With some relative frequency (several times an hour) explorer.exe is faulting and restarting.  I only noticed because the system tray repaints.  I am not sure if this is related to the applications I have installed, or is unrelated.  Has anyone else encountered this?  Any ideas as to what is going on?

Below are the event log details:
Faulting application name: explorer.exe, version: 6.2.9200.16384, time stamp: 0x50107dbc
Faulting module name: twinui.dll, version: 6.2.9200.16384, time stamp: 0x50109442
Exception code: 0xc0000005
Fault offset: 0x0000000000340849
Faulting process id: 0x1584
Faulting application start time: 0x01cd7c8733f184a6
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\System32\twinui.dll
Report Id: 50dc242a-e87b-11e1-be6f-6c626ddcca27
Faulting package full name:
Faulting package-relative application ID:

I do not have a lot of applications installed at the moment, so if it is application-related, then at least there is a short list of possible causes.

• AMD Catalyst Install Manager (and Catalyst Control Center)
• AuthenTec WinBio Fingerprint Software x64
• EventGhost 0.4.1.r1572
• LastPass x64
• RealTek High Definition Audio Driver
• Microsoft Visual C++ 2010 x64 Distributable 10.0.30319
• SharpKeys

Hi,

Try running SFC /Scannow from an elevated command prompt, if it does not fix anything, download Autoruns from Sysinternals: http://technet.microsoft.com/es-es/sysinternals/bb963902

Run Autoruns as Administrator, go to Options menu, Filter, select Hide Microsoft Entries and Ok.
After that, open the Explorer tab, and you will see all DLL that are running inside File Explorer, so start disabling and testing if Explorer crashed. You might found one who could be the bad one.

• Edited by Sergio CalderónMVP Friday, August 17, 2012 4:31 PM
• Marked as answer by Ahren P Friday, August 17, 2012 6:11 PM

SFC /Scannow found no problems.  I think the culprit may be EventGhost, though I am not positive.  No issues since it turned off (Crashed, I think, didn't remember closing it but it isn't loaded now!) so at least for now I'm done looking.  Even if something else is causing the problem, at least now I know an easier way to look!

Now I just have to find / write a different method to send serial commands via hotkey, or wait for an updated binary.

Thanks for the help.

Turns out it was not EventGhost.  I need to take some time to do more testing, however my best guess at the moment is that it might be the LastPass plugin for Internet Explorer, or Internet Explorer itself.  I did not use anything directly related to LastPass, however the same error was just thrown, and the only thing I was actively doing was using IE.  Thinking back, I remember that this has frequently been the case - I was closing / opening tabs in IE and would notice the taskbar reset.

I have same issue.

Have done the scan.

Am getting loads of these crashes a day now.

There are no plugins loaded into explorer (Was 2 nvidea right-click menu entries but they are now disabled)

Any other ideas?

Is this a bug in explorer or some other component explorer depends upon?

please download this reg file from my SkyDrive:

http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg

and make a double click on the file to import it. If you can't do this, run regedit.exe and import the registry file there!

When the Windows Explorer crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the created file (cmpressed as 7z or RAR) to your public Skydrive [2] folder and post the link here. I take a look at the dump with the Debugger, maybe I can see the cause.

Andr

[1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
[2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

Ok here is dump file:

https://skydrive.live.com/redir?resid=B2046077C0808222!999&authkey=!AHHuZjTtITcneFo

Also noticed that the crash seems to occur when I click menus, so far it seems to be in .NET apps that we write ourselves, not sure if this is the only time I've seen a crash but I can get a crash to occur a reasonable % of the time when I click menus (Main menu and context menus) within these .NET apps.

Thanks for looking into this Andre.

-Mike G

STACK_TEXT:  
twinui!CApplicationManager::_TryChangeSystemModeDesktop
twinui!CApplicationManager::_HandleWindowChangedOwnertwinui!CApplicationManager::OnShellHookMessage
twinui!CImmersiveWindowMessageService::s_MessageMsgWndProc

Explorer crashes while changing a desktop mode. But this is a MSFT bug that we can't fix. Contact the MSDN/Technet support.

Also disable the AppVerifier and Dump creation agin by deleting the explorer.exe keys in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps

Many thanks for your help looking into this Andre. I'll be sure to include that crash dump when I contact MS support.

(I had already deleted the keys st. after collecting the crash!!)

Did you get an answer because I got the same problem here:

http://social.technet.microsoft.com/Forums/en-US/w8itprogeneral/thread/7da4a94a-3ca6-4bb7-84bd-ca52e7ea90a5

Matthieu

No, we haven't get any feedback. Contact the support (MSDN/Technet subscriber support).

Maybe your error is like mine: I've installed "Desktop Experience" feature, but stopped manually "Themes" service (to lower memory consumption). Restarting "Themes" service has solved problem

Wow E6Sistemes, Thanks! It was my exact problem and the restart of Themes worked like a charm. Found this thread through the twinui.dll lead and your solution came just in time. 

Hi, 

I have the same .dll problem (twinui.dll) 

Here are my dumpfiles  https://drive.google.com/file/d/0B-2CTY56hpMKYUhlX1FSVHZwNlE/edit?usp=sharing

Refreshing the THEMES SERVICE doesn't work for me!

Anyone any idea?