explorer.exe crashing related to permissions(?)

  • Thread starter Thread starter rarewolf
  • Start date Start date
R

rarewolf

Forgive me for cross-posing this problem, but I have new information
and don't seem to be getting much help from 'help and support', plus
the fact this problem seems to be related to permissions associated
with users' profiles on the multple-user computer that I manage ...

The problem is that explorer.exe commonly crashes, and will
consistently crash whenever files are copied/pasted to a new
location. The error message is the usual "Windows Explorer has
encountered a problem and needs to close ...", and the rror will
sometimes close the entire desktop.

While the old information was this happens for all users except the
administrator, the new information is that if I give a user admin
permissions the problem will NOT occur.

According to the event viewer (applications), there are are always 3
associated events (see below). The hyperlink (For more information,
see Help and Support Center) provided by the event has not yet
provided any useful information, but it would appear that the paste
operation wants to change something without having permissions to do
so(?) ... what could it be??

TIA & cheerios from the Avalon Peninsula :o)

The first events 2 are errors:
~~~~~~~~~~~
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 25/10/2007
Time: 10:01:24 AM
User: N/A
Computer: MAFIICSEM
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting
module ntdll.dll, version 5.1.2600.2180, fault address 0x00001010.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6e 74 64 6c 6c in ntdll
0038: 2e 64 6c 6c 20 35 2e 31 .dll 5.1
0040: 2e 32 36 30 30 2e 32 31 .2600.21
0048: 38 30 20 61 74 20 6f 66 80 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 30 31 30 31 30 0d 0a 01010..
~~~~~~~~~~~
and
~~~~~~~~~~~
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 25/10/2007
Time: 10:01:27 AM
User: N/A
Computer: MAFIICSEM
Description:
Fault bucket 479124178.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 39 31 32 34 31 37 47912417
0010: 38 0d 0a 8..
~~~~~~~~~~~
The last event is "information":
~~~~~~~~~~~
Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 25/10/2007
Time: 10:01:30 AM
User: N/A
Computer: MAFIICSEM
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
~~~~~~~~~~~
 
Forgive me for cross-posing this problem, but I have new information
and don't seem to be getting much help from 'help and support', plus
the fact this problem seems to be related to permissions associated
with users' profiles on the multple-user computer that I manage ...

The problem is that explorer.exe commonly crashes, and will
consistently crash whenever files are copied/pasted to a new
location. The error message is the usual "Windows Explorer has
encountered a problem and needs to close ...", and the rror will
sometimes close the entire desktop.

While the old information was this happens for all users except the
administrator, the new information is that if I give a user admin
permissions the problem will NOT occur.

According to the event viewer (applications), there are are always 3
associated events (see below). The hyperlink (For more information,
see Help and Support Center) provided by the event has not yet
provided any useful information, but it would appear that the paste
operation wants to change something without having permissions to do
so(?) ... what could it be??

TIA & cheerios from the Avalon Peninsula :o)

The first events 2 are errors:
~~~~~~~~~~~
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 25/10/2007
Time: 10:01:24 AM
User: N/A
Computer: MAFIICSEM
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting
module ntdll.dll, version 5.1.2600.2180, fault address 0x00001010.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 6e 74 64 6c 6c in ntdll
0038: 2e 64 6c 6c 20 35 2e 31 .dll 5.1
0040: 2e 32 36 30 30 2e 32 31 .2600.21
0048: 38 30 20 61 74 20 6f 66 80 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 30 31 30 31 30 0d 0a 01010..
~~~~~~~~~~~
and
~~~~~~~~~~~
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 25/10/2007
Time: 10:01:27 AM
User: N/A
Computer: MAFIICSEM
Description:
Fault bucket 479124178.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 39 31 32 34 31 37 47912417
0010: 38 0d 0a 8..
~~~~~~~~~~~
The last event is "information":
~~~~~~~~~~~
Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1002
Date: 25/10/2007
Time: 10:01:30 AM
User: N/A
Computer: MAFIICSEM
Description:
The shell stopped unexpectedly and Explorer.exe was restarted.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
~~~~~~~~~~~
Click to expand...

I may have solved the problem by monitoring files modified at the time
the error occurred. It seems that any explorer.exe paste operation
(and possibly other operations) wants to modify a file in the root of
C:. The file name is 'trace.txt', and I have no idea what it's for,
but I modified its permissions attribute so that anyone could modify
it, and the problem has stopped occuring.

Googling "trace.txt" turns up a number of entries, and is apparently
associated with having installed the "HDD Hex Editor". I'm off to
send them an e-mail!!!

cheerios :o)
 
Back
Top