This is what is showing in Windows Logs/Application
Code:
Log Name: Application
Source: Application Error
Date: 26 Jan 2013 7:00:49 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: bluedragon
Description:
Faulting application name: explorer.exe, version: 6.2.9200.16433, time stamp: 0x50763312
Faulting module name: DUser.dll, version: 6.2.9200.16384, time stamp: 0x5010846e
Exception code: 0xc0000005
Fault offset: 0x000000000001fbe5
Faulting process id: 0x2f0
Faulting application start time: 0x01cdfc34d9dff813
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\DUser.dll
Report Id: c08bbc04-682d-11e2-beb0-f46d042848a5
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-27T03:00:49.000000000Z" />
<EventRecordID>9294</EventRecordID>
<Channel>Application</Channel>
<Computer>bluedragon</Computer>
<Security />
</System>
<EventData>
<Data>explorer.exe</Data>
<Data>6.2.9200.16433</Data>
<Data>50763312</Data>
<Data>DUser.dll</Data>
<Data>6.2.9200.16384</Data>
<Data>5010846e</Data>
<Data>c0000005</Data>
<Data>000000000001fbe5</Data>
<Data>2f0</Data>
<Data>01cdfc34d9dff813</Data>
<Data>C:\Windows\explorer.exe</Data>
<Data>C:\Windows\SYSTEM32\DUser.dll</Data>
<Data>c08bbc04-682d-11e2-beb0-f46d042848a5</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 26 Jan 2013 7:00:53 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: bluedragon
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: explorer.exe
P2: 6.2.9200.16433
P3: 50763312
P4: DUser.dll
P5: 6.2.9200.16384
P6: 5010846e
P7: c0000005
P8: 000000000001fbe5
P9:
P10:
Attached files:
C:\Users\Roydon\AppData\Local\Temp\WER846E.tmp.appcompat.txt
C:\Users\Roydon\AppData\Local\Temp\WER847F.tmp.WERInternalMetadata.xml
C:\Users\Roydon\AppData\Local\Temp\WER848F.tmp.hdmp
C:\Users\Roydon\AppData\Local\Temp\WER8819.tmp.dmp
These files may be available here:
C:\Users\Roydon\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_explorer.exe_a29054a3b49a761d30352936e55c3698bdec59d2_cab_1bca8a57
Analysis symbol:
Rechecking for solution: 0
Report Id: c08bbc04-682d-11e2-beb0-f46d042848a5
Report Status: 4
Hashed bucket:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-27T03:00:53.000000000Z" />
<EventRecordID>9295</EventRecordID>
<Channel>Application</Channel>
<Computer>bluedragon</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>explorer.exe</Data>
<Data>6.2.9200.16433</Data>
<Data>50763312</Data>
<Data>DUser.dll</Data>
<Data>6.2.9200.16384</Data>
<Data>5010846e</Data>
<Data>c0000005</Data>
<Data>000000000001fbe5</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
C:\Users\Roydon\AppData\Local\Temp\WER846E.tmp.appcompat.txt
C:\Users\Roydon\AppData\Local\Temp\WER847F.tmp.WERInternalMetadata.xml
C:\Users\Roydon\AppData\Local\Temp\WER848F.tmp.hdmp
C:\Users\Roydon\AppData\Local\Temp\WER8819.tmp.dmp</Data>
<Data>C:\Users\Roydon\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_explorer.exe_a29054a3b49a761d30352936e55c3698bdec59d2_cab_1bca8a57</Data>
<Data>
</Data>
<Data>0</Data>
<Data>c08bbc04-682d-11e2-beb0-f46d042848a5</Data>
<Data>4</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 26 Jan 2013 7:00:53 PM
Event ID: 1002
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: bluedragon
Description:
The shell stopped unexpectedly and explorer.exe was restarted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="16384">1002</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-27T03:00:53.000000000Z" />
<EventRecordID>9296</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>bluedragon</Computer>
<Security />
</System>
<EventData>
<Data>explorer.exe</Data>
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 26 Jan 2013 7:00:54 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: bluedragon
Description:
Fault bucket 81990038, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: explorer.exe
P2: 6.2.9200.16433
P3: 50763312
P4: DUser.dll
P5: 6.2.9200.16384
P6: 5010846e
P7: c0000005
P8: 000000000001fbe5
P9:
P10:
Attached files:
C:\Users\Roydon\AppData\Local\Temp\WER846E.tmp.appcompat.txt
C:\Users\Roydon\AppData\Local\Temp\WER847F.tmp.WERInternalMetadata.xml
C:\Users\Roydon\AppData\Local\Temp\WER848F.tmp.hdmp
C:\Users\Roydon\AppData\Local\Temp\WER8819.tmp.dmp
These files may be available here:
C:\Users\Roydon\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_a29054a3b49a761d30352936e55c3698bdec59d2_1bca958e
Analysis symbol:
Rechecking for solution: 0
Report Id: c08bbc04-682d-11e2-beb0-f46d042848a5
Report Status: 0
Hashed bucket: 821f92a8c517bc1e8da81f5960b95f45
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-27T03:00:54.000000000Z" />
<EventRecordID>9297</EventRecordID>
<Channel>Application</Channel>
<Computer>bluedragon</Computer>
<Security />
</System>
<EventData>
<Data>81990038</Data>
<Data>4</Data>
<Data>APPCRASH</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>explorer.exe</Data>
<Data>6.2.9200.16433</Data>
<Data>50763312</Data>
<Data>DUser.dll</Data>
<Data>6.2.9200.16384</Data>
<Data>5010846e</Data>
<Data>c0000005</Data>
<Data>000000000001fbe5</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
C:\Users\Roydon\AppData\Local\Temp\WER846E.tmp.appcompat.txt
C:\Users\Roydon\AppData\Local\Temp\WER847F.tmp.WERInternalMetadata.xml
C:\Users\Roydon\AppData\Local\Temp\WER848F.tmp.hdmp
C:\Users\Roydon\AppData\Local\Temp\WER8819.tmp.dmp</Data>
<Data>C:\Users\Roydon\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_a29054a3b49a761d30352936e55c3698bdec59d2_1bca958e</Data>
<Data>
</Data>
<Data>0</Data>
<Data>c08bbc04-682d-11e2-beb0-f46d042848a5</Data>
<Data>0</Data>
<Data>821f92a8c517bc1e8da81f5960b95f45</Data>
</EventData>
</Event>