Bitdefender Total Security 2016 Try-out Broke Explorer.exe On Windows 7 X64
Last night I tried to get Bitdefender Internet Security 2016 for a test run, but the installer sent me Bitdefender Total Security 2016 instead.
The install went perfect, the scan was fine, nothing found, no immediate overhead troubles.
I'd seen already that in Vulnerability it had said that I had a couple of Windows Updates that I hadn't installed (KB3035583, KB3102429, KB3112148 and KB3107998), all recommended but not important updates. I don't want KB3035583 on my system as that's the Windows 10 installer file, and I'd rather not have Win10 at this time. I have its update hidden in Windows Update, but Bitdefender found I needed to install it anyway, as else my system was insecure.
So today I allowed Bitdefender to install KB3102429, KB3112148 and KB3107998. Rebooted my system. Logged back in. And entered despair, because where normally my desktop would load I would now get a message that explorer.exe had crashed and that it needed to be closed. So my screens stayed black, with a mouse pointer I couldn't use on anything.
Pressed the reboot button, went to load in Safe Mode.
Here I found I couldn't reach Windows Update to try to uninstall the updates I had just installed. Apparently Bitdefender takes over Windows Update, and it doesn't allow the user to reach it anymore. I'd get error messages with all long hexadecimal numbers on them, and just the message that the server couldn't be found.
Bitdefender itself cannot be loaded under Windows Safe Mode either. So then options rapidly diminish.
Downloaded AppCrashView, used the command line to unzip the file, because Explorer didn't work...
Ran AppCrashView. It showed on each crash of explorer.exe that LoadedModule[3]=N:\Bitdefender\Bitdefender 2016\Active Virus Control\Avc3_00331_002\avcuf64.dll seemed to play a role. All the rest of the modules were libraries in SYSTEM32.
Okay, so I couldn't uninstall the updates I had previously installed... so I went and uninstalled Bitdefender.
Rebooted and aside from the system feeling faster in the reboot, after login explorer.exe didn't crash and allowed me to see my desktop again.
I can also normally reach Windows Update again, so I have since uninstalled those 3 updates. Better safe than sound. They won't return on my system.
Now, I don't really need help fixing this. Am just reporting that there may be a problem with any of those three Windows Updates on Windows 7 x64 and Bitdefender TS 2016. And since the BD page didn't allow me to start an email ticket (in three different browsers it refused to give me a ticket), I think perhaps people here want to know.
A full error message from AppCrashView next:
Version=1
EventType=AutoVerifierV2
EventTime=130954410644679086
ReportType=2
Consent=1
UploadTime=130954410644919099
ReportIdentifier=f5e5a9a1-aa4a-11e5-865d-bc5ff419f74a
IntegratorReportIdentifier=f5e5a9a0-aa4a-11e5-865d-bc5ff419f74a
Response.BucketId=2324512014
Response.BucketTable=5
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=explorer.exe
Sig[1].Name=Application Version
Sig[1].Value=6.1.7601.17567
Sig[2].Name=Application Timestamp
Sig[2].Value=4d672ee4
Sig[3].Name=Fault Module Name
Sig[3].Value=verifier.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=6.1.7600.16385
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=4a5be081
Sig[6].Name=Exception Code
Sig[6].Value=80000003
Sig[7].Name=Exception Offset
Sig[7].Value=000000000000ae03
Sig[8].Name=Status Code
Sig[8].Value=210
Sig[9].Name=OriginalBucketID
Sig[9].Value=0
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7601.2.1.0.256.1
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1043
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=e8cd
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=e8cd8e90813c58e685d0b1f6743e7dbd
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=fa34
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=fa341486c4e4038566bcfe5c299075a5
UI[2]=C:\Windows\explorer.exe
UI[3]=Windows Explorer has stopped working
UI[4]=Windows can check online for a solution to the problem.
UI[5]=Check online for a solution and close the program
UI[6]=Check online for a solution later and close the program
UI[7]=Close the program
LoadedModule[0]=C:\Windows\explorer.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\system32\verifier.dll
LoadedModule[3]=N:\Bitdefender\Bitdefender 2016\Active Virus Control\Avc3_00331_002\avcuf64.dll
LoadedModule[4]=C:\Windows\system32\KERNEL32.dll
LoadedModule[5]=C:\Windows\system32\KERNELBASE.dll
LoadedModule[6]=C:\Windows\system32\ADVAPI32.dll
LoadedModule[7]=C:\Windows\system32\msvcrt.dll
LoadedModule[8]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[9]=C:\Windows\system32\RPCRT4.dll
LoadedModule[10]=C:\Windows\system32\GDI32.dll
LoadedModule[11]=C:\Windows\system32\USER32.dll
LoadedModule[12]=C:\Windows\system32\LPK.dll
LoadedModule[13]=C:\Windows\system32\USP10.dll
LoadedModule[14]=C:\Windows\system32\SHLWAPI.dll
LoadedModule[15]=C:\Windows\system32\SHELL32.dll
LoadedModule[16]=C:\Windows\system32\ole32.dll
LoadedModule[17]=C:\Windows\system32\OLEAUT32.dll
LoadedModule[18]=C:\Windows\system32\EXPLORERFRAME.dll
LoadedModule[19]=C:\Windows\system32\DUser.dll
LoadedModule[20]=C:\Windows\system32\DUI70.dll
LoadedModule[21]=C:\Windows\system32\IMM32.dll
LoadedModule[22]=C:\Windows\system32\MSCTF.dll
LoadedModule[23]=C:\Windows\system32\UxTheme.dll
LoadedModule[24]=C:\Windows\system32\POWRPROF.dll
LoadedModule[25]=C:\Windows\system32\SETUPAPI.dll
LoadedModule[26]=C:\Windows\system32\CFGMGR32.dll
LoadedModule[27]=C:\Windows\system32\DEVOBJ.dll
LoadedModule[28]=C:\Windows\system32\dwmapi.dll
LoadedModule[29]=C:\Windows\system32\slc.dll
LoadedModule[30]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.19061_none_2b299d
b671e86e03\gdiplus.dll
LoadedModule[31]=C:\Windows\system32\Secur32.dll
LoadedModule[32]=C:\Windows\system32\SSPICLI.DLL
LoadedModule[33]=C:\Windows\system32\PROPSYS.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=DataRequest
State[1].Value=Bucket=-1970455282/nBucketTable=5/nResponse=1/n
FriendlyEventName=Stopped working
ConsentKey=AutoVerifierV2
AppName=Windows Explorer
AppPath=C:\Windows\explorer.exe
Windows Event Viewer:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: verifier.dll, version: 6.1.7600.16385, time stamp: 0x4a5be081
Exception code: 0x80000003
Fault offset: 0x000000000000ae03
Faulting process id: 0x3f8
Faulting application start time: 0x01d13e57b4b05047
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\verifier.dll
Report Id: f5e5a9a0-aa4a-11e5-865d-bc5ff419f74a
