Explorer.exe crashes, error 0xc0000005

[rtda]

Hi all, hope you can help. My computer has recently started to crash explorer.exe and I don't know why. I am not too technically minded so reading a dump file means nothing to me. I have attached a copy of the latest dump file if it helps.

*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** ERROR: Symbol file could not be found. Defaulted to export symbols for KERNELBASE.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ieframe.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for shell32.dll -
*** ERROR: Module load completed but symbols could not be loaded for explorer.exe
*** ERROR: Symbol file could not be found. Defaulted to export symbols for duser.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msvcrt.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msiltcfg.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ehSSO.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for AltTab.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for FXSST.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for GdiPlus.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for msvcr71.dll -

FAULTING_IP:
ole32!GetChannelCallMgr+63
7660ad65 ff11 call dword ptr [ecx]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 7660ad65 (ole32!GetChannelCallMgr+0x00000063)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 082565ac
Attempt to read from address 082565ac

PROCESS_NAME: explorer.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 082565ac

READ_ADDRESS: 082565ac

FOLLOWUP_IP:
ole32!GetChannelCallMgr+0
7660ad31 6a14 push 14h

MOD_LIST: <ANALYSIS/>

NTGLOBALFLAG: 0

APPLICATION_VERIFIER_FLAGS: 0

LAST_CONTROL_TRANSFER: from 7660ad0c to 7660ad65

ADDITIONAL_DEBUG_TEXT: Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

FAULTING_THREAD: ffffffff

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ_CALL

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ_CALL

DEFAULT_BUCKET_ID: INVALID_POINTER_READ_CALL

STACK_TEXT:
04c3f76c 7660ad65 ole32!GetChannelCallMgr+0x63
04c3f7b4 7660ad0c ole32!AsyncStubInvoke+0x68
04c3f804 7660dda6 ole32!StubInvoke+0x82
04c3f854 76528a43 ole32!CCtxComChnl::ContextInvoke+0xfa
04c3f930 76528938 ole32!MTAInvoke+0x1a
04c3f94c 7660a44c ole32!AppInvoke+0xab
04c3f97c 7660db41 ole32!ComInvokeWithLockAndIPID+0x372
04c3fa5c 7660a45c ole32!ThreadInvoke+0x302
04c3faa8 7666063c rpcrt4!DispatchToStubInCNoAvrf+0x4a
04c3fae4 766607ca rpcrt4!RPC_INTERFACE:ispatchToStubWorker+0x16c
04c3fb3c 766606b6 rpcrt4!RPC_INTERFACE:ispatchToStub+0x8b
04c3fb64 766622ce rpcrt4!RPC_INTERFACE:ispatchToStubWithObject+0xb2
04c3fb9c 76660bfa rpcrt4!LRPC_SCALL:ispatchRequest+0x23b
04c3fbe8 76660ac6 rpcrt4!LRPC_SCALL::QueueOrDispatchCall+0xbd
04c3fc08 76660a85 rpcrt4!LRPC_SCALL::HandleRequest+0x34f
04c3fc24 76660921 rpcrt4!LRPC_SASSOCIATION::HandleRequest+0x144
04c3fc58 76660895 rpcrt4!LRPC_ADDRESS::HandleRequest+0xbd
04c3fc90 7665fe85 rpcrt4!LRPC_ADDRESS:rocessIO+0x50a
04c3fd0c 7665fd1d rpcrt4!LrpcServerIoHandler+0x16
04c3fd18 7665fc6a rpcrt4!LrpcIoComplete+0x16
04c3fd28 77791d63 ntdll!TppAlpcpExecuteCallback+0x1c5
04c3fd50 777915b0 ntdll!TppWorkerThread+0x5a4
04c3feb8 76c6ed6c kernel32!BaseThreadInitThunk+0x12
04c3fec4 777c377b ntdll!__RtlUserThreadStart+0x70
04c3ff04 777c374e ntdll!_RtlUserThreadStart+0x1b


STACK_COMMAND: .cxr 04C3F488 ; kb ; dt ntdll!LdrpLastDllInitializer BaseDllName ; dt ntdll!LdrpFailureData ; dds 4c3f76c ; kb

SYMBOL_NAME: ole32!GetChannelCallMgr+0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: ole32

IMAGE_NAME: ole32.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7b96f

FAILURE_BUCKET_ID: INVALID_POINTER_READ_CALL_c0000005_ole32.dll!GetChannelCallMgr

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_CALL_ole32!GetChannelCallMgr+0

WATSON_IBUCKET: -1876629596

WATSON_IBUCKETTABLE: 1

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...514/4ce7b96f/c0000005/0013ad65.htm?Retriage=1

Followup: MachineOwner

 

[mitchell65]

I can't help much but this could be a corrupt file in the operating system. I see you have Win 7 Ultimate but only the 32 bit version installed. As you have 8GB of Ram installed you can only use 3.5GB hereby wasting 4 Gb RAM. Perhaps your copy of Ultimate is corrupt. Where did it come from?

 

[rtda]

Thanks Mitchell65 for a reply. I bought the copy of Win 7 Ultimate from Amazon, full package, boxed item. I have been toying with the idea of re-installing as the 64bit version that also came in the box, but I have so much software to reload, i have been a little hesitant. Being self employed, I can't have the computer down for too long.

 

[mitchell65]

This is what i thought. have you seen this?

 

[rtda]

hmm..interesting. I did buy my copy from pre-order Sold by: Amazon EU S.a.r.L. ordered on the 18th Aug 2009 and dispatched on the 20th Oct 2009 when Microsoft first released Win 7. What do you recommend?

 

[Golden]

My understanding is that Windows 7 was publically released on 22 October 2009.

We can do some checks:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click 'Copy' - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the validation tool here in your next reply

 

[rtda]

Done...here you go

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-FKHB4-8RQ7M-MBRTB
Windows Product Key Hash: RBwaqRVQl8Rsb7VnBCZl8KIh1fM=
Windows Product ID: 00426-292-3521721-85816
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {B56327CC-D9FB-4216-AD95-515DA6C576B6}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.130104-1431
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{B56327CC-D9FB-4216-AD95-515DA6C576B6}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-MBRTB</PKey><PID>00426-292-3521721-85816</PID><PIDType>5</PIDType><SID>S-1-5-21-3451958395-2058545944-3382048276</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.50</Version><SMBIOSVersion major="2" minor="5"/><Date>20120516000000.000000+000</Date></BIOS><HWID>323B3007018400F8</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00170-292-352172-00-2057-7600.0000-1572010
Installation ID: 010152489526256431844203013406283792503034550275540353
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: MBRTB
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 01/03/2013 15:08:33

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:1:2012 22:31
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NgAAAAIABAABAAEAAAADAAAAAQABAAEA6GEmUdBatiOqdkjkauA0SB60PBL+GiISvX4urExY

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC 051612 APIC1649
FACP A_M_I OEMFACP
MCFG 051612 OEMMCFG
OEMB 051612 OEMB1649
AAFT 051612 OEMAAFT
GSCI 051612 GMCHSCI

 

[Golden]

That looks perfectly fine to me - a system builder OEM on a custom machine.

Have you experienced any BSOD (Blue screen errors)? If so, follow these steps so we can try and help:

http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

Regards,
Golden

 

[rtda]

Cheers Golden. Can't remember the last time I had a BSOD albeit months not years ago since the last time. I will follow the steps on the BSOD post though and post the results as soon as I can.

regards,

rtda

 

[rtda]

Back again Golden,
I have sorted out the .dmp files, downloaded and run the SF Diagnostic tool the results of which are attached.

regards,

rtda

 

[rtda]

Ok. So explorer.exe just crashed again. I attach below the .dmp file and the SF diagnostic info....these crashes are getting really irritating.