Link to home
Start Free TrialLog in
Avatar of avogini
avogini

asked on

Windows 7 Explorer Crashing Repeatedly

Windows 7 Explorer crashes multiples times a day when working with files on the server.  It can happen when copying files from one server to another, deleting, or moving, etc.  The error is ‘Windows Explorer has stopped working’ and all of the desktop icons get pushed back (i.e. reset) to the left side of the screen.  When it happens, here’s the event log.  I haven’t been able to find much on thumbplug.dll.  Any help would be great, thanks!

Faulting application name: explorer.exe, version: 6.1.7600.16450, time stamp: 0x4aebab8d
Faulting module name: thumbplug.dll, version: 28.0.2010.280, time stamp: 0x4c744212
Exception code: 0xc0000005
Fault offset: 0x000000000004fadf
Faulting process id: 0x1304
Faulting application start time: 0x01cb96e911a716ae
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\thumbplug.dll
Report Id: 53dd408e-02dc-11e0-abac-b8ac6f258286

Avatar of Jeff Brown
Jeff Brown
Flag of United States of America image

The faulting module  thumbpug.dll is listed as malware.   I would scan with malwarebytes anti-malware.
Avatar of avogini
avogini

ASKER

We will do that shortly and see what we come up with.
Avatar of avogini

ASKER

We did not find anything with a full scan of Malwarebytes.

I am going to check with HiJackThis and see if I can find anything more there, and as well as a second malware scanner.

Also, this Information event (event id 1001) also appears after every error.

Fault bucket 22012590, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: explorer.exe
P2: 6.1.7600.16450
P3: 4aebab8d
P4: thumbplug.dll
P5: 28.0.2010.280
P6: 4c744212
P7: c0000005
P8: 000000000029911a
P9:
P10:

Attached files:
C:\Users\<username>\AppData\Local\Temp\WER9248.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\<username>\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_20c0545fbfa933c4349a994e30377138491c2db5_0c1db561

Analysis symbol:
Rechecking for solution: 0
Report Id: 8adc1643-0852-11e0-8868-b8ac6f258286


Let me know if anything leaps out at anyone, because I am at a bit of a loss here. Explorer continually crashes on my user now and I would rather not have to rebuild his machine. We have had this issue with this user before, and recently had to replace his hard drive, so some on my staff postulate that its an issue with his domain account...yet the GPO's linked with this account are very limited and none have anything to do with Windows Explorer, so I am hard pressed to think that is it.

Thoughts?
Avatar of avogini

ASKER

Attached is the crash file referenced above. Report.txt
the exception code means: Access Denied

Just try to open IE without add-ons enabled.

To do so:

Start menu
All programs
Accessories
System tools
internet explorer 8 (no add-ons)

if no more crash

disable the add-on which is causing the crashes
Avatar of avogini

ASKER

Good thought, but we are are referring to Windows Explorer (explorer.exe) not Internet Explorer (iexplorer.exe). I do not believe Windows Explorer has the same option to disable DLL's.
Sorry I think it is IE8 ... but anyway:

Try scan the PC with Superantispyware free software: http://superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

If this is really a malware I quarantee that this will clean it up ;-)

I found another topic here related to this issue:
https://www.experts-exchange.com/questions/26648443/Windows-7-64-bit-error-Fault-Module-Name-thumbplug-dll.html

You can also try to boot into safe mode to see if the explorer is still crashing.

Avatar of avogini

ASKER

We will keep digging and try safe mode as well.

And the user doesn't have TGA installed, per the other link's suggestion.
Hi,

I am just curious, you get some result after Safe mode?
Avatar of avogini

ASKER

We haven't been able to test due to office illnesses. One we are back in we will test.
ASKER CERTIFIED SOLUTION
Avatar of avogini
avogini

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of avogini

ASKER

Was definitely the driver set...definitely something we wouldn't have guessed without all the testing we did. Thanks for the help though.
Avatar of avogini

ASKER

Issue was apparently a corrupted driver being used by Windows 7 for a Microsoft Wireless Travel Mouse (USB). Once we removed and uninstalled the hardware, then plugged it back in and allowed the driver to be reinstalled, we did not have any more issues.

Though Expert comments were helpful, they did not lead us to the proper conclusion; however these solutions may have worked under other circumstances I feel.