Windows Explorer Error Message - a .DLL problem?

[Guest]

I seem to have developed a unique error. Sending the problem report to
Microsoft directs me to an (apparently) incorrect resolution.

Overview of the problem: Occurs in Explorer.exe in Windows XP Pro on my
notebook computer. Selecting specific drive sources produces the error: ‘The
Instruction at “0x7c911e58†referenced memory at “0x00000000â€. The memory
could not be “readâ€.’ After acknowledging the error, Explorer shuts down and
restarts.

I say specific drive sources because this very rarely happens on the
internal hard drive (C, or the external USB hard drive (E. However, it
happens inevitably on the CD/RW Drive (D and on my SanDisk ImageMate 5 in 1
Reader (USB Chip Reader) (Z. On a rare occasion I can actually select these
drives and view the directory, a subdirectory or even copy a file to or from
the drive. However, once the error occurs, I am forced to reboot before I can
use Explorer in any successful manner on any drive.

What I know: I know there is nothing wrong with the media or the drives. I
have connected this device to other computers and it works perfectly. I can
copy data to and from chips and across my home network. I have tried deleting
these devices from the device manager and reinstalling them. This does not
correct the problem. I have all current updates from Microsoft, except for
Internet Explorer 7. I would like to correct this error first.

What I suspect: I probably caused this problem myself. To the best of my
recollection, this problem started after using a program called PC Point -
which was supposed to correct a sundry of efficiency issues in Windows. This
app informed me that the registry indicated a DLL file was supposed to be in
the system32 directory, but was not. I located this file on my system and
copied it to the directory. After that, the problems began. However, I do not
remember the name of this library file. I expect that if I can identify this
file and delete it from the system32 directory, the problem should correct
itself.

 

[Gerry Cornell]

Rex

Please post a full copy of the Error Report from Event Viewer.

You can access Event Viewer by selecting Start, Administrative Tools,
Event Viewer. When researching the meaning of the error, information
regarding Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer. Now start your message (email) and do a paste into the body of
the message. This will paste the info from the Event Viewer Error Report
into the message. Make sure this is the first paste after exiting from
Event Viewer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

I know it took forever to get aroud to this, but I still have the problem. I
hope this data helps:

Three entries are created in the Application Event Log when the error
occurs, they are as (or similar) to the following:

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 3/16/2007
Time: 7:40:11 PM
User: N/A
Computer: LAPTOP
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 3/16/2007
Time: 7:39:48 PM
User: N/A
Computer: LAPTOP
Description:
Fault bucket 127754873.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 32 37 37 35 34 38 37 12775487
0010: 33 0d 0a 3..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 3/16/2007
Time: 7:39:37 PM
User: N/A
Computer: LAPTOP
Description:
Faulting application explorer.exe, version 6.0.2900.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x0003426d.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 6e 74 64 6c 6c in ntdll
0038: 2e 64 6c 6c 20 35 2e 31 .dll 5.1
0040: 2e 32 36 30 30 2e 32 31 .2600.21
0048: 38 30 20 61 74 20 6f 66 80 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 33 34 32 36 64 0d 0a 3426d..


Additional assistance is welcomed.

 

[Azagtoth]

Sounds like a system file is corrupted or overwritten. Stick in your
windows disk and run SFC /scannow.
Then do start menu > Run

"chkdsk c: /r"

remote everything from startup using msconfig.

not services.... start up k

reboot and see if it is still going on.

if not, system restore.

if not, backup wipe and load. You cannot "reload" winlogon without doing
alot of crap from a boot cd. so i would not bother. the sfc will
probably resolve it.

good luck