Explorer Open, Expand a Folder, System Hangs, Windows Task Manager in Tray Disappears

Also make sure that the system is free from all types of viruses,,,,,

CHECK FOR ONLINE VIRUS SCAN:
--------------------------------------
1. http://us.mcafee.com/root/mfs/default.asp?cid=9059
2. http://security.symantec.com/
3. http://housecall.trendmicro.com/
4. http://www.pandasoftware.com/activescan/com/activescan_principal.htm
5. http://www.pcpitstop.com/antivirus/default.asp
6. http://www.microsoft.com/security/incident/sasser.asp

Before doing a sys restore, have you tried to use MSCONFIG?

The issue may just be an issue with an app running in the background; so msconfig would be quickest option.

I'm not sure how MSConfig will help me.  The problem is not reproducible on command.  It's very sporatic.  It's only happened 2 or 3 times in couple of weeks or so.  How will this help me?

As I noted, my virus protection is up to date. (Symantec)

I know how to restore to a previous state.  How far back is it safe to go? This started about a week or two ago (at the most), but I'm not exactly sure when.  What happens if I go "too far" or is there such a thing?  Will some things not work?  

Thanks.

>> Will some things not work

yeps,,,,, all the changes which u have made in the last two weeks will be lost,,, like if u have installed a software or somehting like this !!!

Issue not noted as sporatic in original post; regardless...it still could be caused by something running in the background.  Maybe it's not running all the time.  It's at least looking into.  If you don't feel like dealing with msconfig. Then you could just try and roll back your system to the 2 week period when it was functioning correctly.

Dave

Try disabling your symantec AV as this is know to cause crashes and hanging/long pauses in XP

MCP

Munkyxtc:
You're right.  I forgot to note the sporacity of the problem.  My fault.  I guess the problem is, how long do I have to go with an option to tell that the change I instititued (disabling AV, e.g.) is the cause?  I can't do w/o A/V very long!

System restore only affect system changes, correct?  I haven't installed any new software, but I update a minor one.  Will this affect other things adversely?  No data are involved, correct?

I check my task manager pretty regularly.  I'm very familliar with what should be running in the background and I can note an oddity if it occurs.  Of course, "SvcHost.Exe" is so generic you can't tell if it the job it's supporting is supposed to be there or not.  But, I can tell you that aside from that, nothing else is out there that's new as of the past couple of weeks.

And, I can roll back the roll back can't I?  I can go from a roll back, back to the current state, correct, if it cause undue heartache?

I may try it this weekend when I have more time.  I won't be installing any software in the meantime, so there's no risk, is there?  I've never done a roll back, so this is a bit scary for me.

Thanks.

>>  I've never done a roll back, so this is a bit scary for me.

Read here >> http://www.microsoft.com/windowsxp/pro/using/howto/gethelp/systemrestore.asp
It will kick away all the scareness of System Restore ;)

Yeah, I've read about it before.  (I have a MicroSoft XP book which I read), but seeing it discussed and risking your system in implementing it are different things.  And, since this is an intermitent problem, it may be days/weeks before I'll know if the solution (system restore, in this case) worked or was worth the issues it (may) caused.

So, I take you've done a number of these?  Any negatives or advice?

Thanks.

>> So, I take you've done a number of these?

hmmmmmmm :-\
u will not believe it, but it never happened to me that i had forced to do a system restore :)

I didn't think it would to me either. XP has been so solid.  And, since I haven't installed anything recently, I'm worried that this is at best the wrong direction and at the worst may cause more problems than it solves.  I'll try it this weekend and see.  Hopefully, I at least won't be any worse off.

Don't Worry if the System Restore does not fix it... its always reversibile

If your not able to reverse it, i have instructions here for a Manual System Restore... So you should be ok to go ahead with it...

Ray.

OK, Did you try disabling the AV?

Mcp

Hi there .... well before I will try and rollback or even reinstalling and restore I will firstly check whitch services is running as you cant always see this in your task manager ........ to do this click start -> run  then type services msc ......... you can always just double check on the internet on witch services do what ..... and then take the services of that is unneeded and then look if your computer hangs when you push control alt delete.....

just make sure that you don't take off the wrong services .... :-)

Or if you're running Windows XP, which according to your original post you are....

Start -> Run -> MSCONFIG -> Services -> Hide All Microsoft Services

That'll narrow it down...

Moncaptiaa: As I noted,this problem is sporatic, so I might have to leave my AV off for a time span measured in weeks to have any idea if it were at fault, not an attractive alternative.

LordRipper: Yes, as I noted above, I leave my Task Manager running in the tray to track system activity, and I check it from time to time to see what's running.  When I got my XP computer, I eliminated all but essential jobs, doing just what you suggested (www.blackviper.com, e.g.).  Thus, I have a pretty good idea of what is running normally, and I employ PC Mag's startup cop (old version) and another utility to alert me if an unwanted program tries to load.  Thus, I feel reasonably comfortable that there are no aberrant programs running, although some may hide behind the "SvcHost.Exe".  Little is 100% certain, but I'm not a newbie.  And, again, since the hanging is intermittent, running in a clean boot mode (almost nothing running) wouldn't help me much.  My computer has never hung on alt/ctl/del.  It has hung on Explorer when expanding or opening a folder.

Is anyone aware of a M/S patch that might have this as a side affect.  I'm not at home now, but I may have installed one or two in the past couple of weeks.  BTW: How willl the system rollback affect these microsoft patches?

WSC,

I used to work for MS not long ago, and i dont recall seeing a patch that does what you say...

Have we tried running SFC /PURGECACHE /SCANNOW

Also,

Doing a System Restore will make those patches invalid... as if they were never installed... because the registry will have no idea of them...

as for checking the services under services is far better than in the tasklist manager as ..... I would not recommend to stop running apllications in the tasklistmanager as I get often errors the next day ......

Jip ..... patches that does that isn't unrare ....... got one 4 weeks ago on the one xp computer here by me ..... and I ended up having to redo the whole computer...... also the windows ME and 98 had a lot of bad patches..... but anyway that website ..... thats where I learned about these stuff ..... but I would sugest that you don't use just this on place as I once did what thy said ..... and well .... I screwed up ........

Well I think I can't help you anymore .... but hope really that you get that problem sorted ou ....... :-)

RayFrangie: What does SFC /PURGECACHE/ SCANNOW do?  The system restore will only undo patched installed since the restore data, correct?  If I check and see that I haven't installed any patches between the restore date and now, I won't have to reinstall any patches, correct?

SFC /PURGECACHE/ SCANNOW is a utility to repair contents of dllcache directory .... this is some kind of system file checker like in windows 98 .......

here is a link to it for a lot of info on this
http://www.microsoft.com/whdc/winlogo/drvsign/wfp.mspx

jip ..... can work the way you want to do it .... can't see why not .... go for it

;-)

ooooo and this SFC  is for windows 2000 only its almost exactly the same as windows 98 sfc

SFC = System File Checker...

/PURGECACHE    Purges the file cache.
/SCANNOW        Scans all protected system files immediately.

If there is a Windows Protected File or a System File that is out of place or does not belong where it does, the utility will ask for the Windows CD in order to extract a new copy from the Original Media and replace the existing file on the PC.

System Restore basically modifies the registry... You do not lose any data/email/documents/etc.... on the PC...
The System Restore Utility will although rename a few folders if necessary in order to prevent conflicts with the previous registry...
System Restore Process is, 99.99% of the time, completely reversible

Here's my restore report:

I chose a restore point about 16 days ago and followed the bouncing ball to restore my system.  All went well until my system rebooted.  At the "Welcome Screen", it hung for about twice as long as it normally does and the following message appears: "Restore Incomplete: Your computer cannot be restored to May 14, 2004 system checkpoint.  Chose another point..."

I chose another date.  (A few days earlier.) Went thru the system restore.  Same message.

Okay, is this another example of fine MicroSoft programming or what?  I thought that this was supposed to be a no-brainer; guaranteed protection, roll it back, done deal.  Huh.

Great.

Now what?  Suggestions?  What am I missing????

Improper Shutdown May Affect System Restore
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q283/0/96.asp&NoWebContent=1

Nope.  I *always* shut down properly.  I've had an abnormal shutdown maybe three times in the year I've owed my PC (it hung).  I didn't have one on those two days, I'm sure.

This is very disconcerting.....

Any other ideas?

WSC

I've seen this before.... It looks like it may be time for a manual system restore..... (I hate this but sometimes its the only way before a repair/reinstall)

Unfortunately you have a Dell Machine, which means its an OEM Installation of Windows which means this process has a risk of not working correctly

Here's the warning:

Warning: Do not use the procedure that is described in this article if your computer has an OEM-installed operating system. The system hive on OEM installations creates passwords and user accounts that did not exist previously. If you use the procedure that is described in this article, you may not be able to log back into the recovery console to restore the original registry hives.

You can go through with it at your own risk, but my advice here would be to run a repair on the current installation of Windows (Boot Up Windows XP CD, Press Enter to Setup, Press F8 to accept agreement, Press R for Repair, follow the prompts)

If you want to go through with this registry/manual system restore process, heres the article:

http://support.microsoft.com/default.aspx?kbid=307545

The heading might be a little misleading, but this is the article that will take you through a manual system restore... (Make sure you read the article correctly and understand it, one wrong thing here can cause problems and will require a parallel installation of Windows XP)

Hope this helps

RayFranqie,

Thanks, but I as you noted, I do have an OEM install by Dell and my problem is no where near as severe as windows won't boot. This is waaay to risky for me.   Except for a couple of instances of hanging explorer (see original question), my system runs  great.  I was going to do a system restore just on the off chance this would undo some oddity that may have occured unknown to me in the past couple of weeks.

Now the question has shifted to why my 2 restores are bad.  It was suggested that an improper shutdown may be the cause, but I assure you not.  There's nothing amiss here that I have done.  So, we're back to, "what the heck is going on with this system restore?"  My events log offered no insight, btw.

It could be a couple of things that may be causing this...

1) Corrupt Registry...
2) Something Starting up on Startup is causing Explorer to Hang

Does the same thing happen in safe Mode???

Here's what i'd try if i was in your shoes now:

Plan A:

1) Boot PC into Safe Mode
2) Start -> Run -> MSCONFIG
3) Click Startup Tab -> Click Disable All
4) Click Services Tab -> Click Hide All Microsoft Services -> Click Disable All
5) Reboot PC into Normal Mode and Test

Works? Good... Problem May Be Solved... Only way to determine is to use and monitor the PC as normal
Does Not Work? Hmmm... on to Plan B

Plan B: (Windows XP CD Required Here... with Dell.. i think its called an Operating System Recovery CD)

1) Boot PC into Safe Mode
2) Start -> Run -> CMD
3) Type SFC /PURGECACHE /SCANNOW

NB: I put this command above... if it wasn't run... try it now... if it was... skip to Plan C

Plan C:

1) Boot PC Into Safe Mode
2) Start -> Run -> CMD
3) Type CHKDSK /R
4) Type Y on the Message... This Message claims that Windows cannot mount the drive and asks to run the check on next reboot
5) Restart PC in order for CheckDisk to Run

NB: Yes i know this checks the HDD for Errors... but i have seen cases where Explorer will hang due to orphaned/corrupted sectors/files


Plan D:

If the above hasn't worked... then 2 things i'd suggest

1) Obtain a Registry Cleaner.... I'd Recommend Registry First Aid... You can find it here: http://www.rosecitysoftware.com/Reg1Aid/
2) Run a Repair on Windows (Note: This does not delete data or programs... it will just repair the O/S Files.... it also does NOT touch the registry during the process so if the registry is causing the fault then this process would not work)

Plan E:

Well... if a repair hasn't solved it... then unfortunately the Above Manual System Restore Link or a Parallel Installation is the way to go...


Hope this Helps

Ray.

By the way... If Plan A has solved it... Go through MSCONFIG Startup Items 1 or 2 at a time and see if the process repeats itself...

This way you can tell which program was causing the problem...

Ray.

RayFranquie,

keep in mind, this is not a reproducible problem.  It's happened twice in the past couple of weeks.   I run Norton registry checker on a semi-regular basis.  I have researched what runs on my system and only have running what I absolutely need.  I do run Desktop Sidebar too.  I'm really more concerned as to why my system restore is not working.

I really don't want to try anything too radical for a twice occuring problem, although it was a bit disconcerting that it happened at all.  So, I don't want to create problems solving this small one.

Now, why would my two system restores not be good??  I didn't know that could happen!

Thanks.

WSC,

A reason why your system restores are not working is probably because the System Restore files have been corrupted. A reason why this occurs is something i cannot give you right now but from preliminary research it's caused by third party programs on the system and spyware/malware.

When this happens, there is not much you can do but erase all of them by Disabling System Restore and starting over.

1. Click Start, and click Control Panel.
2. Double-click System, and click the "System Restore" tab.
3. Click to check the "Turn off System Restore on all drives" box, and click OK.
4. Restart the computer.
5. Click Start, and click Control Panel.
6. Double-click System, and click the "System Restore" tab.
7. Remove the check mark from the "Turn off System Restore on all drives" box, and click OK.
8. Restart the computer again.
9. Check whether you can use the System Restore function.

If this still doesn't fix the problem, you can try to reinstall the System Restore Feature on your system...

1. Insert the Windows XP installation CD in to the CD-ROM.
2. Click Start->Run.
3. Type "%windir%\inf" (without the quotation marks) and press Enter.
4. In the inf folder, locate to the sr.inf or sr file.
5. Right-click the file and choose Install.
6. After the installation finishes, try to launch System Restore.

If this doesnt work..... We'll need to delete more System Restore files.

To do this, perform the steps below.

1. Right click the drive C and then click properties.
2. Click Disk Cleanup in General tab.
3. Switch to More Options tab in Disk Cleanup window.
4. Click Cleanup of System Restore and click Yes to delete the System Restore points.

Try to create a new System Restore point. Note: Your Old System Restore Points have been deleted in the steps above. If we cannot create the System Restore point, or cannot find it even we created just now, I suggest we repair Windows.


Hope this Helps

Ray Frangie.


PS: I've seen Symantec Products cause these sort of problems with Windows XP. I'd never recommend them to anyone. Windows XP Service Pack 2 Beta did not have support for Norton Products in its Anti-Virus / Firewall Detection Features. I wont be surprised if the Final Release doesnt either.

Okay.  My understanding from my M/S book is that if you turn off system  restore, it automaticallyi deletes all restore points.  Turning it off deletes all.   How could we delete more?  I guess you're assuming that the system restore might not delete them.

I run a tight system.  I  run SpyBot, etc.  It's very disconcerting that this happened and M/S gives me no more messages than it does.  I do use NAV and Norton Utilites.  i have for years.  I'm surpised you've had so much trouble.  They're usually at the top of PC Mag/PC World's recommendations.

When you say SP 2 won't support NAV, you mean it won't run under SP 2?  I can't believe Symantec wouldn't be ready for that!!!!

Thanks.

Some people have been lucky with Norton Products... I worked for MS for 4 months in the Level 2 Support Area and at least 60% of the calls we got had something to do with Norton Anti-Virus, Norton Internet Security, Norton Personal Firewall

In the end we had to obtain a tool from Symantec that would completely remove everything related to Norton off the system... Once we did that, the system ran like a dream...

I tested NAV under SP2... The Anti-Virus Detection Feature did not pick up that an Anti-Virus was installed, tried the Norton Firewal... Still did not pick up...

The only anti-virus that i managed to get picked up by the Detection Feature was Trend Micro's PC-Cillin

I'm still waiting on the final release of SP2 to see what it really supports...


***
Okay.  My understanding from my M/S book is that if you turn off system  restore, it automaticallyi deletes all restore points.  Turning it off deletes all.   How could we delete more?  I guess you're assuming that the system restore might not delete them.
***

Exactly... Depending on how damaged (if it is the case) system restore is, it may not delete all restore points

Turning Off System Restore will Delete what it can
Running a Reinstall of the System Restore Feature might fix the problem
If it doesnt, then running that 3rd Step will completely remove Junk left behind from System Restore.

***
I run a tight system.  I  run SpyBot, etc.
***

I once saw a saying that the only way of having a tight system is to switch it off and lock it away in the cupboard... In today's world, i have to agree...


***
They're usually at the top of PC Mag/PC World's recommendations.
***

Unfortunately they dont take calls like we did back at MS... Troubleshooting to the bone... and yep, it was Symantec at it again
We had workers from Symantec working for us... We were told the ins and outs....


My Anti-Virus Recommendation: Grisoft AVG Anti-Virus... http://www.grisoft.com
Its free, its updates are free, and i've had many cases where it picks up things that Norton's just ignores...

I just completed a successful restore to yesterday evening.  I thought I would try a recent one before I go all out.  It seemed to work fine!!!

1.  Does this mean the problem to System Restore (SR) has resolved itself?  I hate to muck with my system if it's not necessary.

2.  Is there not a tool to test SR integrity?  Seems like there should be.

3.   My MusicMatch playlist reverted back to where it was yesterday, not to what I was just playing before the SR reboot.  I thought SR didn't affect programs/files except Microsoft system ones?

4.   Another program I had went back to old program settings (colors, default folders, etc.) from 6 months ago.  They certainly hadn't been changed since last evening.  Why is that?

5.  I do have a piece of freeware as a part of my "security plan" that I've been running for a while called StartUpMonitor that alerts me if a program tries to install itself in my start up group.  I do get a prompt from that when the SR engages to boot; I'm wondering if that impacted its functionality?    

6. SR is only enabled on my drive C.  I also get a notice that it's not active on my other partitions/drives, which I knew and designed it that way since it's only suppose to be effective on your boot drive.  True?

Thanks for the extended help.  (I've now forgotten about my original problem and am now concerned about SR.  The other problem hasn't reocurred.)

Yes it is easier to wipe out problems if they occur in your system. You can use System Restore to remove any system changes that were made since the last time you remember your computer working correctly. System Restore does not affect your personal data files (such as Microsoft Word documents, browsing history, drawings, favorites, or e–mail) so you won’t lose changes made to these files. Windows XP creates “restore points” every day, and also at the time of significant system events (such as when an application or driver is installed). You can also create and name your own restore points at any time. If something goes wrong, you select a restore point and Windows XP undoes any system changes made since that time.

Yes this seems like it solved your problem but I would just wait for a week or two just to check that that isn't going to happen again .... but after a thing like that happens to me I will never trust my pc again .........

RayFrangie or anyone have input on my specific System Restore questions just above?

Thanks.

WSC,

***
1.  Does this mean the problem to System Restore (SR) has resolved itself?  I hate to muck with my system if it's not necessary.
***

Well to say that it fixed itself... doesnt surprise me... after running all the above tests that we've done during this case... it may have well fixed itself... but dont keep your hopes up, it may have just been a lucky move... although if you successfully restored to a point that was not allowing you before, then yes it may have fixed itself


***
2.  Is there not a tool to test SR integrity?  Seems like there should be.
***

Yes there is a tool, but i've never used it due to me never having this problem
You can do a search on your system for SRDIAG.EXE - It's Usually Located in C:\WINDOWS\SYSTEM32\RESTORE\


***
3.   My MusicMatch playlist reverted back to where it was yesterday, not to what I was just playing before the SR reboot.  I thought SR didn't affect programs/files except Microsoft system ones?
***

SR affects the registry... MusicMatch seems to be storing its playlist in the registry... which hence means that the playlist of that date that you restored to will be the date of the playlist


***
4.   Another program I had went back to old program settings (colors, default folders, etc.) from 6 months ago.  They certainly hadn't been changed since last evening.  Why is that?
***

Again, another case of the registry... The program stores its data in the registry, in which the System Restore has restored a previous registry which contained the old settings of the application


***
5.  I do have a piece of freeware as a part of my "security plan" that I've been running for a while called StartUpMonitor that alerts me if a program tries to install itself in my start up group.  I do get a prompt from that when the SR engages to boot; I'm wondering if that impacted its functionality?    
***

It is possible as the System Restore needs to add a Key to the Run Key in the Registry in order for it to start on the next reboot... I've used such programs before and they're a waste of time and resources... i'd remove it and regularly check MSCONFIG which is the in house utility for these things


***
6. SR is only enabled on my drive C.  I also get a notice that it's not active on my other partitions/drives, which I knew and designed it that way since it's only suppose to be effective on your boot drive.  True?
***

Well, i'm running it on all drives... running it on your boot drive is sufficient... but if your over protective like some... its best you run it on all drives... heres an example why:

SR is running on C:\ but you installed a program on D:\ where SR was off... SR can't rename that folder so that the system doesnt pick it up because it'll have no idea about it... Yeah it may change the registry so it doesnt pick it up, but it cant rename it to protect it completely...


Hope this helps

Ray.

Well I'll put this page in a archieve for my Company for back refrences and so on ..... as here wel learned a lot ..... keeping this info will porve to be very helpfull in the future ......
Think that after all that has been tryed here and a system that doesn't want to work .... really needs a fresh installment of windows even if its against my policy to reinstall windows
 

I removed my DeskTop Sidebar utility to see if that was the source of the problem and the 'crash' occurred again, this time when I brought up Word Perfect via shortcut keys (as I usually do).  The only obvious effect was that WP didn't load and the Windows Task Manager, which always sits in my System Tray, suddenly was gone.  I could redisplay it via alt/ctl/del, but when I minimized it, it disappeared; no longer in the Tray.

What would cause this?  I'm not even sure how to see if MicroSoft has a knowledge base on it.

Thanks.

Ok try the following

1)go to Add/remove programs and see if there is one called Winsrvreg and remove it. That fixed my problem.
2)But The problem can also to be caused by the W32.friendgreet.worm virus which infecteds computers through an emailed Halloween greeting card. That alone will not solve the problem, but I found a Norton site which lists the procedures for fully removing this virus, and once completed, the minimized program buttons are back on the taskbar. The site with the instructions is http://securityresponse.symantec.com/avcenter/venc/data/w32.friendgreet.worm.html

=========================================================
if this don't help as its not a 100% garantee to work and what I know about this fenomina I would say

1. In windows, if explorer crashes, [most] of the tray icons in the systray on the taskbar dissapear. You cannot access them.

2. If explorer crashes, the taskbar itself goes. Hopefully explorer will automatically restart by itself and you'll get your taskbar (and desktop) back, but if it doesn't you have to run explorer.exe manually.

3. You can try killing the tray-reliant applications and restarting them, which will work.

4. There may be a way to get your tray icon windows open, go here:
http://ircn.org/addons.htm

Search for 'paranoid' on that page, and download 'Paranoid!'.

Unzip it, you should find an application with a window image as the icon inside. Run it, you should be able to use it to find the desired window and open it. (I give no warranty or guarantee for this.)
========================================================
or lastly

This problem has been associated with computers that are pre-installed with Windows XP by the manufacturer (Compaq, IBM, Sony, etc). Your data loss can occur in one of several ways:

You reinstall Windows XP either by running Winnt32.exe, clicking on "Install Windows XP," or by clicking on Upgrade (Recommended) from the Windows XP CD.
You think something has corrupted your system files and you click on Repair Windows XP on the Windows XP CD.
You upgrade from Windows XP Home Edition that was preinstalled by the manufacturer.
When you first turn on your computer, the wizard that the manufacturer preinstalls creates a file in Windows\System32 called Undo_guimode.txt. If this file is present when you perform one of the reinstallation methods above, then the data that is stored in the All Users folder (including templates, settings, Start menu shortcuts, and any other documents in your Shared Documents folder) will be lost.

To solve this problem, you MUST delete the Undo_guimode.txt file prior to reinstalling, repairing, or upgrading Windows XP. Microsoft recommends manually deleting from the command prompt:

del /a /f Windows\System32\undo_guimode.txt

If you use a manufacturer's restore CD at any time, you may have to perform the step above to prevent further problems. For more information, refer to the article in the Microsoft Knowledge Base.

I hope this will solve your problem :-)

Hey LordRipper,

Thanks for all the information.  I checked for the virus you suggested and ran another full system virus scan + SpyBot.  I’m good, at least as far as I can tell.  I have no pop ups nor other suspicious behavior.

I have tried removing some TSR’s (like DeskTop sidebar) to see if that was the culprit. It is not.

I did have an event yesterday and I got my first-ever error message.  This time, it happened when I just opened explorer (Windows key + E), and I got an error dialogue box.   I checked the event log, but noticed that it logged this crash as just an informational event, not as an error.  Wow.  No wonder I’d missed it in the past.  I was expected an error log.  The message says this,

“Event Type:      Information
Event Source:      Winlogon
Event Category:None
Event ID:      1002
Date:            6/28/2004
Time:            6:33:48 PM
Description:
The shell stopped unexpectedly and Explorer.exe was restarted” and MicroSoft’s reference page offered no additional assistance.  (Imagine that!)  The system doesn’t seem to regard this event as any big deal.

What does this error mean?  Is it giving me any helpful information?  What exactly is going wrong?  What does it mean that the “shell stopped…..”?

This problem is annoying and I’m disappointed that XP has finally “failed” in some fashion, but at least I don’t crash.  There is no data loss. I’m no where close to ready to do an XP reinstall; I’m still looking for a solution to the problem apart from a lobotomy!  

The system tray objects disappear, but the programs are still there and active, in case this wasn’t clear in my earlier descriptions.  I can bring Explorer up again too.  It’s just odd.

Thats normal operation when explorer crashes.... it doesnt reload all the system tray icons... and does exactly what you said above

In regards to the even you're getting... Here are a couple of comments from people regarding this error:

Taken from: http://www.eventid.net/display.asp?eventid=1002&eventno=826&source=winlogon&phase=1

Ionut Marin (Last update 4/7/2004):
From a newsgroup post: "In my case after a little investigation I found out that Internet Explorer stored its temporary files in C:\TEMP (it applied the System flag to the directory so that it became read only for other applications). I changed this and the error disappeared".

From a newsgroup post: "I too have this problem and the solution as of now is to run my folder windows in a separate process. In “Windows Explorer” go to “Tools-->Folder Options”, go to the tab “View” and check "Launch folder windows in a separate process" ".

Some users reported that removing WS_FTP helped them to get rid of this problem.

Robert (Last update 4/15/2003):
My video cards were set at 32 bit color (high). I changed one card to 16 bit high color. When I clicked "applied" my monitor reacted out of range and was frozen and I had to reboot. SiS 6326 video driver caused this problem.

Jim White
This may occur when Explorer tries to read a damaged CD and apparently hungs. If the user kills the "explorer.exe" process, this event will be recorded. Basically, anytime the "explorer.exe" process is killed or somehow terminated, this event will show up in the event log.

Adrian Grigorof
This event may occur in various conditions. See the links below.

Anonymous
I have Windows XP Pro and I installed McAfee7. Outlook XP hangs after 10 min (also no connection with XWin). I disabled McAfee services: everything ok. So I downgraded McAfee to version6: problem solved.

Anonymous
I have found that explorer.exe may close unexpectedly after installing Service Pak 3 and/or installation of IE 6. Uninstalling IE 6 appears to resolve this issue. See Q326612.

Piotr Redo
In my case, I had a Adobe Photoshop 7 file on my desktop (25 MB) which caused explorer to crash each time I tried to log on - so no taskbar, etc.  



For more technical information on the error, visit:
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=Winlogon&EvtID=1002&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.0


HTH

Ray.

RayFangie,

Thanks.  What is WF_FTP?

Ionut Marin said that he changed from C:\Temp.  What exactly did he do? I've not patched IE. I also use Netscape, not IE, but neither is open when the error occurrs.

I don't use any of the other s/w mentioned.


LordRipper,

Thanks for all your hard work and research here.

What is DivX or codec?  I have a CD/DVD burner but no new software.  I use Sonic.

SP4? I have XP Pro, SP1, SP2 is due out soon, but I'll avoid it for this exact reason.

The patch here is dated 10/31/2002.  My Dell was bought in 6/2003, 8 months later.  I would have thought that this patch would have been quickly included in all future releases of XP pro.  So, wouldn't it already be in my version? is there a danger of installing it again?

Also, this link speaks of an "application" error messge.  My message never mentions any application or application.  The shell simply crashes when I open explorer and the shell restarts. Are you sure that this is a good match?  

WSC

DIVX and codec is software to watch DVDs and .Avi files
I did find out that a new patch doesn't always work emediatly ...... sometimes you must put an older patch and then also a newer one. I went thru the archive of EE and found that
the same problem occurd and he did load this old patch ..... and the date of this was 06/05/2004 ........ and it was confirmed by the ASKER that this solved the problem ....... alos on other site that I am using I found the same selution....... but I will have a look at another option and see if we can solve this in another way.......

WS_FTP is an FTP Client

The user that said his default temp location changed to C:\Temp.... This is the Windows Environment Variable which has changed from its default location to C:\TEMP

LordRipper,

Thanks for looking deeper.

Ok got some other ways that might help ..... but please I only found this but not tried it....

=========================================================
1) Disable the following services:
 SSDP discovery service
 Universal Plug & Play Device Host

Right-click on My Computer
Click on Manage
Expand 'Services & Applications'
Highlight 'Services'
Look through list of services on the right....
Find Universal Plug & Play Device Host
Right-click on it.
Click properties.
Change startup type to 'Disabled'
Do exactly the same with 'SSDP discovery service'
========================================================
 ok I got another solution but you must be very carefull with this one ....... now we are going to work with the registry ...... its really easy but still I think you need to make a point to roll back before you do this ..... or maybe back up all important stuff..... but you must make sure that you use the exact same procedure as givin below ...... if you use the same then there will be nothing to worry about.....

You can see which previous items that have been run or are currently running on your system tray by clicking on Start >> Settings >> Taskbar and Start Menu, tick the box that says "Hide inactive icons" then click "customize". There you will see a list of Current and Past items. If you would like to remove the past items then follow these steps:

1. Start Regedit. start -> run -> type "regedit"

2. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify

3. Delete the keys PastIconsStream and IconStreams

4. Exit regedit and restart Explorer.

5. To end explorer right clicking anywhere on the systemtray and choosing "Task Manager". Click on the "Processes" tab and find Explorer.exe. Click the End Process button. Your whole systemtray should dissappear.

6. To restart Exporer, while still in Task Manager, go to the "applications" tab and choose the "New Task..." button. Simply type Explorer.exe and click OK

I really hope that this will work .....

I'm not running Universal Plug and Play Host.  it's already disabled.  SSDP is too.

I'm unsure what your idea about removing tray icons willl do.  I'm not at all sure there's any problem there.  What is the goal here?


I just had the same problem result a while ago when I right clicked on a short cut trying to get to the "properties".  The system hung and never came back.  I had to boot.  No error or even event was logged.  I did get the Task Manager up and killed Explorer hoping the system would return; it didn't.  There was nothing but desktop; no icons at all and no task bar.  What should I kill?  Nothing out of the ordinary there.

I did remember that I disabled a service called "CTSVCCDA.Exe", which has to do with my CDROM (Creative Service for CDROM Access).  My web search indicated it isn't necessary.  I've re-enabled it hoping this has something to do with this condition.

Dell suggested the following, but I'm not sure they properlyi understood the question:

"The error may occur when Explorer tries to read from registry

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BCF96FB4-5F1B-497B-AECC-910304A55011}]
The solution is to delete this key from registry."

What will this do for/to me?

Thanks.

Sorry ..... I got a bit busy with my own problems though let me see
when we try to remove the registry or something like that is
1) sometimes when we install programs we never know what the program does ..... and then for one instance like 2 weeks ago ..... I got this weird thing going on my computer .... and I found out that the registry has been edited an the only way to fix the problem was to delete ..... as windows always check thru the registrys .... and some people found out ways to let windows do things we don't want it to do by putting in extra registrys and also values and so on ......

I am busy now on a program that I wrote in vb .... and my program makes a new entry in the registry and then when the program starts up it checks if the regestry exsist an it checks the value ..... so that no one can copy my program ........ so writing a program that read,write,delete registrys isn't that dificult.....

now If we delete that registry we force windows not read the value in the registry and then your problem will/willnot be fixed by this ......  the reason we ask for you to do is that there were some programes .... viruses and so on that edited these registry and you would probably want to know how we know this ..... well it happend to a phew experts here also and then we had to use a program that takes a snapshot of the registry before and after we installed the program..... and so we got the registry ......

so what we need you to do is to help us in this ...... we know from previous problems that this is the regestry ....... but if you take the registry out and still the problem isn't fix we can start looking at another way ....... maybe get you to do snapshot of the registrys or something ..... as this will be the first time I ever saw this happen and wern't fixed by the methods givin here ......  

LordRipper,

Thanks for the quick response. Your answer is suggesting that I want to remove the past inactive icons I have hidden.  I have a few but are they what's causing the problems I have here?  It's not clear from your comments if this is a clean up preference action or a solution to my problem.  It sounds like a preference one, but if they're not causing an issue, I see no sense in removing them.

Are you saying that the deletion of the key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify" will not HURT me in any way and, you have had a previous problem with symptoms as I'm describing: system hangs on explorer/folder open action, accessing properites of a short-cut, etc?  And, deleting this key has eliminated the issue in these other cases?

Sorry to be so dense.  It's just unclear to me and I don't want to make this worse!!

Thanks again.

Yip..... thats wat I want you to do ..... the problem is that the value in the registry might be the cause of the problem ..... and by deleting it we might be able to elimenate this problem. Yes we used this selution once to fix the problem......

But tell you what .... don't delete It ...... I don't want you to delete this as there might be a program on your pc that uses this program (although I doubt it ...... but lets be save)
go to this "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify and check for me the value of the key

then update me please .... witch solutions did you try so far ...... I just need to see where we stand, what we tried, and what still can be done......

I appologize for the inconvenience.....
are you still getting the Explorrer.exe error and does your system still hang and your task manager still don't want to go into the tray ???? sorry I got a bid confused ...... ill start over again and go thru all these stuff again ......

is this the problem still
Windows does not respond(or hangs) when you try to open or close a folder by using Windows Explorer????

I see where I went of the track ..... I never noticed the "PRO" in your question ...... sorry ....

Well if "Windows does not respond(or hangs) when you try to open or close a folder by using Windows Explorer" is still your problem ...... then ...... I got this straight of from microsoft website and I quote

SYMPTOMS
Windows may not respond when you try to open or close a folder by using Windows Explorer. When this occurs, you may be able to restart Explorer.exe to cause Windows Explorer to work correctly again.
RESOLUTION
A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This fix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next Windows XP service pack that contains this fix.

To resolve this problem immediately, download the fix by clicking the download link later in this article or contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS

this sounds a lot like your problem ...... but I got another selution or 2 Im looking at now ..... will also post them here for you

ok.... I got another selution ...... or two
I'll recommend like I did the last person that had explorer crashing...first try reinstalling service pack 1 see if that replaces explorer.

If this does not, then follow these steps:
- press alt + ctrl + del
- end the process "explorer.exe" your windows interface will dissappear this is normal
- now click file - new task in your task manager
- type cmd, click ok
- the little black windows command will come up, type in the following:
copy C:\Windows\ServicePackFiles\i386\explorer.exe C:\Windows\
- You will be asked to confirm overwrite, press y
- now in the task manager click file, new task, type explorer, click ok.

If this does not fix it most likely it is a buggy program but ill look further for you .....

another thing i didn't thought of earlier ...... just check in your system32 folder if you have an explorer.exe file in there ........ it might be that some programe or adware could have copyed explorer.exe file into your system32 folder ...... witch will cause problems ......

LordRipper,

The problem is still that windows hangs.

The M/S description sounds right on target, but the solution seems dangerous.  I have no intention of going with XP Pro SP2.  I read too many tales of woe from folks who suffered installing SP1.  What's the source of that M/S solution (the page above is just a contact page)?  What made this just start happening?  I was fine for my 1st year.  That's what's odd.  Anyway, I'd rather wait for "additional testing", if this is the case.  It sounds promising, but I'd rather have a solid solution than one that may cause more problems.

In your second solution, you're copying explorer from the cabinet file into Windows, correct?  Are you thinking it's corrupted or something?

I only have 1 explorer.exe + prefetch entry.

Your on the spot ......
I have been working a long time with computers and well .... on thing I did notice is to reinstall windows every 6 moths...... Here on my network is there roundabout 30 pc's ...... most of them Have Xp on ....and I need to work every 6 moths late for a whole moth to reinstall ...... but If I can give you a little bid of advice ...... rather go over to windows 2000 pro....... this by far the best windows that I have ever had .....

now each time I need to reinstall windows I just put 200 on ...... found that I had a lot less problems ....

ok back to the question ..... I would also not install that service pack ..... would also wait for the propper service pack.......
but if it were for someone that is a novice to windows and so on .... I would install that service pack ...... but since It seems to me that you have a firm understanding of windows ...... I would tell you to wait.... as you will be able to work on a pc doing stuff like that ......

ok ..... things that can start this is certain programs that were installed but since you are no novice with a pc I would doubt that ...... the there is certain viruses .... but as you stated ..... you did do your home work so it can be virus.....
then there is the fact of renameing certain system tools(never try that except if you have a backup copy of the file) witch can do this but once again I don't think you will ever do this ..... then there is the registrys ......... I don't even have to tell you as I think you already know whats going on in there (but I never got XP Pro giving that error and it was caused by something in the registrys) ........ one thing that I did think of is what programs you use on startup ....... (but this won't be actually a problem) ........ then there is the files in you explorer that can cuase this but that is more like in an application problem .....  

 ...... then if I must just tell you what I think is the main cause of all this probles with XP ..... and I know people will be made at me for saying this ..... but I think it is the grappy GUI interface thy put in ...... you know that little dog thing when you search for files and so on and then there is Microsoft that isn't giving us the cause of the error ..... so I think explorer went corrupt due to frequent use ... but Ill leave it there ..... I don't want any one giving me trouble again about my comments.....  

LR,

Do you recommend this patch or not and where is it? (link)  I'm not ready to reinstall XP if I can avoid it.  :)   How do I know when the patch is ready for prime time?
Thanks.

LR,

Whoops.  Also, as I mentioned above, Dell's comment was:

"The error may occur when Explorer tries to read from registry

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BCF96FB4-5F1B-497B-AECC-910304A55011}]
The solution is to delete this key from registry."

What will this do for/to me?  ( Dell suggested the following, but I'm not sure they properly understood the question)

Thanks.

Well I see that microsoft Patch download section is of now ...... but Ill give you the link to it on monday ............... Yes i would actually go for the patch

As for deleting that regesirtry
Here is a link to one websites I use a lot here thy wull guide your thru the steps of removing the registry........ It does seem to be a regestry added by some software
http://www.pestpatrol.com/PestInfo/t/toprebates.asp

but I don't think this is the problem .......

Ok finally I got it open ...... here is the link to the artical I wes refering to
http://support.microsoft.com/default.aspx?scid=kb;en-us;329692

ok when You ar at this site just click
=======================================================
The following file is available for download from the Microsoft Download Center:
Duser.dll     <----------------- kick here in the webpage
Release Date: October 31, 2002
========================================================

Ok I have to go .... will only be back on monday ....
I hope this helps .....
enjoy the weekend ...
cheers

Did you get the problem fixed ????
just want to know if I still need to check for other methods .......

I did not.  It reocurred again.  The article above looks interesting (http://support.microsoft.com/default.aspx?scid=kb;en-us;329692) but it talks about an application error; this is never an application error.  It only involves Explorer.  And, the date is 10/02.  My Dell was an 06/03, so I would presume the given fix would have been included in Dell's version of XP Pro.


I can encourage the error by right clicking on a short cut and selecting 'Find Target.'  This will often (not always) produce the error.

Dell suggested that I do an XP repair install.  No thanks.  I wasn't that pleased with a System Restore....

 

ok...... then ill ask around here by me ..... maybe these guys here might know of something similiar that happend
and we might actuall get the problem fix

LordRipper:

Actually, I have had a couple of recent instances where an explorer exercise didn't cause the error, but the next application I execute after some explorer manuvering, did.  Perhaps this M/S web page you referenced is describing my problem.  What do you think?
 
1.   The page http://support.microsoft.com/default.aspx?scid=kb;en-us;329692&Product=winxp seems to describe the replacement/update of a single file, dUser.Dll.  Is this true?  Just a single file,dUser.Dll is replaced by executing the program?  

2. Can you run the download file at page http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=49E589AE-2F93-48DC-A39A-C9D98DADA7A5 on some test box and tell me exactly what it unleashes?  Will I be able to roll back this change easily if it makes matters worse?
 
3.  BTW my version of dUser.dll is dated 8/29/2002, version 5.1.2600.1106 and the "newer" on on the M/S page apparently has a date of 10/02/2002, version 5.1.2600.1129 so mine is *slightly* older.  I wonder why Dell didn't use the newer one in 6/03 when I bought my machine?
 
4.  Why does my event log message not reference this m/s page solution?

5.  What's a worse case scenario if I run this program?  The m/s warning seems just a bit dire, don't you think?
 
 
I will be on vacation for a week, so I'll be out of touch until then.  Let me know what you find.
 
And thanks so much for your persistence!
 

Sorry I only replied now ...... was a phew days off at home .... been a bid sick
Ok.... yes I think is some application you are running after you browsed in the explorer that is causing all off these problems .......
though I don't know exactly what it is ..... tell me do you have any musicfiles that you listen to ...... or any pictures that you click on while you are browsing ???

It might be any program that can run in explorer that can cause this problem ....... what I mean by run in explorer is that when you click only once on the file while in explorer and its a music file then you can actually play the music from the media player that usaully comes up and then when you click on a picture then you see also a thumbnail ...... and there is a verious types of programs that can run like this in explorer

ok ...... here is a sites that would explain you how to rollback http://www.bellaonline.com/articles/art6781.asp
it is actually easy ......

ok .... I donwloaded this file its only 500kb
and what the instalation then did is to put only that one file in the correct place and it also updated the registrys ..... and there is no problem with  the computer...... it looks like its working perfectly ....... so this is a safe to use file...... but I would reccommed you still make some backups of importand files ...... and also a restore point ....... hee is a site that explains it nicely
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

but I cannot see why or how this patch can cause any problems but any way..... Dell ..... well I don't know why thy didn't put a new file on the pc .... might be that thy only put Xp on and then after that thy did a windows update..... if you read thru the page of micro soft then you will notice that this isn't a big problem for them ..... as only a phew cases has been reported witch means that thy arn't going to put this patch in a windows update file as it's not acttually needed .... and the phew people that needs this ... well can download it from the link ......

well why your eventlog doesn't give the page as a selotion is that microsoft didn't know about this problem ..... so thy never thought of putting a refrence in for this kind of error.....

the worst case cenario is that you have to restore or rollback .......
but I doubt that you will actually have to do that.....

hope that you en joy your fication

Sorry u been sik.  I went to the beach.  I had more fun.  Glad yur better.

I'm almost always listening to MusicMatch or Winamp, but I always have.  These are not new apps and I don't think either has been updated since this problem began, but I could be wrong.  I'm a pretty good problem solver and I see no correlations to anything except Explorer activity: opening a folder, properties on a shortcut, etc.

So, the installataion of this DUser.Dll is a single file that I can roll back just like any driver?  I would certainly make a restore point (yeah, I know how) and I have good data back ups.  What did it update in the registry if it's just a one-for-one file replacement?  

Would the system restore  undo this?

I'll try it the first chance I get.

Thanks for all your help.

Hi.....
welll you can make a restore point ..... but you also can just copy that original Used.dll and put it somewhere on your computer
so that if you install the new file and something goes wrong you can just do a restore or you can just copy that file back and replace the new one.

But I don't thing that it would give any problems if you install this file .......
I did not mean that your music player is the cause ..... I just used it as an example of a program that gets executed when your in explorer mode.

I myself have music match ..... it ain a bad program ...... but Im currently busy writing my own music player and when finished ill put it on my website for free down load ...... the thing why I don't like music match that much is it take for ever to start up .......

but any way ....
have to go ..... but I would be keen to know if this fixed your problem.....

I will let you know. I have doubts that this will do it.  I'm worried that Dell is correct; I'll need to do a "repair reinstall of XP".  I'll bet that's not seamless.  Have you ever done a repair reinstall?  It's supposed to not affect program installations nor files, but I bet not!!!

WSC .....
you are right .......
repairing windows XP will not cause any loss of files except that all of your MS updates will be cone ..... but it might also happen that after reinstalling xp .... Xp doesn't see or recconise some of the programs witch leads to reinstallation of some software ....... but no data will be lost....
To repair windows is a nice method of getting rid of problems ..... with a little set back of maybe reinstalling one or two programs....

I'll bet the "repair reinstall" is d*mn messy.  You're probably weeks recovering from it. All of that stuff is messy.

Anyway, I installed the dUser.Dll patch Saturday.  So far, so good.  No errors from it and no more failures, so far.  Fingers crossed.

Stay tuned.  I'll give it a week or so and see.  I dunno.  I'll be surprised if my issue is resolved by something this simple.

Hi there .....
well I'm glad that its so been so long without enay problems ......
I would also just wait another couple off days to see if the problem is been fixed .....

I on the other hand had to go and fix a phew computers the last phew days and got a bid busy ......
but Ill be here now and will await for the result .... my fingers is crossed also ......  ;-)

Hey LordRipper,

Call me a synic, but I just can't believe replacing that one file would make a difference, but I've been "crash free" since the upgrade.  Wow.  Congrats to you.  I'll let you know if it reocurrs.  I guess I'm good to go.

Wow.