtlDispatchException
ntdll!KiUserExceptionDispatch
verifier!VerifierStopMessage
verifier!AVrfpDphReportCorruptedBlock
verifier!AVrfpDphCheckNormalHeapBlock
verifier!VerifierCheckPageHeapAllocation
verifier!AVrfpHeapFree
hccutils!DllUnregisterServer
hccutils!GetCUICustomizationKey
hccutils!GetCUICustomizationKey
hccutils!GetCUICustomizationKey
hccutils!CreateThisKey
hccutils!FindResources
hccutils!LoadSTRING
hccutils!SaveString
hccutils!LoadICON
hccutils!LoadIMAGE
igfxcpl!CPlApplet
shell32!CPL_CallEntry
shell32!_InitializeControl
shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''
shell32!CPL_LoadCPLModule
shell32!_LoadCPLModuleAndAdd
shell32!CPLD_InitModule
shell32!CControlPanelEnum::_NextNonCachedCpl
shell32!CControlPanelEnum::Next
shell32!CRegFolderEnum::Next
shell32!CControlPanelAppletList::_AddAppletsToCategories
shell32!CControlPanelAppletList::LoadSlowApplets
shell32!CControlPanelDataWorkItem::_LoadSlowData
shell32!CControlPanelDataWorkItem::DoWork
shell32!CFrameTask::InternalResumeRT
shell32!CRunnableTask::Run
shell32!CShellTask::TT_Run
shell32!CShellTaskThread::ThreadProc
shell32!CShellTaskThread::s_ThreadProc
SHCore!ExecuteWorkItemThreadProc
ntdll!RtlpTpWorkCallback
ntdll!TppWorkerThread
kernel32!BaseThreadInitThunk
ntdll!RtlUserThreadStart
0:031> lmvm igfxcpl
start end module name
00000001`80000000 00000001`80025000 igfxcpl (export symbols) igfxcpl.cpl
Loaded symbol image file: igfxcpl.cpl
Image path: C:\Windows\System32\igfxcpl.cpl
Image name: igfxcpl.cpl
Timestamp: Mon Sep 03 04:50:21 2012 (50441AED)
CheckSum: 00022721
ImageSize: 00025000
File version: 8.15.10.2849
Product version: 8.15.10.2849
File flags: 0 (Mask 3F)
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Intel Corporation
ProductName: Intel(R) Common User Interface
InternalName: IGFXCPL
OriginalFilename: IGFXCPL.DLL
ProductVersion: 8.15.10.2849
FileVersion: 8.15.10.2849
PrivateBuild: 8.15.10.2849
SpecialBuild: 8.15.10.2849
FileDescription: igfxcpl Module
LegalCopyright: Copyright 1999-2006, Intel Corporation
LegalTrademarks: Copyright 1999-2006, Intel Corporation
Comments: Copyright 1999-2006, Intel Corporation
0:031> lmvm hccutils
start end module name
00000000`09ee0000 00000000`09eff000 hccutils (export symbols) hccutils.dll
Loaded symbol image file: hccutils.dll
Image path: C:\Windows\System32\hccutils.dll
Image name: hccutils.dll
Timestamp: Mon Sep 03 04:49:28 2012 (50441AB8)
CheckSum: 00023677
ImageSize: 0001F000
File version: 8.15.10.2849
Product version: 8.15.10.2849
File flags: 0 (Mask 3F)
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Intel Corporation
ProductName: Intel(R) Common User Interface
InternalName: HCCUTILS
OriginalFilename: HCCUTILS.DLL
ProductVersion: 8.15.10.2849
FileVersion: 8.15.10.2849
PrivateBuild: 8.15.10.2849
SpecialBuild: 8.15.10.2849
FileDescription: hccutils Module
LegalCopyright: Copyright 1999-2006, Intel Corporation
LegalTrademarks: Copyright 1999-2006, Intel Corporation
Comments: Copyright 1999-2006, Intel Corporation
So update the driver or use ShellExView to disable the Intel shell extension.
The second crash looks like a corrupted shel32.dll on the HDD:
CHKIMG_EXTENSION: !chkimg -lo 50 -d !shell32
7fcac39c000-7fcac39c059 90 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43944
[ 4d d8 e8 09 77 b1 ff 48:16 00 00 00 02 00 00 00 ]
7fcac39c05b-7fcac39c07a 32 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4399f (+0x5b)
[ 8b d8 7c 1d 48 8b 4d e0:00 00 00 00 00 00 00 00 ]
7fcac39c07c-7fcac39c0af 52 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439c0 (+0x21)
[ 48 8d 4d e0 e8 8b 76 b1:00 00 00 00 00 00 00 00 ]
7fcac39c0b1-7fcac39c0bb 11 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439f5 (+0x35)
[ a9 ff 48 8b 06 4c 8d 05:00 00 00 00 00 00 00 00 ]
7fcac39c0bd-7fcac39c0c4 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a01 (+0x0c)
[ 8b d3 48 8b ce ff 90 98:00 00 00 00 00 00 00 00 ]
7fcac39c0c8-7fcac39c0ca 3 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a0c (+0x0b)
[ 90 e9 16:00 00 00 ]
7fcac39c0cc-7fcac39c0e6 27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a10 (+0x04)
[ a9 ff cc 48 8b 07 48 8b:00 00 00 00 98 e0 53 ae ]
7fcac39c0e8-7fcac39c0ef 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a2b (+0x1c)
[ 8b d3 48 8b cf ff 90 98:00 00 00 00 00 00 00 00 ]
7fcac39c0f3-7fcac39c0fa 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a36 (+0x0b)
[ 90 e9 be 05 a9 ff bb 18:04 00 00 00 00 00 00 00 ]
7fcac39c0fd-7fcac39c118 28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a40 (+0x0a)
[ 80 e9 b4 05 a9 ff cc 48:00 00 00 d0 e0 53 ae fc ]
7fcac39c11c-7fcac39c13c 33 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a5e (+0x1f)
[ ff 10 90 e9 7c 78 a8 ff:00 00 00 00 00 00 00 04 ]
7fcac39c13f-7fcac39c175 55 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a80 (+0x23)
[ 80 e9 7d e4 a8 ff cc 48:00 00 f4 53 ae fc 07 00 ]
7fcac39c179-7fcac39c189 17 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ab8 (+0x3a)
[ 85 c0 75 14 8d 50 01 44:00 00 00 00 00 00 00 ff ]
7fcac39c18b-7fcac39c1b5 43 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43aca (+0x12)
[ 90 e9 0b cf b5 ff 8b d3:ff 00 00 00 00 00 00 00 ]
7fcac39c1b7-7fcac39c1c9 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43af5 (+0x2c)
[ 07 80 e9 61 e9 a8 ff 4c:00 00 00 00 00 00 00 00 ]
7fcac39c1cb-7fcac39c1e9 31 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b09 (+0x14)
[ 10 48 85 db 0f 84 4a e9:ff 00 00 00 00 00 00 00 ]
7fcac39c1eb-7fcac39c1f4 10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b27 (+0x20)
[ 07 80 e9 db b3 a8 ff cc:00 00 00 00 00 00 00 00 ]
7fcac39c1f6-7fcac39c208 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b31 (+0x0b)
[ 07 80 e9 28 f4 a8 ff cc:00 00 00 00 00 00 00 00 ]
7fcac39c20a-7fcac39c237 46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b42 (+0x14)
[ 50 08 33 c0 e9 81 b4 a8:ff ff 00 00 00 00 00 00 ]
7fcac39c239-7fcac39c240 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b65 (+0x2f)
[ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 00 ]
7fcac39c243-7fcac39c248 6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b6f (+0x0a)
[ 41 83 c8 ff ba 01:00 00 00 00 00 00 ]
7fcac39c24c-7fcac39c25e 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b78 (+0x09)
[ e8 4f 70 b0 ff 83 f8 ff:00 00 00 00 10 00 00 00 ]
7fcac39c260-7fcac39c361 258 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b8c (+0x14)
[ 80 e9 2d b2 a8 ff 48 8d:00 00 00 00 00 00 00 00 ]
7fcac39c363-7fcac39c36c 10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c8d (+0x103)
[ 07 80 e9 b5 bb a8 ff cc:00 00 00 00 00 00 00 00 ]
7fcac39c36e-7fcac39c39b 46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c97 (+0x0b)
[ 07 80 e9 c1 da a8 ff cc:00 00 00 00 00 00 00 00 ]
7fcac39c39d-7fcac39c3eb 79 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43cc5 (+0x2f)
[ 3a 90 ff 84 c0 0f 84 cd:00 00 00 00 00 00 00 00 ]
7fcac39c3ed-7fcac39c3f8 12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d14 (+0x50)
[ 90 e9 fb e3 b8 ff cc ff:00 00 00 00 00 00 00 00 ]
7fcac39c3fa-7fcac39c405 12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d20 (+0x0d)
[ 85 c0 0f 8e 42 8a a8 ff:00 00 00 00 00 00 00 00 ]
7fcac39c408-7fcac39c489 130 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d2e (+0x0e)
[ 07 80 e9 35 8a a8 ff cc:00 00 00 00 00 00 00 00 ]
7fcac39c48b-7fcac39c4a5 27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43daf (+0x83)
[ 48 85 db 74 09 48 8b 13:ff 00 00 00 00 00 00 00 ]
7fcac39c4a8-7fcac39c4b5 14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dc8 (+0x1d)
[ 00 ff 50 40 85 c0 0f 88:3f 00 00 00 2d 22 04 0b ]
7fcac39c4b9-7fcac39c4bd 5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dd9 (+0x11)
[ eb 12 ba 01 00:00 00 00 09 04 ]
7fcac39c4c0-7fcac39c4e7 40 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43de0 (+0x07)
[ ff 50 40 85 c0 0f 88 cb:10 00 00 00 01 00 00 00 ]
7fcac39c4ea-7fcac39c4ff 22 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e06 (+0x2a)
[ c0 41 8d 51 01 ff 15 43:00 00 00 00 00 00 00 00 ]
7fcac39c501-7fcac39c508 8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e1d (+0x17)
[ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 3f ]
7fcac39c50b-7fcac39c510 6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e27 (+0x0a)
[ 41 83 c8 ff ba 01:00 e4 04 00 00 3f ]
7fcac39c514-7fcac39c526 19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e30 (+0x09)
[ e8 87 6d b0 ff 83 f8 ff:00 00 00 00 00 00 00 00 ]
7fcac39c528-7fcac39c5a8 129 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e44 (+0x14)
[ 80 e9 c1 b8 a8 ff 48 8d:f0 d3 bc ab fc 07 00 00 ]
7fcac39c5aa-7fcac39c5ab 2 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec6 (+0x82)
[ cc 83:fe ff ]
7fcac39c5ad-7fcac39c5b9 13 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec8 (+0x03)
[ 01 0f 85 40 7d a8 ff 48:07 00 00 b0 ad 0d 7b 95 ]
7fcac39c5bb-7fcac39c5d6 28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ed6 (+0x0e)
[ 48 8b 11 ff 52 10 90 e9:00 00 00 00 00 02 00 00 ]
7fcac39c5d8-7fcac39c695 190 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ef2 (+0x1d)
[ 48 8b 11 ff 52 08 90 e9:00 00 00 00 00 00 00 00 ]
7fcac39c699-7fcac39c6eb 83 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43faa (+0xc1)
[ 48 8b ce 41 ff 53 40 8b:00 00 00 00 00 00 00 00 ]
7fcac39c6ef-7fcac39c6f5 7 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ffd (+0x56)
[ ff 50 60 c7 07 02 00:00 4a 06 b7 af f7 07 ]
7fcac39c6f8-7fcac39c705 14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44006 (+0x09)
[ eb 18 48 8b 01 4c 8d 05:00 00 00 00 00 00 00 00 ]
7fcac39c708-7fcac39c70c 5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44016 (+0x10)
[ 00 ff 50 60 c7:22 02 b6 af f7 ]
7fcac39c70e - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401c (+0x06)
[ 03:00 ]
7fcac39c710-7fcac39c71e 15 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401e (+0x02)
[ 00 00 44 8b c8 e9 a9 a1:40 9d 26 69 e8 00 00 00 ]
7fcac39c720-7fcac39c75c 61 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4402c (+0x10)
[ 00 00 e9 17 74 a8 ff c7:10 74 0d 7b 95 00 00 00 ]
7fcac39c75e-7fcac39c7c1 100 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44068 (+0x3e)
[ 80 e9 a5 d8 ae ff cc b8:00 00 60 87 53 ae fc 07 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
8192 errors : !shell32 (7fcac39c000-7fcac3aeebb)
APP: explorer.exe
FAULTING_THREAD: 0000000000000f0c
ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
LAST_CONTROL_TRANSFER: from 000007fcabcc02f5 to 000007fcac39cd00
BUGCHECK_STR: APPLICATION_FAULT_MEMORY_CORRUPTION_INVALID_POINTER_WRITE_LARGE_EXPLOITABLE
PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE_EXPLOITABLE
DEFAULT_BUCKET_ID: MEMORY_CORRUPTION_LARGE_EXPLOITABLE
STACK_TEXT:
00000000`00000000 00000000`00000000 memory_corruption!shell32+0x0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: memory_corruption!shell32
Repair the DLL with DISM:
http://social.technet.microsoft.com/Forums/en-US/w8itprogeneral/thread/5c651c1b-f800-47c4-801d-98996eaf99a4/#c280a27b-7bc9-43ac-9c1a-2ad97230a9ea
"A programmer is just a tool which converts caffeine into code" -
Windows 8.1 explorer.exe crashes EVERY time I open a window
I upgraded from win8 home yesterday and notices I was getting errors when using windows to copy files from my laptop to computer over my wifi.
Today, I was working fine and started gettingMicrosoft Visual C++ Runtime Library "Runtime Error" and explorer restarted, I rebooted and then on all accounts I logged into, I got no error messages - just explorer restarting. I was unable
to open any folders.
The event viewer states:
Faulting application name: Explorer.EXE, version: 6.3.9600.16441, time stamp: 0x5265dec8
Faulting module name: verifier.dll, version: 6.3.9600.16384, time stamp: 0x5215f8f7
Exception code: 0x80000003
Fault offset: 0x000000000000abd4
Faulting process ID: 0x16c4
Faulting application start time: 0x01cf1ad3991556c6
Faulting application path: C:\WINDOWS\Explorer.EXE
Faulting module path: C:\WINDOWS\system32\verifier.dll
Report ID: ecbc0d64-86c6-11e3-8089-4c72b9810b8d
Faulting package full name:
Faulting package-relative application ID:
Explorer has however started running properly since I ran C:\ from the run prompt. Any folders I click on seem ok and now I can open explorer normally.
Please helpHello,
Please download this
ZIP file and extract it. Once extracted, double-click the REG file to import it into the registry. Once done, this will enable creation of crash dumps when Explorer crashes. So, the next time this happens. you should fine a DMP file on your desktop. Compress
and attach the file here. Having the file will help us identifying the cause of the issue. -
Uninstalling adobe photoshop trial CS4 crashes explorer (versionCue.dll)
Running XP pro, 4gb ram, Radeon HD 4800, Intel Pentium E8400. None of that is relevant in the least but I figured someone would ask if I didn't put it up.
Anyway: I installed the photoshop CS4 30 day trial (photoshop and bridge only). Then I uninstalled it. After a restart (I believe), every time I perform certain actions (bring up context menu, cut/copy files...) in window explorer, it will crash, saying the specified module could not be found: C:\Program Files\Common Files\Adobe\Adobe Version cue CS4\Client\4.0.0\VersionCue.dll .
Reinstalling the trial fixes the issue.
Uninstalling it again causes the issue to resurface.
I want all adobe software off my computer please! I've learned my lesson! How do I fix explorer? my "keep a crappy expired trial on perpetuity" stratagem is starting to grate.
Similar problems were elsewhere when I searched, but the solution was always "doing X and Y will put cs4 back into you context menu, don't worry." This is not adequate for me. Ideally, the solution to this problem would eliminate all instances of the word Adobe from anywhere on my computer except for my internet history of this page.
Thanks in advance,
-BenI went into the folder and discovered only the file VersionCue.dll1. As using and type of dragging and right-clicking all crash explorer, I then copied this file into VersionCue.dll using cmd.exe
So now I
-Lost the software (good)
-Stabalized Explorer (good)
-Restored the drive cs4 options to explorer's context menu (bad).
I really don't want to have to reinstall windows just because I made the mistake of installing adobe software on it. Can anyone help me clean this menu up?
Thanks,
-Ben -
Explorer.exe crashing frequently
The following is obtained from an error in displayed in Event Viewer
Log Name: Application
Source: Application Error
Date: 19/2/2014 06:04:48 م
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Zork
Description:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: atiumd64.dll, version: 9.14.10.926, time stamp: 0x50895e0e
Exception code: 0xc0000005
Fault offset: 0x00000000001908db
Faulting process id: 0x22c0
Faulting application start time: 0x01cf2d834155d983
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\atiumd64.dll
Report Id: 2c205388-9977-11e3-a115-5c260a726598
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-02-19T15:04:48.000000000Z" />
<EventRecordID>76045</EventRecordID>
<Channel>Application</Channel>
<Computer>Zork</Computer>
<Security />
</System>
<EventData>
<Data>explorer.exe</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>atiumd64.dll</Data>
<Data>9.14.10.926</Data>
<Data>50895e0e</Data>
<Data>c0000005</Data>
<Data>00000000001908db</Data>
<Data>22c0</Data>
<Data>01cf2d834155d983</Data>
<Data>C:\Windows\explorer.exe</Data>
<Data>C:\Windows\system32\atiumd64.dll</Data>
<Data>2c205388-9977-11e3-a115-5c260a726598</Data>
</EventData>
</Event>
Here is my sys info:
System Information
Time of this report: 2/12/2014, 04:06:25
Machine name: ZORK
Operating System: Windows 7 Ultimate 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.130828-1532)
Language: Arabic (Regional Setting: Arabic)
System Manufacturer: Alienware
System Model: M18xR1
BIOS: InsydeH2O Version 1.0 A05
Processor: Intel(R) Core(TM) i7-2760QM CPU @ 2.40GHz (8 CPUs), ~2.4GHz
Memory: 16384MB RAM
Available OS Memory: 16366MB RAM
Page File: 5993MB used, 26736MB available
Windows Dir: C:\Windows
DirectX Version: DirectX 11
DX Setup Parameters: Not found
User DPI Setting: Using System DPI
System DPI Setting: 96 DPI (100 percent)
DWM DPI Scaling: Disabled
DxDiag Version: 6.01.7601.17514 32bit UnicodeHi,
Use ShellExView to disable 3rd party shell extension.
http://www.nirsoft.net/utils/shexview.html
If Explorer.exe still crashes, please try collecting crash dump to help fix this problem.
Please download .reg from my OneDrive:
http://1drv.ms/1mgTZsT
Following this, please make a double click on the file to import it.When the Windows Explorer crashes, Windows Error Reporting Service creates a dmp file under C:\Localdumps.
Then upload the dump with OneDrive.
Note This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on
these sites. Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.
Andy Altmann
TechNet Community Support -
Explorer.exe keeps crashing after update to 8.1 from 8
After updating to the 8.1 explorer.exe keeps crashing, no solution found online for the problem...only clue I get is very clear and obvious message in event log:
Faulting application name: explorer.exe, version: 6.3.9600.16441, time stamp: 0x5265dec8
Faulting module name: KERNELBASE.dll, version: 6.3.9600.16496, time stamp: 0x52b3f283
Exception code: 0xe06d7363
Fault offset: 0x0000000000005a88
Faulting process id: 0x1664
Faulting application start time: 0x01cf52b7670e4534
Faulting application path: C:\WINDOWS\explorer.exe
Faulting module path: C:\WINDOWS\system32\KERNELBASE.dll
Report Id: a4c05eaf-beaa-11e3-be98-ca4f0724b24c
Faulting package full name:
Faulting package-relative application ID:
System
Provider
[ Name]
Application Error
EventID
1000
[ Qualifiers]
0
Level
2
Task
100
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2014-04-07T23:16:27.000000000Z
EventRecordID
16783
Channel
Application
Computer
Dell
Security
EventData
explorer.exe
6.3.9600.16441
5265dec8
KERNELBASE.dll
6.3.9600.16496
52b3f283
e06d7363
0000000000005a88
1664
01cf52b7670e4534
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\KERNELBASE.dll
a4c05eaf-beaa-11e3-be98-ca4f0724b24c
really helpful. Cannot understand why Microsoft were pushing me to update from poorly performing windows 8 to complete nuisance windows 8.1. My hardly earned money were spent on a product that causes me massive headache.
Unfortunately Microsoft does not allow me to post the link to skydrive where I keep the dmp fo review. Another great gift from them.0:050> lmvm rse
start end module name
00007ffd`abc10000 00007ffd`abec6000 rse (export symbols) rse.dll
Loaded symbol image file: rse.dll
Image path: C:\Program Files\Autodesk\Inventor 2014\Bin\rse.dll
Image name: rse.dll
Timestamp: Fri Mar 01 06:00:41 2013 (512FD389)
CheckSum: 002B8E46
ImageSize: 002B6000
File version: 18.0.17000.0
Product version: 1.0.0.1
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Autodesk, Inc.
ProductName: Autodesk, Inc. rse
InternalName: rse
OriginalFilename: rse.dll
ProductVersion: Autodesk Inventor 2014
FileVersion: 18, 0, 17000, 0000
PrivateBuild: Build: 170, Release: 2014 RTM - Date: Thu 02/28/2013
SpecialBuild: Build: 170, Release: 2014 RTM - Date: Thu 02/28/2013
FileDescription: rse
LegalCopyright: Copyright © 1996-2013 Autodesk, Inc.
LegalTrademarks: Copyright © 1996-2013 Autodesk, Inc.
Comments: Copyright © 1996-2013 Autodesk, Inc.
Hi,
The dump file has been analyzed by auggy, and the problem is on the rse.dll.
Please refer to the suggestions auggy provided, If you need further assistance, feel free to let me know. I will be more than happy to be of assistance.
If the suggestion is helpful, please remember to mark it as answer which can benefit others who may encounter the similar issue as yours. Otherwise, please unpropose it and provide the latest dump file for further assistance.
Regards,
Kelvin Xu
TechNet Community Support
Maybe you are looking for
-
Very nice and highly functional iPhone 4 case providing total protection
Marware C.E.O. Flip-Vue Leather case for iPhone 4 The C.E.O. Flip-Vue™ for iPhone® 4 is a slim, genuine leather flip-top holster that provides the perfect balance between total protection and convenient access. The leather and suede design is unique
-
HT3964 What does a file folder with a question mark that appears upon startup?
What does a file folder with a question mark which appears on startup mean??
-
IPhoto Albums not updating in iWeb
Am I missing something? Have a couple of Smart Albums in iPhoto which I had no problem incorporating into iWeb. But as I add to my iPhoto Library, and more photos end up in these Smart Albums, they are not automatically incorporated into my iWeb page
-
Any fast way to move objects in front panel?
Hi there, I don't know if this is asked before. It is not a technical question but I wonder any way to move any object/control on the front panel quickly. I try to google and search in the forum but didn't see any way to do so. Sometimes, while dev
-
Hi Friends, I have created on Z table for my requirement, and transported to the production. Now the user wants me to change the type of field when I am trying to change it, its asking me Access key. Can any one tell me what to do. Regards, Line