Windows 10: Explorer crash loop every second reboot

Hi,


I'm having a problem where every second time I reboot, explorer.exe enters a crashloop rendering my PC unusable. The only way I can restart is via the PC reset button restarting via Ctrl+Alt+Del starts a restart that never finishes.


I've tried several things that I've seen elsewhere, for example the extensive list here: https://superuser.com/questions/1502440/desktop-and-taskbar-crashing-refreshing-when-signed-into-microsoft-account, but so far nothing has worked. The solution on that page to delete the HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\BannerStore registry key doesn't work as I get an error when I try to delete it even after taking ownership of the key. However, I think my error may be different anyway. I've attached a WinDbg analysis of an explorer.exe .dmp file below - the error is thrown in ucrtbase, but appears to originate in windows_immersiveshell_serviceprovider judging by the name of the thread - the stack doesn't seem to include this info.


I'm very much at the limit of my knowledge here and am unsure how to proceed. I have a hunch from that thread name that it could be a failing shell plugin, but I'm not sure how to identify which. Can anyone offer any help or advice?


Thanks,


Karli


------------------------------------ WinDbg analysis -----------------------------------


Microsoft R Windows Debugger Version 10.0.20153.1000 AMD64

Copyright c Microsoft Corporation. All rights reserved.Loading Dump File [C:\Users\karli\AppData\Local\CrashDumps\explorer.exe.2300.dmp]User Mini Dump File with Full Memory: Only application data is available************* Path validation summary **************Response Time ms LocationDeferred srv*Symbol search path is: srv*Executable search path is: Windows 10 Version 19042 MP 32 procs Free x64Product: WinNt, suite: SingleUserTS PersonalEdition build lab: 19041.1.amd64fre.vb_release.191206-1406Machine Nameebug session time: Wed Nov 18 22:49:04.000 2020 UTC + 0:00System Uptime: 0 days 0:01:03.796Process Uptime: 0 days 0:00:01.000.................................................................................................................This dump file has an exception of interest stored in it.The stored exception information can be accessed via .ecxr.8fc.3358: Security check failure or stack buffer overrun - code c0000409 first/second chance not availableSubcode: 0x7 FAST_FAIL_FATAL_APP_EXIT For analysis of this file, run !analyze -vucrtbase!abort+0x4e:00007ffa`4b0c287e cd29 int 29h0:021> !analyze -v******************************************************************************** ** Exception Analysis ** ********************************************************************************KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 1686 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on KRONOS Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.mSec Value: 61082 Key : Analysis.Memory.CommitPeak.Mb Value: 260 Key : Analysis.System Value: CreateObject Key : Timeline.OS.Boot.DeltaSec Value: 63 Key : Timeline.Process.Start.DeltaSec Value: 1 Key : WER.OS.Branch Value: vb_release Key : WER.OS.Timestamp Value: 2019-12-06T14:06:00Z Key : WER.OS.Version Value: 10.0.19041.1 Key : WER.Process.Version Value: 10.0.19041.610ADDITIONAL_XML: 1OS_BUILD_LAYERS: 1NTGLOBALFLAG: 0APPLICATION_VERIFIER_FLAGS: 0CONTEXT: .ecxrrax=0000000000000001 rbx=00000000069fdde0 rcx=0000000000000007rdx=000000000000000f rsi=00000000069fd450 rdi=0000000000000000rip=00007ffa4b0c287e rsp=00000000069fcb20 rbp=00000000069fcc80 r8=0000000000000001 r9=00000000069fcac8 r10=0000000000000012r11=0088000002002080 r12=0000000000000001 r13=00007ffa3f326500r14=00000000069fce30 r15=00000000069fcc70iopl=0 nv up ei pl nz na pe nccs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202ucrtbase!abort+0x4e:00007ffa`4b0c287e cd29 int 29hResetting default scopeEXCEPTION_RECORD: .exr -1ExceptionAddress: 00007ffa4b0c287e ucrtbase!abort+0x000000000000004e ExceptionCode: c0000409 Security check failure or stack buffer overrun ExceptionFlags: 00000001NumberParameters: 1 Parameter[0]: 0000000000000007Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT PROCESS_NAME: explorer.exeERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.EXCEPTION_CODE_STR: c0000409EXCEPTION_PARAMETER1: 0000000000000007STACK_TEXT: 00000000`069fcb20 00007ffa`4b0c1faf : 00000000`00000003 00000000`00000003 00000000`069fd610 00000000`069fce30 : ucrtbase!abort+0x4e00000000`069fcb50 00007ffa`4b08e5d6 : 00000000`069fdde0 00000000`069fcc80 00000000`069fd450 00000000`00000000 : ucrtbase!terminate+0x1f00000000`069fcb80 00007ffa`4b08f254 : 00000000`00000000 00007ffa`4b4083cb 00000000`00000001 00000000`069fdde0 : ucrtbase!FindHandler<__FrameHandler4>+0x50a00000000`069fcd50 00007ffa`4b08d0c0 : 00007ffa`3f2d0000 00000000`069fdde0 00000000`069fd610 00000000`069fd450 : ucrtbase!__InternalCxxFrameHandler<__FrameHandler4>+0x27800000000`069fcdf0 00007ffa`10913f34 : 00000000`069ff530 00007ffa`10db1b68 00000000`069fdde0 00000000`069ff530 : ucrtbase!_CxxFrameHandler4+0xa000000000`069fce60 00007ffa`4d8d10ff : 00000000`00000000 00000000`069fd400 00000000`069fdde0 00000000`00000001 : twinui_pcshell!DllCanUnloadNow+0x4218400000000`069fce90 00000000`00000000 : 00000000`069fd400 00000000`069fdde0 00000000`00000001 00000000`069fd450 : ntdll!RtlpExecuteHandlerForException+0xfSYMBOL_NAME: ucrtbase!abort+4eMODULE_NAME: ucrtbaseIMAGE_NAME: ucrtbase.dllSTACK_COMMAND: ~21s ; .ecxr ; kbFAILURE_BUCKET_ID: FAIL_FAST_FATAL_APP_EXIT_c0000409_ucrtbase.dll!abortOS_VERSION: 10.0.19041.1BUILDLAB_STR: vb_releaseOSPLATFORM_TYPE: x64OSNAME: Windows 10IMAGE_VERSION: 10.0.19041.546FAILURE_ID_HASH: {e31753ac-c98a-8055-3663-47e707543d20}Followup: MachineOwner---------0:021> ~# kP 25 # Child-SP RetAddr Call Site00 00000000`069fcb20 00007ffa`4b0c1faf ucrtbase!abort+0x4e01 00000000`069fcb50 00007ffa`4b08e5d6 ucrtbase!terminate+0x1f02 00000000`069fcb80 00007ffa`4b08f254 ucrtbase!FindHandler<__FrameHandler4>+0x50a03 00000000`069fcd50 00007ffa`4b08d0c0 ucrtbase!__InternalCxxFrameHandler<__FrameHandler4>+0x27804 00000000`069fcdf0 00007ffa`10913f34 ucrtbase!_CxxFrameHandler4+0xa005 00000000`069fce60 00007ffa`4d8d10ff twinui_pcshell!DllCanUnloadNow+0x4218406 00000000`069fce90 00000000`00000000 ntdll!RtlpExecuteHandlerForException+0xf0:021> dx Debugger.Sessions[0].Processes[2300].Threads[13144].Stack.Frames[6].SwitchTo;dv /t /vDebugger.Sessions[0].Processes[2300].Threads[13144].Stack.Frames[6].SwitchToUnable to enumerate locals, Win32 error 0n87Private symbols symbols.pri are required for locals.

Type ".hh dbgerr005" for details.

:)

 

Stuck in explorer crash loop

Hello!

Today, out of nowhere, I started having problems with explorer. When right-clicking on the desktop (or icons on it) explorer would crash and restart itself a few seconds later (icons disappear, taskbar disappears, etc...).

I looked for a solution online and many people suggested installing ShellExView and disabling everything non-Microsoft and then re-enabling them one by one to find the culprit. Actually, disabling every non-Microsoft entry made things much worse for me, as explorer would go into a crash loop (crash, restart, crash, and so on...). For some reason I though updating Windows would help me fix everything, but after applying updates and restarting I noticed nothing had changed and now I'm stuck in the loop right after login (I basically cannot do anything except launch stuff through the task manager).

I'm currently in safe mode, and everything works fine here, but I have no idea how to fix the problem. I tried reverting to the previous build, it failed (generic error, don't really remember it). I tried restoring to a previous restore point, it failed. Even resetting failed. I just guess I'll have to reinstall w10 from scratch, I just wanted to know if there was something else to try out before doing that.

Sorry for the long post! (or maybe it looks long in safe mode because of the low resolution *Biggrin )

 

Windows 10 endless loop reboot

Hi,

• Have you checked if the hard disk is set as first boot device in the BIOS?
• Which version of Windows is installed on the computer?
• What did the HP supported suggested you to fix the issue?

I suggest you to follow the steps provided in the following article and check if it helps.

Windows 10 endless loop reboot

If the issue persists, please get back to us with the more information about the interaction with HP support and the outcome of the issue.

 

Explorer crashing

Thanks Zat. I had never looked at event viewer and it had more info than I thought. Seems the problem was a second computer I was trying to network with. Unplugging the ethernet cable fixed the crashes. Explorer must have been looking in the wrong place I guess.