MonitorWare Knowledge Base

what is SP 840987 ?

I have had this problem for quite a while now, installed Win2k server on a new disk and the problem came up again .... need s solution quikc, someone help please

Karimi
mail2karimi@yahoo.com

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

Anonymous wrote:I don't have these product installed and get this event 1002 on a number of servers.

Have you found a fix for this yet - I still have the issue and do not know how to stop it

Sam

I upgraded from Win98 SE to XP Corporate (SP2) and I can no loger right click on desktop or any blank area of HDD (ie to create new folder, shortcut etc.) Screen goes blank, and I get the 1002 error in event log. (shell stopped unexpectedly and explorer restarted etc.) Any body with a solution yet?

Anonymous wrote:what is SP 840987 ?

I have had this problem for quite a while now, installed Win2k server on a new disk and the problem came up again .... need s solution quikc, someone help please

Karimi
mail2karimi@yahoo.com

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

http://support.microsoft.com/kb/840987

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

I too had this problem. I uninstalled SP 840987 without any luck, but uninstalling SP 841533 did the trick.

Thanks for the tip!

lurker wrote:

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

I too had this problem. I uninstalled SP 840987 without any luck, but uninstalling SP 841533 did the trick.

Thanks for the tip!

i have the same problem. File Manager suddenly hangs and the Program Error comes up with EVENT ID 1002 in the Application Log.

i tried uninstalling SP 840987 first , reboot and still crashes.

next SP841533 and reboot and still crashes.

hope someone can give some ideas.

btw, i'm running Win2K SP4 and all updates installed.

Every time I try to open Control Panel I have this error:

explorer.exe has generated error and will be closed by windows.
You will need to restart the program.
An error log is being created.

I install Windows 2000 SP4 yesterday and today I finished download all updates for it and the problems starts today...

Does anyone knows what can I do...

I have neither of these hotfixes on my Windows 2000 5.00.2195, SP4 laptop. I still get the most annoying "The shell stopped unexpectedly and Explorer.exe was restarted. " 1002 error. I have reimaged the PC even. Anyone else?

Thanks.

Anonymous wrote:

lurker wrote:

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

I too had this problem. I uninstalled SP 840987 without any luck, but uninstalling SP 841533 did the trick.

Thanks for the tip!

i have the same problem. File Manager suddenly hangs and the Program Error comes up with EVENT ID 1002 in the Application Log.

i tried uninstalling SP 840987 first , reboot and still crashes.

next SP841533 and reboot and still crashes.

hope someone can give some ideas.

btw, i'm running Win2K SP4 and all updates installed.

Here are the hotfixes I have, in addition to SP4. Maybe, that might ring a bell with someone?

KB-823182, 823559, 823980, 824105, 825119, 826232, 828035, 828741, 828749, 835732, 837001, 839643, 839645, 840315, 841872, 841873, and 842526.

And I have neither Novell Distributed Print Services, Homesite or Cold Fusion on my laptop.

TIA.
MC

Music Collector wrote:I have neither of these hotfixes on my Windows 2000 5.00.2195, SP4 laptop. I still get the most annoying "The shell stopped unexpectedly and Explorer.exe was restarted. " 1002 error. I have reimaged the PC even. Anyone else?

Thanks.

Anonymous wrote:

lurker wrote:

quest wrote:I had haved the same problem with win2k.
Uninstall SP 840987 resolved the Problem

I too had this problem. I uninstalled SP 840987 without any luck, but uninstalling SP 841533 did the trick.

Thanks for the tip!

i have the same problem. File Manager suddenly hangs and the Program Error comes up with EVENT ID 1002 in the Application Log.

i tried uninstalling SP 840987 first , reboot and still crashes.

next SP841533 and reboot and still crashes.

hope someone can give some ideas.

btw, i'm running Win2K SP4 and all updates installed.

I have to join this thread, as I seem to suffer from the same malady...

About every 12 minutes or so, I have the explorer crash. The symptoms are "only" a refreshing of the taskbar and the disappearance of many - but not all - of the tray icons. The logs of these crashes - about 1000 so far, for the last few days - state "The system shell stopped unexpectedly and explorer.exe was restarted". They're listed as "source: Winlogon; no category; event identifier: 1002", with nothing in the hex dump. It's beyond infuriating. I tried every fix I could find, ran windows update, sfc, Norton's regscan (I won't even mention the regular AV and spyware scans), but nothing even decreased the regularity of this. I even installed the dreaded SP2, and it fixed nothing (just slowed down the system considerably).

The crashes seem to happen for no reason at all - I could be browsing online (from Firefox, obviously), watching something, running NASA's Worldwind, writing, or just letting the PC stand and idle with nothing running, and the crashes will happen, regardless of anything else...

It does seem to happen regardless of what I'm doing. Right now, I just tried one thing; I sat down, ran Sysinternals' File Monitor and had it log every file access, waiting for the crash to happen. It logged about 3 KB of text during the 30 seconds or so when the crash and explorer restart occurred... it's below. At that moment I was only reading a cached web page, opened quite a while earlier.

Using PS Tray Factory, I can restore the icons that disappear, but the problem is with the crashes, and restoring the icons is like putting cotton under a leaking hole in the roof instead of trying to patch up the hole... unfortunately in this case I can't even see the hole.

(The KAVICHS thing is from Kaspersky's Antivirus, but I had the program many days before the crashes began)

4969 winlogon.exe:612 OPEN C:\Documents and Settings\User SUCCESS Options: Open Directory Access: Traverse
4970 winlogon.exe:612 CLOSE C:\WINDOWS\system32 SUCCESS
4971 winlogon.exe:612 OPEN C:\WINDOWS\system32\:KAVICHS NAME INVALID Options: Open Access: All
4972 winlogon.exe:612 OPEN C:\autoexec.bat SUCCESS Options: Open Access: All
4973 winlogon.exe:612 QUERY INFORMATION C:\autoexec.bat SUCCESS Length: 206
4974 winlogon.exe:612 READ C:\autoexec.bat SUCCESS Offset: 0 Length: 206
4975 winlogon.exe:612 CLOSE C:\autoexec.bat SUCCESS
4976 winlogon.exe:612 QUERY INFORMATION C:\Documents and Settings\User\Local Settings\Temp SUCCESS Attributes: D
4977 winlogon.exe:612 OPEN C:\ SUCCESS Options: Open Directory Access: All
4978 winlogon.exe:612 DIRECTORY C:\ SUCCESS FileBothDirectoryInformation: Documents and Settings
4979 winlogon.exe:612 CLOSE C:\ SUCCESS
4980 winlogon.exe:612 OPEN C:\Documents and Settings\User\ SUCCESS Options: Open Directory Access: All
4981 winlogon.exe:612 DIRECTORY C:\Documents and Settings\User\ SUCCESS FileBothDirectoryInformation: Local Settings
4982 winlogon.exe:612 CLOSE C:\Documents and Settings\User\ SUCCESS
4983 winlogon.exe:612 OPEN C:\Documents and Settings\User\:KAVICHS NAME INVALID Options: Open Access: All
4984 winlogon.exe:612 QUERY INFORMATION C:\Documents and Settings\User\Local Settings\Temp SUCCESS Attributes: D
4985 winlogon.exe:612 OPEN C:\ SUCCESS Options: Open Directory Access: All
4986 winlogon.exe:612 DIRECTORY C:\ SUCCESS FileBothDirectoryInformation: Documents and Settings
4987 winlogon.exe:612 CLOSE C:\ SUCCESS
4988 winlogon.exe:612 OPEN C:\Documents and Settings\User\ SUCCESS Options: Open Directory Access: All
4989 winlogon.exe:612 DIRECTORY C:\Documents and Settings\User\ SUCCESS FileBothDirectoryInformation: Local Settings
4990 winlogon.exe:612 CLOSE C:\Documents and Settings\User\ SUCCESS
4991 winlogon.exe:612 OPEN C:\Documents and Settings\User\:KAVICHS NAME INVALID Options: Open Access: All
4992 winlogon.exe:612 OPEN C:\ SUCCESS Options: Open Directory Access: All
4993 winlogon.exe:612 DIRECTORY C:\ SUCCESS FileBothDirectoryInformation: WINDOWS
4994 winlogon.exe:612 CLOSE C:\ SUCCESS
4995 winlogon.exe:612 OPEN C:\WINDOWS\ SUCCESS Options: Open Directory Access: All
4996 winlogon.exe:612 CLOSE C:\WINDOWS\ SUCCESS
4997 winlogon.exe:612 OPEN C:\WINDOWS\:KAVICHS NAME INVALID Options: Open Access: All
4998 winlogon.exe:612 OPEN C:\WINDOWS\system32 SUCCESS Options: Open Directory Access: Traverse
4999 winlogon.exe:612 CLOSE C:\Documents and Settings\User SUCCESS
5000 winlogon.exe:612 OPEN C:\Documents and Settings\User\:KAVICHS NAME INVALID Options: Open Access: All
5001 services.exe:656 WRITE C:\WINDOWS\system32\config\AppEvent.Evt SUCCESS Offset: 485036 Length: 140
5002 services.exe:656 WRITE C:\WINDOWS\system32\config\AppEvent.Evt SUCCESS Offset: 485176 Length: 40

And here is a Procexp screenshost from my typical session:
http://img176.imageshack.us/img176/5775/procexp0av.gif

Here's a HijackThis log, by the way, if anyone recognizes anything problematic... By the way, are there any real-time process, etc. monitors that would perhaps help in finding out and logging some specific information about the system situation at the exact moments of the crashes? (I already used tools such as Sysinternals' ones - File Monitor, etc. - and similar...)

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\PS Tray Factory\PSTrayFactory.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Far\Far.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\System32\NVRTCLK\NVRTClk.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TrayFactory] C:\Program Files\PS Tray Factory\PSTrayFactory.EXE /silent
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus\kav.exe" -run -n PersonalPro -v 5.0.0.0
O4 - HKLM\..\RunOnce: [TrayFactory] C:\Program Files\PS Tray Factory\PSTrayFactory.EXE /start
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: FAR.lnk = C:\Program Files\Far\Far.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus\kavmm.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Hi,
Same problem with the explorer crash, except my crashes occur every 6-7 seconds - I had a 50 mb Dr Watson log... Started happening this morning on our web server when connected to the administrator account.

No spyware problems, no virus problems, nothing in Hijack This, and nothing in the usual Windows / Explorer program execute zones in the registry...

After booting in safe mode, there is no problems, and after creating a seperate administrator account, there is no problems here.

I have narrowed the problem to a setting or a program that only hits one account, and only on a standard start up.

The only suspect that I have at this time is the INTERNAT.EXE program (Windows 2000 US, but installed in France with french keyboards): On administrator2 account, Internat.exe is the only process started by explorer, but under administrator, Explorer crashes before loading any modules...

I will compare 2 Hijack this logs for each account tomorrow, and see what differences I can see to explain this...

Cheers,
Daniel

-find using "find files..." all files with cpl app.
-within the window try to open each separatly using "open with explorer.."
-erase the one which is crashing
-in my case it was "nvtuicpl"

I have the same problem - nothing of the solutions listed above helped me. At this point I'd just love to hear of a tornado over the microsoft campus.

I have nothing to offer in the way of help except my great animosity for this ******* stupid ********** PC of mine!!!!!!!!!!!!!!!!! Aaaaaaahhh!!!

Moving on a little bit..... i have a great idea that is a sure fix!!! It will really fix the problem You don't need updates, hotfixes or even any administrative tasks.

All you need is a standard (preferably heavy and solid) hammer! Mwuhahahahaha

I just installed a Radeon 9550 videocard and this crap just started happening.

By NO MEANS am I a technological genius, so is there a layman's guide to fixing this? A step-by-step?

I'm out of my wits. I can't play any of my games, everything crashes... I can't deal with this! How the heck do you fix this?!

I just bought this computer in December... how does this happen and how do I rid myself of this?!