Solved

SVCHOST.EXE error when opening "My Computer"

Posted on 2007-03-27
7
1,271 Views
Last Modified: 2008-01-21
One of our users has had an error message show up lately on his laptop running WinXP Pro.  The error message says...

svchost.exe - Application Error
The instruction at "0x00a296bc" referenced memory at "0x00000000". The memory could not be "written".
OK to terminate
CANCEL to debug

The entry in the Event Viewer says...

Event Type:      Error
Event Source:      Application Error
Event Category:      (100)
Event ID:      1000
Date:            3/27/2007
Time:            1:32:29 PM
User:            N/A
Computer:      TIMLAPTOP
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module unknown, version 0.0.0.0, fault address 0x00a296bc.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 76 63   ure  svc
0018: 68 6f 73 74 2e 65 78 65   host.exe
0020: 20 35 2e 31 2e 32 36 30    5.1.260
0028: 30 2e 32 31 38 30 20 69   0.2180 i
0030: 6e 20 75 6e 6b 6e 6f 77   n unknow
0038: 6e 20 30 2e 30 2e 30 2e   n 0.0.0.
0040: 30 20 61 74 20 6f 66 66   0 at off
0048: 73 65 74 20 30 30 61 32   set 00a2
0050: 39 36 62 63               96bc    


It happens at various times, but I can faithfully recreate the error every time I open "My Computer".  Everytime I open "My Compter", the flashlight waves back and forth searching for drives for about 10 seconds.  Then the error message pops up and eventually all the drives show up.  

When watching Task Manager, there is a new svchost.exe process that appears when I try to open "My Computer".  Once the error message appears and I click OK to terminate the program, it disappears.

Any idea on how to narrow down what is causing the problem or how to fix it? Thanks.

~bruno71
0
Comment
Question by:bruno71
7 Comments
 
LVL 27

Expert Comment

by:michko
ID: 18802251
0
 
LVL 7

Accepted Solution

by:
Calmar46 earned 500 total points
ID: 18803733
Try Process Explorer for an extended view of what tasks and apps are running.

http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx
0
 
LVL 20

Expert Comment

by:cpc2004
ID: 18813049
The crash maybe caused by faulty ram, virus of software error. Run memtest and if no errors is reported . The problem maybe related to virus. Run AV and Spyware to make sure your windows is clean,  If your windows still crashes, the problem may be related to software error.  If you search google, there has a lot of hits relating error at SVCHOST. You do not know which one can fix your problem. You have to analyse DrWaston log to find out the culprit.


Whenever an error occurs in a program, the error is handled by the program's error handler. If by any chance an error occurs and is not handled by the program, then Windows passes on this error handling to the windows default error handler i.e. DrWatson. The Dr Watson error debugger will write a log file Drwatson.log about the program that caused the error and other details about the error scenario which will include the task list of all the programs that were running at that time. You can open the Drwatson.log file to find out what program or service has caused this error.

Attach the following files at any webspace. I will study your log and dumps.
C:\Documents and Settings\All Users\Documents\DrWatson\user.dmp
C:\Documents and Settings\All Users\Documents\DrWatson\drwtsn32.log (XP)

Upload Minidumps to EE "Expert Area"
. Login http://www.ee-stuff.com using your Experts-Exchange username and password.
. Click on "Expert Area" tab
. Type url link of your Question
. "Browse" your pc to the location of your Minidumps click "Upload"
. Copy the resulting "url" and post it back here.

DrWatson is acculumated. If you have a huge DrWatson log (ie file size more than 2MB). Your windows has potential problem.  If the DrWatson log is more than 1MB, cut and paste the last 3 system crashes and upload the dump.  Rename DrWatson log to another name. When windows crashes, it writes a new DrWatson log.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Comment

by:bruno71
ID: 18815386
I think we've got it!

Michko - I had already tried your solution.  Auto Updates was already turned off.  And the error I was getting was more generic.

cpc2004 - Thanks for pointing me to the Dr Watson log file.  This will come in handy in the future.  Unfortunately, it didn't help with this issue.

Calmar46 - Congratulations!  I've found a new favorite tool.  The Process Explorer app gave me more details on the source of the problem.  It had something to do with the Windows Image Acquisition service.  I disabled that service and haven't had any problems yet.  Thanks for your help.

~bruno71
0
 
LVL 7

Expert Comment

by:Calmar46
ID: 18820163
Good onya! Guess that's why Microsoft bought Sysinternals.
Thanks for the points.
0
 

Expert Comment

by:Flying_High_71
ID: 20696470
May I add that I also had the same symptoms and using the suggestion in this forum and the suggestion by Calmar46 to use the 'Process Explorer' I also found the Windows Image Acquisition service (which according to the Windows XP Administrative Tool is used for Cameras and Scanners) as 'at fault' but rather than disabling it I uninstalled the HP (Heap of Poo) Printer and Scanner software and the problem was resolved.  What HP Scanner software has to do with opening My Computer I have no idea, but by removing it, the problem was resolved none the less!  

Thank you Calmar46
0
 

Author Comment

by:bruno71
ID: 20705688
I found the same culprit.  The user had an all-in-one HP at home.  At home, it worked fine.  But when he was not connected to his home network, the HP software searched and searched and searched for the printer/scanner.  
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
You are currently not connected to any networks 3 777
Repair old Windows 2000 boot 15 208
Application Not Found 3 96
active directory 5 53
Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now