We help IT Professionals succeed at work.

APPCRASH on Start Search in SBS 2008

1,014 Views
Last Modified: 2013-11-25
This happens when ever I conduct a search from the start menu. Start Search . Also here is the appcrash data. appcrash-data.txt It also happens when I try to open the documents folder only difference I see is in the stack hash. Appcrash-Documents.txt
Any help would be appreciated.
Comment
Watch Question

Top Expert 2010

Commented:
Hi

Please check this.
http://social.technet.microsoft.com/forums/en-US/itprovistaannouncements/thread/ea2f1dfa-e3e1-4266-ba06-e19999cd629a

Let me know if there are any non microsoft shell extensions

hope this helps.

Author

Commented:
The link provided suggested stopping any shell extensions that were not Microsoft, however from what I see all of the shell extensions were Microsoft. Maybe someone can take a look at this attachment of my shell extensions list and see if I missed something.
Shell-Extensions-List.htm
Top Expert 2010

Commented:
Yep. All Microsoft.
Those steps didnt help much.

Lets try a different approach.
a) Download this tool - App Crash View
http://www.nirsoft.net/utils/app_crash_view.html

when you unzip and run it - it will load .WER files.
find the latest explorer crash
on the bottom panel -- try to look for this.

Fault Module Name >
Let me know what module cause the fault.

Also if you can go through the Load module stack and see if there are any non-microsoft directories there. it's a hit and a miss.

b) go to start > run > type cmd

type
sfc /scannow

let me know what the fault module is and the result of sfc /scannow

thanks for your patience.

Author

Commented:
Here are the results of the appcrashview latest explorer.exe crash as well as an image of the scan now. I wasn't sure what you meant by going through the load module stack. I would need more info on that. Hopefully this will shed some light.
explorer-crash-7-7.txt
sfc-scan.jpg
Top Expert 2010

Commented:
Can you upload the CBs.log file from c:\windows\logs

Author

Commented:
Here you go
CBS.log

Author

Commented:
Hey sunnyc7 was there any useful info in the cbs log file?
Top Expert 2010

Commented:
hi

there was some useful information from shellexview. I am still looking for resolutions with that bucket id.
EventType=APPCRASH
EventTime=129229971862572175
ReportType=2
Consent=1
UploadTime=129229971913662175
Response.BucketId=18026116
Response.BucketTable=4
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=Explorer.exe
Sig[1].Name=Application Version
Sig[1].Value=6.0.6002.18005
Sig[2].Name=Application Timestamp
Sig[2].Value=49e02a1e
Sig[3].Name=Fault Module Name
Sig[3].Value=StackHash_6734
Sig[4].Name=Fault Module Version
Sig[4].Value=6.0.6002.18005
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=49e0421d
Sig[6].Name=Exception Code
Sig[6].Value=c0000374
Sig[7].Name=Exception Offset
Sig[7].Value=00000000000aef37

will post back.

thanks

Author

Commented:
I'm not sure what else I can do if this question has been abandoned. Do I rephrase it and post it again. Sunnyc7 said he would post back. I guess he wasn't able to find anything significant or offer any more suggestions. I was hoping there was someone else that might comment.  I suppose this may be a problem more difficult than I imagined.
Top Expert 2010

Commented:
hi rglover
my apologies. I havent come-up with anything significant to post here.
I'd suggest raise another Request for attention and this question would get distributed to other experts.

thakns

Author

Commented:
Ok thanks
Top Expert 2010
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
I have to wait until I can pull it out of production which will be this evening I'll let you know how that turns out.
Top Expert 2010

Commented:
You dont need to shutdown anything.

You can just create a new account in the directory and see if you can login using that account -
Add it to Domain Admin group

Author

Commented:
I can confirm that the problem does not exist under new account. What does that tell us?
Top Expert 2010

Commented:
That tells us that the prior account is corrupted / profile data etc. etc.

so we can leave that account as it is -- and use the new account do do daily admin jobs.

*do not* delete the prior account, if it was used to install SBS / Exchange / Apply service packs.
As that account will be needed again when you are updating Schema.

You will be heading for big trouble if you delete that.

Author

Commented:
Hey I guess you are right It's not imperative for me to use that account exclusively. This is an acceptable work around Thanks!
Top Expert 2010

Commented:
Thanks for the points :)
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.