Solved

Windows 2003 Server Application Error (explorer.exe)

Posted on 2009-05-06
7
9,902 Views
Last Modified: 2012-05-06
Hello all,
This is a very strange problem but rather long, so please bear with me.
This is on a NEW server 2003 R2 terminal server with all the latest patches.  By new I mean one week old.  And no, it does not have any viruses or maleware.  I have run both types of scans and everything reports clean.
What is happening is that whenever anyone with admin rights logs in through RDP/terminal server We get the following in succession in the event viewer:

First:
Source:  Application Error
Category:  (100)
Event ID:  1000
Description:  Faulting application explorer.exe, version 6.0.3790.3959, faulting module kernel32.dll, version 5.2.3790.4480, fault address 0x0000bef7.  

Second:
Source:  DrWatson
Category:  None
Event ID:  4097
Description:  The application, C:\WINDOWS\Explorer.EXE, generated an application error  The error occurred on <date> @ <time>  The exception generated was 800000001 at address 77EF4BEF7 (kernel32! RaiseException)

Third:
Source:  Winlogon
Category:  None
Event ID:  1002
Description:  The shell stopped unexpectedly and Explorer.exe was restarted.

These come up within three seconds from the first to the third message.  The user has to click on Close button on two different Windows Explorer error boxes.  After these messages go past, everything seems fine.  I am very leery of letting this one slide by, I am just wondering if it is a sign of some bigger problem.

By the way, every night I have a program that will automatically reboot this server and logon with an admin equivalent user and I get these errors not only on the console but also whenever an admin equivalent user logs on through terminal services.

This is a production server so I cannot up and reboot anything during the day.  It has to be done after hours.

Thank you,
Kelly W.
0
Comment
Question by:Kelly_W
  • 4
  • 3
7 Comments
 
LVL 13

Expert Comment

by:Brum07
ID: 24314165
what other software is installed on the server?
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314318
Hello,
The only other software is:
1)  Adobe Reader 8.0
2)  AVG File Server Edition
3)  Backup Exec Remote Agent (12.5)
4)  Misys Tiger (canned medical software)
5)  Word 2000 (This is the only version of Word that Misys Tiger will work with - it will not work correctly 2003 or 2007)
That is it.
Thanks,
Kelly W.
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314330
Hello all,
Also various HP printer drivers
Thanks,
Kelly W.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 13

Expert Comment

by:Brum07
ID: 24314474
Do non admin users who log into the server get these errors?
0
 
LVL 4

Author Comment

by:Kelly_W
ID: 24314611
Hello all,
No they do not, at least the error messages for them to click on the close button do not come up.
I have not seen these error messages come up in the event viewer for the users.
Thanks,
Kelly W.
0
 
LVL 13

Accepted Solution

by:
Brum07 earned 500 total points
ID: 24314864
Try running the System File Checker" tool.
a. Get out your Windows CD and keep it handy.
b. Start/Run type sfc /scannow

This tool checks for the presense of necessary uncorrupted operating system files and will replace/repair them from the CD.
0
 
LVL 4

Author Closing Comment

by:Kelly_W
ID: 31578431
That worked great.  Thank you!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
Learn about cloud computing and its benefits for small business owners.
This video discusses moving either the default database or any database to a new volume.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now