Win7 Ultimate x64 SP1 Explorer.exe The Oddest Issue Ever

Callender said:

I've downloaded your dump and will look at it. The UVK scan log might or might not be useful. It could throw up a few surprises so it's worth a look.

thank you.
btw I mean 2nd dump named
3.AnotherExplorerMiniDump_explorer.rar (510.9 KB, 0 views)

Callender said:

Yes that's the one I downloaded. It's the same as the first one. All it really tells us is that Explorer crashed.

Code:

SYMBOL_NAME:  shell32!CDesktopBrowser::_MessageLoop+51
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: shell32
 
IMAGE_NAME:  shell32.dll
 
DEBUG_FLR_IMAGE_TIMESTAMP:  55c3a1b3
 
FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_shell32.dll!CDesktopBrowser::_MessageLoop
 
BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_BREAKPOINT_shell32!CDesktopBrowser::_MessageLoop+51

The dump doesn't pinpoint which .dll(s) to suspect so I'm hoping that the other dump will appear.

In the meantime there's a long list of dll's one of which is the likely culprit.

dlls.txt

Thanks a lot

So as far as I understand it was 2nd time directly confirmed by your kind analysis that a culprit is likely win7 shell as shell32.dll.

And frankly speaking this your 2nd time same verdict as 'shell32 desktop browser message loop' matches a visible fact of (from my point) some abnormal growing of explorer.exe process size from some unclear moment towards its like-crash/freeze point, when I believe that in normal way operations of explorer.exe its size should be naturally growing while some explorer involved actions performed but then, when those actions are finished, explorer.exe process size should roll-back (at least partly!). However, this assumed normal way roll-back doesn't happen from that unclear point of time, which is assumed as a start of this desktop browser message loop!

Also I know that there is a long list of .dll suspects, when my list of shell extensions as visible in Autoruns or ShellMenuView or ShellExView is abnormally big! Sorry it's not intentional. This laptop is just well set business pc aimed to process any possible operation at any need.

Now still waiting for next issue in hope for a right dump.

Callender said:

Okay since I will be offline for a week from today I've asked for help on this. Maybe someone will post their analysis of the dump you provided.

yep I keep in mind that your plan. thanks again and have a better time offline!

as I said before this issue doesn't bother me too much when I just need to restart laptop once in 2-3-4 days depends on how much actively I use explorer operation and right click ones in particular. but it's really odd!

Callender said:

laidbacktokyo said:

Callender said:

RE: Explorer Crash Dumps not appearing. Just check that folder Localdumps from time to time and also following a reboot.

Don't worry. There is just no C:\LocalDumps folder at all yet.

But z required key added to registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Explorer.exe

and win error reporting service set to automatic from manual.

also laptop has been surely restarted a few times.

Just to confirm the reg file contained this and you merged it?

Code:

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\Explorer.exe]
"DumpFolder"=hex(2):43,00,3a,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,44,00,75,\
  00,6d,00,70,00,73,00,00,00

Result:



I have to confess that I don't remember if the Localdumps folder gets created when merging the reg fle or only when explorer crashes.

RE: Help with crash dump. It seems that other members can't open your dump stating that it's too big.

Anyway here it is in text format.

Dump.txt

Last post from me for now so if anyone else has ideas please post.

Please don't worry. Now my laptop set exactly as all your info above!

C ya next week:)