Generic Host Process error svchost

HI Carlos, I'm new on this thread...but I have the same problem you do. I
have a new notebook, and have had this problem almost since the beginning. I
didn't note
exactly when it started (dumb, I know!) but it was in the same session when
I installed Norton. This morning I booted up and didn't get the error until
I noticed that the Norton icon in the tray had "Auto Protect Disabled". When
I enabled it, the SVCHOST.EXE Application Error showed up.

"Carlos" wrote:

Malke - are you still here?

Well, I tried someting I saw in another forum to no avail - that is,
disabling DEP for svchost. Didn't fix it.

Here are some of the errors from the event viewer that occur durig the
Windows boot - about the same time this error comes up - I've been getting
two errors - one is a svchost about a memory that could not be "read", the
other is the Generic Host Process for Win32 Services has encountered a
Problem and Needs to Close. It includes this:
szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll
szModVer : 5.1.2600.2180 offset : 000105f8

From the event viewer at the time in reboot the errors occur, some examples
(all seem to be the Service Control Manager):

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2/15/2005
Time: 7:07:38 AM
User: N/A
Computer: DBZXXZ11
Description:
The Application Management service terminated with the following error:
The specified module could not be found.

Description:
The Human Interface Device Access service terminated with the following
error:
The specified module could not be found.

Description:
Timeout (30000 milliseconds) waiting for the Windows Image Acquisition (WIA)
service to connect.

Description:
The Windows Image Acquisition (WIA) service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

Description:
The Routing and Remote Access service terminated with service-specific error
2147483720 (0x80000048).

Description:
The IPv6 Helper Service service terminated unexpectedly. It has done this 1
time(s).

Description:
The Windows Audio service terminated unexpectedly. It has done this 1
time(s).

Description:
The Background Intelligent Transfer Service service terminated unexpectedly.
It has done this 1 time(s). The following corrective action will be taken
in 60000 milliseconds: Restart the service.

Description:
The Computer Browser service terminated unexpectedly. It has done this 1
time(s).

Description:
The Cryptographic Services service terminated unexpectedly. It has done
this 1 time(s).

Description:
The Automatic Updates service terminated unexpectedly. It has done this 1
time(s).

There are at least a dozen or so more of these in the event viewer sys log,
and this in the application log:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/15/2005
Time: 7:07:07 AM
User: N/A
Computer: DBZXXZ11
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x000105f8.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 6e 74 64 6c 6c 2e n ntdll.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 30 35 66 38 05f8

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/15/2005
Time: 7:07:07 AM
User: N/A
Computer: DBZXXZ11
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x000105f8.















http://support.microsoft.com/?kbid=314056

Carlos, you haven't given us enough information about your system to
troubleshoot in more detail. What changed between the time things
worked and the time they didn't? What makes you think "something is
trying to communicate..."? Do you have a firewall installed? If so,
what do the logs say?

You can also do some clean boot troubleshooting:

http://support.microsoft.com/default.aspx?kbid=310353 - How to Perform a
Clean Boot in Windows XP

Give us some information about your physical system. There is always the
possibility that this is not a software issue, but there is no way to
tell from your two posts so far.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

Same here Ellie - I'm starting to think this is more and more Norton. What
version do you have? I have Norton Anti Virus Corporate Edition version
7.61.928.
I think the real time protection is shutting out the svchosts.


"Ellie" wrote in message
...
HI Carlos, I'm new on this thread...but I have the same problem you do.
I
have a new notebook, and have had this problem almost since the beginning.
I
didn't note
exactly when it started (dumb, I know!) but it was in the same session
when
I installed Norton. This morning I booted up and didn't get the error
until
I noticed that the Norton icon in the tray had "Auto Protect Disabled".
When
I enabled it, the SVCHOST.EXE Application Error showed up.

"Carlos" wrote:

Malke - are you still here?

Well, I tried someting I saw in another forum to no avail - that is,
disabling DEP for svchost. Didn't fix it.

Here are some of the errors from the event viewer that occur durig the
Windows boot - about the same time this error comes up - I've been
getting
two errors - one is a svchost about a memory that could not be "read",
the
other is the Generic Host Process for Win32 Services has encountered a
Problem and Needs to Close. It includes this:
szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll
szModVer : 5.1.2600.2180 offset : 000105f8

From the event viewer at the time in reboot the errors occur, some
examples
(all seem to be the Service Control Manager):

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2/15/2005
Time: 7:07:38 AM
User: N/A
Computer: DBZXXZ11
Description:
The Application Management service terminated with the following error:
The specified module could not be found.

Description:
The Human Interface Device Access service terminated with the following
error:
The specified module could not be found.

Description:
Timeout (30000 milliseconds) waiting for the Windows Image Acquisition
(WIA)
service to connect.

Description:
The Windows Image Acquisition (WIA) service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

Description:
The Routing and Remote Access service terminated with service-specific
error
2147483720 (0x80000048).

Description:
The IPv6 Helper Service service terminated unexpectedly. It has done
this 1
time(s).

Description:
The Windows Audio service terminated unexpectedly. It has done this 1
time(s).

Description:
The Background Intelligent Transfer Service service terminated
unexpectedly.
It has done this 1 time(s). The following corrective action will be
taken
in 60000 milliseconds: Restart the service.

Description:
The Computer Browser service terminated unexpectedly. It has done this 1
time(s).

Description:
The Cryptographic Services service terminated unexpectedly. It has done
this 1 time(s).

Description:
The Automatic Updates service terminated unexpectedly. It has done this
1
time(s).

There are at least a dozen or so more of these in the event viewer sys
log,
and this in the application log:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/15/2005
Time: 7:07:07 AM
User: N/A
Computer: DBZXXZ11
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x000105f8.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 6e 74 64 6c 6c 2e n ntdll.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 32 31 38 2600.218
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 30 35 66 38 05f8

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 2/15/2005
Time: 7:07:07 AM
User: N/A
Computer: DBZXXZ11
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x000105f8.















http://support.microsoft.com/?kbid=314056

Carlos, you haven't given us enough information about your system to
troubleshoot in more detail. What changed between the time things
worked and the time they didn't? What makes you think "something is
trying to communicate..."? Do you have a firewall installed? If so,
what do the logs say?

You can also do some clean boot troubleshooting:

http://support.microsoft.com/default.aspx?kbid=310353 - How to Perform
a
Clean Boot in Windows XP

Give us some information about your physical system. There is always
the
possibility that this is not a software issue, but there is no way to
tell from your two posts so far.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"