avogini
asked on
Windows 7 Explorer Crashing Repeatedly
Windows 7 Explorer crashes multiples times a day when working with files on the server. It can happen when copying files from one server to another, deleting, or moving, etc. The error is ‘Windows Explorer has stopped working’ and all of the desktop icons get pushed back (i.e. reset) to the left side of the screen. When it happens, here’s the event log. I haven’t been able to find much on thumbplug.dll. Any help would be great, thanks!
Faulting application name: explorer.exe, version: 6.1.7600.16450, time stamp: 0x4aebab8d
Faulting module name: thumbplug.dll, version: 28.0.2010.280, time stamp: 0x4c744212
Exception code: 0xc0000005
Fault offset: 0x000000000004fadf
Faulting process id: 0x1304
Faulting application start time: 0x01cb96e911a716ae
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\thumbp lug.dll
Report Id: 53dd408e-02dc-11e0-abac-b8 ac6f258286
Faulting application name: explorer.exe, version: 6.1.7600.16450, time stamp: 0x4aebab8d
Faulting module name: thumbplug.dll, version: 28.0.2010.280, time stamp: 0x4c744212
Exception code: 0xc0000005
Fault offset: 0x000000000004fadf
Faulting process id: 0x1304
Faulting application start time: 0x01cb96e911a716ae
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\thumbp
Report Id: 53dd408e-02dc-11e0-abac-b8
The faulting module thumbpug.dll is listed as malware. I would scan with malwarebytes anti-malware.
ASKER
We will do that shortly and see what we come up with.
ASKER
We did not find anything with a full scan of Malwarebytes.
I am going to check with HiJackThis and see if I can find anything more there, and as well as a second malware scanner.
Also, this Information event (event id 1001) also appears after every error.
Fault bucket 22012590, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: explorer.exe
P2: 6.1.7600.16450
P3: 4aebab8d
P4: thumbplug.dll
P5: 28.0.2010.280
P6: 4c744212
P7: c0000005
P8: 000000000029911a
P9:
P10:
Attached files:
C:\Users\<username>\AppDat a\Local\Te mp\WER9248 .tmp.WERIn ternalMeta data.xml
These files may be available here:
C:\Users\<username>\AppDat a\Local\Mi crosoft\Wi ndows\WER\ ReportArch ive\AppCra sh_explore r.exe_20c0 545fbfa933 c4349a994e 3037713849 1c2db5_0c1 db561
Analysis symbol:
Rechecking for solution: 0
Report Id: 8adc1643-0852-11e0-8868-b8 ac6f258286
Let me know if anything leaps out at anyone, because I am at a bit of a loss here. Explorer continually crashes on my user now and I would rather not have to rebuild his machine. We have had this issue with this user before, and recently had to replace his hard drive, so some on my staff postulate that its an issue with his domain account...yet the GPO's linked with this account are very limited and none have anything to do with Windows Explorer, so I am hard pressed to think that is it.
Thoughts?
I am going to check with HiJackThis and see if I can find anything more there, and as well as a second malware scanner.
Also, this Information event (event id 1001) also appears after every error.
Fault bucket 22012590, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: explorer.exe
P2: 6.1.7600.16450
P3: 4aebab8d
P4: thumbplug.dll
P5: 28.0.2010.280
P6: 4c744212
P7: c0000005
P8: 000000000029911a
P9:
P10:
Attached files:
C:\Users\<username>\AppDat
These files may be available here:
C:\Users\<username>\AppDat
Analysis symbol:
Rechecking for solution: 0
Report Id: 8adc1643-0852-11e0-8868-b8
Let me know if anything leaps out at anyone, because I am at a bit of a loss here. Explorer continually crashes on my user now and I would rather not have to rebuild his machine. We have had this issue with this user before, and recently had to replace his hard drive, so some on my staff postulate that its an issue with his domain account...yet the GPO's linked with this account are very limited and none have anything to do with Windows Explorer, so I am hard pressed to think that is it.
Thoughts?
ASKER
Attached is the crash file referenced above. Report.txt
the exception code means: Access Denied
Just try to open IE without add-ons enabled.
To do so:
Start menu
All programs
Accessories
System tools
internet explorer 8 (no add-ons)
if no more crash
disable the add-on which is causing the crashes
Just try to open IE without add-ons enabled.
To do so:
Start menu
All programs
Accessories
System tools
internet explorer 8 (no add-ons)
if no more crash
disable the add-on which is causing the crashes
ASKER
Good thought, but we are are referring to Windows Explorer (explorer.exe) not Internet Explorer (iexplorer.exe). I do not believe Windows Explorer has the same option to disable DLL's.
Sorry I think it is IE8 ... but anyway:
Try scan the PC with Superantispyware free software: http://superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
If this is really a malware I quarantee that this will clean it up ;-)
I found another topic here related to this issue:
https://www.experts-exchange.com/questions/26648443/Windows-7-64-bit-error-Fault-Module-Name-thumbplug-dll.html
You can also try to boot into safe mode to see if the explorer is still crashing.
Try scan the PC with Superantispyware free software: http://superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
If this is really a malware I quarantee that this will clean it up ;-)
I found another topic here related to this issue:
https://www.experts-exchange.com/questions/26648443/Windows-7-64-bit-error-Fault-Module-Name-thumbplug-dll.html
You can also try to boot into safe mode to see if the explorer is still crashing.
ASKER
We will keep digging and try safe mode as well.
And the user doesn't have TGA installed, per the other link's suggestion.
And the user doesn't have TGA installed, per the other link's suggestion.
Hi,
I am just curious, you get some result after Safe mode?
I am just curious, you get some result after Safe mode?
ASKER
We haven't been able to test due to office illnesses. One we are back in we will test.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Was definitely the driver set...definitely something we wouldn't have guessed without all the testing we did. Thanks for the help though.
ASKER
Issue was apparently a corrupted driver being used by Windows 7 for a Microsoft Wireless Travel Mouse (USB). Once we removed and uninstalled the hardware, then plugged it back in and allowed the driver to be reinstalled, we did not have any more issues.
Though Expert comments were helpful, they did not lead us to the proper conclusion; however these solutions may have worked under other circumstances I feel.
Though Expert comments were helpful, they did not lead us to the proper conclusion; however these solutions may have worked under other circumstances I feel.