[jolces]

Hi:

I keep getting the following error after I boot-up my PC. I also get it some times after shutting down and the auto update trys to run.

I sent the Error Report on the Generic Host Process for WIN32 Services and was instructed to download the following MS patch (WindowsXP-KB894391-x86-ENU). I ran the patch several times, but I still get the errors.

Any advice would be great!

Thanks,
Jolces

Attached File(s)

•  Doc1.doc (262.5K)
  Number of downloads: 72

[jolces]

Hi:

I just wanted to follow-up on the issue denoted below. Any help would be great!

Thanks,
J

[Fenor]

Hi jolces!

Please go into the Event Viewer and see what errors occurred at the time you get this error message.

Click START-->RUN and type EVENTVWR.MSC and hit ENTER.

Look under SYSTEMS AND APPLICATIONS for items with RED X's that happened at the SAME time as your problem...List them here.

Fenor

[jolces]

Thanks, Fenor!

Here are the logs, I listed the errors during the period I get the error. In looking at the application error log, it looks like the errors appear during the MS Auto Update process. I also recall getting some of the errors when I shutdown and the auto update runs before the PC fully shutsdown. I also get the error during normal use as well. Let me know if you need more detail!

Thanks,
J

Application log:
Type Date Time Source Category Event User Computer

Error 10/4/2006 7:11:04 PM Application Error (100) 1000 N/A MADDIE
Warning 10/1/2006 3:57:57 PM Userenv None 1517 SYSTEM MADDIE
Error 10/1/2006 8:20:11 AM Application Hang (101) 1002 N/A MADDIE
Information 10/1/2006 8:18:45 AM Automatic LiveUpdate Scheduler Scheduler Events 101 SYSTEM MADDIE
Error 10/1/2006 8:18:09 AM Application Error (100) 1000 N/A MADDIE

Error 10/1/2006 8:07:55 AM Application Error (100) 1000 N/A MADDIE
Error 10/1/2006 8:05:54 AM Application Error None 1001 N/A MADDIE
Error 10/1/2006 8:05:36 AM Application Error (100) 1004 N/A MADDIE
Error 9/30/2006 8:14:54 PM Application Error (100) 1000 N/A MADDIE
Warning 9/30/2006 8:14:30 PM Userenv None 1517 SYSTEM MADDIE
Error 9/30/2006 6:41:59 PM Application Error None 1000 N/A MADDIE

Error 9/29/2006 5:33:34 PM Application Error None 1001 N/A MADDIE
Information 9/29/2006 5:32:41 PM Automatic LiveUpdate Scheduler Scheduler Events 101 SYSTEM MADDIE
Information 9/29/2006 5:32:41 PM Automatic LiveUpdate Scheduler Scheduler Events 101 SYSTEM MADDIE
Error 9/29/2006 5:31:25 PM Application Error (100) 1000 N/A MADDIE



System Log:
Error 10/4/2006 7:13:25 PM DCOM None 10010 Jason MADDIE

Error 10/1/2006 3:57:46 PM W32Time None 29 N/A MADDIE
Error 10/1/2006 3:57:46 PM W32Time None 17 N/A MADDIE

Warning 10/1/2006 12:43:39 PM WinDefend None 1002 N/A MADDIE

Warning 10/1/2006 10:11:07 AM Tcpip None 4226 N/A MADDIE
Warning 10/1/2006 9:11:56 AM Tcpip None 4226 N/A MADDIE
Error 10/1/2006 8:56:30 AM DCOM None 10010 Jason MADDIE

Error 10/1/2006 8:15:16 AM Service Control Manager None 7000 N/A MADDIE
Error 10/1/2006 8:15:16 AM Service Control Manager None 7009 N/A MADDIE

Error 9/29/2006 5:29:13 PM Service Control Manager None 7000 N/A MADDIE
Error 9/29/2006 5:29:13 PM Service Control Manager None 7009 N/A MADDIE
Error 9/29/2006 5:29:02 PM DCOM None 10005 Jason MADDIE

[samat]

You haven't provided enough information for me to be completely sure, but if there was a crash at 8:56:30 AM and 7:13:25 PM, it would be very similar to a case I handled recently where DCOM was crashing.

In that case, the problem was resolved by disabling DCOM. DCOM can be safely disabled (and re-enabled if required) by the DCOMbobulator tool available at http://grc.com/dcom/

Disabling DCOM using this tool is very easy, should cause no ill effects and will improve the security of your system even if it doesn't fix the problem, so I suggest you give it a try first. There's more information on DCOM and the tool on the linked page.

[jolces]

Thanks, Samat. I downloaded the app, disabled the DCOM, and restarted. Is there any thing else I should do as well.

Let me know if I need to provide more detail from the error log.

Thanks,
J

[samat]

You don't need to do anything else yet, just see what happens, and if the problem doesn't recur then that's great.

If the problem recurs, then it would be useful for you to do the following to help with diagnosis:
- note the time of the error, then open the Event Viewer and choose the System Log
- look for the 'error' entries at the time of the crash and double-click them, there is more information inside such as Source, Category, Event ID, User and Description
- Post the information from the Event Viewer and anything else you think might be relevant

[jolces]

Will do. Thanks for al your help. I will re-post if the problem occurs again with the error detail.

Thanks,
J

[jolces]

Hi:

I got the error again when my PC was shutting down and running an update install. Here is the error log from the application error. Please advise:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/15/2006
Time: 9:24:50 PM
User: N/A
Computer: MADDIE
Description:
Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft....link/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 20 30 2e ure 0.
0018: 30 2e 30 2e 30 20 69 6e 0.0.0 in
0020: 20 75 6e 6b 6e 6f 77 6e unknown
0028: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0030: 20 61 74 20 6f 66 66 73 at offs
0038: 65 74 20 30 30 30 30 30 et 00000
0040: 30 30 30 000

[samat]

OK just a couple more questions:

1) Was the error message exactly the same as before i.e. Generic Host Process for WIN32 Services ?
2) The error details you posted are great but could you check the System log - if the error was the same as before there should be one or more errors in the System log, probably including one from the System Control Manager - this will confirm the cause of the error
3) What kind of update were you doing, was it a Windows update? From the website or automatic?

[jolces]

Yes. The error was the same as in the past. I check the system error log and did not find an "X" error at the same time. I found the following Information log:

Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 10/15/2006
Time: 9:24:50 PM
User: N/A
Computer: MADDIE
Description:
Application popup: svchost.exe - Application Error : The instruction at "0x745f2780" referenced memory at "0x00000000". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program

For more information, see Help and Support Center at http://go.microsoft....link/events.asp.


The error is received when the PC is running its automatic Windows update, either during the shutdown process or during normal usage.

Let me know if you need any other details.

Thanks,
J

[samat]

OK as you have pointed out it is clearly related to Windows Update. This can be caused by corruption in the Windows Update temporary folder, we can 'empty' this folder (actually rename it) to see if this resolves it as follows:

Open Control Panel -> Administrative Tools -> Services
If for any reason Administrative Tools is not present in your Control Panel, then press Start -> Run -> then type "services.msc" in the box and press OK

Look on the list in the right-hand pane for Automatic Updates and double-click it.
Change Startup type to Disabled and then press the Stop button. Once the service has stopped press OK.
Leave the Services window open for now, we will come back to it in a moment.

Open Windows Explorer (right-click the Start button and press explore)
Press Tools -> Folder Options and then choose the View tab
Under the Hidden files and folders heading SELECT Show hidden files and folders
UNCHECK the Hide protected operating system files (recommended) option
Press OK to the prompt and OK to close the options window

Navigate to the folder C:\WINDOWS (or possibly C:\WINNT if C:\WINDOWS isn't there)
Find the folder named SoftwareDistribution and rename it to SoftwareDistributionOld

Press Tools -> Folder Options and then choose the View tab
Under the Hidden files and folders heading UNSELECT Show hidden files and folders
CHECK the Hide protected operating system files (recommended) option
Press OK to close the options window

Now go back to the Services window and double-click Automatic Updates
Change the Startup type to Automatic and press Start
Once the service has started then press OK and close the Services window

Go to Start->Control Panel->Automatic Updates
Check that Automatic is set and that the schedule is appropriate

You should consider at this point going to windowsupdate.microsoft.com and getting up to date, there have been several critical updates released recently, and your computer may be lacking them due to this problem. If you do this you may not know immediately whether this has resolved the problem, but if you don't then you may be at risk. Either way let me know how you get on.

[jolces]

Great, thanks. I made the changes and ran the update via the MS site. I will let you know if I get the error again.

Thanks again,
J