The shell stopped unexpectedly and explorer.exe was restarted.

[RealCat]

I don't know exactly since when this happens, but the Windows Explorer
suddenly disappears then restarts. Is there any known reason? I've
searched Google for this, but the only solution, "Delete explorer.exe"
seemed stupid. This is the log.

Source Winlogon
The shell stopped unexpectedly and explorer.exe was restarted.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
event">
- <System>
<Provider Name="Microsoft-Windows-Winlogon"
Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
EventSourceName="Winlogon" />
<EventID Qualifiers="16384">1002</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
<EventRecordID>8395</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>HouseCat</Computer>
<Security />
</System>
- <EventData>
<Data>explorer.exe</Data>
</EventData>
</Event>

Using Windows Vista 64 bit version.

 

[Rick Rogers]

Hi,

You're right - deleting explorer.exe would be stupid. The shell restarts
happen when some software on the system interferes with its operation. This
could be any number of things, and not just malware. I've seen interference
from antivirus applications, p2p software, distributed computing, google
desktop, and others. What you'll need to do is selectively disable running
applications until you isolate the problem.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[zachd [MSFT]]

What's the specific crash information from the Problem Reports and Solutions
Center control panel?
http://zachd.com/pss/pss.html#bucket

The below XML chunk doesn't actually include information such as fault
module, etc. =\

 

[RealCat]

That just happened again a few minutes ago, I went to the Problem
Reports and Solutions, but there's no entry for that. Then again, I
opened the Event Viewer, and checked for it. It was logged, and there
was a link for more information. I clicked it.

http://technet.microsoft.com/en-us/library/cc733895.aspx

Event Details
Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-Winlogon
Version: 6.0
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Resolve
This is a normal condition. No further action is required.

Look at the resolution. Microsoft says it's normal and there's nothing
I can do. How could this be a normal condition?

 

[Rick Rogers]

Hi,

What's normal is that the shell automatically restarted after being stopped.
It's not normal to stop and doesn't do so without outside interference. Did
you examine any of the possible software conflicts I already mentioned?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

That just happened again a few minutes ago, I went to the Problem
Reports and Solutions, but there's no entry for that. Then again, I
opened the Event Viewer, and checked for it. It was logged, and there
was a link for more information. I clicked it.

http://technet.microsoft.com/en-us/library/cc733895.aspx

Event Details
Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-Winlogon
Version: 6.0
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Resolve
This is a normal condition. No further action is required.

Look at the resolution. Microsoft says it's normal and there's nothing
I can do. How could this be a normal condition?