svchost.exe error....my god help.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Please help with this. It seems like it's been asked to death, but I cannot
seem to find the exact error with the exact problems and every solution that
I've tried, doesn't work. The system doesn't even come up with an error, all
I get to even indicate that there is a problem is the fact that "My Computer"
comes up very, very slowly. In fact there is a flashlight moving back and
forth over folders indicating that the system is looking in folders before it
displays the info. My Computer eventually comes up, but it takes like a
minute. This is the only information that I know of to get below. If anyone
needs any more "Log" info in order to help me out, then please let me know
how to get it so I can display it. I'm running SypBot (the most updated
version) and AdAware (the most updated version as well) and although they
found a couple of things and supposedly took care of them, the problem still
remains. Thank you for your time and effort in helping me.






Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/23/2007
Time: 8:46:32 AM
User: N/A
Computer: LONNIE-GATEWAY
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
unknown, version 0.0.0.0, fault address 0x009a96bc.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 75 6e 6b 6e 6f 77 n unknow
0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 39 61 set 009a
0050: 39 36 62 63 96bc
 
1. Click Start->Run, type "services.msc" (without quotation marks) in the
open box and click OK.
2. Double click the service "Automatic Updates".
3. Click on the Log On tab, please ensure the option "Local system account"
is selected and the option "Allow service to interact with desktop" is
unchecked.

4. Check if this service has been enabled on the listed Hardware Profile. If
not, please click the Enable button to enable it.
5. Click on the tab "General "; make sure the "Startup Type" is "Automatic".
Then please click the button "Start" under "Service Status" to start the
service.
6. Repeat the above steps with the other service: Background Intelligent
Transfer Service (BITS)


================================ NEXT ================================


Re-register Windows Update components and Clear the corrupted Windows Update
temp folder


1. Click on Start and then click Run,
2. In the open field type "REGSVR32 WUAPI.DLL" (without quotation marks) and
press Enter.
3. When you receive the "DllRegisterServer in WUAPI.DLL succeeded" message,
click OK.
4. Please repeat these steps for each of the following commands:

REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL
REGSVR32 QMGR.DLL
REGSVR32 QMGRPRXY.dll


After the above steps are finished reboot.

Remove Corrupted Windows Update Files

* At the command prompt, type the following command and press Enter

net stop WuAuServ
* Still at the command prompt,

type cd %windir% and press Enter
* In the opened folder, type the following command and press Enter to rename
the SoftwareDistribution Folder

ren SoftwareDistribution SD_OLD
* Restart the Windows Update Service by typing the following at the command
prompt

net start WuAuServ

* type Exit and Press Enter to close the command prompt

Source - http://www.pchell.com/support/svchosterror.shtml
 
Please help with this. It seems like it's been asked to death, but I cannot
seem to find the exact error with the exact problems and every solution that
I've tried, doesn't work. The system doesn't even come up with an error, all
I get to even indicate that there is a problem is the fact that "My Computer"
comes up very, very slowly. In fact there is a flashlight moving back and
forth over folders indicating that the system is looking in folders before it
displays the info. My Computer eventually comes up, but it takes like a
minute. This is the only information that I know of to get below. If anyone
needs any more "Log" info in order to help me out, then please let me know
how to get it so I can display it. I'm running SypBot (the most updated
version) and AdAware (the most updated version as well) and although they
found a couple of things and supposedly took care of them, the problem still
remains. Thank you for your time and effort in helping me.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/23/2007
Time: 8:46:32 AM
User: N/A
Computer: LONNIE-GATEWAY
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
unknown, version 0.0.0.0, fault address 0x009a96bc.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 75 6e 6b 6e 6f 77 n unknow
0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 39 61 set 009a
0050: 39 36 62 63 96bc



Although this doesn't have anything directly to do with your immediate
problem I also suggest using Comodo as your firewall if you aren't
already doing so.

http://www.personalfirewall.comodo.com/

and A-Squard in conjunction with Spybot:

http://www.emsisoft.com/en/software/free/



Robert
 
Ok I checked all that you mentioned out in "Services", and all was as you
mentioned already accept one thing. I had to change the "BITS" to
"Automatic" although it was already running in the background. Everything
else, as I said, was already like it was supposed to be on both "Automatic
Updates" and the "BITS". I made that one change but the problem still
remains. Thank you for your reply. Can you think of anything else that it
could be, or anything else that I can do?


Thanks again.
 
Did You Followed The Complete Post .. Including "Registering" the Dll file
and Renaming "Software Distribution" Folder
 
I mistook that part for my post under yours I guess, because I didn't do it.
However after reading your post here, I went back and did all of it again
step by step and now I'm getting all kinds of the same errors only they are
poping up during boot up. It reads on the pop ups something along the lines
of "In order to protect your system Windows has
prevented....bla...bla...bla...I believe it is called DEP, or data execution
prevention. In the event logs though it is still saying that it is
svchost.exe that is causing the faults. Now however I am getting a ton of
them instead of just 1 or 2. Also, the original problem still remains. "My
Computer" takes about a minute or so to even display anything. Thank you for
the reply. Perhaps you have something else for me to try before I wipe it
all out and start fresh. I hate doing that, but there is no way I'm going to
go through this at every boot.
 
Hi Lonnie - Try the following in order:

- First, you will need to install or re-install the updated KB927891. See
here:
http://www.microsoft.com/technet/security/advisory/927891.mspx and here
http://support.microsoft.com/?kbid=927891 for a complete fix.

- Then install the newly released 'standalone' version of Windows Update
Agent 3.0, v. 7.0.6000.374, for 32 bit machines which is available here:
http://download.windowsupdate.com/v7/windowsupdate/redist/standalone/WindowsUpdateAgent30-x86.exe

It may say "Install is not needed since Windows Update Agent is
already installed." If so, then run the exe with the command line switch
/wuforce , like this:

WindowsUpdateAgent30-x86.exe /wuforce

from a Command Window in the folder that holds the Windows Update Agent you
downloaded to force the install.

Now reboot. Now reboot again. (Yes, twice) If the bootup issues appear to
be gone, then try Windows Update to be sure all that's working correctly

----------------------------------

If that doesn't work, then try the following procedures next, in order:

In a few case to my knowledge the lockup has returned. It's thought that
this is probably due to a recurrance of corruption of the DataStore.edb
and/or the log files in the

%windir%\SoftwareDistribution\DataStore

folder probably caused by interference by an AV scan during the Update
checks. If this does occur for any of your machines, you might wish to try
the following work arounds to the particular machine to get things back to
normal.

1. Defrag the DataStore.edb file using the following command line:

esentutl /d %windir%\SoftwareDistribution\Datastore\datastore.edb

2. If that doesn't do it, then try recovery of it:

esentutl /r %windir%\SoftwareDistribution\Datastore\datastore.edb

(Hopefully this will get all databases to a
consistent state)

3. If that doesn't help, then try a Repair:

esentutl /p %windir%\SoftwareDistribution\Datastore\datastore.edb

------------------------------

If those steps don't solve it, you can try the following procedure which I
worked out with some MS personnel which so far has usually worked:

The following assumes you're on Windows XP but will work OK for Win2k as
well. If you're confident about what you're doing, then try the following
first - only if it doesn't work, then there's another level of stuff that
can be done following:

1. Stop and Disable Automatic Updates, Background Intelligent Transfer
Service and the Cryptographic Service.

2. Rename the folder %SystemRoot%\SoftwareDistribution to
%SystemRoot%\OldSoftwareDistribution

3. Open Notepad and create a file containing the following:

REGSVR32 WUAPI.DLL
REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL


Save this file as 'Wudll.cmd' (without the quotes) to any convenient
location then exit Notepad and double click on the file you just saved. You
should get a 'Sucess' mesage for each of the .dll's listed above.

4. Now Re-enable to Automatic status and then Start each of the services
you stopped before - Automatic Updates, Background Intelligent Transfer
Service and the Cryptographic Service.

5. Now Reboot. Now Reboot Again. (Yes, twice.)


-----------------------------

See if that solves it - give it a couple of days. If so, then you can
delete 'OldSoftwareDistribution'. I would request that you post back with
your results. _Only if the problem does re-occur_, then do the following
_exactly_:

1. Go to http://wiki.djlizard.net/Dial-a-fix and download Dial-a-fix
v0.60.0.24 (2006-10-27) Here's a direct download link:
http://djlizard.net.nyud.net:8080/software/Dial-a-fix-v0.60.0.24.zip and a
secondary: http://djlizard.net/software/Dial-a-fix-v0.60.0.24.zip from
that page's download section, here:
http://wiki.djlizard.net/Dial-a-fix#Mirrors.2Fdownload_locations.2C_and_articles .

2. Unzip it to a new folder at root with any name, e.g.
c:\Dial-a-fix-v0.60.0.24

3. Restart the computer in Safe Mode. Now double click on Dial-a-fix.exe
in that folder.

4. Click on the following:
- Options/tooltips (just to get an idea of what it does in each
section.
:) )
- Both boxes under Prep
- The 'all' (top) box for Sections 2 (section 2 will be blanked in Safe
Mode), 3 and 4 (which will automatically be set when you check 3)
- In Section 3 click on 'Flush Software Distribution' and choose 'Yes'
to force the deletion of the folder.
- In Section 5, 'ActiveX controls/codecs', 'Programming
cores/runtimes',
'Explorer/IE/OE/shell/WMP', and 'Object linking libraries (OLE)' only.
- Click 'Go' . (Some of the re-registrations may take what seems like
a long time for some .dll's - Don't be impatient.)

5. Reboot. Now Reboot Again. (Yes, twice.)


See if that does the trick, and, again please post back with your
experience.





--
Regards, Jim Byrd,
My Blog, Defending Your Machine,
http://defendingyourmachine2.blogspot.com/



In Lonnie <[email protected]> typed:
|| Please help with this. It seems like it's been asked to death, but
|| I cannot seem to find the exact error with the exact problems and
|| every solution that I've tried, doesn't work. The system doesn't
|| even come up with an error, all I get to even indicate that there is
|| a problem is the fact that "My Computer" comes up very, very slowly.
|| In fact there is a flashlight moving back and forth over folders
|| indicating that the system is looking in folders before it displays
|| the info. My Computer eventually comes up, but it takes like a
|| minute. This is the only information that I know of to get below.
|| If anyone needs any more "Log" info in order to help me out, then
|| please let me know how to get it so I can display it. I'm running
|| SypBot (the most updated version) and AdAware (the most updated
|| version as well) and although they found a couple of things and
|| supposedly took care of them, the problem still remains. Thank you
|| for your time and effort in helping me.
||
||
||
||
||
||
|| Event Type: Error
|| Event Source: Application Error
|| Event Category: (100)
|| Event ID: 1000
|| Date: 10/23/2007
|| Time: 8:46:32 AM
|| User: N/A
|| Computer: LONNIE-GATEWAY
|| Description:
|| Faulting application svchost.exe, version 5.1.2600.2180, faulting
|| module unknown, version 0.0.0.0, fault address 0x009a96bc.
||
|| For more information, see Help and Support Center at
|| http://go.microsoft.com/fwlink/events.asp.
|| Data:
|| 0000: 41 70 70 6c 69 63 61 74 Applicat
|| 0008: 69 6f 6e 20 46 61 69 6c ion Fail
|| 0010: 75 72 65 20 20 73 76 63 ure svc
|| 0018: 68 6f 73 74 2e 65 78 65 host.exe
|| 0020: 20 35 2e 31 2e 32 36 30 5.1.260
|| 0028: 30 2e 32 31 38 30 20 69 0.2180 i
|| 0030: 6e 20 75 6e 6b 6e 6f 77 n unknow
|| 0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.
|| 0040: 30 20 61 74 20 6f 66 66 0 at off
|| 0048: 73 65 74 20 30 30 39 61 set 009a
|| 0050: 39 36 62 63 96bc
 
Thanks to all that tried to help. I ended up starting from scratch (man I
hate doing that). All is well so far. I just made a backup of the new
system and hopefully won't have to do as an extensive restart as this one
anytime in the future.
 
Please help with this. It seems like it's been asked to death, but I cannot
seem to find the exact error with the exact problems and every solution that
I've tried, doesn't work. The system doesn't even come up with an error, all
I get to even indicate that there is a problem is the fact that "My Computer"
comes up very, very slowly. In fact there is a flashlight moving back and
forth over folders indicating that the system is looking in folders before it
displays the info. My Computer eventually comes up, but it takes like a
minute. This is the only information that I know of to get below. If anyone
needs any more "Log" info in order to help me out, then please let me know
how to get it so I can display it. I'm running SypBot (the most updated
version) and AdAware (the most updated version as well) and although they
found a couple of things and supposedly took care of them, the problem still
remains. Thank you for your time and effort in helping me.

Hi,

I'm not sure if it'll help but have you tried the fix from
http://support.microsoft.com/kb/892489

- Thee Chicago Wolf
 
Back
Top