Explorer.exe crushes when using TeamViewer

[penevigor]

Whenever I use TeamViewer I always get error message that explorrer.exe has stopped working.

This is what Event viewer log shows:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d6727a7
Faulting module name: SHELL32.dll, version: 6.1.7601.17755, time stamp: 0x4f0412de
Exception code: 0xc0000005
Fault offset: 0x000b4add
Faulting process id: 0xdfc
Faulting application start time: 0x01cd0f32262db3da
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\SHELL32.dll
Report Id: d3a62eeb-7cf0-11e1-acc1-00116b9716a5

 

[zigzag3143]

What version of Team Viewer? DO you have the VPN, and Display TM drivers installed?

 

[penevigor]

I have the latest version of TeamViewer on both clients. I updated to latest version today, but I always try to install the newest version.
No I don't have VPN, I use it just for Remote control and file sharing.

 

[zigzag3143]

I have the latest version of TeamViewer on both clients. I updated to latest version today, but I always try to install the newest version.
No I don't have VPN, I use it just for Remote control and file sharing.

There is a Team viewer log. Can you upload it to use?

 

[penevigor]

The log is attached

One other thing I have to mention is that I can't provoke the problem. While I am using remote control everything seams to work just fine. I finish the work on the remote computer (the one that has the problem with the explorer.exe), and the next time i try to connect the connection can not be established. And that is because the explorer.exe has stopped working.

At this time I solve the problem by connecting on the PC using mstsc and restarting the explorer.exe so then I can connect with the TeamViewer.

I apologize for not explaining the problem properly before, I hope this will show You better direction in helping me solve the issue.

Thanks for the replay

 

[writhziden]

2012/04/02 21:45:23.050 11692  6056 H32  explorer.exe: DragInterceptor: dep is enabled
2012/04/02 21:45:23.083 11692  6056 H32  explorer.exe: DragInterceptor: resumed 29 threads, max count 29
2012/04/02 21:45:23.083 11692  6056 H32  explorer.exe: DragInterceptor: interception successful (new interface)

2012/04/02 21:46:11.473 11692  6056 H32  explorer.exe: DragInterceptor: restored interface (v2)
2012/04/02 21:46:11.473 11692  6056 H32  explorer.exe: dll can unload now

2012/04/02 21:57:25.612 11692 11416 H32  explorer.exe: DragInterceptor: dep is enabled
2012/04/02 21:57:25.636 11692 11416 H32  explorer.exe: DragInterceptor: resumed 25 threads, max count 25
2012/04/02 21:57:25.636 11692 11416 H32  explorer.exe: DragInterceptor: interception successful (new interface)

2012/04/02 22:12:51.724 11692 11416 H32  explorer.exe: DragInterceptor: restored interface (v2)
2012/04/02 22:12:51.724 11692 11416 H32  explorer.exe: dll can unload now

2012/04/03 08:54:09.189 11692  6056 H32  explorer.exe: DragInterceptor: dep is enabled
2012/04/03 08:54:09.225 11692  6056 H32  explorer.exe: DragInterceptor: resumed 21 threads, max count 21
2012/04/03 08:54:09.225 11692  6056 H32  explorer.exe: DragInterceptor: interception successful (new interface)

2012/04/03 09:27:43.766 11692  6056 H32  explorer.exe: DragInterceptor: restored interface (v2)
2012/04/03 09:27:43.766 11692  6056 H32  explorer.exe: dll can unload now

2012/04/03 11:02:54.946 11692  7184 H32  explorer.exe: dll can unload now

2012/04/03 13:42:41.528 11692  7184 H32  explorer.exe: dll can unload now

2012/04/04 15:27:21.832  7776  3396 H32  explorer.exe: dll can unload now
[B][COLOR="Red"]2012/04/04 15:27:24.625  4724  6492 H32  explorer.exe: ******* assertion failed: 'freel', line 105, err 126[/COLOR][/B]
2012/04/04 15:27:24.625  4724  6492 H32  explorer.exe: dll can unload now

Teamviewer shows explorer.exe is behaving normally. The only issue I saw was:

[B][COLOR="Red"]2012/04/04 15:27:24.625  4724  6492 H32  explorer.exe: ******* assertion failed: 'freel', line 105, err 126[/COLOR][/B]

I could not find any information on this error online, though. It may be more useful to get the actual Windows logs for the machine(s) on which explorer.exe crashes.

• Please provide us with your Event Viewer administrative logs by following these steps:
  1. Click Start Menu
  2. Type eventvwr into Search programs and files (do not hit enter)
  3. Right click eventvwr.exe and click Run as administrator
  4. Expand Custom Views
  5. Click Administrative Events
  6. Right click Administrative Events
  7. Save all Events in Custom View As...
  8. Save them in a folder where you will remember which folder and save as Errors.evtx
  9. When asked, save the display information in English.
  10. Go to where you saved Errors.evtx
  11. Create a new folder by right clicking in a blank area within the folder Errors.evtx is saved in. You could also click New Folder at the top of the directory under the directory path box.
  12. Name the new folder Errors.
  13. Place Errors.evtx and the LocaleMetaData folder into the new Errors folder.
  14. Right click the Errors folder -> send to -> compressed (zipped) folder
  15. Upload the .zip file here.

 

[penevigor]

hope it helps

 

[writhziden]

Nothing to indicate why explorer.exe would crash as it has. I see a number of other errors related to WebBuilder2 and Microsoft Visual C++ software. I am wondering if there is data corruption occurring on the system.

• Run Disk Check with Automatically fix file system errors checked. Post back your logs for the checks after finding them using http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html.
  For any drives that do not give the message:
  Windows has checked the file system and found no problems
  run disk check again as above. In other words, if it says:
  Windows has made corrections to the file system
  after running the disk check, run the disk check again.
  
  
• Run http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html up to three times to fix all errors with a restart in between each. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations.

 

[ian4873]

Hi Penevigor,

Did you manage to fix the issue ? Because I have exactly the same crash and event message.
I am also running the latest Teamviewer installed, since with each update, I hope my issue will disappear without success so far..
The only thing I see, the CCC (Catalyst Control Center) is sometimes complaining about the resolution used by the Teamviewer display screen. not sure the crash of explorer is due to that..
Also, my SHELL32.DLL file's date has a modified date of Jan 4th 2012 ! which is very strange..
will run SFC /SCANNOW has well now

 

[writhziden]

ian4873, let us know if you find anything. If it is the exact same crash, it may help others having it, as well.

Normally, I do not like new users posting in other threads, but in this case, since this seems like such a bizarre occurrence, I think it may be helpful to other users.

 

[penevigor]

No, ian4873, I still cant solve the problem. I tried everything but nothing helps.
I did noticed though, that the problem shows up seconds after I close the connection.

I gave up in trying to fix the problem, but if you find any solution pls share it

 

[ian4873]

Thanks Writhziden..

I think I found something, since I am now able to reproduce the Explorer.exe crash !
Eventvwr message:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d6727a7
Faulting module name: SHELL32.dll, version: 6.1.7601.17755, time stamp: 0x4f0412de
Exception code: 0xc0000005
Fault offset: 0x000b4c80
Faulting process id: 0x1f2c
Faulting application start time: 0x01cd42a3f7652099
Faulting application path: C:\windows\explorer.exe
Faulting module path: C:\windows\system32\SHELL32.dll
Report Id: 49be8a53-af0c-11e1-a716-70f3952d7876

Teamviewer log can be send, but I would prefer not publish it publicly

I changed my color scheme to one built-in like suggested in some forums but that didn’t helped (related to Aero ).
I have a MacBook with TM 7.0.11067 which takes control of a Windows 7 with TM 7.0.12979.
If I close my session by using the X button at the top-left of the screen, all is fine on windows 7 side.
But, if instead I choose to quit TM without first ending the remote session, then explorer crashes on Windows 7 side. I guess the same would happen if you have a very short network outage.
And once explorer crashes on Win7, the pop-up windows asking if you want to debug or restart explorer remains until you take actions, and so long you don’t take the action to restart explorer, teamviewer is no longer responding to any remote connection requests.

 

[writhziden]

Interesting. Are you running Teamviewer on the Windows machine in elevated mode (as an administrator) or normal mode? If normal mode, have you tried running it elevated to see if the problem persists?

 

[ian4873]

I am running in Windows in unattended mode.. and the service is running with the local system account.

 

[writhziden]

I am not familiar with unattended mode (I know what it is, but I have never used it myself). Can you still open the TeamViewer application by right clicking on the TeamViewer icon and clicking Run as administrator?

I run TeamViewer on my system as just an application and not as unattended, and I run it as an administrator so I can do administrative tasks remotely. Are you able to do administrative tasks, i.e. install programs or uninstall them, remotely with unattended mode?

 

[ian4873]

here is a log of TM at the moment explorer has crashed. (I changed my ID's with the computer OS names).

 

[ian4873]

Since I use an administrator userid to login into the remote Windows 7, yes, I can do everything like if I was in front of the computer.

I have another test in mind.. I will remove the unattended setup and run it as an application, and see if it is still crashing when I quit TM on the client Macbook

 

[ian4873]

Here is what I did:
uninstall TM and select also the removal of any settings.
reinstall the latest version available.
tried in application mode first, all was ok.
setup the service mode, and I was not able to reproduce the issue !

 

[ian4873]

This is a log where explorer ends in crash:
2012/06/05 14:45:08.324 4032 3692 S0 Process 12260 in session 1 has terminated
2012/06/05 14:45:08.324 12260 11352 D1 CTcpProcessConnector::HandleRead(): Socket gracefully closed (PID=4032)
2012/06/05 14:45:08.324 12260 11352 D1! CInterProcess::EventFunction(): IPC-Connection Closed
2012/06/05 14:45:08.324 4032 3692 S0 CTcpProcessConnector::HandleRead(): Socket gracefully closed (PID=12260)
2012/06/05 14:45:08.324 4032 3692 S0 CInterProcessNetwork::NewInterProcessDataAvailable(): ConnectionClosed session=1 ptype=4
2012/06/05 14:45:08.325 4032 3692 S0 UpdateOnlineState newOnlineValue 1
2012/06/05 14:45:08.328 12260 10068 D1 ~MachineHooks: refcount = 1
2012/06/05 14:45:08.343 5424 5676 G1 Monitors: HP w2207 Wide LCD Monitor, \\.\DISPLAY1, 1680x1050, flags=3
2012/06/05 14:45:09.034 7980 9796 H32 explorer.exe: DragInterceptor: restored interface (v2)
2012/06/05 14:45:09.034 7980 9796 H32 explorer.exe: dll can unload now
2012/06/05 14:45:09.072 10756 8696 H32 explorer.exe: DragInterceptor: restored interface (v2)
2012/06/05 14:45:09.072 10756 8696 H32 explorer.exe: dll can unload now
2012/06/05 14:45:09.121 4116 9416 H32 explorer.exe: DragInterceptor: restored interface (v2)
2012/06/05 14:45:09.121 4116 9416 H32 explorer.exe: dll can unload now

This is a log where there is no explorer crash anymore (after reinstalling - see previous post):
2012/06/05 16:05:53.689 2836 10680 S0 Process 2632 in session 1 has terminated
2012/06/05 16:05:53.689 2632 11628 D1 CTcpProcessConnector::HandleRead(): Socket gracefully closed (PID=2836)
2012/06/05 16:05:53.689 2632 11628 D1! CInterProcess::EventFunction(): IPC-Connection Closed
2012/06/05 16:05:53.690 2836 10680 S0 CTcpProcessConnector::HandleRead(): Socket gracefully closed (PID=2632)
2012/06/05 16:05:53.690 2836 10680 S0 CInterProcessNetwork::NewInterProcessDataAvailable(): ConnectionClosed session=1 ptype=4
2012/06/05 16:05:53.690 2836 10680 S0 UpdateOnlineState newOnlineValue 1
2012/06/05 16:05:53.693 2632 5012 D1 ~MachineHooks: refcount = 1
2012/06/05 16:05:54.509 4116 9416 H32 explorer.exe: DragInterceptor: restored interface (v2)
2012/06/05 16:05:54.535 10756 8696 H32 explorer.exe: DragInterceptor: restored interface (v2)
2012/06/05 16:13:41.648 11816 2612 G1 CBuddyWindow::OnTimer(): System has become idle. TimeUntilIdle: 300000
2012/06/05 16:13:41.649 2836 10680 S0 CSendCommandToMaster::SendBCommandToMaster: CC=3 CT=33
2012/06/05 16:13:41.756 2836 11792 S0 CConnectionThread:rocessBuddyCommandClient: CC=3 CT=1
2012/06/05 16:15:04.160 11816 2612 G1 CBuddyWindow::OnTimer(): System is back to active
2012/06/05 16:15:04.161 2836 10680 S0 CSendCommandToMaster::SendBCommandToMaster: CC=3 CT=33
2012/06/05 16:15:04.555 2836 11792 S0 CConnectionThread:rocessBuddyCommandClient: CC=3 CT=1

 

[writhziden]

Here is what I did:
uninstall TM and select also the removal of any settings.
reinstall the latest version available.
tried in application mode first, all was ok.
setup the service mode, and I was not able to reproduce the issue !

Excellent! Thank you for posting back your steps. Hope they help others having similar problems.