After network login the explorer crashes in function GetFlagsAndCleanIconString

[Joachim Emde]

Hello,


we have a strange problem with one of our PCs. Few days after installing Windows 10 2004 the explorer starts to crash when a user logins with a domain account. With a local account everthing ist fine. Restarting the explorer with the task manager shows for two seconds the taskbar and than the explorer crashes again. The result ist allways a black screen with a mouse cursor. The problem persists also after an inplace upgrade to windows 10 20H2.


Starting the explorer on a directory works fine. I can browse through the filessystem, change options, copy files etc. Only this first explorer process after starting a login session fails.


Theese standard operations where made without an effect:


o sfc /scannow

o chkdsk c:

o DISM.exe /Online /Cleanup-image /Scanhealth
o Get-AppXPackage -AllUsers |Where-Object {$_.InstallLocation -like "*SystemApps*"} | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
o Disable all non microsoft explorer extensions

o The event protocoll is empty except the explorer crashes

o Delete alle Icons from the desktop


I loaded a dump of the crashed explorer into a debugger. This ist the information about the function with the failure:



SYMBOL_NAME: shell32!GetFlagsAndCleanIconString+b
MODULE_NAME: shell32
IMAGE_NAME: shell32.dll
STACK_COMMAND: ~0s ; .ecxr ; kb
FAILURE_BUCKET_ID: NULL_POINTER_READ_c0000005_shell32.dll!GetFlagsAndCleanIconString
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x86
OSNAME: Windows 10
IMAGE_VERSION: 10.0.19041.572

This is the top of the stack:


02c7e1fc 7710320d 133e13b2 059e3850 00000000 shell32!GetFlagsAndCleanIconString+0xb
02c7e240 771030bd 059e3850 77007ca4 77103070 shell32!IconNameTable::ReadIcons+0x133
02c7e260 77102c5f 046d1ef4 059e3850 046d1ee4 shell32!IconNameTable:eserialize+0x4d
02c7e288 77102b88 046d1eec 059e3850 00000000 shell32!DesktopDictionary:eserialize+0x6f
02c7e2c8 77102ad7 046d1ee4 059e3850 133e12f2 shell32!DesktopIconLayoutDataModel::Load+0x58
02c7e300 7714a108 77004780 77118770 02c7e358 shell32!IconLayoutEngine::ReadStreamFromPropertyBag+0x6e
02c7e310 771187c6 133e12aa 00000001 77118770 shell32!<lambda_b437aaf838a5e5024ef9724c3c3cb306>:perator()+0x29
02c7e358 74164818 046d1e90 04694f38 10231e04 shell32!CListViewHost::OnSettingsLoad+0x56
02c7e394 741644cc 04694f38 10231e54 046d1e90 windows_storage!CViewSettings::_FireLoadEvent+0x5e
02c7e3c4 74164339 00000001 74164320 02c7e3f0 windows_storage!CViewSettings::_EnsureViewSettings+0xc7


If I search for the function name in the internet I get no result.

Is there anybody out there who has an idea, what the problem could be?

Thanks in advance

Continue reading...

 

[CPLT-C1]

I realise this is an old post, but I'm experiencing the same issue - same stack error reports from the .dmp file. This happens after a domain user logs into a particular workstation. Logging in other machines works perfectly fine.
Did anyone have any hints as to why this is happening. This is on Windows 10.0.19044