Problem with Windows Explorer crashing repeatedly

[Edward Ripley-Duggan]

I have been dogged by several variations on the following problem in the past
two days, an annoyance that seems somewhat intermittent. As a preamble, let
me mention that whatever is going on does not occur in Safe Mode, and also
that I have checked the system with with both NOD32 and with F-Secure's
online scanner, neither of which show any virus problems.

The problems began when I booted my machine, and found it cycling as
Windows boot moved into the main Windows screen. The screen icons would show,
and several icons would show in the tray (NB I run very little during boot,
and nothing new has been added). Then the icons would disappear and the
screen would suddenly blink back to the wallpaper. Next, the screen icons
would show again, the tra would refill, but then I'd drop back to wallpaper
again... This "cycling" behavior happened a couple of times initially, but on
rebooting, the system appeared stable, so I wasn't that concerned.

This morning, I got a message stating that Windows Explorer was closing
because of a Data Execution Prevention Error (one reason I ran the extensive
AV). On several boots I received the message that W E had crashed (always
during the final state of boot, just as the tray filled).

I decided to roll the system back with System Restore. Initially, this
seemed to work, but shortly the boot errors started to appear with greater
frequency, until I could no longer use the system at all except in Safe Mode.
I deleted a number of tray items (all but NOD 32, volume, and some
specialized scanner software that would be a pain to reinstall). I also
turned off Data Execution Protection for W E. Still, I was unable to achieve
a clean boot, with the screen clearing each time I acknowledged the W E crash
warning. In effect, the same cycling behavior I had initially seen. Sometimes
I would get a message that the Dr. Watson debugger had also crashed (though I
hadn't started it, I'm guessing that the WE crash triggered it). Very
frustrating.

I've just rolled back to a still earlier date. Right now, for the moment the
system is booting normally, and I though that I'd post this. Maybe the
problem won't re-occur, but I'm not sanguine, Has anyone experienced this
problem? Does anyone have a solution? I'm wondering if W E has become
corrupted, in which case I can replace it from my last full system backup, or
from the CD.

Does anyone have a clue what might be going on here?

 

[Mark L. Ferguson]

You probably have a conflict between a recent Windows Update, and some
hardware device driver. Unless your hardware Mfg. comes up with a better
driver, the alternative is to remove and refuse the update. The "Custom'
option in non-automatic update includes a checkbox to 'don't ask again'
(add/remove app has a checkbox to 'show updates')

 

[Edward Ripley-Duggan]

Thank you, Mark. Seems possible, even likely, although the first rollback I
did predated the latest round of Windows Updates and didn't solve the issue,
for some reason. However, with the second and slightly earlier rollback my
system seems stable again. Whether the proximate cause is the Updates or
something else, I tend to agree with you that it's ultimately some form of
hardware conflict. At this point, pinning it down is more effort than it is
worth. I may reinstall the Updates one by one, or simply take the (fairly
low) risk of avoiding the December batch.

 

[Gerry]

Edward

Does the same thing happen if you boot to safe mode?

Please post one complete copy only of each of the Warning and Error
Reports from the System log of Event Viewer from the last boot
confirming which appear in previous boots. No Information Reports or
Duplicates please.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Edward Ripley-Duggan]

Thank you, Gerry.

I had a trouble-free week, until this AM. I fixed the problem again by
rolling back the system, but clearly something is fundamentally wrong. I have
appended a cycle of event reports, per your suggestion. I'm wondering if this
is somehow related to the Ipod software on the machine--not mine but my
daughter's. Anyway, here goes.


1.
Event Type: Information
Event Source: SecurityCenter
Event Category: None
Event ID: 1800
Date: 1/5/2008
Time: 9:50:19 AM
User: N/A
Computer: DH8J2091
Description:
The Windows Security Center Service has started.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

2.
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/5/2008
Time: 9:50:26 AM
User: N/A
Computer: DH8J2091
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module
PortableDeviceTypes.dll, version 5.2.5721.5145, fault address 0x0001bfff.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 50 6f 72 74 61 in Porta
0038: 62 6c 65 44 65 76 69 63 bleDevic
0040: 65 54 79 70 65 73 2e 64 eTypes.d
0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
0050: 37 32 31 2e 35 31 34 35 721.5145
0058: 20 61 74 20 6f 66 66 73 at offs
0060: 65 74 20 30 30 30 31 62 et 0001b
0068: 66 66 66 fff

3.
Event Type: Information
Event Source: iPod Service
Event Category: None
Event ID: 0
Date: 1/5/2008
Time: 9:50:45 AM
User: N/A
Computer: DH8J2091
Description:
The description for Event ID ( 0 ) in Source ( iPod Service ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able
to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Service
started.

4.
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/5/2008
Time: 9:51:08 AM
User: N/A
Computer: DH8J2091
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d

These four event seem to be the basic error cycle.

Best,

Ted.

 

[Gerry]

Sorry Edward I do not think I can help.

--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Mark L. Ferguson]

Me either. I would say the only chance is to go to the IPod people, hoping
to find updated software created due to pressure from multiple user
complaints about this problem.

 

[Edward Ripley-Duggan]

Thanks, all. So in your opinions, based on the messages, it is the Ipod
software that's acting up?

I did do an upgrade of the Itunes software yesterday, and also replaced
PortableDeviceTypes.dll from a backup, just in case it had become corrupted.
If it is indeed Itunes, and the problem returns, I will probably uninstall it
from this machine and put it on another I own that's not presently connected.

 

[Gerry]

Edward

I have the same combination of files on my computer and no problems.
Uninstalling and reinstalling is a recognised way to try to eliminate
errors. You might get a clue from the Dr Watson log, albeit it crashed.
It is likely that Windows does not have an Ipod image, which might cause
Dr Watson a problem.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~