[cc2001]

Hello everyone
i have recently started getting a box to pop up in the center of my screen "windows explorer has stopped working" windows is restarting. this is an acer pc with windows vista. any help would be appreciated.

chris

Edited by cc2001, 04 December 2010 - 08:45 AM.

[Advertisements]

Hi cc2001,

What exactly are you doing when it happens or does it happen at random?
Also are you saying windows restarts or does the explorer.exe restart (there is a big difference, and normally the second should happen)

• Please download the Event Viewer Tool by Vino Rosso VEW (click the link):
• Open notepad by going to start -> programs -> accessories -> right click notepad and run as administrator (leave it open!)
• Right click VEW.exe and run as administrator
• Under 'Select log to query', select:
• Application
• System

Under 'Select type to list', select:

• Error
• Critical
• Warning

Then use the 'Date of events' or 'Number of events' as follows:

Click the radio button for 'Number of events'
Type 4 in the 1 to 20 box (or any number from 1 to 20)
Then click the Run button.
Notepad will open with the output log.

Please post the Output log in your next reply

Hope to help,

Mythio

Edited by Mythio, 04 December 2010 - 04:44 PM.

[Mythio]

Hi cc2001,

What exactly are you doing when it happens or does it happen at random?
Also are you saying windows restarts or does the explorer.exe restart (there is a big difference, and normally the second should happen)

• Please download the Event Viewer Tool by Vino Rosso VEW (click the link):
• Open notepad by going to start -> programs -> accessories -> right click notepad and run as administrator (leave it open!)
• Right click VEW.exe and run as administrator
• Under 'Select log to query', select:
• Application
• System

Under 'Select type to list', select:

• Error
• Critical
• Warning

Then use the 'Date of events' or 'Number of events' as follows:

Click the radio button for 'Number of events'
Type 4 in the 1 to 20 box (or any number from 1 to 20)
Then click the Run button.
Notepad will open with the output log.

Please post the Output log in your next reply

Hope to help,

Mythio

Edited by Mythio, 04 December 2010 - 04:44 PM.

[cc2001]

Mythio
hello
i get the pop up box like every two seconds, right in the middle of the screen"windows explorer has stopped working". I think it is explorer.exe restarting. It happens anytime the computer is on unless im logged in as administrator. I could not right click the notepad because the windows explorer would restart every time when i tried to right click and run as administrator. Also when i right clicked the vew.exe, i did not get the "run as administrator option" so i used the task manager to change the user to administrator(computer works great as administrator) and ran vew.exe. results below, if i need to do something different please let me know, this is terrible.
chris

Vino's Event Viewer v01c run on Windows Vista in English
Report run at 04/12/2010 6:46:18 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 22/05/2009 3:51:54 PM
Type: Error Category: 0
Event: 20227 Source: RasClient
CoId={BC71EE75-58EA-4723-A504-B672A4207CEB}: The user owner-PC\owner dialed a connection named Axcess MobileLink which has failed. The error code returned on failure is 718.

Log: 'Application' Date/Time: 22/05/2009 3:56:08 PM
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Log: 'Application' Date/Time: 22/05/2009 3:56:14 PM
Type: Error Category: 0
Event: 20227 Source: RasClient
CoId={E22172C8-BB9C-4CB2-9D8C-8BBBC78C38DF}: The user owner-PC\owner dialed a connection named Axcess MobileLink which has failed. The error code returned on failure is 718.

Log: 'Application' Date/Time: 22/05/2009 5:00:32 PM
Type: Error Category: 0
Event: 20227 Source: RasClient
CoId={CD52FFB9-3C8D-4EDA-8681-E8FCFCEEA3B4}: The user owner-PC\owner dialed a connection named Axcess MobileLink which has failed. The error code returned on failure is 718.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 22/05/2009 3:53:45 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-297013082-1655108140-2904191056-1000:
Process 908 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-297013082-1655108140-2904191056-1000


Log: 'Application' Date/Time: 22/05/2009 3:53:45 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-297013082-1655108140-2904191056-1000_Classes:
Process 908 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-297013082-1655108140-2904191056-1000_CLASSES


Log: 'Application' Date/Time: 22/05/2009 5:08:01 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-297013082-1655108140-2904191056-1000:
Process 908 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-297013082-1655108140-2904191056-1000


Log: 'Application' Date/Time: 22/05/2009 5:08:01 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-297013082-1655108140-2904191056-1000_Classes:
Process 908 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-297013082-1655108140-2904191056-1000_CLASSES


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/10/2009 1:23:14 AM
Type: Critical Category: 64
Event: 10110 Source: Microsoft-Windows-DriverFrameworks-UserMode
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.

Log: 'System' Date/Time: 23/10/2009 1:23:14 AM
Type: Critical Category: 64
Event: 10111 Source: Microsoft-Windows-DriverFrameworks-UserMode
The device Samsung YP-U3 (location Port_#0001.Hub_#0004) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.

Log: 'System' Date/Time: 02/11/2009 2:39:25 AM
Type: Critical Category: 64
Event: 10110 Source: Microsoft-Windows-DriverFrameworks-UserMode
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.

Log: 'System' Date/Time: 02/11/2009 2:39:25 AM
Type: Critical Category: 64
Event: 10111 Source: Microsoft-Windows-DriverFrameworks-UserMode
The device 9530 (location 0000.0013.0005.003.000.000.000.000.000) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 06/10/2009 3:57:02 PM
Type: Error Category: 0
Event: 15016 Source: Microsoft-Windows-HttpEvent
Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

Log: 'System' Date/Time: 06/10/2009 3:57:38 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Log: 'System' Date/Time: 09/10/2009 11:25:54 PM
Type: Error Category: 0
Event: 11 Source: cdrom
The driver detected a controller error on \Device\CdRom0.

Log: 'System' Date/Time: 09/10/2009 11:25:55 PM
Type: Error Category: 0
Event: 11 Source: cdrom
The driver detected a controller error on \Device\CdRom0.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 06/10/2009 2:28:39 AM
Type: Warning Category: 0
Event: 4226 Source: Tcpip
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Log: 'System' Date/Time: 06/10/2009 3:55:01 PM
Type: Warning Category: 0
Event: 4376 Source: Microsoft-Windows-Servicing
Servicing has required reboot to complete the operation of setting package KBWUClient-SelfUpdate-Aux(Feature Pack) into Install Requested(Install Requested) state

Log: 'System' Date/Time: 06/10/2009 3:55:01 PM
Type: Warning Category: 0
Event: 4376 Source: Microsoft-Windows-Servicing
Servicing has required reboot to complete the operation of setting package WindowsUpdateClient-SelfUpdate-Aux-Package(Update) into Install Requested(Install Requested) state

Log: 'System' Date/Time: 06/10/2009 3:55:01 PM
Type: Warning Category: 0
Event: 4376 Source: Microsoft-Windows-Servicing
Servicing has required reboot to complete the operation of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package(Update) into Install Requested(Install Requested) state

[Mythio]

Hi cc2001,

I think you would be better off having your computer checked for malware first.
That the computer runs smooth in administrator and not in the normal account could point to a lot of problems.
Unfortunately the error logs tell me nothing, since the dates are all of last year.

Follow the instructions here, make a topic at the right place and let an expert help clean your computer if there is something on there.
If there is nothing and you are all clean, come back here and i'll see what else we can do :-)

Hope to help,

Mythio

[cc2001]

ok
did that and put under forum you suggested

chris