Shutdown problem - service host default grp

[AliceZ]

The following 'problem' was happening on my 17" notebook, occasionally.
Today I noticed the same thing happening when I shut down my desktop.
Namely, a pop-up stating program could not close:
"Service host default - grp."
And then another pop-up that program not responding, and do you want to
cancel or end (I believe that is what it said). I clicked End and then my
computer turned off.
What could be causing this? Does anyone know? It is quite frustrating for us
senior citizens as we don't know that much about computers.
Any help would be appreciated.
Alice

(P.S. Just wanted to mention that prior to shutting down the desktop, I was
trying to sign-on to AOL and wasn't able to get through and that is why I
shut down the desk-top. When I restarted I could get through to AOL but I was
wondering why that pop-up about program not closing.)

 

[nass]

The following 'problem' was happening on my 17" notebook, occasionally.
Today I noticed the same thing happening when I shut down my desktop.
Namely, a pop-up stating program could not close:
"Service host default - grp."
And then another pop-up that program not responding, and do you want to
cancel or end (I believe that is what it said). I clicked End and then my
computer turned off.
What could be causing this? Does anyone know? It is quite frustrating for us
senior citizens as we don't know that much about computers.
Any help would be appreciated.
Alice

(P.S. Just wanted to mention that prior to shutting down the desktop, I was
trying to sign-on to AOL and wasn't able to get through and that is why I
shut down the desk-top. When I restarted I could get through to AOL but I was
wondering why that pop-up about program not closing.)

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

User Profile Hive Cleanup Service:
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en

The system may not unload your user profile correctly when you log off from
a Windows XP-based computer
http://support.microsoft.com/kb/842827

Reboot your machine and try to log oFF after doing your computing per
normal and see if that will solve the issueand the issue will not happen on
log OFF.
HTH,
nass

 

[Gerry]

Alice

You have posted to a Windowx XP newsgroup. Is your computer operating system
Vista or Windows XP? From your question it sounds like Vista!


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Gerry]

Nass

I thinks you will find Alice is using Vista.


--



Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

The following 'problem' was happening on my 17" notebook,
occasionally. Today I noticed the same thing happening when I shut
down my desktop. Namely, a pop-up stating program could not close:
"Service host default - grp."
And then another pop-up that program not responding, and do you want
to cancel or end (I believe that is what it said). I clicked End and
then my computer turned off.
What could be causing this? Does anyone know? It is quite
frustrating for us senior citizens as we don't know that much about
computers.
Any help would be appreciated.
Alice

(P.S. Just wanted to mention that prior to shutting down the
desktop, I was trying to sign-on to AOL and wasn't able to get
through and that is why I shut down the desk-top. When I restarted I
could get through to AOL but I was wondering why that pop-up about
program not closing.)

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties
window you will see these Options:
General | Security | Privacy | Content | Connections | Programs

Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button
called [ Clear History ..] click on it to clear your History caches,
then click on [Delete Files..] to delete Internet Files created over
the time, click on [ Delete Cookies...] to delete your cookies left
by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing
Option: [&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed
on your browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there
Disable the Non/Not Verified Plug-ins/Add-ons ( you need to Renable
them one-by-one later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

User Profile Hive Cleanup Service:
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en

The system may not unload your user profile correctly when you log
off from a Windows XP-based computer
http://support.microsoft.com/kb/842827

Reboot your machine and try to log oFF after doing your computing per
normal and see if that will solve the issueand the issue will not
happen on log OFF.
HTH,
nass

 

[nass]

Hi Gerry,
I gone through the histry and can see the mention of Vista, so waiting for
Alice to rectify this!

Regards,
nass

 

[AliceZ]

I am using WinXP sp3 on both the notebook and the desktop.

I wanted to ask a question. You said:

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

I see "Network Connections" but no "Network and Internet Connections," but
do not see an "Internet Options" in the screen that opens.

 

[nass]

Hi Alice,
Well, we will take on this with another way!
Try to open the IE7/? and click Tools >> Internet Options and go ahead with
the reset of the instructions.

You can try this tool to capture in real time the causer but see the
instructions I gave you first:
ShellExview:
http://www.nirsoft.net/utils/shexview.html

Let us know your finding

 

[AliceZ]

#1- I un-checked the Enable 3rd Party browser extentions.
#2- I am a bit confused about doing the Disable Non/Not Verified
Plug-ins/Add-ons.

Will doing either of these two things cause problems?

They appear to be dealing only with my IE7.
Will doing these two things possibly solve the 'problem' I am having when
shutting down my computers when I get the pop-up re: "Service host default
grp" (not when shutting down IE7)?
These 2 'solutions' appear to be only dealing with IE7. Is that correct?

(I ran SpyBot/NIS/MalwareBytes and nothing found. I use Scandoo with IE7.)
Alice

 

[nass]

Hi Alice,
Per the link I gave to you if you follow the instructions to disable (non
verified Add-ons) then you can renable them one by one at a time.

Yes, sometimes they can resolve your issue beside running the User clean up
Hive.
Try it and let us know.

 

[AliceZ]

Does this "service host default. grp" showing in a pop-up when I try to
log-off computer (and then Program is not responding) sound VERY SERIOUS to
you? Does it mean my computer will stop working?
Or is it just a 'program' that cannot close and not serious at all?
As I might have mentioned, we ran SpyBot, MalwareBytes and NIS and nothing
found.
As senior citizens we cannot afford to buy another computer, and it really
has us scared.
Thank you.
Alice
============

 

[nass]

Hi Alice,
We need the exact error/verbatim of the error message from the Event Viewer,
to pin point the causer and if it is serious or can be curable!

About being running this applications, one can't be sure the machine clean
from infestation.

- Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following:later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

If you need further help and your machine infected download the Hijackthis
and send the report to one of many forums for analysis and troubleshooting or
you can send it to me on my email provided at the bottom:
When all else fails, download HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at (e-mail address removed)
,remove the obvious to email me.

A description of Svchost.exe in Windows XP Professional Edition
http://support.microsoft.com/kb/314056

HTH,
nass

 

[AliceZ]

I went to the Event Viewer and saw only one RED "X."
I clicked on it and a small pop-up box came up, but don't see any way to
copy it.
The description is:
"Product Adobe Reader 8.1.0 setup has detected that you already have a more
functional product installed."
I really don't think this has anything to do with the "service host default
..grp" that I saw a few days ago.


===============

Hi Alice,
We need the exact error/verbatim of the error message from the Event Viewer,
to pin point the causer and if it is serious or can be curable!

About being running this applications, one can't be sure the machine clean
from infestation.

- Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following:later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

If you need further help and your machine infected download the Hijackthis
and send the report to one of many forums for analysis and troubleshooting or
you can send it to me on my email provided at the bottom:
When all else fails, download HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at (e-mail address removed)
,remove the obvious to email me.

A description of Svchost.exe in Windows XP Professional Edition
http://support.microsoft.com/kb/314056

HTH,
nass
--
http://www.nasstec.co.uk

:

Does this "service host default. grp" showing in a pop-up when I try to
log-off computer (and then Program is not responding) sound VERY SERIOUS to
you? Does it mean my computer will stop working?
Or is it just a 'program' that cannot close and not serious at all?
As I might have mentioned, we ran SpyBot, MalwareBytes and NIS and nothing
found.
As senior citizens we cannot afford to buy another computer, and it really
has us scared.
Thank you.
Alice
============

 

[Tim Meddick]

Hi Alice,
it might also help to copy and paste the following into the
"Run" box:

reg ADD "HKCU\Control Panel\Desktop" /v AutoEndTasks /d 1 /f

This will make sure that any hung programs will automatically terminate
themselves. That is ALL this will do, to find the cause of the offending
message you will have to keep searching. But, at least, in future, your
computer will shut down without you having to tell it to end each and every
application that won't close.

 

[nass]

I went to the Event Viewer and saw only one RED "X."
I clicked on it and a small pop-up box came up, but don't see any way to
copy it.
The description is:
"Product Adobe Reader 8.1.0 setup has detected that you already have a more
functional product installed."
I really don't think this has anything to do with the "service host default
.grp" that I saw a few days ago.

What version of Adobe you have installed now?
If it is V8.1 please uninstall it and download the latest version V9.1 from
the link below.
Download the latest version of Adobe Reader
http://get.adobe.com/uk/reader/

If that didn't help! You can send me your Hijackthis log to look at and see
if there is bad/Corrupt hooks that causing this issue.
Good luck.
nass

 

[Gerry]

Alice

Copying from Event Viewer.

You right click on the Report in the list and select Properties. In the
window, which appears are three buttons towards the top right of the window.
The top one has an arrow up, underneath is an arrow down and third is a
button resembling two pages. Click the button and close Event Viewer. It is
not obvious but this action places a copy of the report in your Clipboard.
Now start your message (email) and do a paste into the body of the message.
Make sure this is the first paste after exiting from Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

I went to the Event Viewer and saw only one RED "X."
I clicked on it and a small pop-up box came up, but don't see any way
to copy it.
The description is:
"Product Adobe Reader 8.1.0 setup has detected that you already have
a more functional product installed."
I really don't think this has anything to do with the "service host
default .grp" that I saw a few days ago.


===============

Hi Alice,
We need the exact error/verbatim of the error message from the Event
Viewer, to pin point the causer and if it is serious or can be
curable!

About being running this applications, one can't be sure the machine
clean from infestation.

- Have a look in the Event Viewer for error messages(X) that can
shed some light and post it back in your next post by performing the
following:

Open a Notepad, customize or minimize to the taskbar as you will
need it

later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or
Yellow exclamation mark /!\ , double click each one to get more info
about the causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the
Notepad you opened earlier and right click on the first line and
select Paste from the list, this will paste the error message on a
Notepad.
Please don't duplicate the error message one of each kind will be
sufficient. HOW TO: View and Manage Event Logs in Event Viewer in
Windows XP http://support.microsoft.com/kb/308427/en-us

If you need further help and your machine infected download the
Hijackthis and send the report to one of many forums for analysis
and troubleshooting or you can send it to me on my email provided at
the bottom:
When all else fails, download HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at
(e-mail address removed) ,remove the obvious to email
me.

A description of Svchost.exe in Windows XP Professional Edition
http://support.microsoft.com/kb/314056

HTH,
nass
--
http://www.nasstec.co.uk

:

Does this "service host default. grp" showing in a pop-up when I
try to log-off computer (and then Program is not responding) sound
VERY SERIOUS to you? Does it mean my computer will stop working?
Or is it just a 'program' that cannot close and not serious at all?
As I might have mentioned, we ran SpyBot, MalwareBytes and NIS and
nothing found.
As senior citizens we cannot afford to buy another computer, and it
really has us scared.
Thank you.
Alice
============
:


Hi Alice,
Per the link I gave to you if you follow the instructions to
disable (non verified Add-ons) then you can renable them one by
one at a time.

Yes, sometimes they can resolve your issue beside running the User
clean up Hive.
Try it and let us know.


:

#1- I un-checked the Enable 3rd Party browser extentions.
#2- I am a bit confused about doing the Disable Non/Not Verified
Plug-ins/Add-ons.

Will doing either of these two things cause problems?

They appear to be dealing only with my IE7.
Will doing these two things possibly solve the 'problem' I am
having when shutting down my computers when I get the pop-up re:
"Service host default grp" (not when shutting down IE7)?
These 2 'solutions' appear to be only dealing with IE7. Is that
correct?

(I ran SpyBot/NIS/MalwareBytes and nothing found. I use Scandoo
with IE7.) Alice

:


Hi Alice,
Well, we will take on this with another way!
Try to open the IE7/? and click Tools >> Internet Options and go
ahead with the reset of the instructions.

You can try this tool to capture in real time the causer but see
the instructions I gave you first:
ShellExview:
http://www.nirsoft.net/utils/shexview.html

Let us know your finding

:

I am using WinXP sp3 on both the notebook and the desktop.

I wanted to ask a question. You said:

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and
Internet Connections >> Double click Internet Options, on the
IE Properties window you will see these Options:
General | Security | Privacy | Content | Connections | Programs
Advanced .

I see "Network Connections" but no "Network and Internet
Connections," but do not see an "Internet Options" in the
screen that opens.

:


Hi Gerry,
I gone through the histry and can see the mention of Vista, so
waiting for Alice to rectify this!

Regards,
nass

:

Nass

I thinks you will find Alice is using Vista.


--



Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[AliceZ]

sent you email and I hope you received it.

I used the "(e-mail address removed)"
and just removed the REMOVETHISCAPS

============