Win 7 x64 explorer crashes

Page 1 of 2 12 LastLast

  1. Posts : 14
    win 7 64 ultimate
       #1

    Win 7 x64 explorer crashes


    Hi,

    I have the problem with the windows explorer crashng all the time. I've done the ShellExView thing and still get crashes, I've run the SFC /scannow and all is ok except for one error with the AMD version os opservices.dll, but as I'm using an Intel processor and the intel version iof opservices.dll is ok I think I can ignore that.

    I've set the registry catch and attached the dump here.

    If anyone can give me a pointer as to the cause of these crashes on my machine I'd be eternally grateful.
      My Computer


  2. Posts : 28,845
    Win 8 Release candidate 8400
       #2

    StuartLockey said:
    Hi,

    I have the problem with the windows explorer crashng all the time. I've done the ShellExView thing and still get crashes, I've run the SFC /scannow and all is ok except for one error with the AMD version os opservices.dll, but as I'm using an Intel processor and the intel version iof opservices.dll is ok I think I can ignore that.

    I've set the registry catch and attached the dump here.

    If anyone can give me a pointer as to the cause of these crashes on my machine I'd be eternally grateful.
    We are getting some strange responses when we try to analyze your crash. Where did you get your OS from? Was it a download or did you purchase it directly?


    Ken
      My Computer


  3. Posts : 11,990
    Windows 7 Ultimate 32 bit
       #3

    Stuart, follow the instructions in this tutorial so we can take a deeper look at your system.

    https://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html
      My Computer


  4. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #4

    It's a full legit version of windows 7. I have an MSDN subscription adn this is one of my subscription copies. Installed from DVD. I downloaded the registry mod from these forums to cause teh dump to occur when the explorer crashed. What else can I do to help?
      My Computer


  5. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #5

    CarlTR6 said:
    Stuart, follow the instructions in this tutorial so we can take a deeper look at your system.

    https://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html
    This url doesn't seem to work it just jumps direct to this URL https://www.sevenforums.com/ !
      My Computer


  6. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #6

    as requested more data
      My Computer


  7. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #7

    bump
      My Computer


  8. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #8

    Is this more complex than I thought or am I beyond help?
      My Computer


  9. Posts : 507
    Windows 7 Ultimate x64 SP1
       #9

    StuartLockey said:
    as requested more data
    StuartLockey said:
    bump
    StuartLockey said:
    Is this more complex than I thought or am I beyond help?
    Yes , I think your dump file is unusual with the other. And it indicates heap corruptions which hard to diagnose.

    If you have third party firewall, antivirus, internet security -> please uninstall and replace it with MSE.

    Perform Clean boot to troubleshoot which software or drivers that cause explorer crashes.

    Do windows update because I see your explorer.exe timestamp and version is older than ntdll.dll .
    explorer.exe = Fri Oct 30 19:14:21 2009 / version 16450
    ntdll.dll = Tue Mar 23 22:58:10 2010 / version 16559
    Code:
       Loaded symbol image file: explorer.exe
        Image path: C:\Windows\explorer.exe
        Image name: explorer.exe
        Timestamp:        Fri Oct 30 19:14:21 2009 (4AEBAB8D)
        CheckSum:         002CA0E9
        ImageSize:        002BF000
        File version:     6.1.7600.16450
        Product version:  6.1.7600.16450
        File flags:       0 (Mask 3F)
        File OS:          40004 NT Win32
        File type:        1.0 App
        File date:        00000000.00000000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    0:023> lmvm ntdll
    start             end                 module name
    00000000`77970000 00000000`77b1b000   ntdll    T (pdb symbols)          c:\windows\symbols\ntdll.pdb\0F7FCF88442F4B0E9FB51DC4A754D9DE2\ntdll.pdb
        Loaded symbol image file: ntdll.dll
        Image path: C:\Windows\System32\ntdll.dll
        Image name: ntdll.dll
        Timestamp:        Tue Mar 23 22:58:10 2010 (4BA9B802)
        CheckSum:         001B7506
        ImageSize:        001AB000
        File version:     6.1.7600.16559
        Product version:  6.1.7600.16559
        File flags:       0 (Mask 3F)
        File OS:          40004 NT Win32
        File type:        2.0 Dll
        File date:        00000000.00000000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    I dont know if that related with your problem but I've checked my windows -> my explorer.exe version/timestamp is newer than ntdll.dll. (Or at least they should have the same year)
    CMIIW :)

    Windbg Log:
    Code:
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (11d0.180c): Unknown exception - code c0000374 (first/second chance not available)
    Unable to load image C:\Windows\System32\ntdll.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntdll.dll
    ntdll!NtWaitForSingleObject+0xa:
    00000000`779bfd9a c3              ret
    0:023> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Exception Analysis                                   *
    *                                                                             *
    *******************************************************************************
    
    Unable to load image C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6\comctl32.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for comctl32.dll
    *** WARNING: Unable to verify timestamp for explorer.exe
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: kernel32!pNlsUserInfo                         ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: kernel32!pNlsUserInfo                         ***
    ***                                                                   ***
    *************************************************************************
    
    FAULTING_IP: 
    ntdll!RtlReportCriticalFailure+62
    00000000`77a36df2 eb00            jmp     ntdll!RtlReportCriticalFailure+0x64 (00000000`77a36df4)
    
    EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 0000000077a36df2 (ntdll!RtlReportCriticalFailure+0x0000000000000062)
       ExceptionCode: c0000374
      ExceptionFlags: 00000001
    NumberParameters: 1
       Parameter[0]: 0000000077aac3f0
    
    DEFAULT_BUCKET_ID:  STATUS_HEAP_CORRUPTION
    
    PROCESS_NAME:  explorer.exe
    
    ERROR_CODE: (NTSTATUS) 0xc0000374 - <Unable to get error code text>
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - <Unable to get error code text>
    
    EXCEPTION_PARAMETER1:  0000000077aac3f0
    
    NTGLOBALFLAG:  0
    
    APPLICATION_VERIFIER_FLAGS:  0
    
    LAST_CONTROL_TRANSFER:  from 0000000000000000 to 00000000779dc53d
    
    FAULTING_THREAD:  ffffffffffffffff
    
    PRIMARY_PROBLEM_CLASS:  STATUS_HEAP_CORRUPTION
    
    BUGCHECK_STR:  APPLICATION_FAULT_STATUS_HEAP_CORRUPTION
    
    IP_ON_HEAP:  00000000c0000374
    The fault address in not in any loaded module, please check your build's rebase
    log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
    contain the address if it were loaded.
    
    FRAME_ONE_INVALID: 1
    
    STACK_TEXT:  
    00000000`779dc53d ntdll! ?? ::FNODOBFM::`string'+0x122e4
    00000000`77872c7a kernel32!HeapFree+0xa
    000007fe`fc0e0ad0 comctl32!DSA_Destroy+0x34
    000007fe`feba6be1 shell32!DSA_DestroyCallback+0x4d
    000007fe`fec80062 shell32!CDefEventSinkContainer::`scalar deleting destructor'+0xd6
    000007fe`fec7ffd4 shell32!CDefEventSinkContainer::Release+0x20
    000007fe`fec7ff4e shell32!CItemStore::s_ClearEntry+0x34
    000007fe`fc0e0b84 comctl32!DSA_EnumCallback+0x48
    000007fe`feba18dd shell32!DSA_EnumCallback+0x4d
    000007fe`fec7e216 shell32!CItemStore::DeleteItem+0x87
    000007fe`fec7e3c9 shell32!CDefCollection::_RemoveAllItems+0x1d5
    000007fe`fec7e91e shell32!CDefCollection::_DestroyCollection+0x92
    000007fe`fec7e5d5 shell32!CDefCollection::~CDefCollection+0xc5
    000007fe`fec7e4e8 shell32!CDefCollection::`vector deleting destructor'+0x14
    000007fe`feb4a53d shell32!CCDBurn::Release+0x25
    000007fe`fec792a4 shell32!CDefView::_ReleaseCurrentCollection+0xd9
    000007fe`fec7acf2 shell32!CDefView::_DestroyView+0x22d
    000007fe`f30a0d72 EXPLORERFRAME!CShellViewProvider::Release+0x33
    000007fe`f30a0d02 EXPLORERFRAME!CShellBrowser::_ClearNavigationState+0x49
    000007fe`f30a0bb5 EXPLORERFRAME!CShellBrowser::_ReleaseNavigationState+0x17c
    000007fe`f30a69e3 EXPLORERFRAME!CShellBrowser::_SwitchNavigationState+0xed
    000007fe`f30a55ca EXPLORERFRAME!CShellBrowser::_ActivateNavigation+0xfd
    000007fe`f30a5473 EXPLORERFRAME!CShellBrowser::_OnConnectionCreated+0x2b5
    000007fe`f30a50ac EXPLORERFRAME!CShellBrowser::OnNavigationResult+0x98
    000007fe`f30a4fb1 EXPLORERFRAME!CPendingNavigation::OnConnectionCreated+0x4d
    000007fe`f30a27ed EXPLORERFRAME!CShellViewFactory::BeginCreateConnection+0x116
    000007fe`f30a2dde EXPLORERFRAME!CShellBrowser::_CreateConnectionForItem+0x36d
    000007fe`f30a2a3a EXPLORERFRAME!CShellBrowser::_CreateNewConnection+0xd9
    000007fe`f30a2946 EXPLORERFRAME!CShellBrowser::_NavigateToPidl+0x167
    000007fe`f30bee59 EXPLORERFRAME!CShellBrowser::_OnGoto+0xeb
    000007fe`f30bed83 EXPLORERFRAME!CShellBrowser::WndProcBS+0xc5f
    000007fe`f306bb39 EXPLORERFRAME!IEFrameWndProc+0xef
    
    
    FOLLOWUP_IP: 
    shell32!CDefEventSinkContainer::`scalar deleting destructor'+d6
    000007fe`fec80062 4883661000      and     qword ptr [rsi+10h],0
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  shell32!CDefEventSinkContainer::`scalar deleting destructor'+d6
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: shell32
    
    IMAGE_NAME:  shell32.dll
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4c4ef25d
    
    STACK_COMMAND:  !heap ; dds 77aac458 ; kb
    
    FAILURE_BUCKET_ID:  STATUS_HEAP_CORRUPTION_c0000374_shell32.dll!CDefEventSinkContainer::_scalar_deleting_destructor_
    
    BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_HEAP_CORRUPTION_shell32!CDefEventSinkContainer::_scalar_deleting_destructor_+d6
    
    WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/explorer_exe/6_1_7600_16450/4aebab8d/ntdll_dll/6_1_7600_16559/4ba9b802/c0000374/000c6df2.htm?Retriage=1
    
    Followup: MachineOwner
      My Computer


  10. Posts : 14
    win 7 64 ultimate
    Thread Starter
       #10

    HI again

    OK here is a griff dump from a clean booted machine. I have removed my PCTools firewall before I rebooted and re-ran this dump process.

    What more can I provide for you.

    btw I've checked 3 windows 7 X64 machines and they all have the same explorer.exe v6.1.7600.16450 dated 31/10/2009. I have run windows update as requested and nothing changed.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:11.
Find Us