SVChost error instruction at 0x00aa6f9a

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

This is another svchost error. The instruction at "0x00aa6f9a" atempting to
write to memory at "0x00000000". This has shown up as a DEP error on atartup
for a long time. More recently it showed up as an application error during
normal use. Now is s showing up so frequently as to be a serious problem.
That this is the CEO's notebook does not help.
Ad-aware shows only a few cookies, no real spyware. Trend shows no viruses.
The recent exacerbations seemed to co-inside first with the installation of
cardscan software and much worse with Adobe album starter, a download that
tags onto Adobe 7 reader.
Any new File Explorer window or dialog box opens with a significant delay
and then the Application error.
My Computer shows the Search light for a while, and the error.
The error also pops up for no apparent reason at times.
Specific details: svchost.exe, 5.1.2600.2180, p3:0X41107ed6, p5:0.0.0.0,
p7:0x00aa6f9a, p8:c0000005, p9:0x00000008.

Any suggestions.
Pat.
 
Pat

DEP is new. Is your computer capable?

There follows some information provided by Richard G. Harper:

"The easiest way to tell if your processor is DEP-enabled or not is to
go to
the DEP settings page and see what you see there. If your processor is
DEP-enabled you will see no extra text at the bottom of that dialog; if
your
processor does NOT support DEP there will be a short blurb that explains
that although you cannot enable hardware DEP you can still enable
software
DEP with partial protection.

There's probably some utility that can test this. I found this:

http://user.cs.tu-berlin.de/~normanb/

but you have to have DEP turned on for this tool to find it. It does
work
on both AMD and Intel processors despite what the Web page says."

Does the error go away if you disable DEP?

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
 
It is an IBM Thinkpad, a couple of years old. I disabled DEP which
eliminates the annoying Startup DEP error messages. However the Application
Error messages still show up during normal operation.

Pat.
 
Pat

Can you find the Application Error messages in Event Viewer and post a
copy.

You can access Event Viewer by selecting Start, Administrative Tools,
Event Viewer.

When researching the meaning of the error, information regarding Event
ID, Source
and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the
error you want to copy. In the window, which appears is a button
resembling two
pages. Double click the button and close Event Viewer. Now start your
message
(email) and do a paste into the body of the message. This will paste the
info from the
Event Viewer Error Report complete with links into the message. Make
sure this is
the first paste after exiting from Event Viewer.


--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~
 
Hi! I own 2 Toshiba Satellite Pro M30 notebooks. I have a similar
svchost.exe problem as has been reported here before, except that the
memory address is different, but I do not seem to be able to find a
conclusive answer to the problem. I've addressed my problem to Toshiba
and they suggested that I upgrade the BIOS. I’ve since found that I
already run the latest BIOS version (1.70). I've also tried to contact
Microsoft, but they do not offer support in this case, they refer me to
the OEM, who installed XP.
In Windows XP I keep getting Application Error messages for svchost.exe
("The instruction at "0x00aa96bc" referenced memory at "0x00000000". The
memory could not be 'written'") and then messages that DEP has closed
the Generic Host for Services to protect my computer. I'm getting
somewhat desperate. This is now all but continuous, ie. every time
something tries to open svchost.exe, which seems particularly IE
related, and I cannot find anything of relevance on the MS website,
other than relating to W2K or XP SP1. It looks like this problem is not
supposed to exist on SP2. I have it on 2 PCs, though. I have lost
functionality in connecting to network drives (TCP/IP) and the
computers do not recognise a USB-connected digital camera. I may have
lost other functionality as well, but I've not discovered what yet,
other than that IE6 seems to be somewhat 'funny' (it needs the full web
address, including http:// to do anything at all, where previously I
could just type in www.xxx.xxx and the browser would complete the
http:// part).
I use Windows' firewall, I have scanned the computers several times for
viruses and other malware (Norton AV -latest virus definitions- and
Panda, as well as the Microsoft Windows Malicious Software Removal Tool
and Ad-Aware). All come up clean. I run XP SP2 and have re-installed SP2
from a downloaded version, rather than depending on the Microsoft Update
tool, which I also subscribe to. I've run PCTools Registry Mechanic, it
has not solved the problem.
I am not using any special software (MS Office, Adobe Acrobat and
Audition, Paintshop, iTunes) and my machine is mechanically as standard
as it came from the factory: no extra memory or swapped parts.
Strange thing is also that I've had this before and solved it (for a
while) by a total clean install on a formatted HD. That was last
January, when the machines were still new, and things have gone well
since then. Now, all of a sudden, both machines are 'sick' again. One
would almost suspect there's some element of time in there. Also, a
clean install does not seem to solve the problem, apart from the
substantial amount of work to get it done, it clearly re-occurs.

What do I need to do to solve this?

Event Viewer for this occurrence:
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/11/2005
Time: 21:17:39
User: N/A
Computer: LEX-NOTEBOOK
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting
module unknown, version 0.0.0.0, fault address 0x00aa96bc.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 75 6e 6b 6e 6f 77 n unknow
0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 61 61 set 00aa
0050: 39 36 62 63 96bc
The processor on these machines is not DEP hardware capable, DEP is
software enabled.
 
Svchost.exe is the 'Generic Host Process for Win32 Services'.
Many firewalls will block this service sooner or later, but will allow
you to change the settings for it to 'Permit All' or 'Allow', etc.

The 'Generic Host Process for Win32 Services' is a required component
for Web browsing. When it is blocked, you will typically receive the
following messages:
'The Page Cannot Be Displayed...', 'Cannot find server...' etc., and
problems accessing secure sites will also surface.

Even though the 'Generic Host Process for Win32 Services' is a
'Microsoft Windows' service, it is the 'Windows Firewall' that is
blocking it, and subsequently causing the problems that you have
been recently experiencing. The 'Windows Firewall' will not allow
you to add this service as an 'Exception' (absolutely no idea why).

Here's the fix:
1. Right-click 'My Computer'.
2. Click 'Properties'.
3. Click the 'Advanced' tab.
4. Click the 'Settings' button to the right of 'Performance'.
5. Click the 'Data Execution Prevention' tab.
6. Click to select the radio option next to
'Turn on DEP for all programs and services except those I select'.
7. Click the 'Add' button.
8. Browse to 'svchost.exe' and select it.
9. Click the 'Open' button.
10. Click 'OK' on the warning screen that pops up.
11. Click 'OK' to close the 'Performance Options' screen.
12. Click 'OK' on the 'System Control Panel Applet' screen that pops
up.
13. Click 'OK' to close the 'System Properties' screen.
14. Restart your computer.

If you are using a different firewall, you might find a tutorial for it
here: http://www.leeindy.com/firewalls.shtml

Take care.
 
Back
Top