systemstech
asked on
Windows Server 2003 (SBS) faulting svchost.exe in msvcrt.exe shuts down many services
We have been getting the following error on a Small Business Server (SBS) 2003 server that shuts down many critical services, basically everything running as svchost.exe. During bootup the services fail, and if we try to start all the services manually after logon the error happens again and shuts them down.
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 6/14/2008
Time: 1:09:47 PM
User: N/A
Computer: SERVER01
Description:
Faulting application svchost.exe, version 5.2.3790.3959, faulting module msvcrt.dll, version 7.0.3790.3959, fault address 0x00038da3.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 32 2e 33 37 39 5.2.379
0028: 30 2e 33 39 35 39 20 69 0.3959 i
0030: 6e 20 6d 73 76 63 72 74 n msvcrt
0038: 2e 64 6c 6c 20 37 2e 30 .dll 7.0
0040: 2e 33 37 39 30 2e 33 39 .3790.39
0048: 35 39 20 61 74 20 6f 66 59 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 33 38 64 61 33 38da3
We have been able to keep running by leaving the following services shut down but this is not a good solution:
AUTOMATIC UPDATES
COMPUTER BROWSER
CRYPTOGRAPHIC SERVICES
DISTRIBUTED LINK TRACKING CLIENT
DISTRIBUTED LINK TRACKING SERVER
GFI LIST SERVER
LOGICAL DISK MANAGER
PERFORMANCE LOGS AND ALERTS
ROUTING AND REMOTE ACCESS
SECONDARY LOGON
WINS
We've tried replacing the version of msvcrt, reapplying service pack 2, and more. This is a production server with many apps running on it including:
exchange 2003
shared fax
pervasive
piracle
primavera
sybase sql anywhere 7
symantec mail security 4.5
symantec antivirus 8.1
symantec backup exec 10d
gfi mailessentials
apc powerchute
etc..
before anyone tells me to remove any software on the list, that's just not going to happen, this is a production server. Any help or pointers to track down the problem are appreciated!
Thanks,
John
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 6/14/2008
Time: 1:09:47 PM
User: N/A
Computer: SERVER01
Description:
Faulting application svchost.exe, version 5.2.3790.3959, faulting module msvcrt.dll, version 7.0.3790.3959, fault address 0x00038da3.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 32 2e 33 37 39 5.2.379
0028: 30 2e 33 39 35 39 20 69 0.3959 i
0030: 6e 20 6d 73 76 63 72 74 n msvcrt
0038: 2e 64 6c 6c 20 37 2e 30 .dll 7.0
0040: 2e 33 37 39 30 2e 33 39 .3790.39
0048: 35 39 20 61 74 20 6f 66 59 at of
0050: 66 73 65 74 20 30 30 30 fset 000
0058: 33 38 64 61 33 38da3
We have been able to keep running by leaving the following services shut down but this is not a good solution:
AUTOMATIC UPDATES
COMPUTER BROWSER
CRYPTOGRAPHIC SERVICES
DISTRIBUTED LINK TRACKING CLIENT
DISTRIBUTED LINK TRACKING SERVER
GFI LIST SERVER
LOGICAL DISK MANAGER
PERFORMANCE LOGS AND ALERTS
ROUTING AND REMOTE ACCESS
SECONDARY LOGON
WINS
We've tried replacing the version of msvcrt, reapplying service pack 2, and more. This is a production server with many apps running on it including:
exchange 2003
shared fax
pervasive
piracle
primavera
sybase sql anywhere 7
symantec mail security 4.5
symantec antivirus 8.1
symantec backup exec 10d
gfi mailessentials
apc powerchute
etc..
before anyone tells me to remove any software on the list, that's just not going to happen, this is a production server. Any help or pointers to track down the problem are appreciated!
Thanks,
John
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
http://groups.google.com/group/microsoft.public.isa.vpn/browse_thread/thread/74c54bbee3e77107/bd7987dd35414983?lnk=raot
I guess this explains some services shutting down, if the TCP/IP stack is corrupt.
Give this a shot and see what happens.