Shutdown error message

[Questa]

When I shutdown Windows I get the following error message: "Generic Host
Process for Win32 has encountered a problem and needs to close." Also asks
if I want to send error report. I have clicked send twice.Will I receive a
response or can anyone help me understand what the problem it encounters may
be. Is there a way to check on error reports you submit? It does not appear
every time I shut down. I have no operational problems. Recently reinstall
WindowsXP SP2. Thanking you in Advance....................................

 

[Michael Solomon \(MS-MVP\)]

For the most part, error reports sent to Microsoft go into a database of
errors and issues which Microsoft uses as a guide to determine problem areas
in the system and whether or not they are in the OS itself or the result of
something installed on the system.

First, be sure your antivirus software has the latest definitions and run a
virus scan.

Also, download, install and run Ad Aware:
www.lavasoftusa.com

If your system is clear of viruses and any malware, open Control Panel, open
System, go to
the Advanced tab, click Settings under Startup and Recovery, remove the
check from "Automatically Restart" under System Failure. This will cause
the system to blue screen instead of restarting on errors and the
information on the blue screen may give a clue as to the source of the
issue.

Open Control Panel, open Administrative Tools, open Event Viewer, look for
errors corresponding to the crash, double click the error, the information
contained within may give a clue as to the
source of the problem.

Assuming you have an XP CD and not a recovery CD, place the XP CD in the
drive, when the setup screen appears, select "Check System Compatibility,"
the report it generates may point to problem hardware or software on your
system. If you do not have an XP CD, you can download this application
known as the Upgrade Advisor from the following site:
http://www.microsoft.com/windowsxp/pro/howtobuy/upgrading/advisor.asp
Note: If you have access to a broadband connection it might be best to
download using that as this is a rather large download.

Check for the latest drivers for your hardware, especially your graphics
card and soundcard and all peripherals connected to your system. No not use
Windows Update for this, go to the device manufacturer's web sites and if
you install updated drivers, ignore the message about drivers being unsigned
by Microsoft.

 

[Questa]

Thanks for your response! I followed instructions and here are results-most
of them I am unsure as of how to address them.My system was clear of viruses
and malware. 1.No checkmark in "Automatically Restart" 2.Event Viewer had
several "Errors"-Under system there were 4 of these event s #1005 -DCOM got
error,service cannot be started, it is disabled or no enabled devices
associated with it. Attempting to start service NetSvc with arguments in
service in order to run HKLM/software/Intel/Network Service/NCS/Synclayer
modules/NCSNet Service.3. Event viewer had several "Warnings"-Under
application there were 2 of these events#1517 -Windows saved user (computer
name) /Owner registry while an application or service was still using the
registry during log off. User NT Authority/system, Source-Userevn.4. Several
"Warnings"-Under evnt agnt there were 2 of these events #'s 1015 &
1003 -Trace level parameter not located in registry, Default trace level
used is 32. Under userenv event #1517-Services running as a user account,
configure them to run local or Network Service Account.
I hope I submitted this correctly. When I placed the XP CD in and clicked on
"check system Compatibilty", I got the following message -Version on systerm
is different that one on CD,if you continue will lose newer version. Should
I go ahead with this and when finished just reinstall SP2?....Thanking you
in Advance

 

[Michael Solomon \(MS-MVP\)]

Responses inline below.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Thanks for your response! I followed instructions and here are
results-most of them I am unsure as of how to address them.My system was
clear of viruses and malware. 1.No checkmark in "Automatically Restart"

No problem. I always make that suggestion because it is usually turned on
by default. I routinely suggest it as a precaution because if it is
checked, if updating drivers or patching the system causes the system to
crash it would restart without displaying an error message.

2.Event Viewer had

several "Errors"-Under system there were 4 of these event s #1005 -DCOM
got error,service cannot be started, it is disabled or no enabled devices
associated with it. Attempting to start service NetSvc with arguments in
service in order to run HKLM/software/Intel/Network Service/NCS/Synclayer
modules/NCSNet Service.

This is a fairly common error and probably has nothing to do with your
issue. Some services on XP are for purposes beyond a user's needs. In your
case, it appears to be related to a device which you either are not using
and as such have no connection or because you are not using it, the service
has been disabled.


3. Event viewer had several "Warnings"-Under

application there were 2 of these events#1517 -Windows saved user
(computer name) /Owner registry while an application or service was still
using the registry during log off. User NT Authority/system,
Source-Userevn.

Again, fairly commone but in your case might be related to the error on
shutdown but only as a symptom caused by whatever application is hanging
when the system shuts down.

4.Several "Warnings"-Under evnt agnt there were 2 of these events #'s 1015 &

1003 -Trace level parameter not located in registry, Default trace level
used is 32. Under userenv event #1517-Services running as a user account,
configure them to run local or Network Service Account.

Above seems to indicate something you have installed is making a call to the
registry but there are no registry references. All of the above seems to
indicate some network related issue but does not reveal the source. Perhaps
some device you have connected to the system or some software you have
installed. A situation such as this usually requires removing items one by
one, then running the system for awhile after each removal to see if you
still have the issue. This applies to both software and hardware. In other
words, if after removing all applications you still have the issue, you'd
disconnect hardware items one by one until the issue goes away.

The above begs the question, do you have something connected to your network
interface card, if yes, what item might that be? Any other type of unusual
software or networking applications.

I hope I submitted this correctly. When I placed the XP CD in and clicked
on

"check system Compatibilty", I got the following message -Version on
systerm is different that one on CD,if you continue will lose newer
version. Should I go ahead with this and when finished just reinstall
SP2?....Thanking you in Advance.

If you have SP1 or SP2 installed on the system and you have a version of XP
that dates back prior to either one or both of those, you would receive this
error. If you were doing a repair install, you would have to remove the
service pack before proceeding. I have not seen that before as a response
to the compatiblity check but if you have a service pack installed, you
might want to first remove it before running the check.

You didn't mention anything about virus checking or the chack for malware
with Ad Aware, did these turn up negative?

 

[Questa]

Updated AntiVirus /Adaware and both scans negative.I did note on previous
submission of info that system was cleared-no virus or malware. Will check
for connections to Network Interface card and any 'unusual' software and
network applications. Thanking you in Advance............

 

[Michael Solomon \(MS-MVP\)]

You're welcome, good luck.

 

[Questa]

Thanks for your response! I checked the Event Viewer again and the
application 'HiJack This' was hanging. When I reinstalled WindowsXP, I
inadvertently installed Intel PROset and it was giving error messsage "did
not fully load, component missing"(not verbatim). I uninstalled both of the
above mentioned and the shutdown error message no longer appears. I
restarted and all is fine. Thanks for your assistance and suggestions to
solve this dilemna........

 

[Michael Solomon \(MS-MVP\)]

You're welcome, glad I could help.