XP Pro. SP2's explorer.exe crashing a lot and randomly.

  • Thread starter Thread starter Ant
  • Start date Start date
Re: XP Pro. SP2's explorer.exe crashing a lot and randomly.

More crashes logs in safe mode:
http://alpha.zimage.com/~ant/temp/SafeModeWOnetworkCrashes.zip

On 7/15/2008 6:46 PM PT, Phillip Pi typed:

> http://alpha.zimage.com/~ant/temp/ExportedProcessMonitorShowingCrashes-Logs.zip
> (missing the whole URL).
>
>
> On 7/15/2008 1:34 AM PT, Ant wrote:
>
>> Also, upgraded XP to SP3 and got all the updates. Still reproducable.
>> Ugh.
>>
>> On 7/15/2008 12:22 AM PT, Ant typed:
>>
>>> Three Process Monitor's exported logs:
>>> ExportedProcessMonitorShowingCrashes-Logs.zip ... I can't figure out
>>> what is causing the crashes.
>>>
>>>
>>> On 7/14/2008 7:10 AM PT, Ant typed:
>>>
>>>> Wow, I can reproduce the crashes under XP's safe mode too:
>>>> http://alpha.zimage.com/~ant/temp/SafeModeCrashesToo.zip ...
>>>> Something must be severly broken. :(
>>>>
>>>> Here are my notes:
>>>> TODO:
>>>> remove nav right click
>>>> upgrade to XP SP3 (does this upgrade ntdll.dll, explorer.exe, etc.?)
>>>>
>>>> DONE:
>>>> chkdsk (c: e:)
>>>> Disabled HP* startup items and ntune
>>>> Disabled Kerio PF
>>>> Disabled NAV 2002's script blocking
>>>> Ran batch file from newsgroup help
>>>> Ran safe mode with and without networking
>>>> Removed Adobe 7
>>>> Removed Java
>>>> Removed klite completely
>>>> Removed all right click menus from malware scanners and archivers
>>>> Removed KB951748 update (DNS)
>>>> Removed SpyBot and its immunization
>>>> Removed Ultimate Boot CD
>>>> Removed unlocker
>>>> Removed Hawking USB wifi network drivers
>>>> Restored regs from a-square free, jv16, and ccleaner
>>>> Uninstalled inssider
>>>> Used another account (administrator)
>>>> Debugtool monitoring on explorer.exe
>>>> Removed all Startup items
>>>> Downgraded K-Lite.
>>>>
>>>> First crash = 7/9/2008 8:11 AM PDT. Updated many things before like
>>>> MS updates, Java, etc.
>>>>
>>>>
>>>> On 7/14/2008 12:12 AM PT, Ant typed:
>>>>
>>>>> Crashed Explorer.exe's properties with Process Explorer:
>>>>> http://alpha.zimage.com/~ant/temp/PE.gif
>>>>>
>>>>> Updates: It doesn't take hours and can happen right after I start
>>>>> up Windows and use Explorer right away to reproduce the crashes. It
>>>>> seems like sometimes, Start Menu starts acting funny like I can't
>>>>> sort or missing stuff. Renaming files in Explorer can cause crashes
>>>>> right after (either it did rename or not).
>>>>>
>>>>>
>>>>> On 7/13/2008 11:38 PM PT, Ant typed:
>>>>>
>>>>>> Dr. Watson's log: http://alpha.zimage.com/~ant/temp/drwtsn32.txt
>>>>>> ... I couldn't get memory dump since Dr. Watson crashed too right
>>>>>> after explorer crashed. :(
>>>>>>
>>>>>>
>>>>>> On 7/13/2008 10:25 AM PT, Ant typed:
>>>>>>
>>>>>>> And I forgot the crash dumps and logs to share:
>>>>>>> http://alpha.zimage.com/~ant/temp/DebugDiagnosticsLogsAndDumps.zip
>>>>>>> (will be deleted when resolved).
>>>>>>>
>>>>>>>
>>>>>>> On 7/13/2008 10:20 AM PT, Ant typed:
>>>>>>>
>>>>>>>> Ever since 7/9/2008 according Windows' event logs, I noticed my
>>>>>>>> explorer.exe would crash randomly and I can't figure out what is
>>>>>>>> causing it and why. I tried removing, disabling, downgrading,
>>>>>>>> etc. programs/updates (e.g., SpyBot v1.6.0, KB951748 (DNS),
>>>>>>>> Windows Malicious Software Removal Tool - July 2008 (KB890830)
>>>>>>>> [don't think it removed anything], uninstalling Sun Java(TM) 6
>>>>>>>> Update 6 to install update #7, K-Lite Codec Full Pack v4.00, and
>>>>>>>> TrueCrypt v6.0 portable. These were the products that I recall
>>>>>>>> installing since then. I might have more and need to dig and
>>>>>>>> think more.
>>>>>>>>
>>>>>>>> I already ran full scans with the latest definitions from Norton
>>>>>>>> AntiVirus, SpyBot, SuperAntiSpyware, Ad-Aware SE Perosonal, and
>>>>>>>> a-squared Free.
>>>>>>>>
>>>>>>>> I am not a programmer/developer so I am hoping my memory dumps
>>>>>>>> and logs would help. I did notice it can take hours for the
>>>>>>>> crashes to occur. When the firs tone strike, then explorer.exe
>>>>>>>> will crash randomly like crazy. Even Start Menu will start going
>>>>>>>> nuts. I have to reboot to keep it stable for a few hours. I
>>>>>>>> doubt it is temperature related because my other software and
>>>>>>>> hardware don't crash.
>>>>>>>>
>>>>>>>> Here are the first two event log crashes:
>>>>>>>> Event Type: Error
>>>>>>>> Event Source: Application Error
>>>>>>>> Event Category: None
>>>>>>>> Event ID: 1000
>>>>>>>> Date: 7/9/2008
>>>>>>>> Time: 8:11:36 AM
>>>>>>>> User: N/A
>>>>>>>> Description:
>>>>>>>> Faulting application explorer.exe, version 6.0.2900.3156,
>>>>>>>> faulting module comctl32.dll, version 6.0.2900.2982, fault
>>>>>>>> address 0x0002918d.
>>>>>>>>
>>>>>>>> For more information, see Help and Support Center at
>>>>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>>>>> Data:
>>>>>>>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>>>>>>>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>>>>>>>> 0010: 75 72 65 20 20 65 78 70 ure exp
>>>>>>>> 0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
>>>>>>>> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
>>>>>>>> 0028: 30 30 2e 33 31 35 36 20 00.3156
>>>>>>>> 0030: 69 6e 20 63 6f 6d 63 74 in comct
>>>>>>>> 0038: 6c 33 32 2e 64 6c 6c 20 l32.dll
>>>>>>>> 0040: 36 2e 30 2e 32 39 30 30 6.0.2900
>>>>>>>> 0048: 2e 32 39 38 32 20 61 74 .2982 at
>>>>>>>> 0050: 20 6f 66 66 73 65 74 20 offset
>>>>>>>> 0058: 30 30 30 32 39 31 38 64 0002918d
>>>>>>>> 0060: 0d 0a ..
>>>>>>>>
>>>>>>>> Event Type: Error
>>>>>>>> Event Source: Application Error
>>>>>>>> Event Category: (100)
>>>>>>>> Event ID: 1000
>>>>>>>> Date: 7/9/2008
>>>>>>>> Time: 8:11:40 AM
>>>>>>>> User: N/A
>>>>>>>> Description:
>>>>>>>> Faulting application drwtsn32.exe, version 5.1.2600.0, faulting
>>>>>>>> module dbghelp.dll, version 5.1.2600.2180, fault address
>>>>>>>> 0x0001295d.
>>>>>>>>
>>>>>>>> For more information, see Help and Support Center at
>>>>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>>>>> Data:
>>>>>>>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>>>>>>>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>>>>>>>> 0010: 75 72 65 20 20 64 72 77 ure drw
>>>>>>>> 0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
>>>>>>>> 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
>>>>>>>> 0028: 30 30 2e 30 20 69 6e 20 00.0 in
>>>>>>>> 0030: 64 62 67 68 65 6c 70 2e dbghelp.
>>>>>>>> 0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
>>>>>>>> 0040: 32 36 30 30 2e 32 31 38 2600.218
>>>>>>>> 0048: 30 20 61 74 20 6f 66 66 0 at off
>>>>>>>> 0050: 73 65 74 20 30 30 30 31 set 0001
>>>>>>>> 0058: 32 39 35 64 295d
>>>>>>>>
>>>>>>>> I also noticed explorer.exe doesn't return and Dr. Watson gets
>>>>>>>> stuck and crashes too. I have to kill their processes to restart
>>>>>>>> Explorer manually via Task Manager.
>>>>>>>>
>>>>>>>> Any ideas? Thank you in advance. :)



--
"When I am at my lowest, that is when I see things the clearest. It's
hard to care about ants when you're soaring with eagles." --unknown
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
 
Re: XP Pro. SP2's explorer.exe crashing a lot and randomly.

From: "Gary S. Terhune" <none>

| ROFL!!! Every single thing you just said is a lie. Absolutely every word.

| Whereas I really AM a Microsoft MVP of several years standing and KNOW who
| you are. You are named PCButts, a well-known, well-named troll and lying
| pile of dung.

| Besides, everyone in this thread knows who you are. Everyone who reads more
| than a few threads knows who you are, and one thing is for sure -- YOU CAN'T
| BE TRUSTED IN ANY MANNER BY ANYONE FOR ANY PURPOSE.

| The only relationship you have ever had with Microsoft (or ever will have)
| is when they get their sh *t together and boot you off this server again for
| real violations of their policies. Meanwhile, I am growing more and more
| fond of the idea of devoting myself to tracking you down where you REALLY
| live and doing every legal thing I can think of to make your life miserable.
| Not only can I do it, I've really got nothing better planned for the next
| couple of years. Just an idea, but I thought I ought to warn you. I have a
| record of insanity you might want to consider.

| (No, not really... Well, maybe.... I dunno... Gee, you think we should ask
| the doctor about it tomorrow?)

| (Psssstttt!!! If anyone asks, I'm just kidding... aren't I?)

| --
| Gary S. Terhune
| MS-MVP Shell/User
| http://grystmill.com


You are kidding about your "insanity" but you are NOT kidding about Christopher Butts
(aka; PCBUTTS1).

The only relationship he has had with microsoft is pissing off Mike Brannigan, John Eddy
and other Microsoft employees and a specific department of Microsoft that I will not go
into in public.

Gary S. Terhune credibility -- 99.9%
Chistopher Butts (aka; PCBUTTS1) -- 00.0%

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: XP Pro. SP2's explorer.exe crashing a lot and randomly.

I think I found it: CmdLineExt.dll (SecuROM context menu for Explorer)

ShellViewEx said: CmdLineContextMenu Class Yes Context Menu
SecuROM context menu for Explorer. 1,1,224,0 Sony DADC Austria
AG. No No No No No No
C:\WINDOWS\system32\CmdLineExt.dll
{F0407C3D-349C-42B9-B83E-821E31623DF9} 5/30/2005 2:36:01 PM
7/9/2008 12:37:25 AM No .exe, .vtx, exefile A 107,888


7/9/2008 12:37:25 AM matches the time I installed this and started
having problems!! This was from Command & Conquer: Kane's Wrath v1.01
update!

Crossing my fingers that no more crashes (already an hour with two
reboots -- safe mode and normal with all stuff back except this one).
Damn these copy protections.
--
"Ants. There's a size for every picnic, a colour for every occasion, and
a bite to let you know that they are there. Apart from the bite, that
could describe a Basenji pretty well." --Len Reddie
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
 
Back
Top