Windows 7: Explorer Crash-right click-debug file

KGIXXER7 · 31 Dec 2009

I have been having problems with explorer crashing while I right click, open a folder, or a file...and this happens at random...sometimes one after another, sometimes not for a few hours. I have been running the Windows 7 7100 RC (64 bit) for about 3 months and I didn't have a single problem. I did a clean install to Windows 7 Home(64 bit) and I am running all of the same programs if not less, and have had a ton of these explorer.exe crashes. I recently did a repair from my install disc, nothing changed...explorer.exe still crashes alot.

Following the post by H2SO4, from this link Explorer crashing when deleting files

I successfully got explorer to crash almost immediately, So I will now upload that 2nd chance file to here ...

Thank you so much for any help

Attachment 44684

Capt.Jack Sparrow · 31 Dec 2009

Quote: Originally Posted by KGIXXER7

I have been having problems with explorer crashing while I right click, open a folder, or a file...and this happens at random...sometimes one after another, sometimes not for a few hours. I have been running the Windows 7 7100 RC (64 bit) for about 3 months and I didn't have a single problem. I did a clean install to Windows 7 Home(64 bit) and I am running all of the same programs if not less, and have had a ton of these explorer.exe crashes. I recently did a repair from my install disc, nothing changed...explorer.exe still crashes alot.

Following the post by H2SO4, from this link Explorer crashing when deleting files

I successfully got explorer to crash almost immediately, So I will now upload that 2nd chance file to here ...

Thank you so much for any help

Hi Welcome to SF,

I guess the problem is related to the Context Menu. Download the ShellExView is an excellent tool to view and manage all installed shell extensions. The rule is to disable non-Microsoft context menu handlers *one-by-one* and verify if the problem is solved. If disabling one does not solve the problem, undo the disabled item and disable the next non-Microsoft handler. Do the same until the problem is solved and finally identify the culprit. Scroll right to see the Company Name column in ShellExView.

Hope this helps

KGIXXER7 · 31 Dec 2009

Thank you so much Capt Jack...I was down to the very last non-microsoft shell, and was getting worried.

Finally after disabling the...
ATi SimpleShlExt Class
I can right click anywhere.
again thanks for your help as I was lost in what to do next.

rep x 1000000

usasma · 31 Dec 2009

Great work Capn Jack! FWIW - my system doesn't have that Shell Extension installed.
****************************************************************
FYI - here's the results of the dump file analysis:

The dump file suggests that atiadlxx.dll is at fault (although it blames msvcrt.dll)
I'm not real experienced with these - but this one looks pretty easy (IMO).

I'd start with checking with Windows Update for any updates that you're missing, then check the optional updates for an updated version of the Microsoft Visual C RunTimes (that's what msvcrt stands for)

Then download a fresh copy of the ATI video drivers for your system. DO NOT download the Catalyst Control Center - but rather the Driver Only file below it.
Then remove all traces of your ATI video drivers using Control Panel...Programs...Uninstall a program
Then search your hard drive for atiadlxx.dll (on my system it's in C:\Windows\System32) If you find it, rename it to atiadlxx.BAK
Then install the freshly downloaded drivers
Then check to ensure that atiadlxx.dll is there and that atiadlxx.BAK still exists

Here's the dump itself:

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\PID-4872__EXPLORER.EXE__2nd_chance_UnknownException__mini_1acc_2009-12-31_01-29-48-989_1308.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: '2nd_chance_UnknownException_exception_in_EXPLORER.EXE_running_on_JAMISON-PC'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: SingleUserTS Personal
Machine Name:
Debug session time: Thu Dec 31 01:29:49.000 2009 (GMT-5)
System Uptime: not available
Process Uptime: 0 days 0:01:56.000
................................................................
................................................................
....................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1308.138c): Unknown exception - code c000041d (first/second chance not available)
msvcrt!memmove+0x250:
000007fe`fd62117a 488b440af8      mov     rax,qword ptr [rdx+rcx-8] ds:00000000`0516affc=????????????????
0:031> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

Unable to load image C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for fzshellext_64.dll
*** ERROR: Module load completed but symbols could not be loaded for fzshellext_64.dll
Unable to load image C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamenu.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atiamenu.dll
*** ERROR: Module load completed but symbols could not be loaded for atiamenu.dll
Unable to load image C:\Program Files\Common Files\Adobe\Adobe Drive CS4\BIB.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BIB.dll
*** ERROR: Module load completed but symbols could not be loaded for BIB.dll
Unable to load image C:\Program Files\Common Files\Adobe\Adobe Drive CS4\ADFSMenu.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ADFSMenu.dll
*** ERROR: Module load completed but symbols could not be loaded for ADFSMenu.dll
Unable to load image C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atiacm64.dll
*** ERROR: Module load completed but symbols could not be loaded for atiacm64.dll
Unable to load image C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Client\4.0.0\VersionCue.DLL, Win32 error 0n2
*** WARNING: Unable to verify timestamp for VersionCue.DLL
*** ERROR: Module load completed but symbols could not be loaded for VersionCue.DLL
Unable to load image C:\Fraps\fraps64.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for fraps64.dll
*** ERROR: Module load completed but symbols could not be loaded for fraps64.dll
*** ERROR: Module load completed but symbols could not be loaded for FXSRESM.dll
Unable to load image C:\Program Files (x86)\DisplayFusion\DisplayFusionHookx64.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for DisplayFusionHookx64.dll
*** ERROR: Module load completed but symbols could not be loaded for DisplayFusionHookx64.dll
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for slc.dll - 
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: kernel32!pNlsUserInfo                         ***
***                                                                   ***
*************************************************************************

FAULTING_IP: 
msvcrt!memmove+250
000007fe`fd62117a 488b440af8      mov     rax,qword ptr [rdx+rcx-8]

EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000007fefd62117a (msvcrt!memmove+0x0000000000000250)
   ExceptionCode: c000041d
  ExceptionFlags: 00000001
NumberParameters: 0

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PROCESS_NAME:  explorer.exe

ERROR_CODE: (NTSTATUS) 0xc000041d - An unhandled exception was encountered during a user callback.

EXCEPTION_CODE: (NTSTATUS) 0xc000041d - An unhandled exception was encountered during a user callback.

NTGLOBALFLAG:  2000000

APPLICATION_VERIFIER_FLAGS:  1

FAULTING_THREAD:  000000000000138c

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER:  from 000000002c1e5e04 to 000007fefd62117a

STACK_TEXT:  
00000000`20dfbbf8 00000000`2c1e5e04 : 00000000`00000009 00000000`0516a000 00000000`00000000 00000001`00000001 : msvcrt!memmove+0x250
00000000`20dfbc00 00000000`00000009 : 00000000`0516a000 00000000`00000000 00000001`00000001 0040012e`00000010 : atiadlxx+0x35e04
00000000`20dfbc08 00000000`0516a000 : 00000000`00000000 00000001`00000001 0040012e`00000010 00000000`00000000 : 0x9
00000000`20dfbc10 00000000`00000000 : 00000001`00000001 0040012e`00000010 00000000`00000000 00000010`00000000 : 0x516a000


FOLLOWUP_IP: 
msvcrt!memmove+250
000007fe`fd62117a 488b440af8      mov     rax,qword ptr [rdx+rcx-8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  msvcrt!memmove+250

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: msvcrt

IMAGE_NAME:  msvcrt.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bdfbe

STACK_COMMAND:  ~31s; .ecxr ; kb

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c000041d_msvcrt.dll!memmove

BUCKET_ID:  X64_APPLICATION_FAULT_INVALID_POINTER_READ_msvcrt!memmove+250

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/explorer_exe/6_1_7600_16404/4a765771/msvcrt_dll/7_0_7600_16385/4a5bdfbe/c000041d/0000117a.htm?Retriage=1

Followup: MachineOwner
---------

0:031> .ecxr
rax=0000000000000000 rbx=0000000020dfb640 rcx=0000000020dfce40
rdx=ffffffffe436e1c4 rsi=0000000077367448 rdi=0000000020dfbb30
rip=000007fefd62117a rsp=0000000020dfbbf8 rbp=0000000020dfbe40
 r8=0000000000001000  r9=0000000000000080 r10=0000000000000000
r11=0000000020dfbe40 r12=0000000000001000 r13=0000000000000000
r14=0000000000007974 r15=0000000000000000
iopl=0         nv up ei ng nz na pe cy
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010281
msvcrt!memmove+0x250:
000007fe`fd62117a 488b440af8      mov     rax,qword ptr [rdx+rcx-8] ds:00000000`0516affc=????????????????
0:031> kb
  *** Stack trace for last set context - .thread/.cxr resets it
RetAddr           : Args to Child                                                           : Call Site
00000000`2c1e5e04 : 00000000`00000009 00000000`0516a000 00000000`00000000 00000001`00000001 : msvcrt!memmove+0x250
00000000`00000009 : 00000000`0516a000 00000000`00000000 00000001`00000001 0040012e`00000010 : atiadlxx+0x35e04
00000000`0516a000 : 00000000`00000000 00000001`00000001 0040012e`00000010 00000000`00000000 : 0x9
00000000`00000000 : 00000001`00000001 0040012e`00000010 00000000`00000000 00000010`00000000 : 0x516a000

Capt.Jack Sparrow · 31 Dec 2009

Quote: Originally Posted by KGIXXER7

Thank you so much Capt Jack...I was down to the very last non-microsoft shell, and was getting worried.

Finally after disabling the...
ATi SimpleShlExt Class
I can right click anywhere.
again thanks for your help as I was lost in what to do next.

rep x 1000000

Your Most Welcome .. Do look into usasma suggestion he is very good in dump analysis. You could find the root cause of it

Happy New Year

KGIXXER7 · 31 Dec 2009

Thank you both and I will look into usasma's fix as well...

happy new year to you both

Windows 7: Explorer Crash-right click-debug file

Explorer Crash-right click-debug file problems?