I have seen this with 4 users in the last day. They are working and saving occasionally. At some point when they save, Excel stops responding. We force Excel to close, and the source Excel file is gone! We find there are two files that were created. One with a .tmp file extension, the other has no file extension. For example, in one case the files were named 3F04D520 and 31545502.tmp.
We can recover the file by opening the .tmp file with Excel, then saving as Excel Workbook again. But the crashing continues. Need some help with this one.
We do see this event in Event Logs.
Log Name: Application
Source: Application Hang
Date: 6/17/2015 4:08:29 PM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: computername.domain.local
Description:
The program EXCEL.EXE version 14.0.7151.5001 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1b8c
Start Time: 01d0a9418d6a3d11
Termination Time: 31
Application Path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
Report Id: f76fa9df-1534-11e5-827c-3417eb9f6855
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</EventID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-17T21:08:29.000000000Z" />
<EventRecordID>40120</EventRecordID>
<Channel>Application</Channel>
<Computer>computername.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>EXCEL.EXE</Data>
<Data>14.0.7151.5001</Data>
<Data>1b8c</Data>
<Data>01d0a9418d6a3d11</Data>
<Data>31</Data>
<Data>C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE</Data>
<Data>f76fa9df-1534-11e5-827c-3417eb9f6855</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>55006E006B006E006F0077006E0000000000</Binary>
</EventData>
</Event>