How to find out which program crashed?

[Michael Moser]

During startup I regularly get an error popup that the application
schhost.exe tried to write to memory at 0x10. and thus has to be closed.
Now, to my knowledge, svchost is a a kind of wrapper for quite a number
of different services (e.g. when I start taskmanager I have about 10
svchost running). So, how can I find out, which of them causes this (or
which is now missing) and why?

Michael

 

[Gerry Cornell]

Michael

Please check Event Viewer for Warning / Error Reports in the System and
Application logs for when the error occurs and post copies.

You can access Event Viewer by selecting Start, Administrative Tools, and
Event Viewer. When researching the meaning of the error, information
regarding Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&sd=tech

Part of the Description of the error will include a link, which you should
double click for further information. You can copy using copy and paste.
Often the link will, however, say there is no further information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message (email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report complete with links
into the message. Make sure this is the first paste after exiting from Event
Viewer.


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Detlev Dreyer]

During startup I regularly get an error popup that the application
schhost.exe tried to write to memory at 0x10. and thus has to be closed.

Note that "schhost.exe" does *not* belong to Windows.

Now, to my knowledge, svchost is a a kind of wrapper for quite a number
of different services

"svchost.exe" (system file) != "schhost.exe" (possible malware)

 

[Gerry Cornell]

Or a mistype?


--

Regards.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Detlev Dreyer]

Or a mistype?

No idea - I've quit any guessing games long ago. Anyway, Google provides
some hits regarding "schhost.exe" in terms of malware and virulent files
often tend to imitate system file names.