Windows Explorer Problems

For whatever reason, I continue to get an error message recently from time to
time, "Explorer has stopped working" (words to that effect), and then IE also
stops responding, so I have to shut down and reboot. I get the error message
that Windows is searching for the problem, but all it does is tell me to stop
or restart the program. When I try to access Control Panel to find something
to help, it also responds with the Explorer problem. I've scanned the
computer for viruses, etc., and it's clean. In other discussions, I see
similar posts, however, mainly related to IE. Suggestions?

semight be that some explorer extension is causing the problem

go here http://www.nirsoft.net/utils/shexview.html and use that app
to disable temporarily all non microsoft shell extensions that load up
with windows explorer. See if it fixes the situation.

You do that by right clicking on the pink ones and selecting disable.

Then with the trial and error method start enabling them one by one again
try to pinpoint which one is causing the problem and keep it disabled..

you might also want to scan for spyware using spybot and adaware
that you can download from www.download.com if you search for those 2 names.

tell me if this helps


"lou g" <> wrote in message
news:EC7C148A-2C67-4949-8499-...
> For whatever reason, I continue to get an error message recently from time
> to
> time, "Explorer has stopped working" (words to that effect), and then IE
> also
> stops responding, so I have to shut down and reboot. I get the error
> message
> that Windows is searching for the problem, but all it does is tell me to
> stop
> or restart the program. When I try to access Control Panel to find
> something
> to help, it also responds with the Explorer problem. I've scanned the
> computer for viruses, etc., and it's clean. In other discussions, I see
> similar posts, however, mainly related to IE. Suggestions?
>

Lou,

Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
For whatever reason, I continue to get an error message recently from time to
time, "Explorer has stopped working" (words to that effect), and then IE also
stops responding, so I have to shut down and reboot. I get the error message
that Windows is searching for the problem, but all it does is tell me to stop
or restart the program. When I try to access Control Panel to find something
to help, it also responds with the Explorer problem. I've scanned the
computer for viruses, etc., and it's clean. In other discussions, I see
similar posts, however, mainly related to IE. Suggestions?

This is what I found right off the go:
Log Name: Application
Source: Application Error
Date: 4/7/2007 9:53:34 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Lou-PC
Description:
Faulting application WinMail.exe, version 6.0.6000.16386, time stamp
0x4549b0f9, faulting module sockspy.dll, version 0.0.0.0, time stamp
0x458bf18b, exception code 0xc0000005, fault offset 0x0000104a, process id
0xe3c, application start time 0x01c779247ca61dd0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-04-07T14:53:34.000Z" />
<EventRecordID>19901</EventRecordID>
<Channel>Application</Channel>
<Computer>Lou-PC</Computer>
<Security />
</System>
<EventData>
<Data>WinMail.exe</Data>
<Data>6.0.6000.16386</Data>
<Data>4549b0f9</Data>
<Data>sockspy.dll</Data>
<Data>0.0.0.0</Data>
<Data>458bf18b</Data>
<Data>c0000005</Data>
<Data>0000104a</Data>
<Data>e3c</Data>
<Data>01c779247ca61dd0</Data>
</EventData>
</Event>

"Ramesh, MS-MVP" wrote:

> Lou,
>
> Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
> For whatever reason, I continue to get an error message recently from time to
> time, "Explorer has stopped working" (words to that effect), and then IE also
> stops responding, so I have to shut down and reboot. I get the error message
> that Windows is searching for the problem, but all it does is tell me to stop
> or restart the program. When I try to access Control Panel to find something
> to help, it also responds with the Explorer problem. I've scanned the
> computer for viruses, etc., and it's clean. In other discussions, I see
> similar posts, however, mainly related to IE. Suggestions?
>
>

Thanks; I'll give it a try. I'll run Spybot and Adaware again to see if
anything pops up.


"kirk jim" wrote:

> semight be that some explorer extension is causing the problem
>
> go here http://www.nirsoft.net/utils/shexview.html and use that app
> to disable temporarily all non microsoft shell extensions that load up
> with windows explorer. See if it fixes the situation.
>
> You do that by right clicking on the pink ones and selecting disable.
>
> Then with the trial and error method start enabling them one by one again
> try to pinpoint which one is causing the problem and keep it disabled..
>
> you might also want to scan for spyware using spybot and adaware
> that you can download from www.download.com if you search for those 2 names.
>
> tell me if this helps
>
>
> "lou g" <> wrote in message
> news:EC7C148A-2C67-4949-8499-...
> > For whatever reason, I continue to get an error message recently from time
> > to
> > time, "Explorer has stopped working" (words to that effect), and then IE
> > also
> > stops responding, so I have to shut down and reboot. I get the error
> > message
> > that Windows is searching for the problem, but all it does is tell me to
> > stop
> > or restart the program. When I try to access Control Panel to find
> > something
> > to help, it also responds with the Explorer problem. I've scanned the
> > computer for viruses, etc., and it's clean. In other discussions, I see
> > similar posts, however, mainly related to IE. Suggestions?
> >
>
>
>

That shows the Windows Mail crash details, and the conflicting module on that occasion was "sockspy.dll", probably a component of BitDefender security.

Reference: http://www.castlecops.com/o20list-55.html

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"lou g" <> wrote in message news:A9080598-52B4-4A35-A957-...
This is what I found right off the go:
Log Name: Application
Source: Application Error
Date: 4/7/2007 9:53:34 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Lou-PC
Description:
Faulting application WinMail.exe, version 6.0.6000.16386, time stamp
0x4549b0f9, faulting module sockspy.dll, version 0.0.0.0, time stamp
0x458bf18b, exception code 0xc0000005, fault offset 0x0000104a, process id
0xe3c, application start time 0x01c779247ca61dd0.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-04-07T14:53:34.000Z" />
<EventRecordID>19901</EventRecordID>
<Channel>Application</Channel>
<Computer>Lou-PC</Computer>
<Security />
</System>
<EventData>
<Data>WinMail.exe</Data>
<Data>6.0.6000.16386</Data>
<Data>4549b0f9</Data>
<Data>sockspy.dll</Data>
<Data>0.0.0.0</Data>
<Data>458bf18b</Data>
<Data>c0000005</Data>
<Data>0000104a</Data>
<Data>e3c</Data>
<Data>01c779247ca61dd0</Data>
</EventData>
</Event>

"Ramesh, MS-MVP" wrote:

> Lou,
>
> Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
> For whatever reason, I continue to get an error message recently from time to
> time, "Explorer has stopped working" (words to that effect), and then IE also
> stops responding, so I have to shut down and reboot. I get the error message
> that Windows is searching for the problem, but all it does is tell me to stop
> or restart the program. When I try to access Control Panel to find something
> to help, it also responds with the Explorer problem. I've scanned the
> computer for viruses, etc., and it's clean. In other discussions, I see
> similar posts, however, mainly related to IE. Suggestions?
>
>

Thank you Ramesh. It explains it all now. I downloaded Shexview per Jim
Kirk's suggestion, but I couldn't use it as bitDefender said it contained
Win32.freetrip.c@mm. I couldn't even delete it until I stopped Bitdefender
and then was able to delete it. Now you state this. Wonder if I've got the
wrong antivirus or if I have to lower the safety features. I appreciate both
you and Jim's answers.

"Ramesh, MS-MVP" wrote:

> That shows the Windows Mail crash details, and the conflicting module on that occasion was "sockspy.dll", probably a component of BitDefender security.
>
> Reference: http://www.castlecops.com/o20list-55.html
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "lou g" <> wrote in message news:A9080598-52B4-4A35-A957-...
> This is what I found right off the go:
> Log Name: Application
> Source: Application Error
> Date: 4/7/2007 9:53:34 AM
> Event ID: 1000
> Task Category: (100)
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: Lou-PC
> Description:
> Faulting application WinMail.exe, version 6.0.6000.16386, time stamp
> 0x4549b0f9, faulting module sockspy.dll, version 0.0.0.0, time stamp
> 0x458bf18b, exception code 0xc0000005, fault offset 0x0000104a, process id
> 0xe3c, application start time 0x01c779247ca61dd0.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Application Error" />
> <EventID Qualifiers="0">1000</EventID>
> <Level>2</Level>
> <Task>100</Task>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2007-04-07T14:53:34.000Z" />
> <EventRecordID>19901</EventRecordID>
> <Channel>Application</Channel>
> <Computer>Lou-PC</Computer>
> <Security />
> </System>
> <EventData>
> <Data>WinMail.exe</Data>
> <Data>6.0.6000.16386</Data>
> <Data>4549b0f9</Data>
> <Data>sockspy.dll</Data>
> <Data>0.0.0.0</Data>
> <Data>458bf18b</Data>
> <Data>c0000005</Data>
> <Data>0000104a</Data>
> <Data>e3c</Data>
> <Data>01c779247ca61dd0</Data>
> </EventData>
> </Event>
>
> "Ramesh, MS-MVP" wrote:
>
> > Lou,
> >
> > Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
> > For whatever reason, I continue to get an error message recently from time to
> > time, "Explorer has stopped working" (words to that effect), and then IE also
> > stops responding, so I have to shut down and reboot. I get the error message
> > that Windows is searching for the problem, but all it does is tell me to stop
> > or restart the program. When I try to access Control Panel to find something
> > to help, it also responds with the Explorer problem. I've scanned the
> > computer for viruses, etc., and it's clean. In other discussions, I see
> > similar posts, however, mainly related to IE. Suggestions?
> >
> >
>

Hi Lou,

ShellExView is an excellent program, is safe to use provided that you downloaded it from the manufacturer's site (www.nirsoft.net). The ShellExView application may have been compressed using UPX (a tool to compact .exe files to reduce space dramatically). This is not the first time that an AV or anti-Malware application incorrectly reports an upx packed executable as Virus.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"lou g" <> wrote in message news:9A6FB2E4-C16C-4450-9CCE-...
Thank you Ramesh. It explains it all now. I downloaded Shexview per Jim
Kirk's suggestion, but I couldn't use it as bitDefender said it contained
Win32.freetrip.c@mm. I couldn't even delete it until I stopped Bitdefender
and then was able to delete it. Now you state this. Wonder if I've got the
wrong antivirus or if I have to lower the safety features. I appreciate both
you and Jim's answers.

"Ramesh, MS-MVP" wrote:

> That shows the Windows Mail crash details, and the conflicting module on that occasion was "sockspy.dll", probably a component of BitDefender security.
>
> Reference: http://www.castlecops.com/o20list-55.html
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "lou g" <> wrote in message news:A9080598-52B4-4A35-A957-...
> This is what I found right off the go:
> Log Name: Application
> Source: Application Error
> Date: 4/7/2007 9:53:34 AM
> Event ID: 1000
> Task Category: (100)
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: Lou-PC
> Description:
> Faulting application WinMail.exe, version 6.0.6000.16386, time stamp
> 0x4549b0f9, faulting module sockspy.dll, version 0.0.0.0, time stamp
> 0x458bf18b, exception code 0xc0000005, fault offset 0x0000104a, process id
> 0xe3c, application start time 0x01c779247ca61dd0.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Application Error" />
> <EventID Qualifiers="0">1000</EventID>
> <Level>2</Level>
> <Task>100</Task>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2007-04-07T14:53:34.000Z" />
> <EventRecordID>19901</EventRecordID>
> <Channel>Application</Channel>
> <Computer>Lou-PC</Computer>
> <Security />
> </System>
> <EventData>
> <Data>WinMail.exe</Data>
> <Data>6.0.6000.16386</Data>
> <Data>4549b0f9</Data>
> <Data>sockspy.dll</Data>
> <Data>0.0.0.0</Data>
> <Data>458bf18b</Data>
> <Data>c0000005</Data>
> <Data>0000104a</Data>
> <Data>e3c</Data>
> <Data>01c779247ca61dd0</Data>
> </EventData>
> </Event>
>
> "Ramesh, MS-MVP" wrote:
>
> > Lou,
> >
> > Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
> > For whatever reason, I continue to get an error message recently from time to
> > time, "Explorer has stopped working" (words to that effect), and then IE also
> > stops responding, so I have to shut down and reboot. I get the error message
> > that Windows is searching for the problem, but all it does is tell me to stop
> > or restart the program. When I try to access Control Panel to find something
> > to help, it also responds with the Explorer problem. I've scanned the
> > computer for viruses, etc., and it's clean. In other discussions, I see
> > similar posts, however, mainly related to IE. Suggestions?
> >
> >
>

I received a reply from BitDefender today. They advised me to change
sockspy.dll to sockspy.dl_. I'll try it and repost if anything changes. Thsy
also said they corrected the false positive of Win32.freetrip.c@mm.

"Ramesh, MS-MVP" wrote:

> Hi Lou,
>
> ShellExView is an excellent program, is safe to use provided that you downloaded it from the manufacturer's site (www.nirsoft.net). The ShellExView application may have been compressed using UPX (a tool to compact .exe files to reduce space dramatically). This is not the first time that an AV or anti-Malware application incorrectly reports an upx packed executable as Virus.
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "lou g" <> wrote in message news:9A6FB2E4-C16C-4450-9CCE-...
> Thank you Ramesh. It explains it all now. I downloaded Shexview per Jim
> Kirk's suggestion, but I couldn't use it as bitDefender said it contained
> Win32.freetrip.c@mm. I couldn't even delete it until I stopped Bitdefender
> and then was able to delete it. Now you state this. Wonder if I've got the
> wrong antivirus or if I have to lower the safety features. I appreciate both
> you and Jim's answers.
>
> "Ramesh, MS-MVP" wrote:
>
> > That shows the Windows Mail crash details, and the conflicting module on that occasion was "sockspy.dll", probably a component of BitDefender security.
> >
> > Reference: http://www.castlecops.com/o20list-55.html
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "lou g" <> wrote in message news:A9080598-52B4-4A35-A957-...
> > This is what I found right off the go:
> > Log Name: Application
> > Source: Application Error
> > Date: 4/7/2007 9:53:34 AM
> > Event ID: 1000
> > Task Category: (100)
> > Level: Error
> > Keywords: Classic
> > User: N/A
> > Computer: Lou-PC
> > Description:
> > Faulting application WinMail.exe, version 6.0.6000.16386, time stamp
> > 0x4549b0f9, faulting module sockspy.dll, version 0.0.0.0, time stamp
> > 0x458bf18b, exception code 0xc0000005, fault offset 0x0000104a, process id
> > 0xe3c, application start time 0x01c779247ca61dd0.
> > Event Xml:
> > <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> > <System>
> > <Provider Name="Application Error" />
> > <EventID Qualifiers="0">1000</EventID>
> > <Level>2</Level>
> > <Task>100</Task>
> > <Keywords>0x80000000000000</Keywords>
> > <TimeCreated SystemTime="2007-04-07T14:53:34.000Z" />
> > <EventRecordID>19901</EventRecordID>
> > <Channel>Application</Channel>
> > <Computer>Lou-PC</Computer>
> > <Security />
> > </System>
> > <EventData>
> > <Data>WinMail.exe</Data>
> > <Data>6.0.6000.16386</Data>
> > <Data>4549b0f9</Data>
> > <Data>sockspy.dll</Data>
> > <Data>0.0.0.0</Data>
> > <Data>458bf18b</Data>
> > <Data>c0000005</Data>
> > <Data>0000104a</Data>
> > <Data>e3c</Data>
> > <Data>01c779247ca61dd0</Data>
> > </EventData>
> > </Event>
> >
> > "Ramesh, MS-MVP" wrote:
> >
> > > Lou,
> > >
> > > Check the Application Event log (eventvwr.msc) to see if there are any errors registered during the time when Explorer crashed.
> > >
> > > --
> > > Regards,
> > >
> > > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > > Windows® Troubleshooting http://www.winhelponline.com
> > >
> > >
> > > "lou g" <> wrote in message news:EC7C148A-2C67-4949-8499-...
> > > For whatever reason, I continue to get an error message recently from time to
> > > time, "Explorer has stopped working" (words to that effect), and then IE also
> > > stops responding, so I have to shut down and reboot. I get the error message
> > > that Windows is searching for the problem, but all it does is tell me to stop
> > > or restart the program. When I try to access Control Panel to find something
> > > to help, it also responds with the Explorer problem. I've scanned the
> > > computer for viruses, etc., and it's clean. In other discussions, I see
> > > similar posts, however, mainly related to IE. Suggestions?
> > >
> > >
> >
>

Thanks for the updates, Lou.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"lou g" <> wrote in message news:FE3BD164-87ED-4E75-90C0-...
I received a reply from BitDefender today. They advised me to change
sockspy.dll to sockspy.dl_. I'll try it and repost if anything changes. Thsy
also said they corrected the false positive of Win32.freetrip.c@mm.

"Ramesh, MS-MVP" wrote:

> Hi Lou,
>
> ShellExView is an excellent program, is safe to use provided that you downloaded it from the manufacturer's site (www.nirsoft.net). The ShellExView application may have been compressed using UPX (a tool to compact .exe files to reduce space dramatically). This is not the first time that an AV or anti-Malware application incorrectly reports an upx packed executable as Virus.
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com