Solved

Windows 2003 Server Application Error (explorer.exe)

Posted on 2009-05-06
7
9,932 Views
Last Modified: 2012-05-06
Hello all,
This is a very strange problem but rather long, so please bear with me.
This is on a NEW server 2003 R2 terminal server with all the latest patches.  By new I mean one week old.  And no, it does not have any viruses or maleware.  I have run both types of scans and everything reports clean.
What is happening is that whenever anyone with admin rights logs in through RDP/terminal server We get the following in succession in the event viewer:

First:
Source:  Application Error
Category:  (100)
Event ID:  1000
Description:  Faulting application explorer.exe, version 6.0.3790.3959, faulting module kernel32.dll, version 5.2.3790.4480, fault address 0x0000bef7.  

Second:
Source:  DrWatson
Category:  None
Event ID:  4097
Description:  The application, C:\WINDOWS\Explorer.EXE, generated an application error  The error occurred on <date> @ <time>  The exception generated was 800000001 at address 77EF4BEF7 (kernel32! RaiseException)

Third:
Source:  Winlogon
Category:  None
Event ID:  1002
Description:  The shell stopped unexpectedly and Explorer.exe was restarted.

These come up within three seconds from the first to the third message.  The user has to click on Close button on two different Windows Explorer error boxes.  After these messages go past, everything seems fine.  I am very leery of letting this one slide by, I am just wondering if it is a sign of some bigger problem.

By the way, every night I have a program that will automatically reboot this server and logon with an admin equivalent user and I get these errors not only on the console but also whenever an admin equivalent user logs on through terminal services.

This is a production server so I cannot up and reboot anything during the day.  It has to be done after hours.

Thank you,
Kelly W.
0
Comment
Question by:Kelly_W
  • 4
  • 3
7 Comments
 
LVL 13

Expert Comment

by:Brum07
ID: 24314165
what other software is installed on the server?
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314318
Hello,
The only other software is:
1)  Adobe Reader 8.0
2)  AVG File Server Edition
3)  Backup Exec Remote Agent (12.5)
4)  Misys Tiger (canned medical software)
5)  Word 2000 (This is the only version of Word that Misys Tiger will work with - it will not work correctly 2003 or 2007)
That is it.
Thanks,
Kelly W.
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314330
Hello all,
Also various HP printer drivers
Thanks,
Kelly W.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 13

Expert Comment

by:Brum07
ID: 24314474
Do non admin users who log into the server get these errors?
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314611
Hello all,
No they do not, at least the error messages for them to click on the close button do not come up.
I have not seen these error messages come up in the event viewer for the users.
Thanks,
Kelly W.
0
 
LVL 13

Accepted Solution

by:
Brum07 earned 500 total points
ID: 24314864
Try running the System File Checker" tool.
a. Get out your Windows CD and keep it handy.
b. Start/Run type sfc /scannow

This tool checks for the presense of necessary uncorrupted operating system files and will replace/repair them from the CD.
0
 
LVL 4

Author Closing Comment

by:Kelly_W
ID: 31578431
That worked great.  Thank you!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question