The shell stopped unexpectedly and explorer.exe was restarted.

I don't know exactly since when this happens, but the Windows Explorer
suddenly disappears then restarts. Is there any known reason? I've
searched Google for this, but the only solution, "Delete explorer.exe"
seemed stupid. This is the log.

Source Winlogon
The shell stopped unexpectedly and explorer.exe was restarted.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
event">
- <System>
<Provider Name="Microsoft-Windows-Winlogon"
Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
EventSourceName="Winlogon" />
<EventID Qualifiers="16384">1002</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
<EventRecordID>8395</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>HouseCat</Computer>
<Security />
</System>
- <EventData>
<Data>explorer.exe</Data>
</EventData>
</Event>

Using Windows Vista 64 bit version.

how bout format then install xp?

"RealCat" <> wrote in message
news:b19ffca9-efc4-44b2-a7c6-...
> I don't know exactly since when this happens, but the Windows Explorer
> suddenly disappears then restarts. Is there any known reason? I've
> searched Google for this, but the only solution, "Delete explorer.exe"
> seemed stupid. This is the log.
>
> Source Winlogon
> The shell stopped unexpectedly and explorer.exe was restarted.
>
> - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
> event">
> - <System>
> <Provider Name="Microsoft-Windows-Winlogon"
> Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
> EventSourceName="Winlogon" />
> <EventID Qualifiers="16384">1002</EventID>
> <Version>0</Version>
> <Level>4</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
> <EventRecordID>8395</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>HouseCat</Computer>
> <Security />
> </System>
> - <EventData>
> <Data>explorer.exe</Data>
> </EventData>
> </Event>
>
> Using Windows Vista 64 bit version.

Hi,

You're right - deleting explorer.exe would be stupid. The shell restarts
happen when some software on the system interferes with its operation. This
could be any number of things, and not just malware. I've seen interference
from antivirus applications, p2p software, distributed computing, google
desktop, and others. What you'll need to do is selectively disable running
applications until you isolate the problem.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"RealCat" <> wrote in message
news:b19ffca9-efc4-44b2-a7c6-...
>I don't know exactly since when this happens, but the Windows Explorer
> suddenly disappears then restarts. Is there any known reason? I've
> searched Google for this, but the only solution, "Delete explorer.exe"
> seemed stupid. This is the log.
>
> Source Winlogon
> The shell stopped unexpectedly and explorer.exe was restarted.
>
> - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
> event">
> - <System>
> <Provider Name="Microsoft-Windows-Winlogon"
> Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
> EventSourceName="Winlogon" />
> <EventID Qualifiers="16384">1002</EventID>
> <Version>0</Version>
> <Level>4</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
> <EventRecordID>8395</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>HouseCat</Computer>
> <Security />
> </System>
> - <EventData>
> <Data>explorer.exe</Data>
> </EventData>
> </Event>
>
> Using Windows Vista 64 bit version.

What's the specific crash information from the Problem Reports and Solutions
Center control panel?
http://zachd.com/pss/pss.html#bucket

The below XML chunk doesn't actually include information such as fault
module, etc. =\

--
Speaking for myself only.
See http://zachd.com/pss/pss.html for some helpful WMP info.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
"RealCat" <> wrote in message
news:b19ffca9-efc4-44b2-a7c6-...
>I don't know exactly since when this happens, but the Windows Explorer
> suddenly disappears then restarts. Is there any known reason? I've
> searched Google for this, but the only solution, "Delete explorer.exe"
> seemed stupid. This is the log.
>
> Source Winlogon
> The shell stopped unexpectedly and explorer.exe was restarted.
>
> - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
> event">
> - <System>
> <Provider Name="Microsoft-Windows-Winlogon"
> Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
> EventSourceName="Winlogon" />
> <EventID Qualifiers="16384">1002</EventID>
> <Version>0</Version>
> <Level>4</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
> <EventRecordID>8395</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>HouseCat</Computer>
> <Security />
> </System>
> - <EventData>
> <Data>explorer.exe</Data>
> </EventData>
> </Event>
>
> Using Windows Vista 64 bit version.

That just happened again a few minutes ago, I went to the Problem
Reports and Solutions, but there's no entry for that. Then again, I
opened the Event Viewer, and checked for it. It was logged, and there
was a link for more information. I clicked it.

http://technet.microsoft.com/en-us/l.../cc733895.aspx

Event Details
Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-Winlogon
Version: 6.0
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Resolve
This is a normal condition. No further action is required.

Look at the resolution. Microsoft says it's normal and there's nothing
I can do. How could this be a normal condition?


On Aug 16, 1:24*am, "zachd [MSFT]"
<za...@nomailplz.online.microsoft.com> wrote:
> What's the specific crash information from the Problem Reports and Solutions
> Center control panel?
> *http://zachd.com/pss/pss.html#bucket
>
> The below XML chunk doesn't actually include information such as fault
> module, etc. =\
>
> --
> Speaking for myself only.
> Seehttp://zachd.com/pss/pss.htmlfor some helpful WMP info.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --"RealCat" <typing...@gmail.com> wrote in message
>
> news:b19ffca9-efc4-44b2-a7c6-...
>
>
>
> >I don't know exactly since when this happens, but the Windows Explorer
> > suddenly disappears then restarts. Is there any known reason? I've
> > searched Google for this, but the only solution, "Delete explorer.exe"
> > seemed stupid. This is the log.
>
> > Source Winlogon
> > The shell stopped unexpectedly and explorer.exe was restarted.
>
> > - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
> > event">
> > - <System>
> > *<Provider Name="Microsoft-Windows-Winlogon"
> > Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
> > EventSourceName="Winlogon" />
> > *<EventID Qualifiers="16384">1002</EventID>
> > *<Version>0</Version>
> > *<Level>4</Level>
> > *<Task>0</Task>
> > *<Opcode>0</Opcode>
> > *<Keywords>0x80000000000000</Keywords>
> > *<TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
> > *<EventRecordID>8395</EventRecordID>
> > *<Correlation />
> > *<Execution ProcessID="0" ThreadID="0" />
> > *<Channel>Application</Channel>
> > *<Computer>HouseCat</Computer>
> > *<Security />
> > *</System>
> > - <EventData>
> > *<Data>explorer.exe</Data>
> > *</EventData>
> > *</Event>
>
> > Using Windows Vista 64 bit version.

Hi,

What's normal is that the shell automatically restarted after being stopped.
It's not normal to stop and doesn't do so without outside interference. Did
you examine any of the possible software conflicts I already mentioned?

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"RealCat" <> wrote in message
news:dfabea9e-36da-47ef-83f2-...
That just happened again a few minutes ago, I went to the Problem
Reports and Solutions, but there's no entry for that. Then again, I
opened the Event Viewer, and checked for it. It was logged, and there
was a link for more information. I clicked it.

http://technet.microsoft.com/en-us/l.../cc733895.aspx

Event Details
Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-Winlogon
Version: 6.0
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Resolve
This is a normal condition. No further action is required.

Look at the resolution. Microsoft says it's normal and there's nothing
I can do. How could this be a normal condition?


On Aug 16, 1:24 am, "zachd [MSFT]"
<za...@nomailplz.online.microsoft.com> wrote:
> What's the specific crash information from the Problem Reports and
> Solutions
> Center control panel?
> http://zachd.com/pss/pss.html#bucket
>
> The below XML chunk doesn't actually include information such as fault
> module, etc. =\
>
> --
> Speaking for myself only.
> Seehttp://zachd.com/pss/pss.htmlfor some helpful WMP info.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --"RealCat" <typing...@gmail.com> wrote in message
>
> news:b19ffca9-efc4-44b2-a7c6-...
>
>
>
> >I don't know exactly since when this happens, but the Windows Explorer
> > suddenly disappears then restarts. Is there any known reason? I've
> > searched Google for this, but the only solution, "Delete explorer.exe"
> > seemed stupid. This is the log.
>
> > Source Winlogon
> > The shell stopped unexpectedly and explorer.exe was restarted.
>
> > - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/
> > event">
> > - <System>
> > <Provider Name="Microsoft-Windows-Winlogon"
> > Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}"
> > EventSourceName="Winlogon" />
> > <EventID Qualifiers="16384">1002</EventID>
> > <Version>0</Version>
> > <Level>4</Level>
> > <Task>0</Task>
> > <Opcode>0</Opcode>
> > <Keywords>0x80000000000000</Keywords>
> > <TimeCreated SystemTime="2008-08-09T11:34:28.000Z" />
> > <EventRecordID>8395</EventRecordID>
> > <Correlation />
> > <Execution ProcessID="0" ThreadID="0" />
> > <Channel>Application</Channel>
> > <Computer>HouseCat</Computer>
> > <Security />
> > </System>
> > - <EventData>
> > <Data>explorer.exe</Data>
> > </EventData>
> > </Event>
>
> > Using Windows Vista 64 bit version.