Ever since the brownout occured in the afternoon, now I get the explorer.exe and sihost.exe crashes at startup, plus it happens randomly.
First step I did was using the sfc /scannow and it didn't find anything wrong. Does anyone have the same problem or is it something that is ciritically wrong such as hardware. Thanks! :)
Between both of those .exe files Explorer.exe and sihost.exe which is a shell infrastructure host, it sounds like possibly a shell extension is causing these crashes. Found in windows context menu. Can you look under Event Viewer, Custom Views then Administrator Events and see if you find these errors should be marked in red try posting them here.
Try CCleaner free and use it's context menu tool to disable third party shell extensions can be causing this to happen.
Also use Process explorer https://technet.microsoft.com/en-us/...sexplorer.aspx
Here are like 4 errors during the crash in event viewer:
12/7/2015 6:14:22 PM
12/7/2015 6:14:22 PMCode:
- System
- Provider
[ Name] Application Error
- EventID 1000
[ Qualifiers] 0
Level 2
Task 100
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2015-12-07T23:14:22.440630800Z
EventRecordID 3130
Channel Application
Computer Default
Security
- EventData
sihost.exe
10.0.10586.0
5632d7f9
ntdll.dll
10.0.10586.0
5632d193
c0000409
0000000000095067
cac
01d1314501cc8142
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
38e71224-9ff0-4c1d-884b-a6bf482ad58c
12/7/2015 6:14:24 PMCode:
- System
- Provider
[ Name] Application Error
- EventID 1000
[ Qualifiers] 0
Level 2
Task 100
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2015-12-07T23:14:22.971904100Z
EventRecordID 3132
Channel Application
Computer Default
Security
- EventData
Explorer.EXE
10.0.10586.0
5632d4c0
twinui.appcore.dll
10.0.10586.11
56457778
80270233
0000000000166be4
e58
01d1314501d931ed
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\twinui.appcore.dll
0a45341c-6680-4215-83df-1785afc73776
Here are some errors that happen during the brownout:Code:
- System
- Provider
[ Name] Microsoft-Windows-Immersive-Shell
[ Guid] {315A8872-923E-4EA2-9889-33CD4754BF64}
EventID 5973
Version 0
Level 2
Task 5973
Opcode 0
Keywords 0x2000000000000000
- TimeCreated
[ SystemTime] 2015-12-07T23:14:24.996772600Z
EventRecordID 3134
Correlation
- Execution
[ ProcessID] 3512
[ ThreadID] 4132
Channel Application
Computer Default
- Security
[ UserID] S-1-5-21-30284798-2221367557-348643218-1001
- EventData
AppId Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp
ErrorCode -2144927148
12/5/2015 3:09:30PM The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
12/5/2015 3:09:32 The previous system shutdown at 2:51:15 PM on 12/5/2015 was unexpected.Code:
- System
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID 41
Version 3
Level 1
Task 63
Opcode 0
Keywords 0x8000400000000002
- TimeCreated
[ SystemTime] 2015-12-05T20:09:30.258330700Z
EventRecordID 3830
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer Default
- Security
[ UserID] S-1-5-18
- EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress 0
PowerButtonTimestamp 0
BootAppStatus 0
12/5/2015 3:09:32PM Audit events have been dropped by the transport. 0Code:
- System
- Provider
[ Name] EventLog
- EventID 6008
[ Qualifiers] 32768
Level 2
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2015-12-05T20:09:32.713430200Z
EventRecordID 3819
Channel System
Computer Default
Security
- EventData
2:51:15 PM
12/5/2015
74404
DF070C00060005000E0033000F001E03DF070C0006000500130033000F001E03600900003C000000010000006009000001000000B00400000100000000000000
Binary data: In Words 0000: 000C07DF 00050006 0033000E 031E000F 0010: 000C07DF 00050006 00330013 031E000F 0020: 00000960 0000003C 00000001 00000960 0030: 00000001 000004B0 00000001 00000000 In Bytes 0000: DF 07 0C 00 06 00 05 00 ß....... 0008: 0E 00 33 00 0F 00 1E 03 ..3..... 0010: DF 07 0C 00 06 00 05 00 ß....... 0018: 13 00 33 00 0F 00 1E 03 ..3..... 0020: 60 09 00 00 3C 00 00 00 `...<... 0028: 01 00 00 00 60 09 00 00 ....`... 0030: 01 00 00 00 B0 04 00 00 ....°... 0038: 01 00 00 00 00 00 00 00 ........
Code:
- System
- Provider
[ Name] Microsoft-Windows-Eventlog
[ Guid] {fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}
EventID 1101
Version 0
Level 2
Task 101
Opcode 0
Keywords 0x4020000000000000
- TimeCreated
[ SystemTime] 2015-12-05T20:09:32.775932500Z
EventRecordID 6057
Correlation
- Execution
[ ProcessID] 1184
[ ThreadID] 1552
Channel Security
Computer Default
Security
- UserData
- AuditEventsDropped
Reason 0 Code:
- System
- Provider
[ Name] Application Error
- EventID 1000
[ Qualifiers] 0
Level 2
Task 100
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2015-12-05T20:09:34.057235900Z
EventRecordID 2719
Channel Application
Computer Default
Security
- EventData
sihost.exe
10.0.10586.0
5632d7f9
ntdll.dll
10.0.10586.0
5632d193
c0000409
0000000000095067
d3c
01d12f98dbc365ef
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\SYSTEM32\ntdll.dll
80b9c73d-38e4-4e1d-b4f5-5c943f00dd96
- System
- Provider
[ Name] Microsoft-Windows-Immersive-Shell
[ Guid] {315A8872-923E-4EA2-9889-33CD4754BF64}
EventID 5973
Version 0
Level 2
Task 5973
Opcode 0
Keywords 0x2000000000000000
- TimeCreated
[ SystemTime] 2015-12-05T20:10:34.715498500Z
EventRecordID 2727
Correlation
- Execution
[ ProcessID] 4008
[ ThreadID] 4028
Channel Application
Computer Default
- Security
[ UserID] S-1-5-21-30284798-2221367557-348643218-1001
- EventData
AppId Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp
ErrorCode -2144927148
Btw, when the crash happens, the file explorer opens immediately at startup. O.O
When copy errors from the Event Viewer to get all the information can either right click the error in middle and select Copy to text then paste it to notepad or highlight it and under Actions on the right select Copy and you get the same result, as this give more info, but i have some of general idea of file.Ntdll.dll can be part of display driver found in C:\Windows\system32 folder and othe is part of OS Twinui,appcore.dll.
Never easy to determine this cause, now i would try going into safe mode and if it does not happen there then it is a third party application or file doing this. Can also be file corruption and a misconfigured system .Most of the time as said some third party app or shell extensions is causing it.
Try safe mode first then we will go from there. https://www.tenforums.com/tutorials/2...dows-10-a.html
Okay! I copy/pasted the information at the middle so let's try this again:
Code:Faulting application name: Explorer.EXE, version: 10.0.10586.0, time stamp: 0x5632d4c0Faulting module name: twinui.appcore.dll, version: 10.0.10586.11, time stamp: 0x56457778 Exception code: 0x80270233 Fault offset: 0x0000000000166be4 Faulting process id: 0xe58 Faulting application start time: 0x01d1314501d931ed Faulting application path: C:\WINDOWS\Explorer.EXE Faulting module path: C:\WINDOWS\System32\twinui.appcore.dll Report Id: 0a45341c-6680-4215-83df-1785afc73776 Faulting package full name: Faulting package-relative application ID:Here's the same error during the brownout:Code:Faulting application name: sihost.exe, version: 10.0.10586.0, time stamp: 0x5632d7f9Faulting module name: ntdll.dll, version: 10.0.10586.0, time stamp: 0x5632d193 Exception code: 0xc0000409 Fault offset: 0x0000000000095067 Faulting process id: 0xcac Faulting application start time: 0x01d1314501cc8142 Faulting application path: C:\WINDOWS\system32\sihost.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: 38e71224-9ff0-4c1d-884b-a6bf482ad58c Faulting package full name: Faulting package-relative application ID:
I'll try logging in to safemode. Last time it crashed when I booted it on cold boot, but this time the crash didn't happen today. O.oCode:Faulting application name: sihost.exe, version: 10.0.10586.0, time stamp: 0x5632d7f9Faulting module name: ntdll.dll, version: 10.0.10586.0, time stamp: 0x5632d193 Exception code: 0xc0000409 Fault offset: 0x0000000000095067 Faulting process id: 0xd3c Faulting application start time: 0x01d12f98dbc365ef Faulting application path: C:\WINDOWS\system32\sihost.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: 80b9c73d-38e4-4e1d-b4f5-5c943f00dd96 Faulting package full name: Faulting package-relative application ID:
I'd logged to safe mode, but no sihost.exe or explorer.exe crash. Is there anything else I can do?
You did Disable 2 shell extensions. When explorer crashes screen does go to a solid color then explorer comes back, correct ?
Definitely try safe mode let me know first what happens, since intermittent may have to wait on it. Unexpected shutdowns like brownouts can over many times done cause damage to sectors of a hard drive and possibly corrupt files, but not once for hard drive.
I did disable all the extensions on ccleaner. Last time explorer crash, I don't think it turns into a solid color, like it starts up normally with the exception of the files explorer opens immediately without clicking on it.
edit: Okay, I booted to safe mode and it seems to startup normally. No crashes or anything.
O.k. bit confused, talking about file explorer opening during the crash, this is where your folders and drives are ? Usually when explorer.exe crashes screen goes blank and only thing that shows is your personalized color on the screen and a blank taskbar.
Quote