windows explorer has stopped - when i click control panel

[NoelDP]

Please post the CBS folder as requested in section 4 from my link.

4. Log Collection

The steps that we have done have limited automated fixing capabilities, however they are excellent diagnostic tools and generate very informative logs.

1. Navigate to the following folder:
   C:\Windows\Logs
   ​
2. Right-click and on the CBS folder and select Copy.
3. Minimise all open windows and right-click on your Desktop, then select Paste.
4. Right-click on the CBS folder on your Desktop and select Send to > Compressed (zipped) folder.
5. A file, CBS.zip should appear on your Desktop.

 

[karthikaroxo]

Dear NoelDP,

as you mentioned i have created the zip file and attached herewith

regards
Karthik

 

[NoelDP]

I had to go back a bit to find what I think is the base of the problem (from an earlier SFC scan)...

2013-03-30 22:58:22, Error                 CSI    00000473 (F) STATUS_TOO_LATE #9765550# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowKeyNotFound), key = {provider=NULL, handle=0}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0x2a5ce20->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[146]"\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_netnvma.inf.resources_31bf3856ad364e35_en-us_f2c598f4572af10c"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 44420932 (0x02a5cf44))[gle=0xd0000189]
2013-03-30 22:58:22, Error                 CSI    [EMAIL="00000474@2013/3/30:17:28:22.980"]00000474@2013/3/30:17:28:22.980[/EMAIL] (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_TOO_LATE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
[gle=0x80004005]
2013-03-30 22:58:23, Info                  CBS    Failed to open regkey configuration. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-03-30 22:58:23, Info                  CBS    Failed to query Consent Key. [HRESULT = 0x80070013 - ERROR_WRITE_PROTECT]
2013-03-30 22:58:23, Error                 CSI    00000475 (F) STATUS_TOO_LATE #9765549# from Windows::Rtl::SystemImplementation::CBufferedRegistryProvider::SysOpenKey(flg = (AllowKeyNotFound), key = {provider=NULL, handle=0}, da = (KEY_READ), oa = @0x2a5d1d0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[146]"\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_netnvma.inf.resources_31bf3856ad364e35_en-us_f2c598f4572af10c"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 44422552 (0x02a5d598))[gle=0xd0000189]
2013-03-30 22:58:23, Error                 CSI    00000476 (F) STATUS_TOO_LATE #9765548# from Windows::Rtl::SystemImplementation::CKey::OpenExistingKey(f = 1, da = (KEY_READ), oa = @0x2a5d620, key = NULL, disp = 0)[gle=0xd0000189]

This type of error often indicates registry corruption, or permissions errors (perhaps on files, rather than registry objects).

Since the error there doesn't re-appear in the later SFC scan that you ran today, it appears to have been fixed

The question then arises as to what happened to break the CheckSUR scan.

Please attach the file C:\Windows\windowsupdate.log to your reply

 

[karthikaroxo]

Dear NoelDP,

Thanks for the reply.

i have attached the windowsupdate.log , pls find the attachment.

one more info, whenever i reboot my machine, the registry page appears [refer the attached screenshot].

regards
Karthik

 

[NoelDP]

Odd - three's no evidence that I can find that CheckSUR actually ran at all, and yet your earlier screenshot clearly shows it did.

Please try again, using a fresh download.
Be aware that the 'Install' may take a couple of hours, so leave it alone until it either exists naturally, or errors out.

While downloading, please upload your Event logs...

Please open Event Viewer
In the left pane, navigate to the Windows Logs
right-click on Applications and select 'Save all events as...' save as Apps.evtx
repeat for the System logs - save as Sys.evtx
Compress both files, and attach to your reply.

 

[karthikaroxo]

Dear

Regarding CheckSUR , to be honest before last post, i did not do anything about this.

you mean System Update Readiness Tool fixes Windows Update errors in Windows 8, Windows 7, Windows Vista, Windows Server 2008 R2, and Windows Server 2008 this?

pls confirm, will do the same.

also i have attached zipped "Event viewer"

regards
Karthik

 

[NoelDP]

Regarding CheckSUR , to be honest before last post, i did not do anything about this.

you mean System Update Readiness Tool fixes Windows Update errors in Windows 8, Windows 7, Windows Vista, Windows Server 2008 R2, and Windows Server 2008 this?

That's the one.

 

[karthikaroxo]

Dear NoelDP,

Thanks for the confirmation. i started the new download. once its done will run and come back to you.

regards
Karthik

 

[NoelDP]

You have a number of problems in the event logs.


Sentinel64 driver is missing the file
The Windows Firewall service terminated with service-specific error The data is invalid..
The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start
The following boot-start or system-start driver(s) failed to load:
discache
MpFilter
spldr
Wanarpv6
The Computer Browser service depends on the Server service which failed to start
The Apache2.2 service terminated with service-specific error Incorrect function.. (!!!)
BTHUSB - A command sent to the adapter has timed out. The adapter did not respond.
The MySQL service failed to start

Your machine is infected with malware - and MSE is having problems

Boot to Safe Mode with Networking, and update MSE, then run a full system scan

Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Delete everything it finds

ONLY THEN, reboot to Normal mode.

 

[karthikaroxo]

Dear NoelDP,

Thanks for more info and solutions.

will do them and back to you.

note: i have downloaded and tried to run the CheckSUR , again its failed. pls refer the attached screenshot [if required]

regards
Karthik

 

[NoelDP]

I see you have both 32-bit and 64-bit versions downloaded
Delete the 32-bit x86 version, as it's no good to you and will simply confuse things.

What other Anti-Virus programs have EVER been installed on this machine?

Please see my post #29 - you MUST get rid of the infection first!

 

[karthikaroxo]

Dear NoelDP,

I have deleted the 32 bit version. thanks

regarding any other Anti-virus, i did not use anything else. i thought MSE can safe me in all time. is this wrong?

as per your thread #29, now am scanning my system.

Pls suggest me , whether i need to use any other Anti-virus to safe my machine in future.

 

[NoelDP]

MSE is as good as any - but the system needs a specialist malware scanner as well, which I why I said to install MalwareBytes.
MSE's biggest failing is that it has a strict definition of malware (so that they don't get sued too often, I suspect), so they don't block the lesser evils.
Running MBAM regularly keeps the ones that slip through under control, but they are like cockroaches, and keep coming back.

If you are in the habit of going to 'unsafe' parts of the internet, then you need to change your whole approach to security, not just your AV.

 

[karthikaroxo]

Dear NoelDP,

Thanks for the clear information. to be honest i don't have any habit of "unsafe" sites. but for few software i have used cracked version. is this make this kind of issues ?? and recently i have used my friend's Pen-Driver, when i open it i can see list of exe files, like foldername.exe .. but before open i have used MSE to scan the driver.

--------------------
As suggested, i have run the both "MSE" and "malw are scanner". the malware scanner found some threads [like some issues in registry and some files]

i have removed them using the tool.

but still am having the same problem. [when i click on either "control panel" or "windows update", or windows property etc, am getting "Windows explorer has stopped working" and all the explorer are closed.
------------------

is there any way to fix it? or need to format the windows ?? Please suggest me. last 3 days i could not do any normal work.

also one more query, during the fixing, Mr.Golden asked me to un-install the MS-Office [he feels, it has been corrupted[, after un-installed, one of the issues fixed in my system [initially i have 2 issues, ]. shall i re-install the MS-Office now ??

regards
Karthik

 

[Golden]

also one more query, during the fixing, Mr.Golden asked me to un-install the MS-Office [he feels, it has been corrupted[, after un-installed, one of the issues fixed in my system [initially i have 2 issues, ]. shall i re-install the MS-Office now ??

Actually, it was a blocked 103 VLK (counterfeit installation)

If you insist on using counterfeit software, you will continue to have these sorts of problems.

 

[karthikaroxo]

Dear Golden,

Thanks for the reply.

you mean, i should use the proper licensed version to avoid the issue? ok sure will do.

i hope i will get reply from Mr. NoelDP - regarding other points.

regards
Karthik

 

[NoelDP]

start again as if approaching the issue clean, and follow the Posting Instructions - running fresh SFC and CheckSUR scans - if we're lucky, CheckSUR may now be able to run, and if not, we may have a chance of getting it to do so.

 

[karthikaroxo]

Dear NoelDP,

i have done the SFC/scannow, this time, it told like one issue has been fixed. pls refer the attached screen-shot.

also, i have attached the CheckSUR log files [in zip format]

after that i tried to run the CheckSUR , still am getting failur message.

pls suggest to proceed further.

regards
Karthik

 

[NoelDP]

Hmm -The SFC problem was an error in the 32-bit version of regedit, which has been fixed.

CheckSUR obviously ran OK, as the log is there - and it's only found the 'expected' errors from the IE10 install.

Does Explorer still crash opening the control panel?

what other symptoms are you seeing?

 

[karthikaroxo]

Dear NoelDP,

Yes , still the Explorer is crashing while open the control panel.

not only Control Panel, i cant go to windows based folder [like my-computer's property, windows update, ].

when i reboot my machine, it takes around 3 to 4 mins to boot.

in the task-manager, i can see around 15 "Svchost.exe" are in running stage. pls refer the attached screenshot.

regards
Karthik