[Cinnamoroll]

Hi guys,

Like every other day, I opened my computer and watch videos from my computer. Suddenly it said "Host process is not working." And "Superfetch stopped working." I have no idea what are those. When I clicked mozilla fox it stopped working. So I uinstalled it and try re-installing it but it failed two times. Btw my computer crashed more than 3 times. Need serious help >< Do i have a serious virus or something?

oh btw my laptop is window vista

Edited by Cinnamoroll, 06 March 2011 - 10:56 AM.

[Advertisements]

When you say it crashes is it freezing up, restarting on it's own or is there a BSOD that flashes?



Please follow the steps below to enter the Event Viewer program in Vista. This will give me more information into what is causing your issue. You can get to Event viewer two ways and I will post both for you.

Method One

• Go to
• Start
• In the Search box type in Event Viewer in the search box and press Enter
• From this point you can follow from step four from the below method as they will be the same.
Method Two

• Go to Start
• Right click on the Computer Icon and select Manage
• Navigate to the Event Viewer, You will be prompted to accept the action you are going to perform. Click continue
• On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.


Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







http://www.resplendence.com/downloads

[rshaffer61]

When you say it crashes is it freezing up, restarting on it's own or is there a BSOD that flashes?



Please follow the steps below to enter the Event Viewer program in Vista. This will give me more information into what is causing your issue. You can get to Event viewer two ways and I will post both for you.

Method One

• Go to
• Start
• In the Search box type in Event Viewer in the search box and press Enter
• From this point you can follow from step four from the below method as they will be the same.
Method Two

• Go to Start
• Right click on the Computer Icon and select Manage
• Navigate to the Event Viewer, You will be prompted to accept the action you are going to perform. Click continue
• On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.


Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







http://www.resplendence.com/downloads

[Cinnamoroll]

Log Name: System
Source: Service Control Manager
Date: 3/5/2011 3:24:11 PM
Event ID: 7031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: maggie-PC
Description:
The ReadyBoost service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-05T20:24:11.000Z" />
<EventRecordID>227588</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>maggie-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">ReadyBoost</Data>
<Data Name="param2">1</Data>
<Data Name="param3">60000</Data>
<Data Name="param4">1</Data>
<Data Name="param5">Restart the service</Data>
</EventData>
</Event>

[Cinnamoroll]

Log Name: Application
Source: Application Error
Date: 3/5/2011 3:31:27 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: maggie-PC
Description:
Faulting application svchost.exe_BITS, version 6.0.6001.18000, time stamp 0x47918b89, faulting module qmgr.dll, version 7.0.6002.18005, time stamp 0x49e037de, exception code 0xc000001d, fault offset 0x0000b06e, process id 0x1244, application start time 0x01cbdb743b808c10.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-05T20:31:27.000Z" />
<EventRecordID>50593</EventRecordID>
<Channel>Application</Channel>
<Computer>maggie-PC</Computer>
<Security />
</System>
<EventData>
<Data>svchost.exe_BITS</Data>
<Data>6.0.6001.18000</Data>
<Data>47918b89</Data>
<Data>qmgr.dll</Data>
<Data>7.0.6002.18005</Data>
<Data>49e037de</Data>
<Data>c000001d</Data>
<Data>0000b06e</Data>
<Data>1244</Data>
<Data>01cbdb743b808c10</Data>
</EventData>
</Event>

[Cinnamoroll]

Log Name: System
Source: Microsoft-Windows-Dhcp-Client
Date: 3/5/2011 9:45:20 PM
Event ID: 1002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: maggie-PC
Description:
The IP address lease 192.168.1.6 for the Network Card with network address 001A73B908A9 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" EventSourceName="Dhcp" />
<EventID Qualifiers="0">1002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-06T02:45:20.000Z" />
<EventRecordID>228823</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>maggie-PC</Computer>
<Security />
</System>
<EventData>
<Data>192.168.1.6</Data>
<Data>001A73B908A9</Data>
<Data>192.168.1.1</Data>
</EventData>
</Event>

[Cinnamoroll]

Log Name: System
Source: Service Control Manager
Date: 3/5/2011 4:32:05 PM
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: maggie-PC
Description:
The npkcrypt service failed to start due to the following error:
The system cannot find the file specified.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-05T21:32:05.000Z" />
<EventRecordID>227994</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>maggie-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">npkcrypt</Data>
<Data Name="param2">%%2</Data>
</EventData>
</Event>

[Cinnamoroll]

Log Name: System
Source: Ntfs
Date: 3/6/2011 4:37:36 AM
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: maggie-PC
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume OS.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-06T09:37:36.198Z" />
<EventRecordID>229262</EventRecordID>
<Channel>System</Channel>
<Computer>maggie-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>OS</Data>
<Binary>00000C000200380002000000370004C000000000020100C000000000000000000000000000000000BB011700CC74000000000300</Binary>
</EventData>
</Event>

[Cinnamoroll]

Whocrashed

System Information (local)
--------------------------------------------------------------------------------

computer name: MAGGIE-PC
windows version: Windows Vista Service Pack 2, 6.0, build: 6002
windows dir: C:\Windows
CPU: AuthenticAMD AMD Turion™ 64 X2 Mobile Technology TL-64 AMD586, level: 15
2 logical processors, active mask: 3
RAM: 2078142464 total
VM: 2147352576, free: 2015928320



--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.


On Sun 3/6/2011 12:21:34 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini030511-03.dmp
This was probably caused by the following module: ntkrnlpa.exe (nt+0xCDB3F)
Bugcheck code: 0x1A (0x61940, 0x63A21000, 0x1F3D3C06, 0x0)
Error: MEMORY_MANAGEMENT
file path: C:\Windows\system32\ntkrnlpa.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sun 3/6/2011 12:21:34 AM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrpamp.exe (nt!KeBugCheckEx+0x1E)
Bugcheck code: 0x1A (0x61940, 0x63A21000, 0x1F3D3C06, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: ntkrpamp.exe .
Google query: ntkrpamp.exe MEMORY_MANAGEMENT




On Sun 3/6/2011 12:14:15 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini030511-02.dmp
This was probably caused by the following module: win32k.sys (win32k+0xC5486)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF96AC5486, 0xFFFFFFFFAEC73B48, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\Windows\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Sat 3/5/2011 8:25:18 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini030511-01.dmp
This was probably caused by the following module: fltmgr.sys (fltmgr+0x9D5B)
Bugcheck code: 0x1000008E (0xFFFFFFFFC0000005, 0xFFFFFFFF82B14D5B, 0xFFFFFFFFA263F658, 0x0)
Error: KERNEL_MODE_EXCEPTION_NOT_HANDLED_M
file path: C:\Windows\system32\drivers\fltmgr.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Microsoft Filesystem Filter Manager
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system which cannot be identified at this time.


On Sat 11/27/2010 10:08:36 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini112710-01.dmp
This was probably caused by the following module: ntkrnlpa.exe (nt+0x4DFD9)
Bugcheck code: 0xA (0xFFFFFFFFE7EBB2AC, 0x2, 0x0, 0xFFFFFFFF82468A4C)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntkrnlpa.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.

[Cinnamoroll]

note: It did not tell me to download Debugger.

[rshaffer61]

Tutorial for running chkdsk in Vista\Win 7 located HERE.

[Cinnamoroll]

Do i follow the command prompt as well?

[rshaffer61]

Nope do the one before that and then you will have to reboot I think for it to do the actual chkdsk program.

[Cinnamoroll]

Nothing happen really. When i reboot it, the laptop reboot itself again. Should i do the process one more time (not the command prompt)?

[rshaffer61]

Try it this way.
Go to

Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.

Let me know if this fixes the problem

[Cinnamoroll]

Unfortunately to say that nothing has happen.

It didn't provide me any log or some sort. It was just a simply reboot o.o

does that means its fixed?

Edited by Cinnamoroll, 07 March 2011 - 09:57 PM.