Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Generic Host Process and svchost.exe Errors on Start-up


  • This topic is locked This topic is locked
36 replies to this topic

#1 lafogg

lafogg

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 01:27 PM

This is my go-to forum for solving problems. This problem is the toughest yet.

My computer starts up, I can log in. But when I do, 2 boxes pop up: 1) a box with 'Data Execution Prevention - Microsoft Windows' on top. In the box is Generic Host Process for Win32 Services 2) a box with 'svchost.exe - Application Error' on top and in the box: The instruction at "0x00000000" referenced memory at "0x00000000". The memory could not be "written". Click ok to terminate the program. Click on Cancel to debug the program.

The computer locks up, and I have to turn the computer off if I click the boxes to get rid of them. When the computer is turned back on, I can log in, but the same thing happens.

I have malwarebytes and comodo. I've updated them and run them both, but nothing is detected. I'd appreciate any help you can give me. Thanks!

Leslie

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,260 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:20 AM

Posted 09 November 2010 - 02:09 PM

I guess I don't understand...how you can run any scans...if your system locks up right after logging in.

System manufacturer and model?

Can you boot into safe made or any variation thereof?

FWIW: Svchost.exe errors, IME, can be malware items.

Louis

#3 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 02:16 PM

Hi Louis,

If I don't click on the error boxes, I can do some things like run malwarebytes and comodo. Yes, I can run in safe mode without the boxes popping up. I have a Dell Dimension E520. Windows XP is up-to-date with SP3.
Thanks.

Leslie

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,260 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:20 AM

Posted 09 November 2010 - 02:26 PM

I would go to Event Viewer...and look for any error which indicates a problem with svchost.exe.

Post the ID#, source amd detail for such.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/topic40108.html

Louis

#5 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 02:42 PM

This is what I copied, which seems to correlate to the problem:



Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 11/9/2010
Time: 2:36:57 PM
User: N/A
Computer: LESLIE
Description:
Faulting application svchost.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6c707041 74616369 206e6f69 6c696146
0010: 20657275 63767320 74736f68 6578652e
0020: 302e3020 302e302e 206e6920 6e6b6e75
0030: 206e776f 2e302e30 20302e30 6f207461
0040: 65736666 30302074 30303030 3030


Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 11/9/2010
Time: 2:37:08 PM
User: N/A
Computer: LESLIE
Description:
Faulting application svchost.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0028: 20 69 6e 20 75 6e 6b 6e in unkn
0030: 6f 77 6e 20 30 2e 30 2e own 0.0.
0038: 30 2e 30 20 61 74 20 6f 0.0 at o
0040: 66 66 73 65 74 20 30 30 ffset 00
0048: 30 30 30 30 30 30 000000

#6 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:20 AM

Posted 09 November 2010 - 02:50 PM

What have you installed recently?

#7 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 05:09 PM

Actually the night before this started, I downloaded a program called batchstamper to put dates on photos. That was the last thing I did with my computer for the night. The next morning everything I described started. I thought I removed the program because I figured it may be the problem, but it is still happening.

#8 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:20 AM

Posted 09 November 2010 - 05:12 PM

You may want to try this: Revo Uninstaller

#9 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 05:25 PM

Hi:

I downloaded and ran revo uninstaller, but batchstamper did not appear.

#10 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:20 AM

Posted 09 November 2010 - 05:41 PM

What AV do you use?

#11 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 06:04 PM

comodo is my av program. (sorry, for my ignorance--you mean my antivirus program, right?)

#12 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:20 AM

Posted 09 November 2010 - 06:08 PM

Do you get any associated BSOD's?

#13 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 06:19 PM

No bsods.

#14 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:10:20 AM

Posted 09 November 2010 - 06:25 PM

Can you take a screenshot of the window that pops up?

Also a screenshot of your services window via Administrative Tools.

#15 lafogg

lafogg
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Local time:06:20 AM

Posted 09 November 2010 - 07:12 PM

I don't know if I did this correctly. I attached the screenshots.

Thanks.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users