Groups > Miscellaneous > SecureComp > Re: Windows Explorer.exe crash + SpyBot's TeaTimer




Windows Explorer.exe crash + SpyBot's TeaTimer

Windows Explorer.exe crash + SpyBot's TeaTimer
Fri, 9 May 2008 16:46:48 +0100
I keep getting explorer crashes almost every day now.  

Words to the effect:  "Data Execution Prevention" has shut down
Windows Explorer.exe" and there's this bit of info if I click on
"details":

EventType : BEX     P1 : explorer.exe     P2 : 6.0.2900.2180     P3 :
41107ece
P4 : unknown     P5 : 0.0.0.0     P6 : 00000000     P7 : 02657a64     
P8 : c0000005     P9 : 00000008  

Now when this happens, and the machine doesn't exactly "reboot"
itself, but the screen goes blank for a bit and there is no task bar
present and when it has finished doing whatever it does, I notice that
Spybot's TeaTimer is no longer present in the taskbar tray (where
antivirus, firewall, volume, safely remove hardware and local area
connection icons reside).

Is it likely that TeaTimer is causing this?  

Is Windows shutting TeaTimer down?  Or is TT shutting itself down?  

In which case, what good is it if it would allow a program to shut it
down?

Any idea how to help me sort this out?  Or recommend a better
replacement for TeaTimer?  I've had trouble with TT in past but hadn't
used it for a while and thought things might work out better this time
Post Reply
Re: Windows Explorer.exe crash + SpyBot's TeaTimer
Fri, 9 May 2008 17:06:14 +0100
On Fri, 9 May 2008 16:46:48 +0100, waves wrote:

> I keep getting explorer crashes almost every day now.  
> 
> Words to the effect:  "Data Execution Prevention" has shut down
> Windows Explorer.exe" and there's this bit of info if I click on
> "details":
> 
> EventType : BEX     P1 : explorer.exe     P2 : 6.0.2900.2180     P3 :
> 41107ece
> P4 : unknown     P5 : 0.0.0.0     P6 : 00000000     P7 : 02657a64     
> P8 : c0000005     P9 : 00000008  

http://technet2.microsoft.com/windowsserver/en/library/b0de1052-4101-44c3-a294-4
da1bd1ef2271033.mspx
<q>
The error signature for a DEP problem has the following attributes:
Parameter	Example Value	Description

EventType BEX
	
Indicates a buffer overflow (/GS) or DEP exception (BEX64 indicates a
buffer overflow (/GS) or DEP exception on 64-bit versions of Windows)

P1  DEPDemo.exe
Name of the application executable that encountered the problem

P2  5.1.2600.2180
Version of the application executable that encountered the problem

P3  416725f2
Faulting application stamp

P4  DEPDemo.exe
aulting module name

P5  5.1.2600.2180	
Faulting module version

P6  416725f2
Faulting module stamp

P7  00002060
Fault offset (Instruction address if a module is not loaded at the
faulting address)

P8  C0000005
Indicates a STATUS_ACCESS_VIOLATION exception (If this parameter is
c0000409, the problem is a /GS-related fault)

P9 00000008
Indicates an execution STATUS_ACCESS_VIOLATION (00000002 indicates an
execution STATUS_ACCESS_VIOLATION on 64-bit versions of Windows for
the Intel Itanium architecture)
</q>


The info  in "P1" is saying explorer.exe is the application that
'encountered the problem'.

So how is TeaTimer involved in this?

Also, usually when explorer.exe problems happen, I reboot, even though
it appears that things are back to "normal" once I get the
"error
message" and the "kind of a reboot" thing happens.  

Is that the right thing to do, reboot?  I do it just in case some
programs/processes which are invisible/unknown to me have been
disabled or are now more vulnerable for some reason.  


One more thing, TeaTimer used to pop up for warnings about the
screensaver time being changed (which it was), but now it doesn't do
that anymore - or it pops up intermittently.  I have no rule set to
Post Reply
Re: Windows Explorer.exe crash + SpyBot's TeaTimer
Fri, 09 May 2008 20:10:17 -050
waves wrote:
> On Fri, 9 May 2008 16:46:48 +0100, waves wrote:
> 
>> I keep getting explorer crashes almost every day now.  
>>
>> Words to the effect:  "Data Execution Prevention" has shut
down
>> Windows Explorer.exe" and there's this bit of info if I click on
>> "details":
>>
>> EventType : BEX     P1 : explorer.exe     P2 : 6.0.2900.2180     P3 :
>> 41107ece
>> P4 : unknown     P5 : 0.0.0.0     P6 : 00000000     P7 : 02657a64     
>> P8 : c0000005     P9 : 00000008  
> 
>
http://technet2.microsoft.com/windowsserver/en/library/b0de1052-4101-44c3-a294-4
da1bd1ef2271033.mspx
> <q>
> The error signature for a DEP problem has the following attributes:
> Parameter	Example Value	Description
> 
> EventType BEX
> 	
> Indicates a buffer overflow (/GS) or DEP exception (BEX64 indicates a
> buffer overflow (/GS) or DEP exception on 64-bit versions of Windows)
> 
> P1  DEPDemo.exe
> Name of the application executable that encountered the problem
> 
> P2  5.1.2600.2180
> Version of the application executable that encountered the problem
> 
> P3  416725f2
> Faulting application stamp
> 
> P4  DEPDemo.exe
> aulting module name
> 
> P5  5.1.2600.2180	
> Faulting module version
> 
> P6  416725f2
> Faulting module stamp
> 
> P7  00002060
> Fault offset (Instruction address if a module is not loaded at the
> faulting address)
> 
> P8  C0000005
> Indicates a STATUS_ACCESS_VIOLATION exception (If this parameter is
> c0000409, the problem is a /GS-related fault)
> 
> P9 00000008
> Indicates an execution STATUS_ACCESS_VIOLATION (00000002 indicates an
> execution STATUS_ACCESS_VIOLATION on 64-bit versions of Windows for
> the Intel Itanium architecture)
> </q>
> 
> 
> The info  in "P1" is saying explorer.exe is the application that
> 'encountered the problem'.
> 
> So how is TeaTimer involved in this?
> 
> Also, usually when explorer.exe problems happen, I reboot, even though
> it appears that things are back to "normal" once I get the
"error
> message" and the "kind of a reboot" thing happens.  
> 
> Is that the right thing to do, reboot?  I do it just in case some
> programs/processes which are invisible/unknown to me have been
> disabled or are now more vulnerable for some reason.  
> 
> 
> One more thing, TeaTimer used to pop up for warnings about the
> screensaver time being changed (which it was), but now it doesn't do
> that anymore - or it pops up intermittently.  I have no rule set to
> always allow this change.


I don't trust Teatimer, sorry. I installed Spybot on a friend's machine 
and it cleared a couple of things off but then Teatimer became a 
nuisance and I think crashed it somehow, so I just uninstalled the whole 
thing. I am not saying it is bad, only that I would like the option to 
Post Reply
Re: Windows Explorer.exe crash + SpyBot's TeaTimer
Fri, 9 May 2008 20:17:32 -0500
Charlie Tame wrote:
> I don't trust Teatimer, sorry. I installed Spybot on a friend's machine
> and it cleared a couple of things off but then Teatimer became a
> nuisance and I think crashed it somehow, so I just uninstalled the whole
> thing. I am not saying it is bad, only that I would like the option to
> turn it off and there didn't seem to be one.
http://forums.majorgeeks.com/showthread.php?t=103692&highlight=Teatimer





Post Reply
Re: Windows Explorer.exe crash + SpyBot's TeaTimer
Fri, 09 May 2008 21:01:32 -050
bob houston wrote:
> Charlie Tame wrote:
>> I don't trust Teatimer, sorry. I installed Spybot on a friend's
machine
>> and it cleared a couple of things off but then Teatimer became a
>> nuisance and I think crashed it somehow, so I just uninstalled the
whole
>> thing. I am not saying it is bad, only that I would like the option to
>> turn it off and there didn't seem to be one.
>
http://forums.majorgeeks.com/showthread.php?t=103692&highlight=Teatimer
> 
Post Reply
<< Previous 1 2 Next >>
( Page 1 of 2 )
about | contact