explorer.exe ntdll.dll crash

Msoub

Msoub

Active member
Joined
Oct 23, 2020
Posts
27
Location
Jordan
can someone please help, explorer.exe keeps crashing and restarting, couldn't figure out what is causing it.

here's the error details from the event viewer.





Faulting application name: Explorer.EXE, version: 10.0.19041.546, time stamp: 0x89ce2e55

Faulting module name: ntdll.dll, version: 10.0.19041.546, time stamp: 0x5b56177b

Exception code: 0xc0000374

Fault offset: 0x00000000000fed29

Faulting process id: 0x1840

Faulting application start time: 0x01d6a97b874b21f4

Faulting application path: C:\Windows\Explorer.EXE

Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

Report Id: abcbc2da-d633-4454-a985-1b40ff12a176

Faulting package full name:

Faulting package-relative application ID:
 
thanks for replying


xilolee said:
Hi!

From command prompt (admin) launch:
Code: 
sfc /scannow
Leave it run (it should finish in 10-50 minutes), then post the final result here.
Click to expand...

"Windows Resource Protection did not find any integrity violations."
 
Try this one:
Code: 
dism /online /cleanup-image /checkhealth
If you get (after some seconds):
Code: 
C:\WINDOWS\system32>dism /online /cleanup-image /checkhealth

Deployment Image Servicing and Management tool
Version: 10.0.19041.572

Image Version: 10.0.19042.572

No component store corruption detected.
The operation completed successfully.
Then, provide some other logs: Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 + Vista
 
The possible culprit is internet download manager (based on my experience, but I'm only guessing).
Try to install the latest version 6.38 Build 8, Released: Oct 23, 2020.
If the problem won't disappear, try to uninstall it altogether.
 
There were 2 mini dump files collected.
The bugchecks were 139 and 7F.
There were 3 drivers seen in the crashes.
The RAM modules were not seen on the Qualified Vendor List (QVL).
The AMD Ryzen 5 2600 supports RAM speed up to 2933MHz.
The RAM speed recorded at the time the log collector was ran was 3200MHz



Please perform the following steps:


1) Open administrative command prompt (ACP) and type or copy and paste:
2) chkdsk /scan
3) wmic recoveros set autoreboot = false
4) wmic recoveros set DebugInfoType = 7
5) wmic recoveros get autoreboot
6) wmic recoveros get DebugInfoType
7) bcdedit /enum {badmemory}

8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread


9) Make sure that there is no over clocking while troubleshooting



10) Replace: rt640x64.sys
Realtek PCIe GbE Family Controller

Updating a driver.


Code: 
Name    [00000001] Realtek PCIe GbE Family Controller
Adapter Type    Ethernet 802.3
Product Type    Realtek PCIe GbE Family Controller
Installed    Yes
PNP Device ID    PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_0C\01000000684CE00000
Last Reset    10/24/2020 3:36 AM
Index    1
Service Name    rt640x64
I/O Port    0x0000F000-0x0000FFFF
Memory Address    0xF7500000-0xF75FFFFF
Memory Address    0xF2200000-0xF22FFFFF
IRQ Channel    IRQ 4294967269
Driver    C:\WINDOWS\SYSTEM32\DRIVERS\RT640X64.SYS (10.36.701.2019, 1.11 MB (1,167,768 bytes), 11/20/2019 3:00 PM)


Code: 
rt640x64    Realtek RT640 NT Driver    c:\windows\system32\drivers\rt640x64.sys    Kernel Driver    Yes    Manual    Running    OK    Normal    No    Yes

rt640x64.sysRealtek NICDRV 8169 PCIe GBE Family Controller driverhttp://www.realtek.com.tw/downloads...d=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

Unofficial Realtek update site for older drivers -

Realtek network drivers for RTL8101E and Windows 7 64bit




11) Replace: nvlddmkm.sys
Nvidia GPU drivers

a) uninstall the Nvidia GPU driver using DDU (display driver uninstaller)
b) re-install the Nvidia GPU driver from the Nvidia website
c) make sure that you check the clean install box and if available install the physx driver.

Display Driver Uninstaller Download version 18.0.3.4 (or newer version if available)
Wagnardsoft

Display Driver Uninstaller: How to use - Windows 7 Help Forums
Display Driver Uninstaller: How to use - Windows 7 Help Forums

Download Drivers | NVIDIA
Download Drivers | NVIDIA



12) Reinstall Malwarebytes


13) Turn off Windows fast startup:
Turn On or Off Fast Startup in Windows 10


14) Return the RAM overclock to stock.


rt640x64.sys Mon Jul 1 02:38:21 2019 (5D19B86D)
nvlddmkm.sys Thu Sep 24 15:07:15 2020 (5F6CFC73)
 
I did everything except step 10, I'm not sure how to replace it :(.
about the ram, do you mean I should turn off the XMP profile?
and I think I should mention that I have another 8 gb stick, I was facing crashes "kernelbase.dll" while playing csgo.
I thought the problem was a bad stick, so I was testing with one stick.



Microsoft Windows [Version 10.0.19042.572]
(c) 2020 Microsoft Corporation. All rights reserved.

C:\Windows\system32>chkdsk /scan
The type of the file system is NTFS.

Stage 1: Examining basic file system structure ...
376064 file records processed.
File verification completed.
Phase duration (File record verification): 3.60 seconds.
6528 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.32 milliseconds.

Stage 2: Examining file name linkage ...
365 reparse records processed.
518240 index entries processed.
Index verification completed.
Phase duration (Index verification): 8.93 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 325.01 milliseconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.36 milliseconds.
365 reparse records processed.
Phase duration (Reparse point and Object ID verification): 2.88 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 23.03 milliseconds.
71089 data files processed.
Phase duration (Data attribute verification): 0.37 milliseconds.
CHKDSK is verifying Usn Journal...
36690784 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 156.53 milliseconds.

Windows has scanned the file system and found no problems.
No further action is required.

249420102 KB total disk space.
114187228 KB in 237470 files.
154264 KB in 71090 indexes.
0 KB in bad sectors.
488438 KB in use by the system.
65536 KB occupied by the log file.
134590172 KB available on disk.

4096 bytes in each allocation unit.
62355025 total allocation units on disk.
33647543 allocation units available on disk.
Total duration: 13.04 seconds (13049 ms).

C:\Windows\system32>wmic recoveros set autoreboot = false
Updating property(s) of '\\MAHMOUDSOUB\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 10 Pro|C:\\Windows|\\Device\\Harddisk0\\Partition3"'
Property(s) update successful.

C:\Windows\system32>wmic recoveros set DebugInfoType = 7
Updating property(s) of '\\MAHMOUDSOUB\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 10 Pro|C:\\Windows|\\Device\\Harddisk0\\Partition3"'
Property(s) update successful.

C:\Windows\system32>wmic recoveros get autoreboot
AutoReboot
FALSE


C:\Windows\system32>wmic recoveros get DebugInfoType
DebugInfoType
7


C:\Windows\system32>bcdedit /enum {badmemory}

RAM Defects
-----------
identifier {badmemory}

C:\Windows\system32>
 
It's best to use RAM modules that had been tested by the motherboard manufacturer.
These are modules displayed on the QVL.
B450M DS3H (rev. 1.0) Support | Motherboard - GIGABYTE Global

Untested modules may be incompatible with the motherboard.

Having one RAM module that is on the list will make the troubleshooting easier.


For any BSOD:

a) run the V2 log collector to collect new log files

b) open file explorer> this PC > C: > in the right upper corner search for: C:\Windows\memory.dmp
> if the file size is < 1.5 GB then zip > post a separate share link into the thread using one drive, drop box, or google drive
 
Open Ccleaner > click windows tab or custom clean > scroll down to system and advanced > post an image into the thread
 
The mini dumps did not appear in the latest run of the log collector.

For Ccleaner uncheck:
a) Memory Dumps
b) Windows Log Files

During the troubleshooting do not use the Microsoft disk cleanup tool nor any third party cleaning software.
 
Hi, pc just crashed while playing csgo, didn't get to a blue screen, just froze and stayed frozen, so I had to restart.
here's the log.
 

Attachments

I uninstalled IDM, still crashed while playing csgo, no BSOD no freezing, the game and Spotify just closed.
here's the new log.
 

Attachments

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top