Explorer crashes with DEP 1

[tasmund]

Windows Exporer (explorer.exe) is crashing - seemingly randomly - with a data execution protection error (DEP).

I'm running XP Pro SP2, with Windows Update automatically doing its thing.

The error report contains:

EventType : BEX P1 : explorer.exe P2 : 6.0.2900.2180 P3 : 41107ece
P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 6418ce67
P8 : c0000005 P9 : 0000008

This seems to be the same problem as in thread779-1095306.
The only difference I have from jomtones2's error report is my P9 is 8, whereas his is 0.

I too have installed the MSN Searchbar.
It's the only suspect software I can think of that I've installed before this started happening.
I will try deinstalling it...

Has anyone worked out what this problem is?

 

[linney]

I am not familiar with "MSN Searchbar" but it seems a good suspect based on the other thread. Let us know if you confirm it.

These are some general MSKB's about DEP.

Check out this part of the following article - "DEP configuration for the system is controlled through switches in the Boot.ini file. If you are logged on as an administrator, you can now easily configure DEP settings by using the System dialog box in Control Panel".

A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2 and Windows XP Tablet PC Edition 2005

http://support.microsoft.com/kb/875352

HOW TO: Edit the Boot.ini File in Windows XP (Q289022)

http://support.microsoft.com/support/kb/articles/q289/0/22.asp

You receive a "Data Execution Prevention" error message in Windows XP Service Pack 2 or in Windows XP Tablet PC Edition 2005

http://support.microsoft.com/default.aspx?scid=kb;en-us;875351&FR=1&PA=1&SD=HSCH

Hardware (DEP)-enabled computer may unexpectedly quit after you resume from standby or from hibernation in Windows XP Service Pack 2

http://support.microsoft.com/default.aspx?scid=kb;en-us;889673&FR=1&PA=1&SD=HSCH

Data Execution Prevention
thread779-1180158

 

[bradiko]

I had this problem also except for me the crash occurred only when opening the root folder 'C\' from exporer. I also had a random printing dialog from some websites.

My error message was identical except P7 was P7 : 02522710.

There is not much information on the web about this but here is what I have learned (I hope this is a correct interpretation). There are shell extensions to the explorer.exe kernel that get executed at different times. For instance, opening a folder that requests displaying a thumbnail picture might invoke a shell extension 'handler' to display that. For some reason one of these extensions on my system was causing a Data Execution Prevention. (I have an AMD Turion ML37, awesome part, which has the NX bit or hardware data execution prevention but there is also software execution prevention in SP2 from what I understand). In any even the thing to do is to look at the shell extensions with 'ShellExView', a freeware program. You can disable all extensions using the program and that may help. You can also disable just the ones that are listed as 6.0.2900.2180 version. I did this and then reenabled them half at a time to look for which one was causing the problem. But what I found was that after reenabling them all, the problem was still fixed.

I suspect the problem shell extension when disabled was taken out of memory and when it was put back it was returned to a different place in memory, one that doesn't generate DEPs/BEX (i.e. an appropriate execution memory location). This speculation is consistent with the problem/solution. If this is true the problem is likely microsoft not always sufficiently checking where the shell extensions are being put in memory to execute. I hope this works for you...Good luck!

 

[tasmund]

linney,

Thanks very much for info.

I have turned off MSN Searbar and I have had no Windows Explorer crashes since.


bradiko,

Thanks for your suggestions. Your problem seems to be different.