Application exception c0000005 + explorer.exe

I'll begin with a new user disclaimer. I've spent a week reading through posts and searching for an error similiar to my error, but haven't found one. Every time I open the 'control panel' or 'printers and faxes' folder, explorer crashes with the following error:

Application exception occurred:
App: C:\WINDOWS\explorer.exe (pid=3728)
When: 2/21/2005 @ 16:15:11.075
Exception number: c0000005 (access violation)

I've captured the Dr. Watson user.dmp file and ran it through Joe's debugwiz.exe and here it is (user32.dll perhaps?) ...

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\dmaenner\Desktop\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Mon Feb 21 16:15:11.000 2005 (GMT-5)
System Uptime: not available
Process Uptime: 0 days 0:04:48.000
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/...ls*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
.................................................................................................
(e90.6c0): Access violation - code c0000005 (!!! second chance !!!)
eax=03a73f90 ebx=0000e30b ecx=77e763f6 edx=0001e000 esi=0000000b edi=0305dae8
eip=77d4baf8 esp=0305d7e4 ebp=0305d7f0 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
user32!LoadStringOrError+0x5d:
77d4baf8 0fb718 movzx ebx,word ptr [eax] ds:0023:03a73f90=????
0:025> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************


FAULTING_IP:
user32!LoadStringOrError+5d
77d4baf8 0fb718 movzx ebx,word ptr [eax]

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
.exr ffffffffffffffff
ExceptionAddress: 77d4baf8 (user32!LoadStringOrError+0x0000005d)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 03a73f90
Attempt to read from address 03a73f90

DEFAULT_BUCKET_ID: APPLICATION_FAULT

PROCESS_NAME: explorer.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 03a73f90

BUGCHECK_STR: ACCESS_VIOLATION

THREAD_ATTRIBUTES:
LAST_CONTROL_TRANSFER: from 77d4bb46 to 77d4baf8

STACK_TEXT:
0305d7f0 77d4bb46 039d0001 0000014b 0305dae8 user32!LoadStringOrError+0x5d
0305d8ac 77f5166a 77e760f6 00080000 00000000 user32!LoadStringW+0x17
0305d9d0 77f52d1a 00000000 0305da90 77f5116b ntdll!RtlFreeHeap+0x5f9
0305d9e0 77f5119a 77f5119f 00000000 0305da90 ntdll!RtlpFreeAtom+0x17
0305da10 77dd18fe 77dd193b 0305dce8 00000946 ntdll!RtlNtStatusToDosError+0x38
77f5119f a9042444 20000000 00a8850f 56530000 advapi32!LocalBaseRegOpenKey+0xcb
WARNING: Frame IP not in any known module. Following frames may be wrong.
8b0004c2 00000000 00000000 00000000 00000000 0xa9042444


FOLLOWUP_IP:
user32!LoadStringOrError+5d
77d4baf8 0fb718 movzx ebx,word ptr [eax]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: user32!LoadStringOrError+5d

MODULE_NAME: user32

IMAGE_NAME: user32.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 41d20900

STACK_COMMAND: .ecxr ; kb

FAILURE_BUCKET_ID: ACCESS_VIOLATION_user32!LoadStringOrError+5d

BUCKET_ID: ACCESS_VIOLATION_user32!LoadStringOrError+5d

Followup: MachineOwner
---------

eax=03a73f90 ebx=0000e30b ecx=77e763f6 edx=0001e000 esi=0000000b edi=0305dae8
eip=77d4baf8 esp=0305d7e4 ebp=0305d7f0 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
user32!LoadStringOrError+0x5d:
77d4baf8 0fb718 movzx ebx,word ptr [eax] ds:0023:03a73f90=????
ChildEBP RetAddr Args to Child
0305d7f0 77d4bb46 039d0001 0000014b 0305dae8 user32!LoadStringOrError+0x5d (FPO: [Non-Fpo])
0305d8ac 77f5166a 77e760f6 00080000 00000000 user32!LoadStringW+0x17 (FPO: [4,0,0])
0305d9d0 77f52d1a 00000000 0305da90 77f5116b ntdll!RtlFreeHeap+0x5f9 (FPO: [Non-Fpo])
0305d9e0 77f5119a 77f5119f 00000000 0305da90 ntdll!RtlpFreeAtom+0x17 (FPO: [1,0,0])
0305da10 77dd18fe 77dd193b 0305dce8 00000946 ntdll!RtlNtStatusToDosError+0x38 (FPO: [Non-Fpo])
77f5119f a9042444 20000000 00a8850f 56530000 advapi32!LocalBaseRegOpenKey+0xcb (FPO: [Non-Fpo])
WARNING: Frame IP not in any known module. Following frames may be wrong.
8b0004c2 00000000 00000000 00000000 00000000 0xa9042444
start end module name
00870000 0089b000 msctfime msctfime.ime Thu Aug 29 04:11:51 2002 (3D6DD747)
01000000 010f8000 explorer explorer.exe Thu Aug 29 04:57:06 2002 (3D6DE1E2)
012b0000 014b1000 msi msi.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
014c0000 014d8000 occache occache.dll Thu Aug 29 10:13:05 2002 (3D6E2BF1)
014f0000 014fe000 qvpse3 qvpse3.dll Tue Apr 09 21:01:51 2002 (3CB38EFF)
01650000 0166b000 NDRVEX NDRVEX.DLL Sat Jul 28 11:18:28 2001 (3B62D7C4)
01ae0000 01aec000 AcroIEHelper AcroIEHelper.dll Mon Nov 03 17:17:31 2003 (3FA6D3FB)
01b00000 01b12000 browselc browselc.dll Thu Aug 29 10:13:07 2002 (3D6E2BF3)
02a20000 02a2a000 vpshell2 vpshell2.dll Tue Jan 14 21:02:38 2003 (3E24C13E)
02d60000 02dfe000 ContextMenu ContextMenu.dll Mon Nov 03 18:03:23 2003 (3FA6DEBB)
02e50000 02ee3000 xpsp2res xpsp2res.dll Fri Jul 30 17:29:58 2004 (410ABDD6)
0ffd0000 0fff3000 rsaenh rsaenh.dll Mon Apr 29 18:35:28 2002 (3CCDCAB0)
10000000 1000b000 qvphook qvphook.dll Tue Apr 09 21:01:36 2002 (3CB38EF0)
325c0000 325d2000 MSOHEV MSOHEV.DLL Tue Jul 15 00:11:00 2003 (3F137ED4)
4f510000 4fd21000 shell32 shell32.dll Fri Aug 20 18:01:15 2004 (412674AB)
55900000 55961000 msvcp60 msvcp60.dll Thu Aug 29 06:39:11 2002 (3D6DF9CF)
559e0000 55a51000 themeui themeui.dll Thu Aug 29 06:39:12 2002 (3D6DF9D0)
5ad70000 5ada4000 uxtheme uxtheme.dll Thu Aug 29 06:39:22 2002 (3D6DF9DA)
5fc10000 5fc40000 msutb msutb.dll Thu Aug 29 06:39:40 2002 (3D6DF9EC)
629c0000 629c8000 LPK LPK.DLL Sat Aug 18 01:35:10 2001 (3B7DFE8E)
6c1b0000 6c1f4000 duser duser.dll Thu Aug 29 06:39:58 2002 (3D6DF9FE)
6fd40000 6fd56000 CABVIEW CABVIEW.DLL Sat Aug 18 01:33:49 2001 (3B7DFE3D)
70200000 70295000 wininet wininet.dll Thu Aug 29 10:13:05 2002 (3D6E2BF1)
702b0000 7032a000 urlmon urlmon.dll Thu Aug 29 10:13:06 2002 (3D6E2BF2)
70340000 70381000 webcheck webcheck.dll Thu Aug 29 10:13:06 2002 (3D6E2BF2)
703d0000 703eb000 actxprxy actxprxy.dll Thu Aug 29 10:13:06 2002 (3D6E2BF2)
70a70000 70ad4000 shlwapi shlwapi.dll Thu Aug 29 06:40:02 2002 (3D6DFA02)
71000000 71149000 shdocvw shdocvw.dll Thu Aug 29 10:13:06 2002 (3D6E2BF2)
71160000 7125d000 browseui browseui.dll Thu Aug 29 10:13:06 2002 (3D6E2BF2)
718c0000 71944000 shdoclc shdoclc.dll Thu Aug 29 10:13:07 2002 (3D6E2BF3)
71950000 71a34000 comctl32 comctl32.dll Fri Aug 20 18:01:13 2004 (412674A9)
71aa0000 71aa8000 WS2HELP WS2HELP.DLL Sat Aug 18 01:33:38 2001 (3B7DFE32)
71ab0000 71ac5000 WS2_32 WS2_32.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71b20000 71b31000 MPR MPR.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71bf0000 71c01000 samlib samlib.dll Thu Aug 29 06:40:06 2002 (3D6DFA06)
71c10000 71c1d000 ntlanman ntlanman.dll Thu Aug 29 06:40:06 2002 (3D6DFA06)
71c20000 71c6e000 netapi32 netapi32.dll Tue Jun 08 18:02:21 2004 (40C6376D)
71c80000 71c86000 NETRAP NETRAP.DLL Sat Aug 18 01:33:38 2001 (3B7DFE32)
71c90000 71ccc000 NETUI1 NETUI1.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71cd0000 71ce6000 NETUI0 NETUI0.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
72d10000 72d18000 MSACM32 MSACM32.DRV Sat Aug 18 01:33:30 2001 (3B7DFE2A)
72d20000 72d29000 WDMAUD WDMAUD.DRV Sat Aug 18 01:33:30 2001 (3B7DFE2A)
72fa0000 72ffa000 usp10 usp10.dll Thu Aug 29 06:40:11 2002 (3D6DFA0B)
73000000 73023000 winspool winspool.drv Thu Aug 29 06:40:11 2002 (3D6DFA0B)
73380000 733d2000 zipfldr zipfldr.dll Sat Aug 21 03:54:17 2004 (4126FFA9)
735d0000 73612000 mstask mstask.dll Tue Jun 08 18:02:21 2004 (40C6376D)
73dd0000 73ec2000 mfc42 mfc42.dll Sat Aug 18 01:33:24 2001 (3B7DFE24)
746f0000 74716000 msimtf msimtf.dll Thu Aug 29 06:40:16 2002 (3D6DFA10)
74720000 74764000 msctf msctf.dll Thu Aug 29 06:40:16 2002 (3D6DFA10)
74ad0000 74ad7000 POWRPROF POWRPROF.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74ae0000 74ae7000 CFGMGR32 CFGMGR32.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74af0000 74af9000 BATMETER BATMETER.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74b00000 74b20000 stobject stobject.dll Thu Aug 29 06:40:17 2002 (3D6DFA11)
74b80000 74c02000 printui printui.dll Thu Aug 29 06:40:18 2002 (3D6DFA12)
75a70000 75b15000 userenv userenv.dll Thu Aug 29 06:40:26 2002 (3D6DFA1A)
75cf0000 75e81000 netshell netshell.dll Thu Aug 29 06:40:26 2002 (3D6DFA1A)
75e90000 75f3d000 sxs sxs.dll Fri Aug 20 18:01:16 2004 (412674AC)
75f40000 75f5f000 apphelp apphelp.dll Thu Aug 29 06:40:27 2002 (3D6DFA1B)
75f60000 75f66000 DRPROV DRPROV.DLL Sat Aug 18 01:33:11 2001 (3B7DFE17)
75f70000 75f79000 DAVCLNT DAVCLNT.DLL Sat Aug 18 01:33:11 2001 (3B7DFE17)
762a0000 762b0000 msasn1 msasn1.dll Mon Mar 29 20:48:36 2004 (4068D1F4)
762c0000 76348000 crypt32 crypt32.dll Mon Sep 23 18:10:25 2002 (3D8F9151)
76360000 7636f000 winsta winsta.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76380000 76385000 msimg32 msimg32.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76390000 763ac000 imm32 imm32.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
763b0000 763f5000 comdlg32 comdlg32.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76600000 7661c000 cscdll cscdll.dll Wed Oct 27 21:29:54 2004 (41804B92)
76620000 7666e000 cscui cscui.dll Thu Aug 29 06:40:30 2002 (3D6DFA1E)
76670000 76757000 setupapi setupapi.dll Thu Aug 29 06:40:30 2002 (3D6DFA1E)
76980000 76987000 linkinfo linkinfo.dll Fri Aug 20 18:01:15 2004 (412674AB)
76990000 769b4000 ntshrui ntshrui.dll Thu Aug 29 06:40:31 2002 (3D6DFA1F)
76b20000 76b35000 atl atl.dll Thu Aug 29 06:40:32 2002 (3D6DFA20)
76b40000 76b6c000 winmm winmm.dll Thu Aug 29 06:40:32 2002 (3D6DFA20)
76c00000 76c2d000 credui credui.dll Thu Aug 29 06:40:33 2002 (3D6DFA21)
76c30000 76c5b000 WINTRUST WINTRUST.DLL Sat Aug 18 01:33:06 2001 (3B7DFE12)
76c90000 76cb2000 imagehlp imagehlp.dll Thu Aug 29 06:40:33 2002 (3D6DFA21)
76d60000 76d77000 iphlpapi iphlpapi.dll Thu Aug 29 06:40:33 2002 (3D6DFA21)
76e10000 76e35000 adsldpc adsldpc.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76e40000 76e6f000 ACTIVEDS ACTIVEDS.DLL Sat Aug 18 01:33:05 2001 (3B7DFE11)
76f50000 76f58000 wtsapi32 wtsapi32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76f60000 76f8c000 wldap32 wldap32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76f90000 76fa0000 secur32 secur32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
77050000 77115000 COMRES COMRES.DLL Sat Aug 18 01:33:04 2001 (3B7DFE10)
77120000 771ab000 oleaut32 oleaut32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
771b0000 772d4000 ole32 ole32.dll Fri Mar 05 21:16:11 2004 (4049346B)
77340000 773cb000 comctl32_77340000 comctl32.dll Thu Aug 29 06:40:42 2002 (3D6DFA2A)
77bd0000 77bd7000 MIDIMAP MIDIMAP.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77be0000 77bf4000 MSACM32_77be0000 MSACM32.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77c00000 77c07000 VERSION VERSION.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77c10000 77c63000 msvcrt msvcrt.dll Thu Aug 29 06:40:39 2002 (3D6DFA27)
77d40000 77dd0000 user32 user32.dll Tue Dec 28 20:31:44 2004 (41D20900)
77dd0000 77e5d000 advapi32 advapi32.dll Thu Aug 29 06:40:40 2002 (3D6DFA28)
77e60000 77f46000 kernel32 kernel32.dll Thu Jun 17 13:58:35 2004 (40D1DBCB)
77f50000 77ff7000 ntdll ntdll.dll Thu Aug 29 06:40:40 2002 (3D6DFA28)
78000000 78087000 rpcrt4 rpcrt4.dll Fri Mar 05 21:16:11 2004 (4049346B)
7c890000 7c911000 clbcatq clbcatq.dll Fri Mar 05 21:16:11 2004 (4049346B)
7f000000 7f041000 gdi32 gdi32.dll Thu Jun 17 13:58:35 2004 (40D1DBCB)
Closing open log file c:\debuglog.txt

Thank you in advance for your time and expertise.

 

can you make it crash again, get a new dump and run the tool again.. This crash is happening in a very odd place. It looks like heap corruption, but i'd like another dump to be sure.

You have a lot of third party software loaded.. Does it crash in safe mode?

 

I can definately make it crash again. I will be back in front of the problem machine in a couple of hours and will repost another dump analysis.

PS: it does crash with other user profiles and in safe mode.

 

Removed duplicate .dmp file

 

It appears as though I ran the original .dmp file through the debugger again. I apologize. I will create another .dmp file today. Stay tuned ...

 

OK, I just generated another crash .dmp and here it is:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\dmaenner\Desktop\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Wed Feb 23 18:12:38.000 2005 (GMT-5)
System Uptime: not available
Process Uptime: 0 days 0:00:18.000
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/...ls*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
..............................................................................
(ffc.588): Access violation - code c0000005 (!!! second chance !!!)
eax=01fb3f90 ebx=0000e30b ecx=77e763f6 edx=0001e000 esi=0000000b edi=01aac88c
eip=77d4baf8 esp=01aac2dc ebp=01aac2e8 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
user32!LoadStringOrError+0x5d:
77d4baf8 0fb718 movzx ebx,word ptr [eax] ds:0023:01fb3f90=????
0:013> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** ERROR: Symbol file could not be found. Defaulted to export symbols for shdocvw.dll -

FAULTING_IP:
user32!LoadStringOrError+5d
77d4baf8 0fb718 movzx ebx,word ptr [eax]

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
.exr ffffffffffffffff
ExceptionAddress: 77d4baf8 (user32!LoadStringOrError+0x0000005d)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 01fb3f90
Attempt to read from address 01fb3f90

DEFAULT_BUCKET_ID: APPLICATION_FAULT

PROCESS_NAME: explorer.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 01fb3f90

BUGCHECK_STR: ACCESS_VIOLATION

THREAD_ATTRIBUTES:
LAST_CONTROL_TRANSFER: from 77d4bb46 to 77d4baf8

STACK_TEXT:
01aac2e8 77d4bb46 01f10001 0000014b 01aac88c user32!LoadStringOrError+0x5d
01aac300 70a8c894 01f10001 0000014b 01aac88c user32!LoadStringW+0x17
01aac32c 70a8c8f5 00000000 01aac88c 00000400 shlwapi!_LoadDllString+0xbe
01aac568 70a77d3b 80070002 01aac88c 00000400 shlwapi!SHLoadIndirectString+0xaa
01aac598 4f543f8e 0000053a 4f519000 01aac88c shlwapi!SHLoadRegUIStringW+0xbb
01aac5c0 4f543c8b 0000053a 00000000 01aac88c shell32!SHLoadLegacyRegUIStringW+0x58
01aac868 4f564621 001565a0 00000000 01aac88c shell32!CRegFolder::_GetDisplayName+0x193
01aad104 4f56df66 001565a0 001565a0 01aad330 shell32!CRegFolder::GetDetailsEx+0x18e
01aad354 4f56e10e 00154bf0 001565a0 00000000 shell32!CRegFolder::GetDetailsOf+0x68
01aad480 4f56e0a4 00154bf0 001565a0 00000000 shell32!DetailsOf+0x27
01aad8bc 4f56e02c 00154bf0 00000000 001565a0 shell32!CompareIDsAlphabetical+0x63
01aad8d4 4f56dfeb 00000000 00154548 00159428 shell32!CRegFolder::_CompareIDsAlphabetical+0x29
01aad8f4 4f543530 00000000 10000000 00154548 shell32!CRegFolder::CompareIDs+0x4a
01aad918 4f5430a6 00154bf0 00154bf0 00150490 shell32!ILCompareRelIDs+0x95
01aad93c 4f543530 00000000 10000000 00154534 shell32!CRegFolder::CompareIDs+0xb5
01aad960 4f5430a6 000b4c00 000b4c00 00158ad8 shell32!ILCompareRelIDs+0x95
01aad984 4f564b2f 00000000 10000000 00154520 shell32!CRegFolder::CompareIDs+0xb5
01aad9b0 4f545bd3 000a3c28 00159400 00000001 shell32!ILIsEqualEx+0x77
01aad9c4 4f593ecb 00154520 00159400 8007000e shell32!ILIsEqual+0x14
01aada78 4f593dd9 01aadad8 00000004 00154520 shell32!CEnumArray::InitFromCSIDLArray+0x10d
01aada9c 4f593d91 00154520 00000000 01aadad8 shell32!CreateIEnumIDListOnCSIDLs2+0x3e
01aadab4 4f5b6292 00154520 01aadad8 00000004 shell32!CreateIEnumIDListOnCSIDLs+0x17
01aadae8 4f5b6247 001544bc 00154ab0 4f5b621d shell32!CPrinterFolder::GetWebViewContent+0x3a
01aadaf4 4f5b621d 00000000 00154ab0 01aadb28 shell32!CPrinterFolderViewCB::OnGetWebViewContent+0x1d
01aadb04 4f55d80d 001544b8 00000053 00000000 shell32!CPrinterFolderViewCB::RealMessage+0xed
01aadb28 4f55d7b8 001544b8 00000053 00000000 shell32!CBaseShellFolderViewCB::MessageSFVCB+0x1a
01aadb44 4f592a41 00000053 00000000 00154ab0 shell32!CCallback::CallCB+0x1c
01aadd78 4f592991 00000004 00000004 01aade24 shell32!CDefView::_TryShowWebView+0xdd
01aaddb0 4f55fbfa 00000004 00000002 00000004 shell32!CDefView::_SwitchToViewFVM+0x255
01aade08 717439b1 00000004 00000000 0013eba0 shell32!CDefView::CreateViewWindow2+0x3a7
WARNING: Stack unwind information not available. Following frames may be wrong.
01aade9c 7171fbb1 0011f7c8 00000043 00154588 shdocvw!AddUrlToFavorites+0x592
01aadec4 7151017f 0013e824 00154588 00000000 shdocvw!DllGetClassObject+0x7b2a
01aadee0 715115da 0011f7cc 00154588 00000000 browseui!CCommonBrowser::CreateViewWindow+0x1e
01aadf00 71725d12 0011f7cc 00154588 00000000 browseui!CShellBrowser2::CreateViewWindow+0x37
01aadf44 71725e57 00000000 0013e438 00000000 shdocvw!DllGetClassObject+0xdc8b
01aadf6c 71726d2a 0013e438 00000000 00000000 shdocvw!DllGetClassObject+0xddd0
01aaefe0 7151015e 0013e824 0013e438 00000000 shdocvw!DllGetClassObject+0xeca3
01aaeff4 71511551 0011f7cc 0013e438 00000000 browseui!CCommonBrowser::_NavigateToPidl+0x1c
01aaf018 71529504 0011f7cc 0013e438 00000000 browseui!CShellBrowser2::_NavigateToPidl+0x10f
01aaf08c 71725306 00000001 71587e84 00000001 browseui!CShellBrowser2::OnCreate+0x47d
01aaf0a4 71501eba 0013e824 000500d6 00000001 shdocvw!DllGetClassObject+0xd27f
01aaf0c0 71505ebd 0011f7cc 000500d6 00000001 browseui!CCommonBrowser::WndProcBS+0x1e
01aaf0fc 71505d47 0011f7b8 000500d6 00000001 browseui!CShellBrowser2::WndProcBS+0x18f
01aaf128 77d486cb 0011f7b8 00000001 00000000 browseui!IEFrameWndProc+0x107
01aaf154 77d520e6 71505d5e 000500d6 00000001 user32!InternalCallWinProc+0x1b
01aaf1bc 77d492ab 00000000 71505d5e 000500d6 user32!UserCallWinProcCheckWow+0xea
01aaf210 77d4d19e 004bff70 00000001 00000000 user32!DispatchClientMessage+0xa3
01aaf240 77fb4da6 01aaf250 00000088 00000088 user32!__fnINLPCREATESTRUCT+0x89
01aaf2d4 77d50eae 77d50e81 00000100 01aaf7e0 ntdll!KiUserCallbackDispatcher+0x13
01aaf75c 77d50f6f 00000100 00000000 01aaf7f4 user32!NtUserCreateWindowEx+0xc


FOLLOWUP_IP:
shlwapi!_LoadDllString+be
70a8c894 85c0 test eax,eax

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: shlwapi!_LoadDllString+be

MODULE_NAME: shlwapi

IMAGE_NAME: shlwapi.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 412674ab

STACK_COMMAND: .ecxr ; kb

FAILURE_BUCKET_ID: ACCESS_VIOLATION_shlwapi!_LoadDllString+be

BUCKET_ID: ACCESS_VIOLATION_shlwapi!_LoadDllString+be

Followup: MachineOwner
---------

eax=01fb3f90 ebx=0000e30b ecx=77e763f6 edx=0001e000 esi=0000000b edi=01aac88c
eip=77d4baf8 esp=01aac2dc ebp=01aac2e8 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202
user32!LoadStringOrError+0x5d:
77d4baf8 0fb718 movzx ebx,word ptr [eax] ds:0023:01fb3f90=????
ChildEBP RetAddr Args to Child
01aac2e8 77d4bb46 01f10001 0000014b 01aac88c user32!LoadStringOrError+0x5d (FPO: [Non-Fpo])
01aac300 70a8c894 01f10001 0000014b 01aac88c user32!LoadStringW+0x17 (FPO: [4,0,0])
01aac32c 70a8c8f5 00000000 01aac88c 00000400 shlwapi!_LoadDllString+0xbe (FPO: [Non-Fpo])
01aac568 70a77d3b 80070002 01aac88c 00000400 shlwapi!SHLoadIndirectString+0xaa (FPO: [Non-Fpo])
01aac598 4f543f8e 0000053a 4f519000 01aac88c shlwapi!SHLoadRegUIStringW+0xbb (FPO: [Non-Fpo])
01aac5c0 4f543c8b 0000053a 00000000 01aac88c shell32!SHLoadLegacyRegUIStringW+0x58 (FPO: [Non-Fpo])
01aac868 4f564621 001565a0 00000000 01aac88c shell32!CRegFolder::_GetDisplayName+0x193 (FPO: [4,161,3])
01aad104 4f56df66 001565a0 001565a0 01aad330 shell32!CRegFolder::GetDetailsEx+0x18e (FPO: [Non-Fpo])
01aad354 4f56e10e 00154bf0 001565a0 00000000 shell32!CRegFolder::GetDetailsOf+0x68 (FPO: [Non-Fpo])
01aad480 4f56e0a4 00154bf0 001565a0 00000000 shell32!DetailsOf+0x27 (FPO: [Non-Fpo])
01aad8bc 4f56e02c 00154bf0 00000000 001565a0 shell32!CompareIDsAlphabetical+0x63 (FPO: [Non-Fpo])
01aad8d4 4f56dfeb 00000000 00154548 00159428 shell32!CRegFolder::_CompareIDsAlphabetical+0x29 (FPO: [Non-Fpo])
01aad8f4 4f543530 00000000 10000000 00154548 shell32!CRegFolder::CompareIDs+0x4a (FPO: [Non-Fpo])
01aad918 4f5430a6 00154bf0 00154bf0 00150490 shell32!ILCompareRelIDs+0x95 (FPO: [Non-Fpo])
01aad93c 4f543530 00000000 10000000 00154534 shell32!CRegFolder::CompareIDs+0xb5 (FPO: [Non-Fpo])
01aad960 4f5430a6 000b4c00 000b4c00 00158ad8 shell32!ILCompareRelIDs+0x95 (FPO: [Non-Fpo])
01aad984 4f564b2f 00000000 10000000 00154520 shell32!CRegFolder::CompareIDs+0xb5 (FPO: [Non-Fpo])
01aad9b0 4f545bd3 000a3c28 00159400 00000001 shell32!ILIsEqualEx+0x77 (FPO: [Non-Fpo])
01aad9c4 4f593ecb 00154520 00159400 8007000e shell32!ILIsEqual+0x14 (FPO: [2,0,0])
01aada78 4f593dd9 01aadad8 00000004 00154520 shell32!CEnumArray::InitFromCSIDLArray+0x10d (FPO: [4,38,3])
start end module name
00870000 0089b000 msctfime msctfime.ime Thu Aug 29 04:11:51 2002 (3D6DD747)
01000000 010f8000 explorer explorer.exe Thu Aug 29 04:57:06 2002 (3D6DE1E2)
012c0000 014c1000 msi msi.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
01e00000 01e0c000 AcroIEHelper AcroIEHelper.dll Mon Nov 03 17:17:31 2003 (3FA6D3FB)
10000000 1000b000 qvphook qvphook.dll Tue Apr 09 21:01:36 2002 (3CB38EF0)
4f510000 4fd21000 shell32 shell32.dll Fri Aug 20 18:01:15 2004 (412674AB)
559e0000 55a51000 themeui themeui.dll Thu Aug 29 06:39:12 2002 (3D6DF9D0)
5ad70000 5ada4000 uxtheme uxtheme.dll Thu Aug 29 06:39:22 2002 (3D6DF9DA)
5fc10000 5fc40000 msutb msutb.dll Thu Aug 29 06:39:40 2002 (3D6DF9EC)
629c0000 629c8000 LPK LPK.DLL Sat Aug 18 01:35:10 2001 (3B7DFE8E)
63000000 63096000 wininet wininet.dll Mon Aug 23 23:31:58 2004 (412AB6AE)
70a70000 70ad9000 shlwapi shlwapi.dll Fri Aug 20 18:01:15 2004 (412674AB)
71500000 715fd000 browseui browseui.dll Sun Aug 22 22:34:03 2004 (4129579B)
71700000 71848000 shdocvw shdocvw.dll Fri Nov 12 02:20:52 2004 (41946454)
71950000 71a34000 comctl32 comctl32.dll Fri Aug 20 18:01:13 2004 (412674A9)
71aa0000 71aa8000 WS2HELP WS2HELP.DLL Sat Aug 18 01:33:38 2001 (3B7DFE32)
71ab0000 71ac5000 WS2_32 WS2_32.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71b20000 71b31000 MPR MPR.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71bf0000 71c01000 samlib samlib.dll Thu Aug 29 06:40:06 2002 (3D6DFA06)
71c10000 71c1d000 ntlanman ntlanman.dll Thu Aug 29 06:40:06 2002 (3D6DFA06)
71c20000 71c6e000 netapi32 netapi32.dll Tue Jun 08 18:02:21 2004 (40C6376D)
71c80000 71c86000 NETRAP NETRAP.DLL Sat Aug 18 01:33:38 2001 (3B7DFE32)
71c90000 71ccc000 NETUI1 NETUI1.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71cd0000 71ce6000 NETUI0 NETUI0.DLL Sat Aug 18 01:33:37 2001 (3B7DFE31)
71d40000 71d5b000 actxprxy actxprxy.dll Sat Aug 18 01:33:36 2001 (3B7DFE30)
72430000 72442000 browselc browselc.dll Thu Aug 29 06:40:08 2002 (3D6DFA08)
72d10000 72d18000 MSACM32 MSACM32.DRV Sat Aug 18 01:33:30 2001 (3B7DFE2A)
72d20000 72d29000 WDMAUD WDMAUD.DRV Sat Aug 18 01:33:30 2001 (3B7DFE2A)
72fa0000 72ffa000 usp10 usp10.dll Thu Aug 29 06:40:11 2002 (3D6DFA0B)
73000000 73023000 winspool winspool.drv Thu Aug 29 06:40:11 2002 (3D6DFA0B)
746f0000 74716000 msimtf msimtf.dll Thu Aug 29 06:40:16 2002 (3D6DFA10)
74720000 74764000 msctf msctf.dll Thu Aug 29 06:40:16 2002 (3D6DFA10)
74ad0000 74ad7000 POWRPROF POWRPROF.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74ae0000 74ae7000 CFGMGR32 CFGMGR32.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74af0000 74af9000 BATMETER BATMETER.DLL Sat Aug 18 01:33:19 2001 (3B7DFE1F)
74b00000 74b20000 stobject stobject.dll Thu Aug 29 06:40:17 2002 (3D6DFA11)
74b30000 74b71000 webcheck webcheck.dll Thu Aug 29 06:40:18 2002 (3D6DFA12)
74b80000 74c02000 printui printui.dll Thu Aug 29 06:40:18 2002 (3D6DFA12)
75a70000 75b15000 userenv userenv.dll Thu Aug 29 06:40:26 2002 (3D6DFA1A)
75cf0000 75e81000 netshell netshell.dll Thu Aug 29 06:40:26 2002 (3D6DFA1A)
75e90000 75f3d000 sxs sxs.dll Fri Aug 20 18:01:16 2004 (412674AC)
75f40000 75f5f000 apphelp apphelp.dll Thu Aug 29 06:40:27 2002 (3D6DFA1B)
75f60000 75f66000 DRPROV DRPROV.DLL Sat Aug 18 01:33:11 2001 (3B7DFE17)
75f70000 75f79000 DAVCLNT DAVCLNT.DLL Sat Aug 18 01:33:11 2001 (3B7DFE17)
762a0000 762b0000 msasn1 msasn1.dll Mon Mar 29 20:48:36 2004 (4068D1F4)
762c0000 76348000 crypt32 crypt32.dll Mon Sep 23 18:10:25 2002 (3D8F9151)
76360000 7636f000 winsta winsta.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76380000 76385000 msimg32 msimg32.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76390000 763ac000 imm32 imm32.dll Thu Aug 29 06:40:29 2002 (3D6DFA1D)
76600000 7661c000 cscdll cscdll.dll Wed Oct 27 21:29:54 2004 (41804B92)
76620000 7666e000 cscui cscui.dll Thu Aug 29 06:40:30 2002 (3D6DFA1E)
76670000 76757000 setupapi setupapi.dll Thu Aug 29 06:40:30 2002 (3D6DFA1E)
76980000 76987000 linkinfo linkinfo.dll Fri Aug 20 18:01:15 2004 (412674AB)
76990000 769b4000 ntshrui ntshrui.dll Thu Aug 29 06:40:31 2002 (3D6DFA1F)
76b20000 76b35000 atl atl.dll Thu Aug 29 06:40:32 2002 (3D6DFA20)
76b40000 76b6c000 winmm winmm.dll Thu Aug 29 06:40:32 2002 (3D6DFA20)
76c00000 76c2d000 credui credui.dll Thu Aug 29 06:40:33 2002 (3D6DFA21)
76d60000 76d77000 iphlpapi iphlpapi.dll Thu Aug 29 06:40:33 2002 (3D6DFA21)
76e10000 76e35000 adsldpc adsldpc.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76e40000 76e6f000 ACTIVEDS ACTIVEDS.DLL Sat Aug 18 01:33:05 2001 (3B7DFE11)
76f50000 76f58000 wtsapi32 wtsapi32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76f60000 76f8c000 wldap32 wldap32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
76f90000 76fa0000 secur32 secur32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
77050000 77115000 COMRES COMRES.DLL Sat Aug 18 01:33:04 2001 (3B7DFE10)
77120000 771ab000 oleaut32 oleaut32.dll Thu Aug 29 06:40:34 2002 (3D6DFA22)
771b0000 772d4000 ole32 ole32.dll Fri Mar 05 21:16:11 2004 (4049346B)
77340000 773cb000 comctl32_77340000 comctl32.dll Thu Aug 29 06:40:42 2002 (3D6DFA2A)
77bd0000 77bd7000 MIDIMAP MIDIMAP.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77be0000 77bf4000 MSACM32_77be0000 MSACM32.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77c00000 77c07000 VERSION VERSION.DLL Sat Aug 18 01:33:03 2001 (3B7DFE0F)
77c10000 77c63000 msvcrt msvcrt.dll Thu Aug 29 06:40:39 2002 (3D6DFA27)
77d40000 77dd0000 user32 user32.dll Tue Dec 28 20:31:44 2004 (41D20900)
77dd0000 77e5d000 advapi32 advapi32.dll Thu Aug 29 06:40:40 2002 (3D6DFA28)
77e60000 77f46000 kernel32 kernel32.dll Thu Jun 17 13:58:35 2004 (40D1DBCB)
77f50000 77ff7000 ntdll ntdll.dll Thu Aug 29 06:40:40 2002 (3D6DFA28)
78000000 78087000 rpcrt4 rpcrt4.dll Fri Mar 05 21:16:11 2004 (4049346B)
7c890000 7c911000 clbcatq clbcatq.dll Fri Mar 05 21:16:11 2004 (4049346B)
7f000000 7f041000 gdi32 gdi32.dll Thu Jun 17 13:58:35 2004 (40D1DBCB)
Closing open log file c:\debuglog.txt