Solved Explorer.exe crashes related to ntdll.dll and more.

Malickfan86 · Mar 27, 2014

Hi,

I have Windows 8.1 and I've been getting Explorer.exe crashes since upgrading in October. It's nothing major: it's mainly just annoying. It happens at random times so there's no pattern to it. It's possible that I have Firefox running each time it happens, but other than that, there are no constants. The taskbar disappears and then comes back. My system tray icons take a little while to show up. The HP CoolSense icon does not return but the rest do.

This is the crash log in Event Viewer:

Code:

Log Name:      Application
Source:        Application Error
Date:          2014-03-27 9:06:51 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      [Name]-PC
Description:
Faulting application name: Explorer.EXE, version: 6.3.9600.16441, time stamp: 0x5265dec8
Faulting module name: ntdll.dll, version: 6.3.9600.16502, time stamp: 0x52c359e8
Exception code: 0xc0000005
Fault offset: 0x000000000004bb96
Faulting process id: 0x36c
Faulting application start time: 0x01cf4a1f36444f86
Faulting application path: C:\WINDOWS\Explorer.EXE
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 3e2eb1a7-b615-11e3-bf1b-84a6c885c293
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-28T01:06:51.000000000Z" />
    <EventRecordID>53203</EventRecordID>
    <Channel>Application</Channel>
    <Computer>[Name]-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>Explorer.EXE</Data>
    <Data>6.3.9600.16441</Data>
    <Data>5265dec8</Data>
    <Data>ntdll.dll</Data>
    <Data>6.3.9600.16502</Data>
    <Data>52c359e8</Data>
    <Data>c0000005</Data>
    <Data>000000000004bb96</Data>
    <Data>36c</Data>
    <Data>01cf4a1f36444f86</Data>
    <Data>C:\WINDOWS\Explorer.EXE</Data>
    <Data>C:\WINDOWS\SYSTEM32\ntdll.dll</Data>
    <Data>3e2eb1a7-b615-11e3-bf1b-84a6c885c293</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

I also continue to get these. I thought I had stopped them when I disabled CLIStart.exe from my start-up processes. Here is the event log for that:

Code:

Log Name:      Application
Source:        Application Error
Date:          2014-03-27 9:32:26 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      [Name]-PC
Description:
Faulting application name: MMLoadDrvPXDiscrete.exe, version: 2.0.0.0, time stamp: 0x5058197a
Faulting module name: atiumdag.dll_unloaded, version: 9.14.10.924, time stamp: 0x5058161e
Exception code: 0xc0000005
Fault offset: 0x00052c66
Faulting process id: 0x163c
Faulting application start time: 0x01cf4a2592f86e84
Faulting application path: C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe
Faulting module path: atiumdag.dll
Report Id: d1435010-b618-11e3-bf1b-84a6c885c293
Faulting package full name: 
Faulting package-relative application ID: 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-28T01:32:26.000000000Z" />
    <EventRecordID>53260</EventRecordID>
    <Channel>Application</Channel>
    <Computer>[Name]-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MMLoadDrvPXDiscrete.exe</Data>
    <Data>2.0.0.0</Data>
    <Data>5058197a</Data>
    <Data>atiumdag.dll_unloaded</Data>
    <Data>9.14.10.924</Data>
    <Data>5058161e</Data>
    <Data>c0000005</Data>
    <Data>00052c66</Data>
    <Data>163c</Data>
    <Data>01cf4a2592f86e84</Data>
    <Data>C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe</Data>
    <Data>atiumdag.dll</Data>
    <Data>d1435010-b618-11e3-bf1b-84a6c885c293</Data>
    <Data>
    </Data>
    <Data>
    </Data>
  </EventData>
</Event>

I am also getting an error with the Facebook Metro app, which is probably unrelated to the first two.

Code:

Log Name:      Application
Source:        Application Hang
Date:          2014-03-27 8:52:14 PM
Event ID:      1002
Task Category: (101)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      [Name]-PC
Description:
The program backgroundTaskHost.exe version 6.3.9600.16384 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 Process ID: aa0
 Start Time: 01cf4a1f39af31f2
 Termination Time: 4294967295
 Application Path: C:\WINDOWS\system32\backgroundTaskHost.exe
 Report Id: 2fd74485-b613-11e3-bf1b-84a6c885c293
 Faulting package full name: Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt
 Faulting package-relative application ID: App

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Hang" />
    <EventID Qualifiers="0">1002</EventID>
    <Level>2</Level>
    <Task>101</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-28T00:52:14.000000000Z" />
    <EventRecordID>53151</EventRecordID>
    <Channel>Application</Channel>
    <Computer>[Name]-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>backgroundTaskHost.exe</Data>
    <Data>6.3.9600.16384</Data>
    <Data>aa0</Data>
    <Data>01cf4a1f39af31f2</Data>
    <Data>4294967295</Data>
    <Data>C:\WINDOWS\system32\backgroundTaskHost.exe</Data>
    <Data>2fd74485-b613-11e3-bf1b-84a6c885c293</Data>
    <Data>Facebook.Facebook_1.3.0.9_x64__8xx8rvfyw5nnt</Data>
    <Data>App</Data>
    <Binary>55006E006B006E006F0077006E0000000000</Binary>
  </EventData>
</Event>

I realize this is a lot of stuff but I would appreciate the help greatly. I've been trying to solve these on my own for months now with no success. I thought the second was gone completely and recently I thought I eliminated the first when I used ShellExView to disable igfxpph Module, since I have known issues with my Intel HD 4000 driver. Whenever I try to open its settings, then the window crashes. Updates don't work for it, either.

My graphics driver for my AMD Mobility 7670M is also outdated. When I upgraded to 8.1, Windows was unable to automatically install it. I haven't updated it myself because my last computer, which was also an HP, was destroyed by BSODs when I installed the wrong driver repeatedly. Basically it was because I used AMD's driver and not HP's, which was years old. On this system, though, I have no problems with games. If the crashes are related to these outdated drivers, then that is the only problem they're causing.

Here are my computer specifications. Once again, thank you greatly.

EDIT: Sorry, this is my first post here. I've attached the SF Tool zip file but it does not contain the WER files since they've been erased by CCleaner. Therefore I have re-zipped the previously linked files and have attached them as well, in the same format.

usasma · Mar 28, 2014

I suspect StarDock (from the WER report for the explorer.exe crash) - but it's just a hunch.
Please remove it if you can and see if that helps

Otherwise, please try this free program: ShellExView - Shell Extension Manager For Windows
Use it to disable ALL non-Windows shell extensions (sort by the manufacturer, then uncheck everything above and below Microsoft)
See if that helps
- If it does, then go through them in groups until you find the one that's to blame

Try this for the FaceBook app: http://www.eightforums.com/tutorial...apps-troubleshooter-fix-apps-windows-8-a.html

Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog))
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

This is easier than the logs in the reports. If needed, I may request a copy of the Application logfile and the System logfile in this format (they're easier to manipulate in event viewer).

Malickfan86 · Mar 28, 2014

Is it okay if we leave Stardock Start8 on for now? I use it all the time.

Here are the event logs. You should know that when I woke up my computer just now, I saw a blank screen. I altered the registry value TdrDelay as described here, but it just took eight seconds to reset rather than 2. In either case, the display driver was delayed for some reason. You'll be able to see that error in the attached file, in addition to the others.

I noticed that if I go into Device Manager and look up events for either of my graphics cards (either integrated Intel HD 4000 or ATI Radeon Mobility 7670M), both have just one entry: device deleted on October 20, 2013. I know that this is a recent occurrence. I last had a look in there 1-2 months ago when it was specified that these drivers were reinstalled. I don't know what this means.

The Fix It executable does not fix the Facebook issue or the widely reported LiveComm.exe crashes, which seem to affect all on 8.1. I tried reinstalling the Mail, People and Calendar and Facebook apps, but that didn't make a difference, either.

usasma · Mar 29, 2014

It's your computer, so it's your call about the StarDock stuff.
FWIW - you could just remove it temporarily to see if it helps.
Then, if it doesn't help, you can download and install a fresh copy that's certified as Win8.1 compatible

I see 2 significant (IMO) issues in the Admin Event Viewer logs:
- issues w/HP software
- issues w/ATI video drivers and software

Please revert the changes that you've made - particularly with the graphics stuff.

You've disabled the igfxpph module - which is related to the user interface.
So it's no surprise that, when you try to open it, it crashes.

The same goes for MMLoadDrvPXDiscrete.exe and the disabled CLIStart.exe
Both are related to the Catalyst Control Center - so disabling one will leave the other one unable to complete things if it depends on it.

Please uninstall the HP software temporarily.
See if that helps with the problems.
Should you decide to reinstall it, please download the latest, Win8.1 compatible version from the HP website.

Please download a fresh copy of the latest, Win8.1 compatible ATI graphics software for your system from HP
Then uninstall all of the current ATI stuff from your system
Then install the freshly download ATI drivers.
You might as well do the same thing for the Intel graphics also.

Laptop graphics have been a royal PITA since they were made differently from Desktop graphics
And, with the advent of 2 graphics cards in a system, it's only become more difficult.
The point here being that, if you want to upgrade your OS, the PC manufacturer has to support it.

Using the video card manufacturer's drivers often won't work - and may even cause problems due to missing components.
There are "tricks" that some folks resort to to install the latest drivers (such as downloading the ATI driver package and extracting it - then using Driver Manager to install the driver from the extracted package).

But, when I tried it, it locked me into a Black Screen and I couldn't do anything. It took several forced reboots for the system to finally disable the ATI driver and allow me to get into Windows. Once in, I attempted to roll back the driver, which earned me another black screen. The roll back failed, but it did enable the newer driver - so now I'm able to use the ATI graphics.

FWIW - we've had issues with the Envy M6's at work, mostly associated with BIOS/UEFI issues. Make sure that you have the latest update for that - and that you keep an eye out for any updated versions that are released.

Lastly, depending on the number of changes that you've made to the system, it may be advisable to restore the system to factory settings. This will tell you if you're having a hardware or a software problem. If the problems remain after a factory restore (before you add any of your programs), then it could be a hardware problem.

If you've updated to Win8.1, then you'll have to visit this page: Software & driver downloads HP ENVY m6-1158ca Notebook PC | HP® Support
and get all the Windows 8.1 compatible drivers. (again, before you add any of your programs).

Malickfan86 · Mar 29, 2014

I disabled igfxpph after getting the Explorer.exe errors and read that it operates on the ntdll.dll module. Since my Intel graphics driver is not compatible with Windows 8.1, its settings were crashing long before I disabled it.

With ATI, I thought CLIStart.exe was causing the MMLoadDrvPXDiscrete.exe crashes. Disabling the process eliminated just about all of them, then this new one came out of nowhere.

I haven't noticed any UEFI issues.

When are the HP software issues from? I upgraded my HP Support Assistant two days ago for 8.1 compatibility when I was prompted to do so. Hopefully that will get rid of any related problems.

I think the best course of action would be to update my drivers. I've been reluctant to do so because of how BSODs destroyed my last system, but this time I'll use Leshcat's drivers for switchable graphics. I've downloaded the WHQL-certified 13.12 Catalyst drivers and have run a system image in case something goes wrong. My guess is when they become 8.1-compliant, a lot of these issues will go away.

Just to remind you, though, I'm not getting any hard errors. I can even play Far Cry 3 for hours without issue. I just want some of these errors to stop for increased systen stability.

usasma · Mar 30, 2014

I'm not well equipped to deal with non-standard driver implementations. My troubleshooting revolves around standard systems and their predictable responses.

I'd suggest that you start a topic over in the Drivers and Hardware forums for more expert advice: Drivers & Hardware - Windows 8 Forums

Malickfan86 · Apr 3, 2014

I've decided not to pursue this. I made a system image before uninstalling and reinstalling multiple drivers for my graphics cards and none of them worked right. The errors don't seem important enough to format my system and start again. I'll keep going and hopefully I don't get too many more. Does the information I gave you offer anything else about the potential causes?

Even if these issues are never solved, thanks for your help.

usasma · Apr 3, 2014

My biggest suspect is the ATI graphics.
My own system is running with the ATI graphics disabled because of issues (I presume w/Win8.1)
I got it working well enough to play games - so I'm leaving it alone for now.

Good luck!

Malickfan86 · Apr 10, 2014

The Explorer.exe crashes were being caused by Google Drive's "Show file sync status and right click menu" option. The Display errors I was getting that I haven't mentioned (video card does not kick in upon wake-up, causing Windows TDR to reset it) went away after I put my power settings on high performance.

I'm still getting the MMLoadDrvPXDiscrete.exe and backgroundTastHost.exe crashes but they occur in the background and do not interfere with my experience.

EDIT: No, high performance power settings did not eliminate the delayed display response. I now disabled AMD PowerPlay and that seems to be working. My theory is that, when it was enabled, PowerPlay instantly enabled the AMD driver. I have switchable graphics and the Intel Graphics driver is sufficient for Windows. By disabling PowerPlay, Windows seems to use Intel Graphics by default, solving the issue. The AMD graphics are still in use for games.

Malickfan86 · May 7, 2014

Another follow-up: the Explorer.exe crashes continued, but I've managed to go without them for about a week. I opened ShellExView and turned off all icon overlays. Google Drive overlays were disabled in its own settings, but they still appeared here. I also disabled Acronis overlays.

Then, I found the opinion that Microsoft Customer Experience Program causes such issues, so I looked up how to disable it completely, using gpedit.msc and more.

Now my computer works perfectly!

Malickfan86 · May 23, 2014

Another follow-up: the wake-up delays have continued. I tried and failed to update my drivers again. I restored from a system image. Then I unexpectedly got a BSOD for Bad Pool Caller. I may see a professional to get this update done if it continues to be problematic. I'm hoping I at least don't see anymore BSODs.

usasma · May 24, 2014

Please zip up and upload the contents of C:\Windows\Minidump
You may have to copy it to your desktop in order to zip it up.

Solved Explorer.exe crashes related to ntdll.dll and more.

Member

My Computer

Mr. Cranky Pants

My Computer

Member

My Computer

Mr. Cranky Pants

My Computer

Member

My Computer

Mr. Cranky Pants

My Computer

Member

My Computer

Mr. Cranky Pants

My Computer

Member

My Computer

Member

My Computer

Member

My Computer

Mr. Cranky Pants

My Computer