none
Faulting application name: explorer.exe, Faulting module name: ntdll.dll

    Question

  • I get the following virtually daily at random times:

     

    Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d6727a7

     

    Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96e

     

    Exception code: 0xc0000005

     

    Fault offset: 0x00032239

     

    Faulting process id: 0x1b20

     

    Faulting application start time: 0x01cca8b443c72113

     

    Faulting application path: C:\Windows\system32\explorer.exe

     

    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

     

    Report Id: 808afa39-14a8-11e1-90f3-00265e93ae5a

    Tuesday, November 22, 2011 11:38 PM

Answers

All replies

  • Any backstory on what you were doing when the fault happened?  Does it really seem 100% random, or can you narrow it down to certain actions or applications?  Several people report this error when printing from Office products (Word, Excel, etc...).  If so, does this happen when you print from Notepad or any other application?  Or only within Office products?

    If it only occurs in Office, use Microsoft Update to update and patch your Microsoft Office applications.

     

    NuAngel


    Don't forget, if you find the help you need, click the "Propose as Answer" link at the bottom of the post containing the solution!
    NuAngel.net
    Wednesday, November 23, 2011 4:46 AM
  • It happens when I do file related operations in explorer...  Open a directory... Delete a file... save a file... etc...
    Wednesday, November 23, 2011 5:59 AM
  • Hi,

     

    The issue should related with ntdll.dll file.

    The ntdll.dll file is a file created by Microsoft that has a description of "NT Layer DLL" and is the file that contains NT kernel functions.

    You may try to copy this file from a well worked machine and replace the old one. Also you can try to perform a Clean Boot to see if any third party services conflict it.

     

    There’s similar thread may helpful to you:

    http://social.msdn.microsoft.com/forums/en-US/ieextensiondevelopment/thread/5ab972c4-8924-4214-a314-e60080972b05/

     

     

     

    Regards,

    Leo   Huang

     

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, November 24, 2011 7:44 AM
    Moderator
  • I replace my laptop with a new one only this time it is 64bit OS.  This machine connects into my company VPN and I think it is possibly something in the group policies.  I'm having the same symptom with the new laptop and new OS.

    #############################

    #############################

    #############################

    I see the following:

    Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4

    Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e

    Exception code: 0xc0000005

    Fault offset: 0x000000000004e4b4

    Faulting process id: 0x163c

    Faulting application start time: 0x01cd4dd24a122a0e

    Faulting application path: C:\Windows\Explorer.EXE

    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

    Report Id: 76b2e103-ba2b-11e1-8c2b-402cf4b6db3b

    #############################

    #############################

    #############################

    And before that error there seems to be this:

    Fault bucket 3031192604, type 5

    Event Name: WindowsUpdateFailure

    Response: Not available

    Cab Id: 0

    Problem signature:

    P1: 7.6.7600.256

    P2: 80072efd

    P3: D67661EB-2423-451D-BF5D-13199E37DF28

    P4: Scan

    P5: 101

    P6: Managed

    P7:

    P8:

    P9:

    P10:

    Attached files:

    These files may be available here:

    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.6.7600.256_31e239c46abafb1adf160ee31c3b513d5b18dfc_10f5f6c9

    Analysis symbol:

    Rechecking for solution: 0

    Report Id: ce61a8fb-ba24-11e1-8c2b-402cf4b6db3b

    Report Status: 0

    #################################################

    #################################################

    #################################################

    The following is in that file:

    EventType=WindowsUpdateFailure
    EventTime=129845939051921275
    Consent=1
    UploadTime=129845939052701275
    ReportIdentifier=ce61a8fb-ba24-11e1-8c2b-402cf4b6db3b
    Response.BucketId=3031192604
    Response.BucketTable=5
    Response.type=4
    Sig[0].Name=ClientVersion
    Sig[0].Value=7.6.7600.256
    Sig[1].Name=Win32HResult
    Sig[1].Value=80072efd
    Sig[2].Name=UpdateId
    Sig[2].Value=D67661EB-2423-451D-BF5D-13199E37DF28
    Sig[3].Name=Scenario
    Sig[3].Value=Scan
    Sig[4].Name=SourceId
    Sig[4].Value=101
    Sig[5].Name=Environment
    Sig[5].Value=Managed
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.256.4
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    FriendlyEventName=Windows Update installation problem
    ConsentKey=WindowsUpdateFailure
    AppName=Host Process for Windows Services
    AppPath=C:\Windows\System32\svchost.exe
    ReportDescription=A Windows update did not install properly. Sending the following information to Microsoft can help improve the software.



    • Edited by PaulDAndrea Tuesday, June 19, 2012 10:20 PM
    Tuesday, June 19, 2012 10:03 PM
  • any answer on this issue?
    Tuesday, November 13, 2012 4:39 PM