Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Multiple crashes of Explorer

13 Oct 2009   #1
dockster

Windows 7
 
 
Multiple crashes of Explorer

I have good and bad days. on bad days, Explorer crashes 10 or so times a day. Here's the details:

Problem signature:
Problem Event Name: APPCRASH
Application Name: Explorer.EXE
Application Version: 6.1.7600.16385
Application Timestamp: 4a5bc9bb
Fault Module Name: StackHash_3aac
Fault Module Version: 6.1.7600.16385
Fault Module Timestamp: 4a5be02b
Exception Code: c0000374
Exception Offset: 00000000000c6cd2
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 3aac
Additional Information 2: 3aac27612f55de5fedc05a5b0c1eeda1
Additional Information 3: b8d0
Additional Information 4: b8d018ca52c0d57f12158de2274a7f2b
************


Any help or insight?


My System SpecsSystem Spec
.
13 Oct 2009   #2
usasma
Microsoft MVP

 
 

Not much other than it's a heap corruption ( c0000374 ).
Please generate a dump file of explorer.exe as soon as you notice the crash happening. To do this, right click on Explorer.exe in the Processes tab of Task Manager and select "Create dum file".

Note where the dump file ends up, upload it to a file hosting service and let us know the link to download it from.
My System SpecsSystem Spec
13 Oct 2009   #3
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by usasma View Post
Not much other than it's a heap corruption ( c0000374 ).
Please generate a dump file of explorer.exe as soon as you notice the crash happening. To do this, right click on Explorer.exe in the Processes tab of Task Manager and select "Create dum file".

Note where the dump file ends up, upload it to a file hosting service and let us know the link to download it from.
Unfortunately, that method of dump file collection doesn't work well with crashes. To be useful, the dump has to capture the stack of the offending thread at the precise point where the exception is thrown. If you're off by mere microseconds, you'll see either the aftermath or nothing at all. (It's a good way to get dumps of hung processes though - if they're so badly hung that you've got seconds or even minutes to act.)

In XP, it was simpler to configure user-mode dump collection, even though it didn't always work. Because the Dr.Watson mechanism relied on injecting code, it wouldn't succeed in situations where the stack was smashed or exhausted. In Vista and Win7, the WERSVC is far more robust, but it also makes it necessary to jump through more hoops to get a crash dump.
=========================


@Dockster: can you repro this crash or is it something that seems to happen relatively randomly?
My System SpecsSystem Spec
.

13 Oct 2009   #4
usasma
Microsoft MVP

 
 

Thanks for explaining that H2SO4! No wonder I don't get much when I try that!

Would the output of msinfo32.exe or eventvwr.msc collect more info on the crash?
My System SpecsSystem Spec
13 Oct 2009   #5
H2SO4

Win7x64
 
 

[quote=usasma;307845]Thanks for explaining that H2SO4! No wonder I don't get much when I try that!

No problem Usasma

Quote   Quote: Originally Posted by usasma View Post
Would the output of msinfo32.exe or eventvwr.msc collect more info on the crash?
Short version: no, it's unlikely to help.

Longer version: <to be penned after I come back from playing "errand boy" for my wife>.
My System SpecsSystem Spec
13 Oct 2009   #6
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by usasma View Post
Would the output of msinfo32.exe or eventvwr.msc collect more info on the crash?
There are at least two fundamental issues here:

a) Extracting any sort of dump from the affected system at the point of the crash.
b) Making sure the dump is actually useful.

======================================

Regarding (a), there are any number of ways to get user-mode crash dumps, but the most relevant ones for our purposes are:

1. Configure the in-built WERSVC to create a dump when it's informed by the kernel of a second-chance exception. It only takes a single registry modification ("ForceQueue") for the default settings. I did a basic write-up just now:

https://www.sevenforums.com/crashes-d...tml#post308170

2. Download the "debugging tools" package onto the machine in question and use either the debugger itself or the ADPlus script (preferred) to latch onto the process in question and wait for a crash. Example:

adplus -crash -MiniOnSecond -pn explorer.exe

Should the process being monitored crash (suffer a second-chance exception), adplus causes CDB to generate a dump.

Method (1) is simpler because it doesn't require any downloads, but (2) is more powerful and granular. In certain situations you can't do without (2).

======================================

Regarding (b), as you pointed out this is a likely heap corruption scenario, which means that the dump itself is unlikely to show the true culprit. To get info at the time of the actual corruption rather than somewhere down the track, it's necessary to first activate "pageheap" or one of the other associated extra-scrutiny heap mechanisms for the process in question. This is analogous to the way that special pool is used for kernel-mode pool corruption issues.

The GFLAGS utility in the debug tools package can make the job of modifying IFEO (Image File Execution Options) settings in the registry for a given process somewhat easier. For example, to enable pageheap for Explorer:

gflags /p /enable Explorer.exe
<restart the process>

After that, crashes should occur durring attempted heap overruns, not afterwards when the mangled heap memory is being accessed.

Hope this helps
My System SpecsSystem Spec
13 Oct 2009   #7
dockster

Windows 7
 
 

Wow -- you guys are way beyond me as far as debugging knowledge. In any case, I haven't had any more crashes but when I do, I will try to gather more information. by the way, are the instructions the same for x64?
My System SpecsSystem Spec
13 Oct 2009   #8
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by dockster View Post
... I haven't had any more crashes but when I do, I will try to gather more information. by the way, are the instructions the same for x64?
Yes. If you go through this registry edit procedure...

https://www.sevenforums.com/crashes-d...tml#post308170

... you should have a shiny new memory dump the next time Explorer (or anything else for that matter) crashes on your system. Analysis of the memory dump is an initial step in understanding the cause.

As Usasma pointed out, the specific type of crash in your instance is complex and further steps may be necessary later.
My System SpecsSystem Spec
14 Oct 2009   #9
Lunarpancake

Windows 8 Professional
 
 

I find that when my explorer crashes it won't stop crashing.


For example. explorer crashes when right clicking and icon. Explorer reloads and I try to right click that icon....explorer crashes again. Continues until I reboot.
My System SpecsSystem Spec
14 Oct 2009   #10
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by Lunarpancake View Post
I find that when my explorer crashes it won't stop crashing.


For example. explorer crashes when right clicking and icon. Explorer reloads and I try to right click that icon....explorer crashes again. Continues until I reboot.
That would be because the same bug in the non-default context menu handler which made it crash the first time is still there when you right-click the second time after a process restart
My System SpecsSystem Spec
Reply

 Multiple crashes of Explorer




Thread Tools




Similar help and support threads
Thread Forum
Windows Explorer (explorer.exe) crashes every few minutes.
Starting yesterday, every few minutes a message comes up that windows explorer has stopped working, then restarts. I've run a sfc /scannow (cbs.log below). Within the cmd.exe it says that "Windows Resource Protection found corrupt files but was unable to fix some of them". I've run a dskchk /f...
General Discussion
Crashes while playing Witcher 2 and other explorer.exe crashes.
HI there i have noticed recently that i have been getting odd explorer.exe restarts whenever i go to Control Panel-System & Security-Windows Update. After clicking windows update explorer will say it needs to restart and go ahead and restart itself. The problem is that it is completely random when...
BSOD Help and Support
Explorer.exe Crashes, attempts restart, crashes again. Details Inside
Hello everyone. This morning I turned my computer on to find that Explorer.exe had crashed. I attempted restarting explorer.exe but every time it attempted to restart it would just crash. Details: Problem signature: Problem Event Name: APPCRASH Application Name: explorer.exe ...
BSOD Help and Support
Win 7 x64 explorer crashes
Hi, I have the problem with the windows explorer crashng all the time. I've done the ShellExView thing and still get crashes, I've run the SFC /scannow and all is ok except for one error with the AMD version os opservices.dll, but as I'm using an Intel processor and the intel version iof...
BSOD Help and Support
explorer.exe crashes..
Hi all, My first thread here after helping others. I have noticed this explorer.exe encountered a problem and needs to close and after which a message explorer is restarting umpteen times. When drilled down why it is happening, I came to know, whenever I change the start orb, after few...
BSOD Help and Support
Windows 7 Explorer Multiple Crashes
I got a sudden rash of Windows Explorer crashes - anything from trying to open a folder or trying to run a program from the Start Menu. A shutdown/restart appeared to resolve the issue for now but from reading another forum, it appears I'm not alone with respect to the type of crash and the...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:23.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App