Unknown service causing error on shutdown

[never-aways]

Sometimes when shutting down a service is throwing an error. Only
problem is i have no idea which service.

Occasionally, during the saving settings stage of the shutdown
"svchost.exe" throws one of those "The instruction at ... could not be
written" errors. I don't have time to write down the entire message
because windows still manages to finish shutting down.

When i boot back into windows there is an error message waiting for
me...

"Generic Host Process for Win32 Services encountered a problem and
need to close.

This error occured on...."


The error report contains...

"Error signature...
szAppName: svchost.exe
szAppVer: 0.0.0.0
szModName: unknown
szModVer: 0.0.0.0
offset: 00000000"


The Application error log is just as informative...

"Faulting application svchost.exe, version 0.0.0.0, faulting module
unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp."


What annoys me is that it doesn't even give me a PID, there really is
absolutely nothing to go on. Whichever service is problematic can't
be important because it's causing no ill effects in my everyday work.
Windows is actually solid.


What is stranger still, is that if i have had windows booted for
longrer than at least 6 hours then the error will not occur. But if i
shutdown within a few hours of windows being loaded it will happen and
i'll get the annoying piano stab sound :-(

 

[never-aways]

Sometimes when shutting down a service is throwing an error. Only
problem is i have no idea which service.

Occasionally, during the saving settings stage of the shutdown
"svchost.exe" throws one of those "The instruction at ... could not be
written" errors. I don't have time to write down the entire message
because windows still manages to finish shutting down.

When i boot back into windows there is an error message waiting for
me...

"Generic Host Process for Win32 Services encountered a problem and
need to close.

This error occured on...."


The error report contains...

"Error signature...
szAppName: svchost.exe
szAppVer: 0.0.0.0
szModName: unknown
szModVer: 0.0.0.0
offset: 00000000"


The Application error log is just as informative...

"Faulting application svchost.exe, version 0.0.0.0, faulting module
unknown, version 0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp."


What annoys me is that it doesn't even give me a PID, there really is
absolutely nothing to go on. Whichever service is problematic can't
be important because it's causing no ill effects in my everyday work.
Windows is actually solid.


What is stranger still, is that if i have had windows booted for
longrer than at least 6 hours then the error will not occur. But if i
shutdown within a few hours of windows being loaded it will happen and
i'll get the annoying piano stab sound :-(

So is there any strategy i can take to work out what this is?

It's reallly frustrating. Thanks.

 

[Peter Yang [MSFT]]

Hello,

Usually, the most efficient method to trace such kind of problem is to
obtain user dump to anslysis

Please follow the steps below to collect a Dr. Watson dump file for further
analysis:

1. Run "drwtsn32" (without the quotation marks) to open the 'Dr. Watson for
Windows' window:
Click start, click Run, type "drwtsn32" in open box.

2. Select the check box next to the Create Crash Dump File option.

3. Search the dump file under the folder indicated by the 'Crash Dump' edit
box. The default directory is "\Documents and Settings\All
Users\Application Data\Microsoft\Dr Watson" (user.dmp).

4. Search the log file under the folder indicated by the 'Log File Path'
edit box. The default directory is "\Documents and Settings\All
Users\Application Data\Microsoft\Dr Watson" (drwtsn32.log).

5. Select the check boxes next to the following options:

Dump All Thread Contexts.
Append to Existing Log File.
Create Crash Dump File.

6. Click OK.

7. Run "drwtsn32 -i" (without the quotation marks) to enable Dr. Watson as
the default debugger.

8. If the issue re-occur after shutdown, you may check if the
user-dump/Drwatson log file are created after rebooting.

You may want to contact Microsoft Customer Support Service so that
dedicated support professional can check the user dump for you. Also, you
may want to check if you could find clues direclty from Drwatson log file.

Best Regards,


Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| From: never-aways <[email protected]>
| Subject: Re: Unknown service causing error on shutdown
| Date: Wed, 09 Mar 2005 19:11:50 +0000
| Message-ID: <[email protected]>
| References: <[email protected]>
| X-Newsreader: Forte Agent 1.93/32.576 English (American)
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.windowsxp.general
| NNTP-Posting-Host: 82-38-233-135.cable.ubr06.shef.blueyonder.co.uk
82.38.233.135
| Lines: 1
| Path:
TK2MSFTNGXA02.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTFEED02.phx.gbl!TK2MSFTNGP0
8.phx.gbl!TK2MSFTNGP10.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windowsxp.general:1234300
| X-Tomcat-NG: microsoft.public.windowsxp.general
|
| On Wed, 09 Mar 2005 12:25:44 +0000, never-aways <[email protected]>
| wrote:
|
| >Sometimes when shutting down a service is throwing an error. Only
| >problem is i have no idea which service.
| >
| >Occasionally, during the saving settings stage of the shutdown
| >"svchost.exe" throws one of those "The instruction at ... could not be
| >written" errors. I don't have time to write down the entire message
| >because windows still manages to finish shutting down.
| >
| >When i boot back into windows there is an error message waiting for
| >me...
| >
| >"Generic Host Process for Win32 Services encountered a problem and
| >need to close.
| >
| >This error occured on...."
| >
| >
| >The error report contains...
| >
| >"Error signature...
| >szAppName: svchost.exe
| >szAppVer: 0.0.0.0
| >szModName: unknown
| >szModVer: 0.0.0.0
| >offset: 00000000"
| >
| >
| >The Application error log is just as informative...
| >
| >"Faulting application svchost.exe, version 0.0.0.0, faulting module
| >unknown, version 0.0.0.0, fault address 0x00000000.
| >
| >For more information, see Help and Support Center at
| >http://go.microsoft.com/fwlink/events.asp."
| >
| >
| >What annoys me is that it doesn't even give me a PID, there really is
| >absolutely nothing to go on. Whichever service is problematic can't
| >be important because it's causing no ill effects in my everyday work.
| >Windows is actually solid.
| >
| >
| >What is stranger still, is that if i have had windows booted for
| >longrer than at least 6 hours then the error will not occur. But if i
| >shutdown within a few hours of windows being loaded it will happen and
| >i'll get the annoying piano stab sound :-(
|
|
| So is there any strategy i can take to work out what this is?
|
| It's reallly frustrating. Thanks.
|