Windows Explorer Crashes Repeatedly, playing games or Youtube videos

[miki759]

Good afternoon every one!

I am having problems with Windows Explorer crashing every 3 minutes (very precisely thanks to Windows App logs)

I have read a few old threads on the forum and followed a few steps.

It seems that the Atium64.dll is at fault in my case. I will look into downloading an older or newer version.
Until then, please orientate me with your knowledge!!!

This is what I have found so far:

Nom du journal :Application
Source : Application Error
Date : 23/12/2012 12:57:12
ID de l’événement :1000
Catégorie de la tâche 100)
Niveau : Erreur
Mots clés : Classique
Utilisateur : N/A
Ordinateur : ESCLAVE
Description :
Nom de l’application défaillante Explorer.EXE, version : 6.1.7601.17567, horodatage : 0x4d672ee4
Nom du module défaillant : atiumd64.dll, version : 9.14.10.926, horodatage : 0x5064fc85
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000019088b
ID du processus défaillant : 0x1088
Heure de début de l’application défaillante : 0x01cde10431dda4e3
Chemin d’accès de l’application défaillante : C:\Windows\Explorer.EXE
Chemin d’accès du module défaillant: C:\Windows\system32\atiumd64.dll
ID de rapport : e28df8f3-4cf7-11e2-b674-20cf301de993
XML de l’événement :
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-12-23T11:57:12.000000000Z" />
<EventRecordID>51782</EventRecordID>
<Channel>Application</Channel>
<Computer>ESCLAVE</Computer>
<Security />
</System>
<EventData>
<Data>Explorer.EXE</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>atiumd64.dll</Data>
<Data>9.14.10.926</Data>
<Data>5064fc85</Data>
<Data>c0000005</Data>
<Data>000000000019088b</Data>
<Data>1088</Data>
<Data>01cde10431dda4e3</Data>
<Data>C:\Windows\Explorer.EXE</Data>
<Data>C:\Windows\system32\atiumd64.dll</Data>
<Data>e28df8f3-4cf7-11e2-b674-20cf301de993</Data>
</EventData>
</Event>



Sorry for the french. I assume you all know Windows so well that you do not need any translation, but let me know if I can help in any other way!

Thanks Windows 7 Forums!!!

 

[koolkat77]

Perform a System File Check:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Disk Check on your hard drive for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

What antivirus are you using?
Use MSE and MBAM.

• Microsoft Security Essentials - Free Antivirus for Windows
  
  • Malwarebytes - Free
    • http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

:ar: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

 

[miki759]

Perform a System File Check:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Disk Check on your hard drive for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

What antivirus are you using?
Use MSE and MBAM.

• Microsoft Security Essentials - Free Antivirus for Windows
  • Malwarebytes - Free
    • http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

:ar: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Hello Koolkat!!!
Thanks for giving me directions!
So this is where I stand so far:

I have run a Disk Check at restart, I found the logs and uploaded them, but the logs are in French again. (or maybe you don't need them):sarc:
I ran a system file check too (find it enclosed)
I also tried to install MSE but I keep having errors (picture enclosed) and when I actually click on my Notifications Center, it tells me to activate it and when I click on "Activate MSE" I land on my C:\Windows\system32 file. I have no idea why.
Ran a MBAM scan as well as as a Superantispyware scan. (find enclosed)

Update: You will find lots of PUP Funshion on the MBAM Scan logs (chinese software to watch streaming) but the MBAM team said they were working on removing those alerts: pleaseeee funshion is not a adware! please fix this oh god.... - Malwarebytes Forum

I use Kaspersky Internet Security 2012 (if you want me to do anything with it, say so, your wishes are my orders).

P.s.: If you could help me install MSE or fix it, I would be glad to do it too.

 

[NoelDP]

You may have a rootkit infection!

2012-12-25 22:28:19, Info                  CSI    0000030e [SR] Beginning Verify and Repair transaction
2012-12-25 22:28:19, Info                  CSI    00000310 [SR] Cannot repair member file [l:30{15}]"MsMpRes.dll.mui" of Security-Malware-Windows-Defender.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"fr-FR", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-12-25 22:28:19, Info                  CSI    00000312 [SR] Cannot repair member file [l:30{15}]"MsMpRes.dll.mui" of Security-Malware-Windows-Defender.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"fr-FR", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-12-25 22:28:19, Info                  CSI    00000313 [SR] This component was referenced by [l:266{133}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~fr-FR~6.1.7601.17514.Microsoft-Windows-Client-Features-Language-Pack"
2012-12-25 22:28:19, Info                  CSI    00000316 [SR] Could not reproject corrupted file [ml:520{260},l:86{43}]"\??\C:\Program Files\Windows Defender\fr-FR"\[l:30{15}]"MsMpRes.dll.mui"; source file in store is also corrupted
2012-12-25 22:28:19, Info                  CSI    00000318 [SR] Repair complete

That file is part of Windows Defender/MSE and so is a target for many malware programs.

Please ensure that you uninstall 'DriverGenius' - it's far better to source your own drivers than to rely on soemthing else to do it for you, and it appears according to SAS to have downloaded a trojan, rather than a real driver!.


I would download TDSS Killer, and check the system with that before doing anything else - Anti-rootkit utility TDSSKiller - just in case (it will probably find nothing, but better safe than sorry!)

Why are you attempting to install MSE, when you say you have Kaspersky already installed? - If you are changing because Kaspersky is about to expire, you MUST uninstall it, and use their cleanup tool before attempting to install MSE. Residuals from other, earlier AV's should also be removed using the manufacturer's cleanup/removal tools, as they frequently interfere with teh proper operation of any current AV.

Having said all that - the affected file appears to be the original from the Windows 7 install, but because it's a French version, I don't have a copy to hand, and can't download one until much later in the week.
From the looks of your system specs, you should have a Windows 7 x64 disk available?

You can extract the required file from that.
http://www.sevenforums.com/tutorials/42776-extract-files-windows-7-installation-dvd.html?ltr=E

The file will be found in the \System32\fr-FR\ folder, rather than directly in the System32 folder.
The file you are looking for is MsMpRes.dll.mui v6.1.0.6385 - but you need to know where and how to place it properly.

First, please do a Search in C:\Windows\winsxs for the file MsMpRes.dll.mui
You will probably only find one instance - in a folder that starts C:\Windows\winsxs\amd64_security-malware-wi..-defender.resources_31bf3856ad364e35_6.1.7600.16385_fr-FR_

If you right-click on the found file, and select 'Open file location' that will move the focus to the proper folder. Now click at teh right-hand end of the address bar, just before the down-arrow, and the full address will appear, use Ctrl+A to highlight all, and Ctrl+C to Copy the address.
Save the address in a Notepad text file, for safekeeping.
In the notepad file, copy the address to a second line, and delete the C:\Windows\winsxs\ from the address, so that you have only the folder name
highlight that folder name, and select Copy

Now create a new folder by opening an Elevated Command Prompt window, and running the following commands
MD C:\mikitemp
MD C:\mikitemp\<longfoldername>

You can insert the <longfoldername> by right-clicking on the window, and selecting Paste.

Now extract the MsMpRes.dll.mui file from the disk and save it to your desktop - you can then copy it to the C:\mikitemp\<longfoldername> folder


Then run the following command in the Elevated Command Prompt window...

ICACLS C:\mikitemp /T

Post the results of that.

...and then I'll tell you how to get everything into the right place



Here are some instructions to make life easier
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

 

[NoelDP]

...and to get back to the original problem!

I'd stick with Kaspersky for the moment - but you still need to fix the file problem.

a regular crash like that inplies perhaps a scheduled event.
a quick Google search leads to the conclusion that the problem lies with the ATI drivers.

You appear to be running an older set of drivers - try updating to the latest from here.... AMD Catalyst

do NOT install the Beta drivers!

 

[miki759]

Thanks Noel for your prompt answer!

Ok... Sooo... Sorry for all the effort you have put into telling me how to fix MSE... I just didn't think it would be that complicated. Plus, I do not have my DVD of Windows under my hand so... Nevermind.
Like you said:Why install MSE when Kasp. is already installed. I just figured I wanted as much protection as possible! (stupidity rules over all ^^)...

Sorry for the time you spent explaining all the steps for MSE! I have simply archived the alert for MSE so that I do not need to worry about it. I just do not have my Win DVD...

That being said, I have run a TDSS Scan which you can find enclosed (logs and jpg results).

I have "updated" my ATI drivers, though I already had the latest. So I uninstalled and reinstalled.
Oh and btw, I do not know if this is normal, but during ATI Drivers install, every time, my screen goes black, then image comes back, and then, screen goes to black again... but stays black... =.= So I am forced to execute an illegitimate reboot. =.= That pisses me off so hard.

On an other note, for the last month or so, while booting my computer, and after login in, my computer freezes. Programs load, I see my desktop, and before I can even press Ctrl+alt+del, computer freezes, and thanks to my Logitech G19, I can see the performances of my computer. UC = 0 !!! But the desktop is till here, though I cannot do anything on it. Home button does nothing, Ctrl+alt+del either.
This happens = 1/2 or 1/3 times.

To summarize:
By order of importance to me:
Windows Explorer Crashes
Computer freezes on boot
I don't care about ATI updates black screen, it's a minor incident since updates come once every 4 months.

I guess all problems do not need to be solved here (that would be abusing your services) so let's focus on the 1st problem I posted.

Thanks Noel for your advice again, Toolkit scan results updated!

EDIT: OH MA GOD!!!! I just had to reboot my PC 7 times for it not to crash on boot... >.<

 

[NoelDP]

The MsMpRes file still needs to be fixed - it's part of the OS, after all

The fact the screen flashes when installing the ATI drivers is perfectly normal - I've known some driver sets flash four or five times, as it flips from a normal resolution to VGA and back again repeatedly while it upgrades the system drivers.
Obviously, if at some point it's getting 'stuck' on a black screen, then there's something that didn't work properly. (how long did you leave it before forcing a reboot?)

My best guess would be that you need to completely uninstall the ATI drivers - GPU-57: How to uninstall pre-existing graphics card drivers from a Microsoft Windows based system

...and clean up afterwards - this guide looks as if it should be pretty useful.... ATi Catalyst Installation Guide :: TweakTown USA Edition
You'll actually want the removal instructions at
http://www.tweaktown.com/articles/569/ati_catalyst_installation_guide/index2.html

make sure that you reboot at least twice before attempting to reinstall the drivers again.

 

[miki759]

I thought this was meant to be, so I let the black screen for 10 minutes, and even longer once as I left to eat and came back, still black.

Ok, I'll redo-it again then!!!! I'm going to follow your instructions and the guides right away!

 

[koolkat77]

I'd check the temperatures..
Overheating could be a reason for black screens.

For monitoring the heat/celsius of the system, use Speccy or HWinfo:

• Speccy - System Information - Free Download
• CPUID - System & hardware benchmark, monitoring, reporting

 

[miki759]

Ok, just so you know, I have an akasa Fan control device on my case. So I'm aware of temperatures all over my case.
Average is 34°C. I would get alerts as soon as temperature is higher than 55°C cuz I'm a freak and I like to know if something's weird ^^!

Downloading Speccy.

As Noel advised me to reboot twice for Drivers... Didn't have the choice but to reboot 4 times cuz crashes on boot lol!
Also going to reinstall Catalyst.

URL to snapshot from Speccy: http://speccy.piriform.com/results/3een2H2KNpWQYt5R8nkQLlJ

EDIT: ATI Drivers installed following the steps in guide. Screen did not go black.
EDIT 2: Haven't had explorer crashes in a while.

 

[NoelDP]

Please repeat follow the BSOD posting guidelines - there should be some data there now that KoolKat can work on.

 

[miki759]

I would have if I had gotten a BSOD which I did not.
Can I create a dump file even though i do not get BSOD?

 

[koolkat77]

Can I create a dump file even though i do not get BSOD?

Nope.. Anymore explorer crashes?

Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

Please upload your msinfo32.txt file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Export -> Save as msinfo32.txt and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .txt file, click send to compressed (zipped) folder -> Upload the .zip file here.

Upload a screenshot of your hard disk using CrystalDiskInfo and summary tab using Speccy:

• Speccy - System Information - Free Download
• CrystalDiskInfo - Software - Crystal Dew World
• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[miki759]

Ok, here goes:
C: View attachment 247240
D: View attachment 247241
E: View attachment 247242

Speccy: View attachment 247243


It is so weird though, because my boot disk is E even though the system is located on C. I think I cannot boot from C after selecting it from BIOS

Here is my msinfo32: View attachment 247244

 

[koolkat77]

Okay,

BTW, is the firmware of the SSD-s up to date?

 

[miki759]

Okay,

BTW, is the firmware of the SSD-s up to date?

I have no idea... How to check that?

I'm going to play a game I usually start getting crashes from Windows Explorer on. I'll keep you updated in a mere 40 min or so.

Thanks

 

[koolkat77]

I've requested a friend to help with that.

In the meantime, let us know if explorer crashes again

 

[essenbe]

The current firmware for the Vertex 2 is 1.37 and can be downloaded with the instructions here. What firmware are you currently using?

 

[miki759]

Confirmation: No more Windows Explorer Crashes!!! Good lord!

Hello Essenbe, thanks for joining in!
How do I know the firmware I use? (i'm going to google it to find and tell you if I can make it before your answer)

Says "i should check at boot in the BIOS". Ok Be right back!

 

[essenbe]

You are running firmware version 1.11, You can go to device manager ( click start, type device manager in the search box, click on device manager) expand disk drives, right click and select properties, click the details tab in the dropdown box the second listed is hardware ID, that will give you the drive name and the firmware version. You will see my Samsung is running CXM03B1Q firmware. You can also download AS SSD and in the left corner it will tell you your alignment and firmware.

View attachment 247253