Problem with Windows Explorer crashing repeatedly

I have been dogged by several variations on the following problem in the past
two days, an annoyance that seems somewhat intermittent. As a preamble, let
me mention that whatever is going on does not occur in Safe Mode, and also
that I have checked the system with with both NOD32 and with F-Secure's
online scanner, neither of which show any virus problems.

The problems began when I booted my machine, and found it cycling as
Windows boot moved into the main Windows screen. The screen icons would show,
and several icons would show in the tray (NB I run very little during boot,
and nothing new has been added). Then the icons would disappear and the
screen would suddenly blink back to the wallpaper. Next, the screen icons
would show again, the tra would refill, but then I'd drop back to wallpaper
again... This "cycling" behavior happened a couple of times initially, but on
rebooting, the system appeared stable, so I wasn't that concerned.

This morning, I got a message stating that Windows Explorer was closing
because of a Data Execution Prevention Error (one reason I ran the extensive
AV). On several boots I received the message that W E had crashed (always
during the final state of boot, just as the tray filled).

I decided to roll the system back with System Restore. Initially, this
seemed to work, but shortly the boot errors started to appear with greater
frequency, until I could no longer use the system at all except in Safe Mode.
I deleted a number of tray items (all but NOD 32, volume, and some
specialized scanner software that would be a pain to reinstall). I also
turned off Data Execution Protection for W E. Still, I was unable to achieve
a clean boot, with the screen clearing each time I acknowledged the W E crash
warning. In effect, the same cycling behavior I had initially seen. Sometimes
I would get a message that the Dr. Watson debugger had also crashed (though I
hadn't started it, I'm guessing that the WE crash triggered it). Very
frustrating.

I've just rolled back to a still earlier date. Right now, for the moment the
system is booting normally, and I though that I'd post this. Maybe the
problem won't re-occur, but I'm not sanguine, Has anyone experienced this
problem? Does anyone have a solution? I'm wondering if W E has become
corrupted, in which case I can replace it from my last full system backup, or
from the CD.

Does anyone have a clue what might be going on here?

You probably have a conflict between a recent Windows Update, and some
hardware device driver. Unless your hardware Mfg. comes up with a better
driver, the alternative is to remove and refuse the update. The "Custom'
option in non-automatic update includes a checkbox to 'don't ask again'
(add/remove app has a checkbox to 'show updates')
--
Was this helpful? Then click the "Yes" button below. Voting helps the web
interface. http://www.microsoft.com/wn3/locales....htm#RateAPost

Mark L. Ferguson


"Edward Ripley-Duggan" wrote:

> I have been dogged by several variations on the following problem in the past
> two days, an annoyance that seems somewhat intermittent. As a preamble, let
> me mention that whatever is going on does not occur in Safe Mode, and also
> that I have checked the system with with both NOD32 and with F-Secure's
> online scanner, neither of which show any virus problems.
>
> The problems began when I booted my machine, and found it cycling as
> Windows boot moved into the main Windows screen. The screen icons would show,
> and several icons would show in the tray (NB I run very little during boot,
> and nothing new has been added). Then the icons would disappear and the
> screen would suddenly blink back to the wallpaper. Next, the screen icons
> would show again, the tra would refill, but then I'd drop back to wallpaper
> again... This "cycling" behavior happened a couple of times initially, but on
> rebooting, the system appeared stable, so I wasn't that concerned.
>
> This morning, I got a message stating that Windows Explorer was closing
> because of a Data Execution Prevention Error (one reason I ran the extensive
> AV). On several boots I received the message that W E had crashed (always
> during the final state of boot, just as the tray filled).
>
> I decided to roll the system back with System Restore. Initially, this
> seemed to work, but shortly the boot errors started to appear with greater
> frequency, until I could no longer use the system at all except in Safe Mode.
> I deleted a number of tray items (all but NOD 32, volume, and some
> specialized scanner software that would be a pain to reinstall). I also
> turned off Data Execution Protection for W E. Still, I was unable to achieve
> a clean boot, with the screen clearing each time I acknowledged the W E crash
> warning. In effect, the same cycling behavior I had initially seen. Sometimes
> I would get a message that the Dr. Watson debugger had also crashed (though I
> hadn't started it, I'm guessing that the WE crash triggered it). Very
> frustrating.
>
> I've just rolled back to a still earlier date. Right now, for the moment the
> system is booting normally, and I though that I'd post this. Maybe the
> problem won't re-occur, but I'm not sanguine, Has anyone experienced this
> problem? Does anyone have a solution? I'm wondering if W E has become
> corrupted, in which case I can replace it from my last full system backup, or
> from the CD.
>
> Does anyone have a clue what might be going on here?

Thank you, Mark. Seems possible, even likely, although the first rollback I
did predated the latest round of Windows Updates and didn't solve the issue,
for some reason. However, with the second and slightly earlier rollback my
system seems stable again. Whether the proximate cause is the Updates or
something else, I tend to agree with you that it's ultimately some form of
hardware conflict. At this point, pinning it down is more effort than it is
worth. I may reinstall the Updates one by one, or simply take the (fairly
low) risk of avoiding the December batch.



"Mark L. Ferguson" wrote:

> You probably have a conflict between a recent Windows Update, and some
> hardware device driver. Unless your hardware Mfg. comes up with a better
> driver, the alternative is to remove and refuse the update. The "Custom'
> option in non-automatic update includes a checkbox to 'don't ask again'
> (add/remove app has a checkbox to 'show updates')
> --
> Was this helpful? Then click the "Yes" button below. Voting helps the web
> interface. http://www.microsoft.com/wn3/locales....htm#RateAPost
>
> Mark L. Ferguson
>
>
> "Edward Ripley-Duggan" wrote:
>
> > I have been dogged by several variations on the following problem in the past
> > two days, an annoyance that seems somewhat intermittent. As a preamble, let
> > me mention that whatever is going on does not occur in Safe Mode, and also
> > that I have checked the system with with both NOD32 and with F-Secure's
> > online scanner, neither of which show any virus problems.
> >
> > The problems began when I booted my machine, and found it cycling as
> > Windows boot moved into the main Windows screen. The screen icons would show,
> > and several icons would show in the tray (NB I run very little during boot,
> > and nothing new has been added). Then the icons would disappear and the
> > screen would suddenly blink back to the wallpaper. Next, the screen icons
> > would show again, the tra would refill, but then I'd drop back to wallpaper
> > again... This "cycling" behavior happened a couple of times initially, but on
> > rebooting, the system appeared stable, so I wasn't that concerned.
> >
> > This morning, I got a message stating that Windows Explorer was closing
> > because of a Data Execution Prevention Error (one reason I ran the extensive
> > AV). On several boots I received the message that W E had crashed (always
> > during the final state of boot, just as the tray filled).
> >
> > I decided to roll the system back with System Restore. Initially, this
> > seemed to work, but shortly the boot errors started to appear with greater
> > frequency, until I could no longer use the system at all except in Safe Mode.
> > I deleted a number of tray items (all but NOD 32, volume, and some
> > specialized scanner software that would be a pain to reinstall). I also
> > turned off Data Execution Protection for W E. Still, I was unable to achieve
> > a clean boot, with the screen clearing each time I acknowledged the W E crash
> > warning. In effect, the same cycling behavior I had initially seen. Sometimes
> > I would get a message that the Dr. Watson debugger had also crashed (though I
> > hadn't started it, I'm guessing that the WE crash triggered it). Very
> > frustrating.
> >
> > I've just rolled back to a still earlier date. Right now, for the moment the
> > system is booting normally, and I though that I'd post this. Maybe the
> > problem won't re-occur, but I'm not sanguine, Has anyone experienced this
> > problem? Does anyone have a solution? I'm wondering if W E has become
> > corrupted, in which case I can replace it from my last full system backup, or
> > from the CD.
> >
> > Does anyone have a clue what might be going on here?

Edward

Does the same thing happen if you boot to safe mode?

Please post one complete copy only of each of the Warning and Error
Reports from the System log of Event Viewer from the last boot
confirming which appear in previous boots. No Information Reports or
Duplicates please.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Edward Ripley-Duggan wrote:
> Thank you, Mark. Seems possible, even likely, although the first
> rollback I did predated the latest round of Windows Updates and
> didn't solve the issue, for some reason. However, with the second and
> slightly earlier rollback my system seems stable again. Whether the
> proximate cause is the Updates or something else, I tend to agree
> with you that it's ultimately some form of hardware conflict. At this
> point, pinning it down is more effort than it is worth. I may
> reinstall the Updates one by one, or simply take the (fairly low)
> risk of avoiding the December batch.
>
>
>
> "Mark L. Ferguson" wrote:
>
>> You probably have a conflict between a recent Windows Update, and
>> some hardware device driver. Unless your hardware Mfg. comes up with
>> a better driver, the alternative is to remove and refuse the update.
>> The "Custom' option in non-automatic update includes a checkbox to
>> 'don't ask again' (add/remove app has a checkbox to 'show updates')
>> --
>> Was this helpful? Then click the "Yes" button below. Voting helps
>> the web interface.
>> http://www.microsoft.com/wn3/locales....htm#RateAPost
>>
>> Mark L. Ferguson
>>
>>
>> "Edward Ripley-Duggan" wrote:
>>
>>> I have been dogged by several variations on the following problem
>>> in the past two days, an annoyance that seems somewhat
>>> intermittent. As a preamble, let me mention that whatever is going
>>> on does not occur in Safe Mode, and also that I have checked the
>>> system with with both NOD32 and with F-Secure's online scanner,
>>> neither of which show any virus problems.
>>>
>>> The problems began when I booted my machine, and found it cycling
>>> as Windows boot moved into the main Windows screen. The screen
>>> icons would show, and several icons would show in the tray (NB I
>>> run very little during boot, and nothing new has been added). Then
>>> the icons would disappear and the screen would suddenly blink back
>>> to the wallpaper. Next, the screen icons would show again, the tra
>>> would refill, but then I'd drop back to wallpaper again... This
>>> "cycling" behavior happened a couple of times initially, but on
>>> rebooting, the system appeared stable, so I wasn't that concerned.
>>>
>>> This morning, I got a message stating that Windows Explorer was
>>> closing because of a Data Execution Prevention Error (one reason I
>>> ran the extensive AV). On several boots I received the message that
>>> W E had crashed (always during the final state of boot, just as the
>>> tray filled).
>>>
>>> I decided to roll the system back with System Restore. Initially,
>>> this seemed to work, but shortly the boot errors started to appear
>>> with greater frequency, until I could no longer use the system at
>>> all except in Safe Mode. I deleted a number of tray items (all but
>>> NOD 32, volume, and some specialized scanner software that would be
>>> a pain to reinstall). I also turned off Data Execution Protection
>>> for W E. Still, I was unable to achieve a clean boot, with the
>>> screen clearing each time I acknowledged the W E crash warning. In
>>> effect, the same cycling behavior I had initially seen. Sometimes I
>>> would get a message that the Dr. Watson debugger had also crashed
>>> (though I hadn't started it, I'm guessing that the WE crash
>>> triggered it). Very frustrating.
>>>
>>> I've just rolled back to a still earlier date. Right now, for the
>>> moment the system is booting normally, and I though that I'd post
>>> this. Maybe the problem won't re-occur, but I'm not sanguine, Has
>>> anyone experienced this problem? Does anyone have a solution? I'm
>>> wondering if W E has become corrupted, in which case I can replace
>>> it from my last full system backup, or from the CD.
>>>
>>> Does anyone have a clue what might be going on here?

Thank you, Gerry.

I had a trouble-free week, until this AM. I fixed the problem again by
rolling back the system, but clearly something is fundamentally wrong. I have
appended a cycle of event reports, per your suggestion. I'm wondering if this
is somehow related to the Ipod software on the machine--not mine but my
daughter's. Anyway, here goes.


1.
Event Type: Information
Event Source: SecurityCenter
Event Category: None
Event ID: 1800
Date: 1/5/2008
Time: 9:50:19 AM
User: N/A
Computer: DH8J2091
Description:
The Windows Security Center Service has started.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

2.
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/5/2008
Time: 9:50:26 AM
User: N/A
Computer: DH8J2091
Description:
Faulting application explorer.exe, version 6.0.2900.3156, faulting module
PortableDeviceTypes.dll, version 5.2.5721.5145, fault address 0x0001bfff.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 33 31 35 36 20 00.3156
0030: 69 6e 20 50 6f 72 74 61 in Porta
0038: 62 6c 65 44 65 76 69 63 bleDevic
0040: 65 54 79 70 65 73 2e 64 eTypes.d
0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
0050: 37 32 31 2e 35 31 34 35 721.5145
0058: 20 61 74 20 6f 66 66 73 at offs
0060: 65 74 20 30 30 30 31 62 et 0001b
0068: 66 66 66 fff

3.
Event Type: Information
Event Source: iPod Service
Event Category: None
Event ID: 0
Date: 1/5/2008
Time: 9:50:45 AM
User: N/A
Computer: DH8J2091
Description:
The description for Event ID ( 0 ) in Source ( iPod Service ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able
to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Service
started.

4.
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/5/2008
Time: 9:51:08 AM
User: N/A
Computer: DH8J2091
Description:
Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 64 72 77 ure drw
0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 64 62 67 68 65 6c 70 2e dbghelp.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 32 39 35 64 295d

These four event seem to be the basic error cycle.

Best,

Ted.





"Gerry" wrote:

> Edward
>
> Does the same thing happen if you boot to safe mode?
>
> Please post one complete copy only of each of the Warning and Error
> Reports from the System log of Event Viewer from the last boot
> confirming which appear in previous boots. No Information Reports or
> Duplicates please.
>
> You can access Event Viewer by selecting Start, Control Panel,
> Administrative Tools, and Event Viewer.
>
> A tip for posting copies of Error Reports! Run Event Viewer and double
> click on the error you want to copy. In the window, which appears is a
> button resembling two pages. Click the button and close Event
> Viewer.Now start your message (email) and do a paste into the body of
> the message. Make sure this is the first paste after exiting from
> Event Viewer.
>
> --
>
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>

Sorry Edward I do not think I can help.

--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Edward Ripley-Duggan wrote:
> Thank you, Gerry.
>
> I had a trouble-free week, until this AM. I fixed the problem again by
> rolling back the system, but clearly something is fundamentally
> wrong. I have appended a cycle of event reports, per your suggestion.
> I'm wondering if this is somehow related to the Ipod software on the
> machine--not mine but my daughter's. Anyway, here goes.
>
>
> 1.
> Event Type: Information
> Event Source: SecurityCenter
> Event Category: None
> Event ID: 1800
> Date: 1/5/2008
> Time: 9:50:19 AM
> User: N/A
> Computer: DH8J2091
> Description:
> The Windows Security Center Service has started.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> 2.
> Event Type: Error
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1000
> Date: 1/5/2008
> Time: 9:50:26 AM
> User: N/A
> Computer: DH8J2091
> Description:
> Faulting application explorer.exe, version 6.0.2900.3156, faulting
> module PortableDeviceTypes.dll, version 5.2.5721.5145, fault address
> 0x0001bfff.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 65 78 70 ure exp
> 0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
> 0028: 30 30 2e 33 31 35 36 20 00.3156
> 0030: 69 6e 20 50 6f 72 74 61 in Porta
> 0038: 62 6c 65 44 65 76 69 63 bleDevic
> 0040: 65 54 79 70 65 73 2e 64 eTypes.d
> 0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
> 0050: 37 32 31 2e 35 31 34 35 721.5145
> 0058: 20 61 74 20 6f 66 66 73 at offs
> 0060: 65 74 20 30 30 30 31 62 et 0001b
> 0068: 66 66 66 fff
>
> 3.
> Event Type: Information
> Event Source: iPod Service
> Event Category: None
> Event ID: 0
> Date: 1/5/2008
> Time: 9:50:45 AM
> User: N/A
> Computer: DH8J2091
> Description:
> The description for Event ID ( 0 ) in Source ( iPod Service ) cannot
> be found. The local computer may not have the necessary registry
> information or message DLL files to display messages from a remote
> computer. You may be able to use the /AUXSOURCE= flag to retrieve
> this description; see Help and Support for details. The following
> information is part of the event: Service started.
>
> 4.
> Event Type: Error
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1000
> Date: 1/5/2008
> Time: 9:51:08 AM
> User: N/A
> Computer: DH8J2091
> Description:
> Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
> dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 64 72 77 ure drw
> 0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
> 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
> 0028: 30 30 2e 30 20 69 6e 20 00.0 in
> 0030: 64 62 67 68 65 6c 70 2e dbghelp.
> 0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
> 0040: 32 36 30 30 2e 32 31 38 2600.218
> 0048: 30 20 61 74 20 6f 66 66 0 at off
> 0050: 73 65 74 20 30 30 30 31 set 0001
> 0058: 32 39 35 64 295d
>
> These four event seem to be the basic error cycle.
>
> Best,
>
> Ted.
>
>
>
>
>
> "Gerry" wrote:
>
>> Edward
>>
>> Does the same thing happen if you boot to safe mode?
>>
>> Please post one complete copy only of each of the Warning and Error
>> Reports from the System log of Event Viewer from the last boot
>> confirming which appear in previous boots. No Information Reports or
>> Duplicates please.
>>
>> You can access Event Viewer by selecting Start, Control Panel,
>> Administrative Tools, and Event Viewer.
>>
>> A tip for posting copies of Error Reports! Run Event Viewer and
>> double click on the error you want to copy. In the window, which
>> appears is a button resembling two pages. Click the button and close
>> Event Viewer.Now start your message (email) and do a paste into the
>> body of the message. Make sure this is the first paste after exiting
>> from Event Viewer.
>>
>> --
>>
>>
>>
>> Hope this helps.
>>
>> Gerry
>> ~~~~
>> FCA
>> Stourport, England
>> Enquire, plan and execute
>> ~~~~~~~~~~~~~~~~~~~

Me either. I would say the only chance is to go to the IPod people, hoping
to find updated software created due to pressure from multiple user
complaints about this problem.

--
Mark L. Ferguson
e-mail subject line must include "QZ" or it's deleted
..
"Gerry" <gerry@nospam.com> wrote in message
news:%237$OZfHUIHA.4740@TK2MSFTNGP02.phx.gbl...
> Sorry Edward I do not think I can help.
>
> --
> Regards.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
> Edward Ripley-Duggan wrote:
>> Thank you, Gerry.
>>
>> I had a trouble-free week, until this AM. I fixed the problem again by
>> rolling back the system, but clearly something is fundamentally
>> wrong. I have appended a cycle of event reports, per your suggestion.
>> I'm wondering if this is somehow related to the Ipod software on the
>> machine--not mine but my daughter's. Anyway, here goes.
>>
>>
>> 1.
>> Event Type: Information
>> Event Source: SecurityCenter
>> Event Category: None
>> Event ID: 1800
>> Date: 1/5/2008
>> Time: 9:50:19 AM
>> User: N/A
>> Computer: DH8J2091
>> Description:
>> The Windows Security Center Service has started.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>>
>> 2.
>> Event Type: Error
>> Event Source: Application Error
>> Event Category: (100)
>> Event ID: 1000
>> Date: 1/5/2008
>> Time: 9:50:26 AM
>> User: N/A
>> Computer: DH8J2091
>> Description:
>> Faulting application explorer.exe, version 6.0.2900.3156, faulting
>> module PortableDeviceTypes.dll, version 5.2.5721.5145, fault address
>> 0x0001bfff.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>> 0010: 75 72 65 20 20 65 78 70 ure exp
>> 0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
>> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
>> 0028: 30 30 2e 33 31 35 36 20 00.3156
>> 0030: 69 6e 20 50 6f 72 74 61 in Porta
>> 0038: 62 6c 65 44 65 76 69 63 bleDevic
>> 0040: 65 54 79 70 65 73 2e 64 eTypes.d
>> 0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
>> 0050: 37 32 31 2e 35 31 34 35 721.5145
>> 0058: 20 61 74 20 6f 66 66 73 at offs
>> 0060: 65 74 20 30 30 30 31 62 et 0001b
>> 0068: 66 66 66 fff
>>
>> 3.
>> Event Type: Information
>> Event Source: iPod Service
>> Event Category: None
>> Event ID: 0
>> Date: 1/5/2008
>> Time: 9:50:45 AM
>> User: N/A
>> Computer: DH8J2091
>> Description:
>> The description for Event ID ( 0 ) in Source ( iPod Service ) cannot
>> be found. The local computer may not have the necessary registry
>> information or message DLL files to display messages from a remote
>> computer. You may be able to use the /AUXSOURCE= flag to retrieve
>> this description; see Help and Support for details. The following
>> information is part of the event: Service started.
>>
>> 4.
>> Event Type: Error
>> Event Source: Application Error
>> Event Category: (100)
>> Event ID: 1000
>> Date: 1/5/2008
>> Time: 9:51:08 AM
>> User: N/A
>> Computer: DH8J2091
>> Description:
>> Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
>> dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>> 0010: 75 72 65 20 20 64 72 77 ure drw
>> 0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
>> 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
>> 0028: 30 30 2e 30 20 69 6e 20 00.0 in
>> 0030: 64 62 67 68 65 6c 70 2e dbghelp.
>> 0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
>> 0040: 32 36 30 30 2e 32 31 38 2600.218
>> 0048: 30 20 61 74 20 6f 66 66 0 at off
>> 0050: 73 65 74 20 30 30 30 31 set 0001
>> 0058: 32 39 35 64 295d
>>
>> These four event seem to be the basic error cycle.
>>
>> Best,
>>
>> Ted.
>>
>>
>>
>>
>>
>> "Gerry" wrote:
>>
>>> Edward
>>>
>>> Does the same thing happen if you boot to safe mode?
>>>
>>> Please post one complete copy only of each of the Warning and Error
>>> Reports from the System log of Event Viewer from the last boot
>>> confirming which appear in previous boots. No Information Reports or
>>> Duplicates please.
>>>
>>> You can access Event Viewer by selecting Start, Control Panel,
>>> Administrative Tools, and Event Viewer.
>>>
>>> A tip for posting copies of Error Reports! Run Event Viewer and
>>> double click on the error you want to copy. In the window, which
>>> appears is a button resembling two pages. Click the button and close
>>> Event Viewer.Now start your message (email) and do a paste into the
>>> body of the message. Make sure this is the first paste after exiting
>>> from Event Viewer.
>>>
>>> --
>>>
>>>
>>>
>>> Hope this helps.
>>>
>>> Gerry
>>> ~~~~
>>> FCA
>>> Stourport, England
>>> Enquire, plan and execute
>>> ~~~~~~~~~~~~~~~~~~~
>
>

Thanks, all. So in your opinions, based on the messages, it is the Ipod
software that's acting up?

I did do an upgrade of the Itunes software yesterday, and also replaced
PortableDeviceTypes.dll from a backup, just in case it had become corrupted.
If it is indeed Itunes, and the problem returns, I will probably uninstall it
from this machine and put it on another I own that's not presently connected.

"Mark L. Ferguson" wrote:

> Me either. I would say the only chance is to go to the IPod people, hoping
> to find updated software created due to pressure from multiple user
> complaints about this problem.
>
> --
> Mark L. Ferguson
> e-mail subject line must include "QZ" or it's deleted
> ..
> "Gerry" <gerry@nospam.com> wrote in message
> news:%237$OZfHUIHA.4740@TK2MSFTNGP02.phx.gbl...
> > Sorry Edward I do not think I can help.
> >
> > --
> > Regards.
> >
> > Gerry
> > ~~~~
> > FCA
> > Stourport, England
> > Enquire, plan and execute
> > ~~~~~~~~~~~~~~~~~~~
> >
> >
> > Edward Ripley-Duggan wrote:
> >> Thank you, Gerry.
> >>
> >> I had a trouble-free week, until this AM. I fixed the problem again by
> >> rolling back the system, but clearly something is fundamentally
> >> wrong. I have appended a cycle of event reports, per your suggestion.
> >> I'm wondering if this is somehow related to the Ipod software on the
> >> machine--not mine but my daughter's. Anyway, here goes.
> >>
> >>
> >> 1.
> >> Event Type: Information
> >> Event Source: SecurityCenter
> >> Event Category: None
> >> Event ID: 1800
> >> Date: 1/5/2008
> >> Time: 9:50:19 AM
> >> User: N/A
> >> Computer: DH8J2091
> >> Description:
> >> The Windows Security Center Service has started.
> >>
> >> For more information, see Help and Support Center at
> >> http://go.microsoft.com/fwlink/events.asp.
> >>
> >> 2.
> >> Event Type: Error
> >> Event Source: Application Error
> >> Event Category: (100)
> >> Event ID: 1000
> >> Date: 1/5/2008
> >> Time: 9:50:26 AM
> >> User: N/A
> >> Computer: DH8J2091
> >> Description:
> >> Faulting application explorer.exe, version 6.0.2900.3156, faulting
> >> module PortableDeviceTypes.dll, version 5.2.5721.5145, fault address
> >> 0x0001bfff.
> >>
> >> For more information, see Help and Support Center at
> >> http://go.microsoft.com/fwlink/events.asp.
> >> Data:
> >> 0000: 41 70 70 6c 69 63 61 74 Applicat
> >> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> >> 0010: 75 72 65 20 20 65 78 70 ure exp
> >> 0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
> >> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
> >> 0028: 30 30 2e 33 31 35 36 20 00.3156
> >> 0030: 69 6e 20 50 6f 72 74 61 in Porta
> >> 0038: 62 6c 65 44 65 76 69 63 bleDevic
> >> 0040: 65 54 79 70 65 73 2e 64 eTypes.d
> >> 0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
> >> 0050: 37 32 31 2e 35 31 34 35 721.5145
> >> 0058: 20 61 74 20 6f 66 66 73 at offs
> >> 0060: 65 74 20 30 30 30 31 62 et 0001b
> >> 0068: 66 66 66 fff
> >>
> >> 3.
> >> Event Type: Information
> >> Event Source: iPod Service
> >> Event Category: None
> >> Event ID: 0
> >> Date: 1/5/2008
> >> Time: 9:50:45 AM
> >> User: N/A
> >> Computer: DH8J2091
> >> Description:
> >> The description for Event ID ( 0 ) in Source ( iPod Service ) cannot
> >> be found. The local computer may not have the necessary registry
> >> information or message DLL files to display messages from a remote
> >> computer. You may be able to use the /AUXSOURCE= flag to retrieve
> >> this description; see Help and Support for details. The following
> >> information is part of the event: Service started.
> >>
> >> 4.
> >> Event Type: Error
> >> Event Source: Application Error
> >> Event Category: (100)
> >> Event ID: 1000
> >> Date: 1/5/2008
> >> Time: 9:51:08 AM
> >> User: N/A
> >> Computer: DH8J2091
> >> Description:
> >> Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
> >> dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
> >>
> >> For more information, see Help and Support Center at
> >> http://go.microsoft.com/fwlink/events.asp.
> >> Data:
> >> 0000: 41 70 70 6c 69 63 61 74 Applicat
> >> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> >> 0010: 75 72 65 20 20 64 72 77 ure drw
> >> 0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
> >> 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
> >> 0028: 30 30 2e 30 20 69 6e 20 00.0 in
> >> 0030: 64 62 67 68 65 6c 70 2e dbghelp.
> >> 0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
> >> 0040: 32 36 30 30 2e 32 31 38 2600.218
> >> 0048: 30 20 61 74 20 6f 66 66 0 at off
> >> 0050: 73 65 74 20 30 30 30 31 set 0001
> >> 0058: 32 39 35 64 295d
> >>
> >> These four event seem to be the basic error cycle.
> >>
> >> Best,
> >>
> >> Ted.
> >>
> >>
> >>
> >>
> >>
> >> "Gerry" wrote:
> >>
> >>> Edward
> >>>
> >>> Does the same thing happen if you boot to safe mode?
> >>>
> >>> Please post one complete copy only of each of the Warning and Error
> >>> Reports from the System log of Event Viewer from the last boot
> >>> confirming which appear in previous boots. No Information Reports or
> >>> Duplicates please.
> >>>
> >>> You can access Event Viewer by selecting Start, Control Panel,
> >>> Administrative Tools, and Event Viewer.
> >>>
> >>> A tip for posting copies of Error Reports! Run Event Viewer and
> >>> double click on the error you want to copy. In the window, which
> >>> appears is a button resembling two pages. Click the button and close
> >>> Event Viewer.Now start your message (email) and do a paste into the
> >>> body of the message. Make sure this is the first paste after exiting
> >>> from Event Viewer.
> >>>
> >>> --
> >>>
> >>>
> >>>
> >>> Hope this helps.
> >>>
> >>> Gerry
> >>> ~~~~
> >>> FCA
> >>> Stourport, England
> >>> Enquire, plan and execute
> >>> ~~~~~~~~~~~~~~~~~~~
> >
> >
>
>
>

Edward

I have the same combination of files on my computer and no problems.
Uninstalling and reinstalling is a recognised way to try to eliminate
errors. You might get a clue from the Dr Watson log, albeit it crashed.
It is likely that Windows does not have an Ipod image, which might cause
Dr Watson a problem.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Edward Ripley-Duggan wrote:
> Thanks, all. So in your opinions, based on the messages, it is the
> Ipod software that's acting up?
>
> I did do an upgrade of the Itunes software yesterday, and also
> replaced PortableDeviceTypes.dll from a backup, just in case it had
> become corrupted. If it is indeed Itunes, and the problem returns, I
> will probably uninstall it from this machine and put it on another I
> own that's not presently connected.
>
> "Mark L. Ferguson" wrote:
>
>> Me either. I would say the only chance is to go to the IPod people,
>> hoping to find updated software created due to pressure from
>> multiple user complaints about this problem.
>>
>> --
>> Mark L. Ferguson
>> e-mail subject line must include "QZ" or it's deleted
>> ..
>> "Gerry" <gerry@nospam.com> wrote in message
>> news:%237$OZfHUIHA.4740@TK2MSFTNGP02.phx.gbl...
>>> Sorry Edward I do not think I can help.
>>>
>>> --
>>> Regards.
>>>
>>> Gerry
>>> ~~~~
>>> FCA
>>> Stourport, England
>>> Enquire, plan and execute
>>> ~~~~~~~~~~~~~~~~~~~
>>>
>>>
>>> Edward Ripley-Duggan wrote:
>>>> Thank you, Gerry.
>>>>
>>>> I had a trouble-free week, until this AM. I fixed the problem
>>>> again by rolling back the system, but clearly something is
>>>> fundamentally wrong. I have appended a cycle of event reports, per
>>>> your suggestion. I'm wondering if this is somehow related to the
>>>> Ipod software on the machine--not mine but my daughter's. Anyway,
>>>> here goes.
>>>>
>>>>
>>>> 1.
>>>> Event Type: Information
>>>> Event Source: SecurityCenter
>>>> Event Category: None
>>>> Event ID: 1800
>>>> Date: 1/5/2008
>>>> Time: 9:50:19 AM
>>>> User: N/A
>>>> Computer: DH8J2091
>>>> Description:
>>>> The Windows Security Center Service has started.
>>>>
>>>> For more information, see Help and Support Center at
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>
>>>> 2.
>>>> Event Type: Error
>>>> Event Source: Application Error
>>>> Event Category: (100)
>>>> Event ID: 1000
>>>> Date: 1/5/2008
>>>> Time: 9:50:26 AM
>>>> User: N/A
>>>> Computer: DH8J2091
>>>> Description:
>>>> Faulting application explorer.exe, version 6.0.2900.3156, faulting
>>>> module PortableDeviceTypes.dll, version 5.2.5721.5145, fault
>>>> address 0x0001bfff.
>>>>
>>>> For more information, see Help and Support Center at
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>> Data:
>>>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>>>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>>>> 0010: 75 72 65 20 20 65 78 70 ure exp
>>>> 0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
>>>> 0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
>>>> 0028: 30 30 2e 33 31 35 36 20 00.3156
>>>> 0030: 69 6e 20 50 6f 72 74 61 in Porta
>>>> 0038: 62 6c 65 44 65 76 69 63 bleDevic
>>>> 0040: 65 54 79 70 65 73 2e 64 eTypes.d
>>>> 0048: 6c 6c 20 35 2e 32 2e 35 ll 5.2.5
>>>> 0050: 37 32 31 2e 35 31 34 35 721.5145
>>>> 0058: 20 61 74 20 6f 66 66 73 at offs
>>>> 0060: 65 74 20 30 30 30 31 62 et 0001b
>>>> 0068: 66 66 66 fff
>>>>
>>>> 3.
>>>> Event Type: Information
>>>> Event Source: iPod Service
>>>> Event Category: None
>>>> Event ID: 0
>>>> Date: 1/5/2008
>>>> Time: 9:50:45 AM
>>>> User: N/A
>>>> Computer: DH8J2091
>>>> Description:
>>>> The description for Event ID ( 0 ) in Source ( iPod Service )
>>>> cannot be found. The local computer may not have the necessary
>>>> registry information or message DLL files to display messages from
>>>> a remote computer. You may be able to use the /AUXSOURCE= flag to
>>>> retrieve this description; see Help and Support for details. The
>>>> following information is part of the event: Service started.
>>>>
>>>> 4.
>>>> Event Type: Error
>>>> Event Source: Application Error
>>>> Event Category: (100)
>>>> Event ID: 1000
>>>> Date: 1/5/2008
>>>> Time: 9:51:08 AM
>>>> User: N/A
>>>> Computer: DH8J2091
>>>> Description:
>>>> Faulting application drwtsn32.exe, version 5.1.2600.0, faulting
>>>> module dbghelp.dll, version 5.1.2600.2180, fault address
>>>> 0x0001295d.
>>>>
>>>> For more information, see Help and Support Center at
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>> Data:
>>>> 0000: 41 70 70 6c 69 63 61 74 Applicat
>>>> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
>>>> 0010: 75 72 65 20 20 64 72 77 ure drw
>>>> 0018: 74 73 6e 33 32 2e 65 78 tsn32.ex
>>>> 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
>>>> 0028: 30 30 2e 30 20 69 6e 20 00.0 in
>>>> 0030: 64 62 67 68 65 6c 70 2e dbghelp.
>>>> 0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
>>>> 0040: 32 36 30 30 2e 32 31 38 2600.218
>>>> 0048: 30 20 61 74 20 6f 66 66 0 at off
>>>> 0050: 73 65 74 20 30 30 30 31 set 0001
>>>> 0058: 32 39 35 64 295d
>>>>
>>>> These four event seem to be the basic error cycle.
>>>>
>>>> Best,
>>>>
>>>> Ted.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> "Gerry" wrote:
>>>>
>>>>> Edward
>>>>>
>>>>> Does the same thing happen if you boot to safe mode?
>>>>>
>>>>> Please post one complete copy only of each of the Warning and
>>>>> Error Reports from the System log of Event Viewer from the last
>>>>> boot confirming which appear in previous boots. No Information
>>>>> Reports or Duplicates please.
>>>>>
>>>>> You can access Event Viewer by selecting Start, Control Panel,
>>>>> Administrative Tools, and Event Viewer.
>>>>>
>>>>> A tip for posting copies of Error Reports! Run Event Viewer and
>>>>> double click on the error you want to copy. In the window, which
>>>>> appears is a button resembling two pages. Click the button and
>>>>> close Event Viewer.Now start your message (email) and do a paste
>>>>> into the body of the message. Make sure this is the first paste
>>>>> after exiting from Event Viewer.
>>>>>
>>>>> --
>>>>>
>>>>>
>>>>>
>>>>> Hope this helps.
>>>>>
>>>>> Gerry
>>>>> ~~~~
>>>>> FCA
>>>>> Stourport, England
>>>>> Enquire, plan and execute
>>>>> ~~~~~~~~~~~~~~~~~~~