The message that pops up when the Explorer error occurs:
Windows Explorer has encountered a problem and needs
to close. We are sorry for the inconvenience.
Two logs are created:
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 10/19/2005
Time: 7:51:01 AM
User: N/A
Computer: BOBSWORK
Description:
Faulting application explorer.exe, version 6.0.2900.2180, faulting module
shdocvw.dll, version 6.0.2900.2753, fault address 0x000159a1.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 73 68 64 6f 63 in shdoc
0038: 76 77 2e 64 6c 6c 20 36 vw.dll 6
0040: 2e 30 2e 32 39 30 30 2e .0.2900.
0048: 32 37 35 33 20 61 74 20 2753 at
0050: 6f 66 66 73 65 74 20 30 offset 0
0058: 30 30 31 35 39 61 31 0d 00159a1.
0060: 0a .
and:
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 10/19/2005
Time: 7:52:44 AM
User: N/A
Computer: BOBSWORK
Description:
Fault bucket 234159523.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 33 34 31 35 39 35 32 23415952
0010: 33 0d 0a 3..
I also have several of the following which I think are somehow related to my
Windows OneCare but there is nothing I can find on Microsoft about MSMPSVC
that helps.
Event Type: Error
Event Source: MSMPSVC
Event Category: None
Event ID: 3
Date: 10/19/2005
Time: 7:21:41 AM
User: BOBSWORK\Bob-Work
Computer: BOBSWORK
Description:
AV Engine failed to scan \Device\HarddiskVolume1\Program Files\Registry
Mechanic\RegMech.exe file accessed thru C:\WINDOWS\explorer.exe (Session
0x0).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 00 00 00 00 ........
0008: 00 00 00 00 00 00 00 00 ........
0010: 00 00 00 00 10 01 00 00 ........
0018: 84 05 00 00 50 05 00 00 „...P...
0020: bc 06 00 00 84 05 00 00 ¼...„...
0028: 00 00 01 00 0d 00 02 a8 .......¨
0030: 02 00 00 00 00 00 00 00 ........
0038: 54 00 00 00 86 00 00 00 T...†...
0040: 00 00 00 00 00 00 00 00 ........
0048: dc 00 00 00 24 00 00 00 Ü...$...
0050: 00 00 00 00 5c 00 44 00 ....\.D.
0058: 65 00 76 00 69 00 63 00 e.v.i.c.
0060: 65 00 5c 00 48 00 61 00 e.\.H.a.
0068: 72 00 64 00 64 00 69 00 r.d.d.i.
0070: 73 00 6b 00 56 00 6f 00 s.k.V.o.
0078: 6c 00 75 00 6d 00 65 00 l.u.m.e.
0080: 31 00 5c 00 50 00 72 00 1.\.P.r.
0088: 6f 00 67 00 72 00 61 00 o.g.r.a.
0090: 6d 00 20 00 46 00 69 00 m. .F.i.
0098: 6c 00 65 00 73 00 5c 00 l.e.s.\.
00a0: 52 00 65 00 67 00 69 00 R.e.g.i.
00a8: 73 00 74 00 72 00 79 00 s.t.r.y.
00b0: 20 00 4d 00 65 00 63 00 .M.e.c.
00b8: 68 00 61 00 6e 00 69 00 h.a.n.i.
00c0: 63 00 5c 00 52 00 65 00 c.\.R.e.
00c8: 67 00 4d 00 65 00 63 00 g.M.e.c.
00d0: 68 00 2e 00 65 00 78 00 h...e.x.
00d8: 65 00 00 00 75 00 6e 00 e...u.n.
00e0: 70 00 61 00 63 00 6b 00 p.a.c.k.
00e8: 3a 00 28 00 41 00 72 00 :.(.A.r.
00f0: 6d 00 61 00 64 00 69 00 m.a.d.i.
00f8: 6c 00 6c 00 6f 00 29 00 l.l.o.).
0100: 00 00 00 00 00 00 00 00 ........
0108: 00 00 00 00 00 00 00 00 ........
One other thing that I've noticed is the task manager shows cpu usage at 100
percent and its's cisvc.exe that's the one doing it. Doesn't seem normal to
me?