How to track explorer.exe crashes in win8.1x64

2

I've recently installed win8.1x64 on my laptop.

Problem is: Explorer keeps crashing everyday and re-sorting my desktop items, and I can't find out why.

Things I tried: Added a registry entry where crashdumps are saved everytime something crashes, this is the result:

http://puu.sh/hFkop/94b7440fee.png

Then I downloaded windbg to try and sort out what could cause this and this opened the dmp files with the following:

----------------------------------------------------------

Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\CrashDumps\explorer.exe.7480.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is: 
Windows 8 Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: SingleUserTS
Built by: 6.3.9600.17031 (winblue_gdr.140221-1952)
Machine Name:
Debug session time: Thu May  7 23:01:13.000 2015 (UTC + 1:00)
System Uptime: not available
Process Uptime: 0 days 0:38:02.000
................................................................
................................................................
................................................................
...................................................
Loading unloaded module list
........................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1d38.17c0): Access violation - code c0000005 (first/second chance not     available)
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for     ntdll.dll - 
<Unloaded_QtCore_Ad_SyncNs_4.dll>+0x265fe:
00000000`509065fe ??              ???

-----------------------------------------------------------------

I still can't figure out what's happening. Any hints on this issue?

EDIT: After following commentary instructions I've come up with this data on windbg

---------------------

DEFAULT_BUCKET_ID:  WRONG_SYMBOLS

PROCESS_NAME:  explorer.exe

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load     symbols.

FAULTING_MODULE: 00007ffb083b0000 ntdll

DEBUG_FLR_IMAGE_TIMESTAMP:  50d3fca7

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced     memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced     memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000008

EXCEPTION_PARAMETER2:  00000000509065fe

WRITE_ADDRESS:  00000000509065fe 

FOLLOWUP_IP: 
QtCore_Ad_SyncNs_4!unloaded+265fe
00000000`509065fe ??              ???

FAILED_INSTRUCTION_ADDRESS: 
QtCore_Ad_SyncNs_4!unloaded+265fe
00000000`509065fe ??              ???

APP:  explorer.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

-----------------

This is way beyong my knowledge. I have absolute no idea on what could be causing this crashes. But since there's "core" written there, does it have something to do with the cpu?

windows-explorer
debug
asked on Super User May 8, 2015 by ng80092b • edited May 8, 2015 by magicandre1981

1 Answer

2

As per your updates, it seemed that one of AutoDesk products caused the issue.

"QtCore_Ad_SyncNs_4" is one of the signatures of their libraries. How to know? I just Googled it.

There is a very similar topic here on AutoDesk forum: http://feedback.autodesk.com/cloudservices/topics/autodesk_desktop_companion_cause_explorer_app_to_crash

I have no idea about AutoDesk products, but probably there is a sort of monitoring feature which is attached to Windows Explorer and this sort of Windows Explorer extensions can be detached easily (not always though). At the end of the page I linked there is a way to turn off AutoDesk 360 only which seemed to cause your crash.

This will help you only if you don't use Autodesk 360:

Never ever uninstall it cause this will cause you problems with all other Autodesk products.

A) Disable 360. From 360 settings disable:

(x) Start Autodesk 360 when I log into Windows.

and from AutoCAD settings disable:

(x) Enable Automatic Sync (x) Sync my Settings with the Cloud.

B) Go to Program files\Autodesk -or Program files(x86)\Autodesk- folder and search for the "QtCore_Ad_SyncNs_4.dll"

Best guess that you will find two of them. Just rename both to "QtCore_Ad_SyncNs_4.dll.BAK" or whatever you like.

Or, if you don't use AutoDesk products, you can just simply uninstall them. Probably the crash will go away if you do so.

If you want to completely fix the problem, it's better to contact AutoDesk product provider and give them the dump you've got.

answered on Super User May 8, 2015 by Scott Rhee • edited May 8, 2015 by Scott Rhee

User contributions licensed under CC BY-SA 3.0