none
Server 2003 Event ID 1000 Explorer.exe RRS feed

  • Question

  • We have a Windows 2003 DC and file and print server that was found to be in a bad state.  When you logon to it, the screen flashes every few seconds.  During that flash, all the icons disappear.  A few seconds later, they reappear again.  However, you are unable to run any programs normally.  The users find that the server is acting normally as a file and print server.

    We rebooted the server into Safe Mode with Networking and it had the same issue.  We found a message indicating an update failed to install properly whenever we logged on.  In WSUS, I found that one update was showing as failed on the server, KB968930.  I ran task managerand control appwiz.cpl and verified that KB968930 was not listed as an installed program.  KB968930 is Windows Management Framework Core package Windows PowerShell 2.0 and WinRM 2.0.

    I then ran eventvwr.msc and found multiple instances of:

    Event ID 1000 Source explorer.exe.  Faulting application explorer.exe, version 6.0.3790.3959, faulting module shell32.dll, version 6.0.3790.4751, fault address 0x001bd400. 

    I installed KB968930 successfully manually, but it did not resolve the issue.

    What do you recommend to resolve this issue?

    Thanks,
    Richard Roati
    Friday, October 22, 2010 11:01 PM

Answers

  • Hi,

     

    Please perform Madhurjya’s suggestion. If the issue continues, it is recommend that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with you to create a dump file because we find it seems to be application crash issue and we need to analyze the crash dump file to narrow down the root cause of the issue. Unfortunately, it is not effective for us to debug the crash dump file here in the forum. Thanks for your understanding.

     

    To obtain the phone numbers for specific technology request please take a look at the web site listed below:

     

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607

     

    Hope the issue will be resolved soon.

     

     

    Best Regards,

    Vincent Hu

     

    Tuesday, October 26, 2010 7:23 AM
    Moderator

All replies

  • Try the below steps:

    Please remove KB 2286198 and reinstall it in QFE branch.

    Steps:

    1. Remove KB 2286198 from add/remove programs

    2. Reboot if prompted

    3. Download the patch and extract it to a folder
    http://support.microsoft.com/kb/2286198


    4. Open up a command prompt with admin privileges and go to the folder where the hotfix is saved

    5. Run the following command to install the update in QFE branch

    C:\<Patch Extracted Location>\<Patch_File_Name> /B:SP2QFE

    Example C:\ENU.exe /B:SP2QFE (where ENU.exe id the patch)

    This will update the binary in QFE branch.

    6. Reboot and test

    If the problem persists we most probably would need to generate a dump of explorer.exe process and analyze it

    Thanks

    Madhurjya

    Sunday, October 24, 2010 10:37 AM
  • Hi,

     

    Please perform Madhurjya’s suggestion. If the issue continues, it is recommend that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with you to create a dump file because we find it seems to be application crash issue and we need to analyze the crash dump file to narrow down the root cause of the issue. Unfortunately, it is not effective for us to debug the crash dump file here in the forum. Thanks for your understanding.

     

    To obtain the phone numbers for specific technology request please take a look at the web site listed below:

     

    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607

     

    Hope the issue will be resolved soon.

     

     

    Best Regards,

    Vincent Hu

     

    Tuesday, October 26, 2010 7:23 AM
    Moderator