Windows 8 explorer.exe keeps crashing and I can't use Windows update as a result!

I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains, but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second, and then goes away.

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop crashes, and I have to click on the screen every 6 seconds. ARGH!

February 24th, 2013 10:28am

On 2/24/2013 2:28 AM, Pheebz86 wrote:

I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains, but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second, and then goes away.

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop crashes, and I have to click on the screen every 6 seconds. ARGH!

Well, you can rollback to a restore point that was good before you started having problems. That's your best option.

Free Windows Admin Tool Kit Click here and download it now
February 24th, 2013 10:32am

Hi,

Windows Explorer crashes are mostly caused by an incompatible Shell Extension.

please download this reg file from my SkyDrive:


http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg

and make a double click on the file to import it. If you can't do this, run regedit.exe and import the registry file there!

When the Windows Explorer crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the dump file (compressed 7z or RAR to reduce the size) to your public Skydrive [2] folder and post the link here. I take a look at the dump with the Debugger, maybe I can see which Shell extension is the cause.

After you generated the dumps, download and import this regfile:

http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full_uninstall.reg

to stop the dump creation.

Andr

[1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
[2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
February 24th, 2013 10:51pm

Hi,

Windows Explorer crashes are mostly caused by an incompatible Shell Extension.

please download this reg file from my SkyDrive:


http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg

and make a double click on the file to import it. If you can't do this, run regedit.exe and import the registry file there!

When the Windows Explorer crashes, Windows Error Reporting Service [1] creates a dmp file under C:\Localdumps. Please upload the dump file (compressed 7z or RAR to reduce the size) to your public Skydrive [2] folder and post the link here. I take a look at the dump with the Debugger, maybe I can see which Shell extension is the cause.

After you generated the dumps, download and import this regfile:

http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full_uninstall.reg

to stop the dump creation.

Andr

[1] http://msdn.microsoft.com/en-us/library/bb787181%28VS.85%29.aspx
[2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2013 10:17pm

start regedit, go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options and delete the key "Explorer.exe". Now reboot and now the Explorer should be more usable. Now zip all dumps from C:\localdumps and upload the zip.
March 9th, 2013 12:33am

Hi Andre,

I have an identical problem to the original poster. I have followed your instructions and have uploaded a dump file to the skydrive. I hope you can take a look at this file and let me know what the problem is and how to resolve it if possible. 

The link to the folder is: 

http://sdrv.ms/YVN00O

Thanks

Free Windows Admin Tool Kit Click here and download it now
May 15th, 2013 5:03pm

you've uploaded a .reg file and not the dumps.
May 15th, 2013 9:37pm

Apologies for the error. Please take a look at the link again. I think I have uploaded the correct files this time. Thanks again for your help.


Free Windows Admin Tool Kit Click here and download it now
May 15th, 2013 10:05pm

I crash is caused by the Intel driver:

Call Site
ntdll!NtWaitForSingleObject
ntdll!RtlReportExceptionEx
ntdll!RtlReportException
verifier!AVrfpVectoredExceptionHandler
ntdll!RtlpCallVectoredHandlers
ntdll!RtlDispatchException
ntdll!KiUserExceptionDispatch
verifier!VerifierStopMessage
verifier!AVrfpDphReportCorruptedBlock
verifier!AVrfpDphCheckNormalHeapBlock
verifier!VerifierCheckPageHeapAllocation
verifier!AVrfpHeapFree
hccutils!DllUnregisterServer
hccutils!GetCUICustomizationKey
hccutils!GetCUICustomizationKey
hccutils!GetCUICustomizationKey
hccutils!CreateThisKey
hccutils!FindResources
hccutils!LoadSTRING
hccutils!SaveString
hccutils!LoadICON
hccutils!LoadIMAGE
igfxcpl!CPlApplet
shell32!CPL_CallEntry
shell32!_InitializeControl
shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''
shell32!CPL_LoadCPLModule
shell32!_LoadCPLModuleAndAdd
shell32!CPLD_InitModule
shell32!CControlPanelEnum::_NextNonCachedCpl
shell32!CControlPanelEnum::Next
shell32!CRegFolderEnum::Next
shell32!CControlPanelAppletList::_AddAppletsToCategories
shell32!CControlPanelAppletList::LoadSlowApplets
shell32!CControlPanelDataWorkItem::_LoadSlowData
shell32!CControlPanelDataWorkItem::DoWork
shell32!CFrameTask::InternalResumeRT
shell32!CRunnableTask::Run
shell32!CShellTask::TT_Run
shell32!CShellTaskThread::ThreadProc
shell32!CShellTaskThread::s_ThreadProc
SHCore!ExecuteWorkItemThreadProc
ntdll!RtlpTpWorkCallback
ntdll!TppWorkerThread
kernel32!BaseThreadInitThunk
ntdll!RtlUserThreadStart
0:031> lmvm igfxcpl
start             end                 module name
00000001`80000000 00000001`80025000   igfxcpl    (export symbols)       igfxcpl.cpl
    Loaded symbol image file: igfxcpl.cpl
    Image path: C:\Windows\System32\igfxcpl.cpl
    Image name: igfxcpl.cpl
    Timestamp:        Mon Sep 03 04:50:21 2012 (50441AED)
    CheckSum:         00022721
    ImageSize:        00025000
    File version:     8.15.10.2849
    Product version:  8.15.10.2849
    File flags:       0 (Mask 3F)
    File OS:          4 Unknown Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Intel Corporation
    ProductName:      Intel(R) Common User Interface
    InternalName:     IGFXCPL
    OriginalFilename: IGFXCPL.DLL
    ProductVersion:   8.15.10.2849
    FileVersion:      8.15.10.2849
    PrivateBuild:     8.15.10.2849
    SpecialBuild:     8.15.10.2849
    FileDescription:  igfxcpl Module
    LegalCopyright:   Copyright 1999-2006, Intel Corporation
    LegalTrademarks:  Copyright 1999-2006, Intel Corporation
    Comments:         Copyright 1999-2006, Intel Corporation
0:031> lmvm hccutils
start             end                 module name
00000000`09ee0000 00000000`09eff000   hccutils   (export symbols)       hccutils.dll
    Loaded symbol image file: hccutils.dll
    Image path: C:\Windows\System32\hccutils.dll
    Image name: hccutils.dll
    Timestamp:        Mon Sep 03 04:49:28 2012 (50441AB8)
    CheckSum:         00023677
    ImageSize:        0001F000
    File version:     8.15.10.2849
    Product version:  8.15.10.2849
    File flags:       0 (Mask 3F)
    File OS:          4 Unknown Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Intel Corporation
    ProductName:      Intel(R) Common User Interface
    InternalName:     HCCUTILS
    OriginalFilename: HCCUTILS.DLL
    ProductVersion:   8.15.10.2849
    FileVersion:      8.15.10.2849
    PrivateBuild:     8.15.10.2849
    SpecialBuild:     8.15.10.2849
    FileDescription:  hccutils Module
    LegalCopyright:   Copyright 1999-2006, Intel Corporation
    LegalTrademarks:  Copyright 1999-2006, Intel Corporation
    Comments:         Copyright 1999-2006, Intel Corporation

So update the driver or use ShellExView to disable the Intel shell extension.

The second crash looks like a corrupted shel32.dll on the HDD:

CHKIMG_EXTENSION: !chkimg -lo 50 -d !shell32
    7fcac39c000-7fcac39c059  90 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43944
	[ 4d d8 e8 09 77 b1 ff 48:16 00 00 00 02 00 00 00 ]
    7fcac39c05b-7fcac39c07a  32 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4399f (+0x5b)
	[ 8b d8 7c 1d 48 8b 4d e0:00 00 00 00 00 00 00 00 ]
    7fcac39c07c-7fcac39c0af  52 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439c0 (+0x21)
	[ 48 8d 4d e0 e8 8b 76 b1:00 00 00 00 00 00 00 00 ]
    7fcac39c0b1-7fcac39c0bb  11 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+439f5 (+0x35)
	[ a9 ff 48 8b 06 4c 8d 05:00 00 00 00 00 00 00 00 ]
    7fcac39c0bd-7fcac39c0c4  8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a01 (+0x0c)
	[ 8b d3 48 8b ce ff 90 98:00 00 00 00 00 00 00 00 ]
    7fcac39c0c8-7fcac39c0ca  3 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a0c (+0x0b)
	[ 90 e9 16:00 00 00 ]
    7fcac39c0cc-7fcac39c0e6  27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a10 (+0x04)
	[ a9 ff cc 48 8b 07 48 8b:00 00 00 00 98 e0 53 ae ]
    7fcac39c0e8-7fcac39c0ef  8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a2b (+0x1c)
	[ 8b d3 48 8b cf ff 90 98:00 00 00 00 00 00 00 00 ]
    7fcac39c0f3-7fcac39c0fa  8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a36 (+0x0b)
	[ 90 e9 be 05 a9 ff bb 18:04 00 00 00 00 00 00 00 ]
    7fcac39c0fd-7fcac39c118  28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a40 (+0x0a)
	[ 80 e9 b4 05 a9 ff cc 48:00 00 00 d0 e0 53 ae fc ]
    7fcac39c11c-7fcac39c13c  33 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a5e (+0x1f)
	[ ff 10 90 e9 7c 78 a8 ff:00 00 00 00 00 00 00 04 ]
    7fcac39c13f-7fcac39c175  55 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43a80 (+0x23)
	[ 80 e9 7d e4 a8 ff cc 48:00 00 f4 53 ae fc 07 00 ]
    7fcac39c179-7fcac39c189  17 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ab8 (+0x3a)
	[ 85 c0 75 14 8d 50 01 44:00 00 00 00 00 00 00 ff ]
    7fcac39c18b-7fcac39c1b5  43 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43aca (+0x12)
	[ 90 e9 0b cf b5 ff 8b d3:ff 00 00 00 00 00 00 00 ]
    7fcac39c1b7-7fcac39c1c9  19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43af5 (+0x2c)
	[ 07 80 e9 61 e9 a8 ff 4c:00 00 00 00 00 00 00 00 ]
    7fcac39c1cb-7fcac39c1e9  31 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b09 (+0x14)
	[ 10 48 85 db 0f 84 4a e9:ff 00 00 00 00 00 00 00 ]
    7fcac39c1eb-7fcac39c1f4  10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b27 (+0x20)
	[ 07 80 e9 db b3 a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c1f6-7fcac39c208  19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b31 (+0x0b)
	[ 07 80 e9 28 f4 a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c20a-7fcac39c237  46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b42 (+0x14)
	[ 50 08 33 c0 e9 81 b4 a8:ff ff 00 00 00 00 00 00 ]
    7fcac39c239-7fcac39c240  8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b65 (+0x2f)
	[ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 00 ]
    7fcac39c243-7fcac39c248  6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b6f (+0x0a)
	[ 41 83 c8 ff ba 01:00 00 00 00 00 00 ]
    7fcac39c24c-7fcac39c25e  19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b78 (+0x09)
	[ e8 4f 70 b0 ff 83 f8 ff:00 00 00 00 10 00 00 00 ]
    7fcac39c260-7fcac39c361  258 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43b8c (+0x14)
	[ 80 e9 2d b2 a8 ff 48 8d:00 00 00 00 00 00 00 00 ]
    7fcac39c363-7fcac39c36c  10 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c8d (+0x103)
	[ 07 80 e9 b5 bb a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c36e-7fcac39c39b  46 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43c97 (+0x0b)
	[ 07 80 e9 c1 da a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c39d-7fcac39c3eb  79 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43cc5 (+0x2f)
	[ 3a 90 ff 84 c0 0f 84 cd:00 00 00 00 00 00 00 00 ]
    7fcac39c3ed-7fcac39c3f8  12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d14 (+0x50)
	[ 90 e9 fb e3 b8 ff cc ff:00 00 00 00 00 00 00 00 ]
    7fcac39c3fa-7fcac39c405  12 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d20 (+0x0d)
	[ 85 c0 0f 8e 42 8a a8 ff:00 00 00 00 00 00 00 00 ]
    7fcac39c408-7fcac39c489  130 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43d2e (+0x0e)
	[ 07 80 e9 35 8a a8 ff cc:00 00 00 00 00 00 00 00 ]
    7fcac39c48b-7fcac39c4a5  27 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43daf (+0x83)
	[ 48 85 db 74 09 48 8b 13:ff 00 00 00 00 00 00 00 ]
    7fcac39c4a8-7fcac39c4b5  14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dc8 (+0x1d)
	[ 00 ff 50 40 85 c0 0f 88:3f 00 00 00 2d 22 04 0b ]
    7fcac39c4b9-7fcac39c4bd  5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43dd9 (+0x11)
	[ eb 12 ba 01 00:00 00 00 09 04 ]
    7fcac39c4c0-7fcac39c4e7  40 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43de0 (+0x07)
	[ ff 50 40 85 c0 0f 88 cb:10 00 00 00 01 00 00 00 ]
    7fcac39c4ea-7fcac39c4ff  22 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e06 (+0x2a)
	[ c0 41 8d 51 01 ff 15 43:00 00 00 00 00 00 00 00 ]
    7fcac39c501-7fcac39c508  8 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e1d (+0x17)
	[ 48 8d 4d e8 41 b9 ff 1c:00 00 00 00 00 00 00 3f ]
    7fcac39c50b-7fcac39c510  6 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e27 (+0x0a)
	[ 41 83 c8 ff ba 01:00 e4 04 00 00 3f ]
    7fcac39c514-7fcac39c526  19 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e30 (+0x09)
	[ e8 87 6d b0 ff 83 f8 ff:00 00 00 00 00 00 00 00 ]
    7fcac39c528-7fcac39c5a8  129 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43e44 (+0x14)
	[ 80 e9 c1 b8 a8 ff 48 8d:f0 d3 bc ab fc 07 00 00 ]
    7fcac39c5aa-7fcac39c5ab  2 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec6 (+0x82)
	[ cc 83:fe ff ]
    7fcac39c5ad-7fcac39c5b9  13 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ec8 (+0x03)
	[ 01 0f 85 40 7d a8 ff 48:07 00 00 b0 ad 0d 7b 95 ]
    7fcac39c5bb-7fcac39c5d6  28 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ed6 (+0x0e)
	[ 48 8b 11 ff 52 10 90 e9:00 00 00 00 00 02 00 00 ]
    7fcac39c5d8-7fcac39c695  190 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ef2 (+0x1d)
	[ 48 8b 11 ff 52 08 90 e9:00 00 00 00 00 00 00 00 ]
    7fcac39c699-7fcac39c6eb  83 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43faa (+0xc1)
	[ 48 8b ce 41 ff 53 40 8b:00 00 00 00 00 00 00 00 ]
    7fcac39c6ef-7fcac39c6f5  7 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+43ffd (+0x56)
	[ ff 50 60 c7 07 02 00:00 4a 06 b7 af f7 07 ]
    7fcac39c6f8-7fcac39c705  14 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44006 (+0x09)
	[ eb 18 48 8b 01 4c 8d 05:00 00 00 00 00 00 00 00 ]
    7fcac39c708-7fcac39c70c  5 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44016 (+0x10)
	[ 00 ff 50 60 c7:22 02 b6 af f7 ]
    7fcac39c70e - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401c (+0x06)
	[ 03:00 ]
    7fcac39c710-7fcac39c71e  15 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4401e (+0x02)
	[ 00 00 44 8b c8 e9 a9 a1:40 9d 26 69 e8 00 00 00 ]
    7fcac39c720-7fcac39c75c  61 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+4402c (+0x10)
	[ 00 00 e9 17 74 a8 ff c7:10 74 0d 7b 95 00 00 00 ]
    7fcac39c75e-7fcac39c7c1  100 bytes - shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''+44068 (+0x3e)
	[ 80 e9 a5 d8 ae ff cc b8:00 00 60 87 53 ae fc 07 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
8192 errors : !shell32 (7fcac39c000-7fcac3aeebb)

APP:  explorer.exe

FAULTING_THREAD:  0000000000000f0c

ADDITIONAL_DEBUG_TEXT:  Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

LAST_CONTROL_TRANSFER:  from 000007fcabcc02f5 to 000007fcac39cd00

BUGCHECK_STR:  APPLICATION_FAULT_MEMORY_CORRUPTION_INVALID_POINTER_WRITE_LARGE_EXPLOITABLE

PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_LARGE_EXPLOITABLE

DEFAULT_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_EXPLOITABLE

STACK_TEXT:  
00000000`00000000 00000000`00000000 memory_corruption!shell32+0x0


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  memory_corruption!shell32


Repair the DLL with DISM:

http://social.technet.microsoft.com/Forums/en-US/w8itprogeneral/thread/5c651c1b-f800-47c4-801d-98996eaf99a4/#c280a27b-7bc9-43ac-9c1a-2ad97230a9ea

May 16th, 2013 8:43am

Thank you.
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2013 5:25pm

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well.

This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer!

Many Control Panel applets final execution are independent of explorer.exe and control.exe.   So workarounds for all of the above may be possible, just figure out the equivalent of what you want to do as a command and use Task Manager to start it via its File, Run... command.

In this particular case it may help to minimize work being passed off to your video card...

control.exe  inetcpl.cpl,,6

Check:  Use software rendering instead of GPU rendering*

*Normally requires restart but in this case nothing would be running yet so you would be good to go.   ; )

 

In any case I suspect you could get into safe mode using the login screen's Shutdown button's  Shift-Restart  feature...

http://blogs.msdn.com/b/b8/archive/2012/05/22/designing-for-pcs-that-boot-faster-than-ever-before.aspx

See the last 15 seconds of the video at the bottom of the post.

 
Also, while there in the login screen it probably would be a relevant idea to turn on High Contrast, e.g. via the Accessibility button's menu.   I'm not sure whether Explorer is needed to use the usual keyboard shortcut  (LeftAlt+LeftShift+PrintScrn)  otherwise I would have mentioned it earlier.

 
FYI

 
Robert Aldwinckle
---


May 16th, 2013 6:35pm

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well.

This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer!

Many Control Panel applets final execution are independent of explorer.exe and control.exe.   So workarounds for all of the above may be possible, just figure out the equivalent of what you want to do as a command and use Task Manager to start it via its File, Run... command.

In this particular case it may help to minimize work being passed off to your video card...

control.exe  inetcpl.cpl,,6

Check:  Use software rendering instead of GPU rendering*

*Normally requires restart but in this case nothing would be running yet so you would be good to go.   ; )

 

In any case I suspect you could get into safe mode using the login screen's Shutdown button's  Shift-Restart  feature...

http://blogs.msdn.com/b/b8/archive/2012/05/22/designing-for-pcs-that-boot-faster-than-ever-before.aspx

See the last 15 seconds of the video at the bottom of the post.

 
Also, while there in the login screen it probably would be a relevant idea to turn on High Contrast, e.g. via the Accessibility button's menu.   I'm not sure whether Explorer is needed to use the usual keyboard shortcut  (LeftAlt+LeftShift+PrintScrn)  otherwise I would have mentioned it earlier.

 
FYI

 
Robert Aldwinckle
---


Free Windows Admin Tool Kit Click here and download it now
May 16th, 2013 9:35pm

I have followed your instructions and uploaded the dump file on skydrive. Link to the rar file is http://sdrv.ms/10Ff9Io  

Can you please check this dump files out and say what happened to my pc ???

July 6th, 2013 4:43am

I have followed your instructions and uploaded the dump file on skydrive. Link to the rar file is http://sdrv.ms/10Ff9Io  

Can you please check this dump files out and say what happened to my pc ???

the MediaIconsOverlays.dll seams to cause it.

*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for MediaIconsOverlays.dll - 
APPLICATION_VERIFIER_LOCKS_LOCK_IN_FREED_HEAP (202)
Freeing heap block containing an active critical section.
This stop is generated if a heap allocation contains a critical section,
the allocation is freed and the critical section has not been deleted.
To debug this stop use the following debugger commands:
$ !cs -s parameter1 - dump information about this critical section.
$ ln parameter1 - to show symbols near the address of the critical section.
This should help identify the leaked critical section.
$ dps parameter2 - to dump the stack trace for this critical section initialization.
$ parameter3 and parameter4 might help understand where this heap block was
allocated (the size of the allocation is probably significant). 
Arguments:
Arg1: 0d010c8c, Critical section address. 
Arg2: 01627ef4, Critical section initialization stack trace. 
Arg3: 0d010c58, Heap block address. 
Arg4: 0000004c, Heap block size. 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for sppc.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for IDMShellExt.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for IDMNetMon.DLL - 

FAULTING_IP: 
verifier!VerifierStopMessageEx+701
6a71c121 cc              int     3

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 6a71c121 (verifier!VerifierStopMessageEx+0x00000701)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 3
   Parameter[0]: 00000000
   Parameter[1]: 84cde340
   Parameter[2]: 05515448

DEFAULT_BUCKET_ID:  STATUS_BREAKPOINT

PROCESS_NAME:  explorer.exe

OVERLAPPED_MODULE: Address regions for 'sppc' and 'PENUSA.DLL' overlap

CRITICAL_SECTION:  0d010c8c -- (!cs -s 0d010c8c)

ERROR_CODE: (NTSTATUS) 0x80000003 - {AUSNAHME}  Haltepunkt  Im Quellprogramm wurde ein Haltepunkt erreicht.

EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - Mindestens ein Argument ist ung ltig.

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  84cde340

EXCEPTION_PARAMETER3:  05515448

NTGLOBALFLAG:  2000100

APPLICATION_VERIFIER_FLAGS:  48004

APP:  explorer.exe

FAULTING_THREAD:  000012a0

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT

BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT

LAST_CONTROL_TRANSFER:  from 6a726598 to 6a71c121

STACK_TEXT:  
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject
ntdll!RtlReportExceptionEx
ntdll!RtlReportException
verifier!AVrfpVectoredExceptionHandler
ntdll!RtlpCallVectoredHandlers
ntdll!RtlDispatchException
ntdll!KiUserExceptionDispatcher
verifier!VerifierStopMessageEx
verifier!AVrfpFreeMemLockChecks
verifier!AVrfpFreeMemNotify
verifier!AVrfpNtdllHeapFreeCallback
ntdll!AVrfInternalHeapFreeNotification
verifier!AVrfDebugPageHeapDestroy
ntdll!RtlDestroyHeap
verifier!AVrfpRtlDestroyHeap
KERNELBASE!HeapDestroy
WARNING: Stack unwind information not available. Following frames may be wrong.
MediaIconsOverlays!DllUnregisterServer
MediaIconsOverlays!DllUnregisterServer
MediaIconsOverlays!DllUnregisterServer
verifier!AVrfpStandardDllEntryPointRoutine
ntdll!LdrxCallInitRoutine
ntdll!LdrpCallInitRoutine
ntdll!LdrpProcessDetachNode
ntdll!LdrpUnloadNode
ntdll!LdrpDecrementNodeLoadCount
ntdll!LdrUnloadDll
verifier!AVrfpLdrUnloadDll
KERNELBASE!FreeLibrary
combase!FreeLibraryWithLogging
combase!CClassCache::CDllPathEntry::CFinishObject::Finish
combase!CClassCache::CFinishComposite::Finish
combase!CClassCache::CleanUpDllsForApartment
combase!CCCleanUpDllsForApartment
combase!FinishShutdown
combase!ApartmentUninitialize
combase!wCoUninitialize
combase!CoUninitialize
verifier!AVrfpCoUninitialize
shell32!CShellTaskThread::s_ThreadProc
SHCore!ExecuteWorkItemThreadProc
ntdll!RtlpTpWorkCallback
ntdll!TppWorkerThread
kernel32!BaseThreadInitThunk
ntdll!__RtlUserThreadStart
ntdll!_RtlUserThreadStart



FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_MediaIconsOverlays.dll!DllUnregisterServer



    Loaded symbol image file: MediaIconsOverlays.dll
    Image path: C:\ProgramData\Microsoft\Media Tools\MediaIconsOverlays.dll
    Image name: MediaIconsOverlays.dll
    Timestamp:        Tue Apr 30 19:33:30 2013 (5180006A)
    CheckSum:         000411AD
    ImageSize:        0003B000
    File version:     1.0.0.1
    Product version:  1.0.0.1
    File flags:       0 (Mask 3F)
    File OS:          4 Unknown Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04e4
    CompanyName:      Microsoft
    ProductName:      Online files icon's overlay
    ProductVersion:   1.0.2.3
    FileVersion:      1.0.2.5
    FileDescription:  Online files icon's overlay
    LegalCopyright:   Microsoft
    LegalTrademarks:  Microsoft
    Comments:         Online files icon's overlay

Do you use the SkyDrive app?

Free Windows Admin Tool Kit Click here and download it now
July 6th, 2013 3:09pm

yeah i do.......
July 7th, 2013 9:56am

 I have done everything... I have the dmp file. However, I can't upload it to skydrive because even after compression it is still too large.  How can I get you my file?  I really need my explorer to work.  It crashes every time you try to click on anything.
Free Windows Admin Tool Kit Click here and download it now
July 31st, 2013 2:05pm

compress it with 7z to reduce the size more. You can also split a zip with 7-zip:

Enter the size of the files in "split to volume, bytes"

July 31st, 2013 2:54pm

Hello together,

i know this thread is an old one, but i have the same problem and dont know how to read the dump-file by myself...

The link to my skydrive is here: http://sdrv.ms/1hw2sai

Can anybody help me?

Best regards

Free Windows Admin Tool Kit Click here and download it now
October 31st, 2013 10:13am

Hello together,

i know this thread is an old one, but i have the same problem and dont know how to read the dump-file by myself...


the Explorer crashes while changing the desktop wallpaper:

00 shell32!CMultimonWallpaperState::CMultimonWallpaperEntry::ConsiderEntry
01 shell32!CMultimonWallpaperState::_GetNextMonitor
02 shell32!CMultimonWallpaperState::UpdateNextMonitor
03 shell32!CWallpaperRenderer::DisplayImage
04 shell32!CDesktopBrowser::_OnWallpaperUpdate
05 shell32!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<5> >::Create'::`2'::`dynamic atexit destructor for 'module''
06 shell32!CDesktopBrowser::s_DesktopWndProc
07 user32!UserCallWinProcCheckWow
08 user32!DispatchClientMessage
09 user32!_fnDWORD
0a ntdll!KiUserCallbackDispatcherContinue
0b user32!NtUserPeekMessage
0c user32!PeekMessage
0d user32!PeekMessageW
0e shell32!CDesktopBrowser::_PeekForAMessage
0f shell32!CDesktopBrowser::_MessageLoop
10 shell32!SHDesktopMessageLoop
11 explorer!wWinMain
12 explorer!CTray::SyncThreadProc
13 kernel32!BaseThreadInitThunk
14 ntdll!RtlUserThreadStart

Your Shell32.dll is a bit older. Make sure you install the September update rollup:

http://support.microsoft.com/kb/2876415/en-us

which includes a new version.

Also try to disable the slideshow and only use 1 Monitor (it looks like you use monitors).

October 31st, 2013 7:00pm

I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains, but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second, and then goes away.

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop crashes, and I have to click on the screen every 6 seconds. ARGH!

I assume you've got this sorted by now, but I had exactly the same issue. After a day and a half of messing around I found the fix. I'm posting it here, now, so if anybody else has this exact issue they have the fix.

With explorer.exe closing and reopening all the time it makes it hard to use any applications. Task Manager seems to be one application that isn't affected and will stay open when everything else disappears.

1. CRTL + ALT + DEL
2. Start Task Manager
3. File -> New task (Run)
4. Type msconfig and press Enter
5. Go to the services tab
6. Untick Windows Error Reporting
7. Restart

Done! Well, it fixed it for me anyway. Computer is back to normal.

Hope this helps someone.

  • Proposed as answer by ModernFlash Monday, September 01, 2014 2:37 PM
Free Windows Admin Tool Kit Click here and download it now
June 12th, 2014 2:00pm

Thank You. I haven't had any problems out of my laptop since. 
September 1st, 2014 2:38pm

I've got Windows 8 64-bit, and it's been running fine for about 2 months now. Just today, it's started to crash the desktop every 6 seconds. The screen goes purple (which I'm pretty sure is just my chosen background colour), the outline of the taskbar remains, but all the icons disappear, and then everything returns, only to crash again in another 6 seconds. I've watched the task manager, and under "background processes", an icon called "Windows Problem Reporting" appears for about a second, and then goes away.

I've looked up some other people's questions about this, and most people seem to recommend checking for updates, or installing new graphics drivers, but this is not an option for me. Whenever the desktop crashes, it shuts down control panel as well. This means I can't start my computer in safe mode, I can't check for updates, I can't uninstall/update drivers, I basically can't make any changes to my computer! Even as I'm writing this message, the cursor keeps disappearing from the test box whenever the desktop crashes, and I have to click on the screen every 6 seconds. ARGH!

I assume you've got this sorted by now, but I had exactly the same issue. After a day and a half of messing around I found the fix. I'm posting it here, now, so if anybody else has this exact issue they have the fix.

With explorer.exe closing and reopening all the time it makes it hard to use any applications. Task Manager seems to be one application that isn't affected and will stay open when everything else disappears.

1. CRTL + ALT + DEL
2. Start Task Manager
3. File -> New task (Run)
4. Type msconfig and press Enter
5. Go to the services tab
6. Untick Windows Error Reporting
7. Restart

Done! Well, it fixed it for me anyway. Computer is back to normal.

Hope this helps someone.

Had a similar problem updating from windows 8 to 10. After the update it was fine for 1-2 days and then got stuck in a loop that i couldn't get out of without reverting back to windows 8. Once back on 8 I couldn't search from the right side or open anything from the taskbar. After messing around for about 2 days i managed to fix it without losing anything off the laptop and without backing anything up. I just simply updated the laptop again, but this was difficult as i couldn't access my settings without doing the following.

1. CTRL+ALT+DEL

2. Start Task Manager

3. File>New Task

4. Type  explorer.exe  and hit enter

5. Go to control panel

6. System and security

7. Windows update

8. Change your settings so that updates are not automatically installed - instead have it so you can choose which updates to download and install.

9. Check for updates

10. Deselect everything other than the Windows 10 update (it will be in optional downloads)

11. Let it run - this will probably take ages (2 - 4 hours). Just get on with something else and leave it to do what it has to.

I was worried about putting it back on 10 as i had that many problems and didn't want to lose Microsoft Word, Powerpoint......etc, but its working fine for me now and i haven't lost anything.

Hope this helps someone else!

  • Proposed as answer by C8524682 16 hours 40 minutes ago
Free Windows Admin Tool Kit Click here and download it now
September 14th, 2015 10:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics