Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

svchost.exe error the memory could not be "written"


  • Please log in to reply

#1
Tompah

Tompah

    New Member

  • Member
  • Pip
  • 6 posts
As said in the title, Almost everytime I start my computer i get an svchost.exe error that says "the memory could not be "written"" and when that happends my soundcard driver wont work either, so I have to restart my computer about 5 times before the error is gone. I reasently had my RAM changed because it was damaged but now the RAM is completly working. I had this error a pretty long time now and I have searched the internet for solutions but havent found any that match my problem.

Please help me!

/Tommy
  • 0

Advertisements


#2
Fenor

Fenor

    Trusted Tech

  • Retired Staff
  • 5,236 posts
Hi Tompah! Welcome to G2G!

Please go into the Event Viewer and see what errors occurred at the time you get this error message.

Click START-->RUN and type EVENTVWR.MSC and hit ENTER.

Look under SYSTEMS AND APPLICATIONS for items with RED X's that happened at the SAME time as your problem...List them here.

Fenor
  • 0

#3
Tompah

Tompah

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Thank you.
My windows are swedish so the translation may not be the best but i will try to translate as good as i can.

I Found 2 errors under "System" that says something about a server that did not register with DCOM before a timeout, then there is a information that says "Program-popup: svchost.exe - Program error: Following errors were found: The memory could not be "written"."

And i found 4 errors under "Applications" that says:

COM+ Event System found an incorrect returningcode HRESULT was C0000005 from row 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp

Eventfilter with the question select * from MSFT_SCMEventLogEvent could not activate in namearea //./root/subscription because the error "0x8004100e" some events may not pass this filter untill they are corrected. This error apperad 2 times

Incorrect program, version 0.0.0.0, incorrect module unknown, version 0.0.0.0, incorrect adress 0x00000000.
  • 0

#4
Fenor

Fenor

    Trusted Tech

  • Retired Staff
  • 5,236 posts
Please download HiJackThis (from the link in my signature) Install it, and double-click on the HiJackThis.exe icon. On the first screen click on Open the Misc Tools Section...on the next screen, click on the Generate StartupList log button and post a copy of the log here. You need not check either of the boxes next to this button.

Fenor

Edited by Fenor, 29 December 2005 - 12:29 PM.

  • 0

#5
Tompah

Tompah

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Here it is:

StartupList report, 2005-12-29, 19:35:48
StartupList version: 1.52.2
Started from : C:\Documents and Settings\Tommy\Skrivbord\hijackthis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Delade filer\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program\Delade filer\Symantec Shared\SNDSrvc.exe
C:\Program\Delade filer\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\JulaPan.Exe
C:\WINDOWS\system32\rundll32.exe
C:\program\powerstrip\pstrip.exe
C:\Program\Delade filer\Real\Update_OB\realsched.exe
C:\Program\Delade filer\Symantec Shared\ccApp.exe
C:\Program\Winamp\winampa.exe
C:\Program\Java\jre1.5.0_04\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program\INTERN~2\MEDIAKEY.EXE
C:\Program\SyncroSoft\Pos\H2O\cledx.exe
C:\Program\MSN Messenger\MsnMsgr.Exe
C:\Program\MSI\Core Center\CoreCenter.exe
C:\Program\INTERN~2\KBOSDCtl.EXE
C:\Program\INTERN~2\KCodeMsg.EXE
C:\Program\Norton AntiVirus\navapsvc.exe
C:\Program\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program\Delade filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\Winamp\Winamp.exe
C:\Program\Internet Explorer\iexplore.exe
C:\Documents and Settings\Tommy\Skrivbord\hijackthis\HijackThis.exe
C:\Program\Messenger\msmsgs.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start-meny\Program\Autostart]
Adobe Gamma Loader.lnk = C:\Program\Delade filer\Adobe\Calibration\Adobe Gamma Loader.exe
Adobe Reader Speed Launch.lnk = C:\Program\Adobe\Acrobat 7.0\Reader\reader_sl.exe
CoreCenter.lnk = C:\Program\MSI\Core Center\CoreCenter.exe
SecureDoc.lnk = C:\Program\MSI\SecureDoc\Logon.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ATIPTA = "C:\Program\ATI Technologies\ATI Control Panel\atiptaxx.exe"
NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe
JulaPan = JulaPan.Exe
PinnacleDriverCheck = C:\WINDOWS\system32\PSDrvCheck.exe
BluetoothAuthenticationAgent = rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
PowerStrip = c:\program\powerstrip\pstrip.exe
QuickTime Task = "C:\Program\QuickTime\qttask.exe" -atboottime
TkBellExe = "C:\Program\Delade filer\Real\Update_OB\realsched.exe" -osboot
ccApp = "C:\Program\Delade filer\Symantec Shared\ccApp.exe"
Symantec NetDriver Monitor = C:\Program\SYMNET~1\SNDMon.exe /Consumer
WinampAgent = C:\Program\Winamp\winampa.exe
SunJavaUpdateSched = C:\Program\Java\jre1.5.0_04\bin\jusched.exe
SoundMan = SOUNDMAN.EXE
RAM Idle Professional = C:\Program\RAM Idle\RAM_XP.exe
MediaKey = C:\Program\INTERN~2\MEDIAKEY.EXE
LiveMonitor = C:\Program\MSI\Live Update 3\LMonitor.exe
H2O = C:\Program\SyncroSoft\Pos\H2O\cledx.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program\MSN Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - C:\Program\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Norton AntiVirus - Sök igenom datorn - Tommy.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macr...director/sw.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx
CODEBASE = http://download.macr...ash/swflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #4: C:\WINDOWS\system32\wshbth.dll

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
End of report, 6 374 bytes
Report generated in 0,047 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
  • 0

#6
Tompah

Tompah

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
The computer works fine now so shuld i do the hijackthis test again when all the error occur? That is if it makes any difference in the log?
  • 0

#7
Fenor

Fenor

    Trusted Tech

  • Retired Staff
  • 5,236 posts
From your log it looks like you have some nasties in it. I suggest you go to the Malware Forum and run all the steps located in the START HERE. These self-help tools will help you clean up 70% of problems on your own. If you are still having problems after doing the steps, then please post a HiJackThis Log in THAT forum.

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

Fenor
  • 0

#8
Tompah

Tompah

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Ok thank you very mutch! =)
  • 0

#9
ac_182

ac_182

    Member

  • Member
  • PipPip
  • 14 posts
I have the same problem... HELP :whistling:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP