Forum Thread

explorer crashes in comctl32.dll user callback, how can I identify the DLL causing it

disk 1,750 626 March 21, 2016 at 10:13 PM
Explorer has crashed on me a few times with this message:

Unhandled exception at 0x000007fefc96f72b (comctl32.dll) in explorer.exe: 0xC000041D: An unhandled exception was encountered during a user callback.

I did !analyze -vv in WinDbg and it says:

Code:
SYMBOL_NAME:  comctl32!Str_Set+0

FOLLOWUP_NAME:  Removed

MODULE_NAME: comctl32

IMAGE_NAME:  comctl32.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  553a8775

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c000041d_comctl32.dll!Str_Set

BUCKET_ID:  X64_APPLICATION_FAULT_INVALID_POINTER_READ_WINDOW_HOOK_WINDOW_HOOK_comctl32!Str_Set+0
Does anyone know how I can trace which DLL loaded in explorer is causing this crash? I have a crash dump.

12 Comments

1

Sign up for a Slickdeals account to remove this ad.

Joined Mar 2009
Schrödinger's Frog
17,345 Posts
2,025 Reputation
#2
Unless you recently installed something before this crash started occurring, I can't say I'd ever spend a lot of time trying to analyze dumps/traces and sleuth out a DLL. I'd probably start looking for potential hardware issues (PSU, RAM, hard drive testing initially) or just re-install Windows (which I hate doing).
Reply Helpful Comment? 0 0
#3
What version of IE do you have and version of windows? And what site causes the crash or is it sporadic?
Reply Helpful Comment? 0 0
Joined Mar 2009
Schrödinger's Frog
17,345 Posts
2,025 Reputation
#4
Quote from boboli View Post :
What version of IE do you have and version of windows? And what site causes the crash or is it sporadic?
I was assuming OP was referring to Explorer as in the file-system-nagivation bit, not Internet Explorer. If it's the latter, the solution is simple, do what you ought to do anyway and not use IE laugh out loud
Reply Helpful Comment? 0 0
Joined Dec 2005
L6: Expert
1,750 Posts
626 Reputation
Original Poster
#5
Quote from Frogstar View Post :
I was assuming OP was referring to Explorer as in the file-system-nagivation bit, not Internet Explorer. If it's the latter, the solution is simple, do what you ought to do anyway and not use IE laugh out loud
Yeah I'm referring to the explorer with the file system. It's happened the same way every time. I have some windows open with different file trees and I go to close the windows and explorer will crash. Also every time it's happened I closed the windows fast like x x x in a second. There must be some way to see what DLL is using the callback.
Reply Helpful Comment? 0 0
#6
In Windows 7 and maybe Win10 (IDK) you could check out "view reliability history". Copy and past it into the run box but not the quotes.
Reply Helpful Comment? 0 0
Earth 1st! We'll mine the other planets later. Biker

Did you know?

If it can't be grown its gotta be mined
EEK!

The best meal I ever ate was Spotted Owl fried in Exxon Oil! Yumshake head

Expand your horizons. Explore something new. Get a RasberryPi and learn something.
Joined Dec 2005
L6: Expert
1,750 Posts
626 Reputation
Original Poster
#7
Quote from dale_101798 View Post :
In Windows 7 and maybe Win10 (IDK) you could check out "view reliability history". Copy and past it into the run box but not the quotes.
I think I found what you're talking about under Action Center > Maintenance > View reliability history. There's a bunch of explorer errors , I clicked through a bunch of them but none of them have a solution. What am I supposed to put into the run box?

Code:
Problem Event Name:	APPCRASH
Application Name:	explorer.exe
Application Version:	6.1.7601.19135
Application Timestamp:	56a1bbe2
Fault Module Name:	comctl32.dll
Fault Module Version:	6.10.7601.18837
Fault Module Timestamp:	553a8775
Exception Code:	c000041d
Exception Offset:	000000000006f72b
OS Version:	6.1.7601.2.1.0.256.1
Locale ID:	1033
Reply Helpful Comment? 0 0
#8
Log in as a different user (create one if needed), see if the error occurs under that user.

I'd give ShellExView a try and disable non-Microsoft shell extensions:
http://www.nirsoft.net/utils/shexview.html
Reply Helpful Comment? 0 0

Sign up for a Slickdeals account to remove this ad.

Joined Dec 2005
L6: Expert
1,750 Posts
626 Reputation
Original Poster
#9
Quote from jkee View Post :
Log in as a different user (create one if needed), see if the error occurs under that user.

I'd give ShellExView a try and disable non-Microsoft shell extensions:
http://www.nirsoft.net/utils/shexview.html
Ordinarily I'd agree but it happens too rarely for me to go disable all my extensions, and also I need them. I have TortoiseGit and WinRAR and some others and I use them.
Reply Helpful Comment? 0 0
#10
Quote from disk View Post :
Ordinarily I'd agree but it happens too rarely for me to go disable all my extensions, and also I need them. I have TortoiseGit and WinRAR and some others and I use them.
I have 37 non-microsoft shell extensions that show in ShellExView. I bet you have less than 60. There's an option to hide all microsoft shell extensions. As a test, just disable all non ms shell extensions and see if the problem goes away. Re-enable in batches of about 5-10 until the problem rears it's head again.

... Oops you said it happens too rarely to diagnose this way... Try to notice any trends in explorer crashing. Shell extensions do more than add to the context menu, they also help windows generate thumbnails among other things. Try to notice if it happens more frequently in certain folders and look at what file types are in the folder or if it happens when files of a certain type are selected. You could also try disabling non-ms extensions you can live without.

You may still find some remnants of programs you no longer use that you could remove or disable.

Maybe SysInternals ProcessExplorer or Process Monitor would be useful:
https://technet.microsoft.com/en-...ssexplorer
https://technet.microsoft.com/en-...essmonitor

You could also try attaching WindDbg to explorer.exe:
https://msdn.microsoft.com/en-us/...s.85).aspx
http://stackoverflow.com/question...orer-crash
Reply Helpful Comment? 0 0
Last edited by jkee March 22, 2016 at 10:01 PM
Joined Dec 2005
L6: Expert
1,750 Posts
626 Reputation
Original Poster
#11
Quote from jkee View Post :
You could also try attaching WindDbg to explorer.exe
Thanks for the help but this problem happens rarely so I think the best thing I can do is work on the crash dump that I have. The problem is I don't know how to trace it back to the offending DLL. Usually there is a function that is being called and you can tell by the address space which DLL is in the space and that way you know that DLL is at fault. I just don't know how to do that for comctl32 it's too complicated for me.
Reply Helpful Comment? 0 0
#12
Quote from disk View Post :
Thanks for the help but this problem happens rarely so I think the best thing I can do is work on the crash dump that I have. The problem is I don't know how to trace it back to the offending DLL. Usually there is a function that is being called and you can tell by the address space which DLL is in the space and that way you know that DLL is at fault. I just don't know how to do that for comctl32 it's too complicated for me.
I'm not exactly sure how to do that either, but I've got a hunch your existing dump isn't going to give you enough information. If you attach WinDbg to explorer with the right parameters, you should be able to generate a more useful, extensive report the next time it happens.

I think the types of files in a folder or type of file selected is likely the trigger for the crash.
Reply Helpful Comment? 0 0
Joined Jun 2008
I Trade Your Bing Credit$
734 Posts
82 Reputation
#13
here you go, Win64AST (Win64 Advanced System Tool)
official page (i guess) www portablesoft.org/win64ast/
, it's in chinese, guess you don't need to read that shit, i didn't read it either,
so i find you the download link, pan.baidu.com/s/1bnpQl8V
it's in chinese too, click the button says 1.3M with a down arrow

the screenshot i just took, process with blue color means got something injected, right click, view modules, colors aren't always correct, but the Company other than Microsoft usually are shit
Reply Helpful Comment? 0 0
Last edited by Left4Deal May 6, 2016 at 04:08 PM
Drunk driving on the sea to find deals.
95% of sea remains unexplored,
unseen by human eyesbulb.
Page 1 of 1
1
Join the Conversation
Add a Comment
 
Copyright 1999 - 2016. Slickdeals, LLC. All Rights Reserved. Copyright / Infringement Policy  •  Privacy Policy  •  Terms of Service  •  Acceptable Use Policy (Rules)  •  Interest-Based Ads
Link Copied to Clipboard