Windows 10: explorer.exe and sihost.exe crashes at startup (happens randomly)

Ever since the brownout occured in the afternoon, now I get the explorer.exe and sihost.exe crashes at startup, plus it happens randomly.

First step I did was using the sfc /scannow and it didn't find anything wrong. Does anyone have the same problem or is it something that is ciritically wrong such as hardware. Thanks! *Smile

:)

 

Explorer.exe and Sihost.exe crash

I'm not confident that there is a way to reinstall that shellhost, but here what you can try for your not working start menu:

Run Windows PowerShell as admin

Paste this command (right click on the blinking text cursor:

Get-AppXPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}

Ignore the red texts that will appear.

Once Done. restart the PC.

If your Start menu is working correctly, i would suggest that you run SFC /scannow using
PowerShell Admin too. This is to be sure that there are no error.
Remember, run SFC just after restarting the PC or you'll have another prob.

Cheers!

 

Explorer.exe and Sihost.exe crash

Hello

After logon for Windows, "explorer" and "sihost" crashes.

when i then run "explorer" manualy it crashes when I try to start "sihost" prossess, so I've uses "regedit" to remove "sihost" from "ShellInfrastructure". so now "explorer" runs fine after startup but i clearly cant get the startmenu to work.

Is there any way to re-install "Microsoft.Windows.ShellExperienceHost"? and posibly "Microsoft.Windows.Cortana"

 

Between both of those .exe files Explorer.exe and sihost.exe which is a shell infrastructure host, it sounds like possibly a shell extension is causing these crashes. Found in windows context menu. Can you look under Event Viewer, Custom Views then Administrator Events and see if you find these errors should be marked in red try posting them here.

Try CCleaner free and use it's context menu tool to disable third party shell extensions can be causing this to happen.
Also use Process explorer https://technet.microsoft.com/en-us/...sexplorer.aspx

 

Here are like 4 errors during the crash in event viewer:

12/7/2015 6:14:22 PM
Code: - System - Provider [ Name] Application Error - EventID 1000 [ Qualifiers] 0 Level 2 Task 100 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2015-12-07T23:14:22.440630800Z EventRecordID 3130 Channel Application Computer Default Security - EventData sihost.exe 10.0.10586.0 5632d7f9 ntdll.dll 10.0.10586.0 5632d193 c0000409 0000000000095067 cac 01d1314501cc8142 C:\WINDOWS\system32\sihost.exe C:\WINDOWS\SYSTEM32\ntdll.dll 38e71224-9ff0-4c1d-884b-a6bf482ad58c [/quote] 12/7/2015 6:14:22 PM
Code: - System - Provider [ Name] Application Error - EventID 1000 [ Qualifiers] 0 Level 2 Task 100 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2015-12-07T23:14:22.971904100Z EventRecordID 3132 Channel Application Computer Default Security - EventData Explorer.EXE 10.0.10586.0 5632d4c0 twinui.appcore.dll 10.0.10586.11 56457778 80270233 0000000000166be4 e58 01d1314501d931ed C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\twinui.appcore.dll 0a45341c-6680-4215-83df-1785afc73776 [/quote] 12/7/2015 6:14:24 PM
Code: - System - Provider [ Name] Microsoft-Windows-Immersive-Shell [ Guid] {315A8872-923E-4EA2-9889-33CD4754BF64} EventID 5973 Version 0 Level 2 Task 5973 Opcode 0 Keywords 0x2000000000000000 - TimeCreated [ SystemTime] 2015-12-07T23:14:24.996772600Z EventRecordID 3134 Correlation - Execution [ ProcessID] 3512 [ ThreadID] 4132 Channel Application Computer Default - Security [ UserID] S-1-5-21-30284798-2221367557-348643218-1001 - EventData AppId Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp ErrorCode -2144927148 [/quote] Here are some errors that happen during the brownout:

12/5/2015 3:09:30PM The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Code: - System - Provider [ Name] Microsoft-Windows-Kernel-Power [ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4} EventID 41 Version 3 Level 1 Task 63 Opcode 0 Keywords 0x8000400000000002 - TimeCreated [ SystemTime] 2015-12-05T20:09:30.258330700Z EventRecordID 3830 Correlation - Execution [ ProcessID] 4 [ ThreadID] 8 Channel System Computer Default - Security [ UserID] S-1-5-18 - EventData BugcheckCode 0 BugcheckParameter1 0x0 BugcheckParameter2 0x0 BugcheckParameter3 0x0 BugcheckParameter4 0x0 SleepInProgress 0 PowerButtonTimestamp 0 BootAppStatus 0 [/quote] 12/5/2015 3:09:32 The previous system shutdown at 2:51:15 PM on ‎12/‎5/‎2015 was unexpected.

Code: - System - Provider [ Name] EventLog - EventID 6008 [ Qualifiers] 32768 Level 2 Task 0 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2015-12-05T20:09:32.713430200Z EventRecordID 3819 Channel System Computer Default Security - EventData 2:51:15 PM ‎12/‎5/‎2015 74404 DF070C00060005000E0033000F001E03DF070C0006000500130033000F001E03600900003C000000010000006009000001000000B00400000100000000000000 Binary data: In Words 0000: 000C07DF 00050006 0033000E 031E000F 0010: 000C07DF 00050006 00330013 031E000F 0020: 00000960 0000003C 00000001 00000960 0030: 00000001 000004B0 00000001 00000000 In Bytes 0000: DF 07 0C 00 06 00 05 00 ß....... 0008: 0E 00 33 00 0F 00 1E 03 ..3..... 0010: DF 07 0C 00 06 00 05 00 ß....... 0018: 13 00 33 00 0F 00 1E 03 ..3..... 0020: 60 09 00 00 3C 00 00 00 `...<... 0028: 01 00 00 00 60 09 00 00 ....`... 0030: 01 00 00 00 B0 04 00 00 ....°... 0038: 01 00 00 00 00 00 00 00 ........[/quote] 12/5/2015 3:09:32PM Audit events have been dropped by the transport. 0
Code: - System - Provider [ Name] Microsoft-Windows-Eventlog [ Guid] {fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148} EventID 1101 Version 0 Level 2 Task 101 Opcode 0 Keywords 0x4020000000000000 - TimeCreated [ SystemTime] 2015-12-05T20:09:32.775932500Z EventRecordID 6057 Correlation - Execution [ ProcessID] 1184 [ ThreadID] 1552 Channel Security Computer Default Security - UserData - AuditEventsDropped Reason 0 [/quote] Code: - System - Provider [ Name] Application Error - EventID 1000 [ Qualifiers] 0 Level 2 Task 100 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2015-12-05T20:09:34.057235900Z EventRecordID 2719 Channel Application Computer Default Security - EventData sihost.exe 10.0.10586.0 5632d7f9 ntdll.dll 10.0.10586.0 5632d193 c0000409 0000000000095067 d3c 01d12f98dbc365ef C:\WINDOWS\system32\sihost.exe C:\WINDOWS\SYSTEM32\ntdll.dll 80b9c73d-38e4-4e1d-b4f5-5c943f00dd96 [/quote] Code: - System - Provider [ Name] Microsoft-Windows-Immersive-Shell [ Guid] {315A8872-923E-4EA2-9889-33CD4754BF64} EventID 5973 Version 0 Level 2 Task 5973 Opcode 0 Keywords 0x2000000000000000 - TimeCreated [ SystemTime] 2015-12-05T20:10:34.715498500Z EventRecordID 2727 Correlation - Execution [ ProcessID] 4008 [ ThreadID] 4028 Channel Application Computer Default - Security [ UserID] S-1-5-21-30284798-2221367557-348643218-1001 - EventData AppId Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp ErrorCode -2144927148 [/quote] As for CCleaner, I disabled the following shell extensions, ClassicShell and PotPlayer. Plus, I honestly don't think it'll cause that crash...but who knows. Anyway, I'm using Process Explorer right now, what do you want me to look for?

Btw, when the crash happens, the file explorer opens immediately at startup. O.O

 

When copy errors from the Event Viewer to get all the information can either right click the error in middle and select Copy to text then paste it to notepad or highlight it and under Actions on the right select Copy and you get the same result, as this give more info, but i have some of general idea of file.Ntdll.dll can be part of display driver found in C:\Windows\system32 folder and othe is part of OS Twinui,appcore.dll.

Never easy to determine this cause, now i would try going into safe mode and if it does not happen there then it is a third party application or file doing this. Can also be file corruption and a misconfigured system .Most of the time as said some third party app or shell extensions is causing it.

Try safe mode first then we will go from there. https://www.tenforums.com/tutorials/2...dows-10-a.html

 

Okay! I copy/pasted the information at the middle so let's try this again:

Code: Faulting application name: Explorer.EXE, version: 10.0.10586.0, time stamp: 0x5632d4c0Faulting module name: twinui.appcore.dll, version: 10.0.10586.11, time stamp: 0x56457778 Exception code: 0x80270233 Fault offset: 0x0000000000166be4 Faulting process id: 0xe58 Faulting application start time: 0x01d1314501d931ed Faulting application path: C:\WINDOWS\Explorer.EXE Faulting module path: C:\WINDOWS\System32\twinui.appcore.dll Report Id: 0a45341c-6680-4215-83df-1785afc73776 Faulting package full name: Faulting package-relative application ID:[/quote] Code: Faulting application name: sihost.exe, version: 10.0.10586.0, time stamp: 0x5632d7f9Faulting module name: ntdll.dll, version: 10.0.10586.0, time stamp: 0x5632d193 Exception code: 0xc0000409 Fault offset: 0x0000000000095067 Faulting process id: 0xcac Faulting application start time: 0x01d1314501cc8142 Faulting application path: C:\WINDOWS\system32\sihost.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: 38e71224-9ff0-4c1d-884b-a6bf482ad58c Faulting package full name: Faulting package-relative application ID:[/quote] Here's the same error during the brownout:

Code: Faulting application name: sihost.exe, version: 10.0.10586.0, time stamp: 0x5632d7f9Faulting module name: ntdll.dll, version: 10.0.10586.0, time stamp: 0x5632d193 Exception code: 0xc0000409 Fault offset: 0x0000000000095067 Faulting process id: 0xd3c Faulting application start time: 0x01d12f98dbc365ef Faulting application path: C:\WINDOWS\system32\sihost.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: 80b9c73d-38e4-4e1d-b4f5-5c943f00dd96 Faulting package full name: Faulting package-relative application ID:[/quote] I'll try logging in to safemode. Last time it crashed when I booted it on cold boot, but this time the crash didn't happen today.

I'd logged to safe mode, but no sihost.exe or explorer.exe crash. Is there anything else I can do?

 

You did Disable 2 shell extensions. When explorer crashes screen does go to a solid color then explorer comes back, correct ?
Definitely try safe mode let me know first what happens, since intermittent may have to wait on it. Unexpected shutdowns like brownouts can over many times done cause damage to sectors of a hard drive and possibly corrupt files, but not once for hard drive.

 

I did disable all the extensions on ccleaner. Last time explorer crash, I don't think it turns into a solid color, like it starts up normally with the exception of the files explorer opens immediately without clicking on it.

edit: Okay, I booted to safe mode and it seems to startup normally. No crashes or anything.

 

O.k. bit confused, talking about file explorer opening during the crash, this is where your folders and drives are ? Usually when explorer.exe crashes screen goes blank and only thing that shows is your personalized color on the screen and a blank taskbar.

 

Yes. It shows the folders and frequent folders and stuff. I dont remember about blank taskbar and blank screen.

 

So basically when this happens does a warning box come on the screen saying explorer.exe has stopped working ?

 

No. No warning box hasn't come on screen during the crash, but it showed on reliability history and event viewer.

 

So when you are saying this " Ever since the brownout occured in the afternoon, now I get the explorer.exe and sihost.exe crashes at startup, plus it happens randomly. "

You meant only in Event Viewer and reliability monitor ? What exactly is happening again on screen ? Just File explorer opens on it's own ?

 

Yes. It just shows file explorer that opens on its own.