locked
Windows 7 explorer crashes with unknown module RRS feed

  • Question

  • I often get the following error on many Win7 32bit Clients:

    Protokollname: Application
    Quelle:        Application Error
    Datum:         13.07.2012 15:19:36
    Ereignis-ID:   1000
    Aufgabenkategorie:(100)
    Ebene:         Fehler
    Schlüsselwörter:Klassisch
    Benutzer:      Nicht zutreffend
    Computer:      ******
    Beschreibung:
    Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d6727a7
    Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
    Ausnahmecode: 0xc0000005
    Fehleroffset: 0x0a0cf4b8
    ID des fehlerhaften Prozesses: 0xc90
    Startzeit der fehlerhaften Anwendung: 0x01cd60c626a78507
    Pfad der fehlerhaften Anwendung: C:\Windows\explorer.exe
    Pfad des fehlerhaften Moduls: unknown
    Berichtskennung: 63eac789-cced-11e1-8a75-bcaec5466ae7
    Ereignis-XML:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-07-13T13:19:36.000000000Z" />
        <EventRecordID>12158</EventRecordID>
        <Channel>Application</Channel>
        <Computer>******</Computer>
        <Security />
      </System>
      <EventData>
        <Data>explorer.exe</Data>
        <Data>6.1.7601.17567</Data>
        <Data>4d6727a7</Data>
        <Data>unknown</Data>
        <Data>0.0.0.0</Data>
        <Data>00000000</Data>
        <Data>c0000005</Data>
        <Data>0a0cf4b8</Data>
        <Data>c90</Data>
        <Data>01cd60c626a78507</Data>
        <Data>C:\Windows\explorer.exe</Data>
        <Data>unknown</Data>
        <Data>63eac789-cced-11e1-8a75-bcaec5466ae7</Data>
      </EventData>
    </Event>

    Debug Dump analyze says:

    0:012> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Exception Analysis                                   *
    *                                                                             *
    *******************************************************************************

    GetPageUrlData failed, server returned HTTP status 404
    URL requested: http://watson.microsoft.com/StageOne/explorer_exe/6_1_7601_17567/4d6727a7/ole32_dll/6_1_7601_17828/4f98d130/c0000005/0003a728.htm?Retriage=1

    FAULTING_IP:
    ole32!CStdMarshal::Disconnect+258
    76e6a728 f680ac00000010  test    byte ptr [eax+0ACh],10h

    EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
    ExceptionAddress: 76e6a728 (ole32!CStdMarshal::Disconnect+0x00000258)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 00000000
       Parameter[1]: f0f0f19c
    Attempt to read from address f0f0f19c

    PROCESS_NAME:  explorer.exe

    ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

    EXCEPTION_PARAMETER1:  00000000

    EXCEPTION_PARAMETER2:  f0f0f19c

    READ_ADDRESS:  f0f0f19c

    FOLLOWUP_IP:
    ole32!CStdMarshal::Disconnect+0
    76e6a534 8bff            mov     edi,edi

    MOD_LIST: <ANALYSIS/>

    NTGLOBALFLAG:  2000100

    APPLICATION_VERIFIER_FLAGS:  48004

    LAST_CONTROL_TRANSFER:  from 76e45d00 to 76e6a728

    ADDITIONAL_DEBUG_TEXT:  Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]

    FAULTING_THREAD:  ffffffff

    BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ_FILL_PATTERN_f0f0f0f0

    PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ_FILL_PATTERN_f0f0f0f0

    DEFAULT_BUCKET_ID:  INVALID_POINTER_READ_FILL_PATTERN_f0f0f0f0

    STACK_TEXT:  
    0578f754 76e6a728 ole32!CStdMarshal::Disconnect+0x258
    0578f780 76e45d00 ole32!DisconnectSwitch+0x16
    0578f794 76e45ce1 ole32!CStdMarshal::DisconnectAndRelease+0x44
    0578f7ac 76e45d3f ole32!COIDTable::ThreadCleanup+0xcb
    0578f95c 76e78fe4 ole32!FinishShutdown+0x9d
    0578f9a0 76e78f25 ole32!ApartmentUninitialize+0x96
    0578f9c0 76e6bae3 ole32!wCoUninitialize+0x153
    0578f9d8 76e7893c ole32!CoUninitialize+0x72
    0578f9f4 6fbf7984 verifier!AVrfpCoUninitialize+0xf
    0578f9f8 73c2314a networkitemfactory!FDBackgroundThreadHandler+0x21
    0578fa00 770743c0 shlwapi!WrapperThreadProc+0x1b5
    0578fa88 6fc011d3 verifier!AVrfpStandardThreadFunction+0x2f
    0578fac0 76bced6c kernel32!BaseThreadInitThunk+0xe
    0578facc 7752377b ntdll!__RtlUserThreadStart+0x70
    0578fb0c 7752374e ntdll!_RtlUserThreadStart+0x1b


    STACK_COMMAND:  .cxr 0578F470 ; kb ; dds 578f754 ; kb

    SYMBOL_NAME:  ole32!CStdMarshal::Disconnect+0

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: ole32

    IMAGE_NAME:  ole32.dll

    DEBUG_FLR_IMAGE_TIMESTAMP:  4f98d130

    FAILURE_BUCKET_ID:  INVALID_POINTER_READ_FILL_PATTERN_f0f0f0f0_c0000005_ole32.dll!CStdMarshal::Disconnect

    BUCKET_ID:  APPLICATION_FAULT_INVALID_POINTER_READ_FILL_PATTERN_f0f0f0f0_ole32!CStdMarshal::Disconnect+0

    WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/explorer_exe/6_1_7601_17567/4d6727a7/ole32_dll/6_1_7601_17828/4f98d130/c0000005/0003a728.htm?Retriage=1

    Followup: MachineOwner
    ---------

    What can I do?

    Tuesday, July 31, 2012 7:14 AM

Answers

  • Hi,

    Please check if the following article is helpful.

    Applications may crash in Windows Vista, in Windows 7, in Windows Server 2008 or in Windows Server 2008 R2
    http://support.microsoft.com/kb/2541119


    Niki Han

    TechNet Community Support

    • Marked as answer by Niki Han Thursday, August 9, 2012 3:14 AM
    Wednesday, August 1, 2012 8:58 AM