Prev: need administrator...but no administrator
Next: svchost.exe app error
From: GMG on 21 Jan 2010 09:57
I have been seeing...

AXWIN Frame Window: sychost.exe app error

0x02b7f7ao referenced memory 0x02b7f7ao , could not be written

OK or cancel to debug

when I click cancel the computer reboots

I click OK and the computer freezes with a still active cursor


From: Elmo on 21 Jan 2010 10:13
GMG wrote:
> I have been seeing...
>
> AXWIN Frame Window: sychost.exe app error
>
> 0x02b7f7ao referenced memory 0x02b7f7ao , could not be written
>
> OK or cancel to debug
>
> when I click cancel the computer reboots
>
> I click OK and the computer freezes with a still active cursor

Sychost.exe is either a typo, (You named it "sychost.ese" in the
header.), or malicious software, intended to look like the common
Svchost.exe process. Open Task Manager (Ctrl/Alt-Del, or right-click
the Taskbar, click Task Manager), stop the process from running, then
run the following:

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

--
Joe =o)
From: GMG on 21 Jan 2010 10:27
Thank you...when it happens again I will check if it is sychost or svchost.
I have run the Malware program and it found nothing.


From: Jose on 21 Jan 2010 10:36
On Jan 21, 10:27 am, "GMG" <gmgr...(a)yahoo.com> wrote:
> Thank you...when it happens again  I will check if it is sychost or svchost.
> I have run the Malware program and it found nothing.

Does this happen randomly, when you shutdown, or usually when you are
doing some specific thing - browsing (what browser?), reading a PDF
file maybe?

Please provide additional information about your system:

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste
the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to
be private information to you, just delete it from the pasted
information.

This will minimize back and forth Q&A and eliminate guesswork.

Look in the Event Viewer for clues around the time of the incident.

Here is a method to post the specific information about individual
events.

To see the Event Viewer logs, click Start, Settings, Control Panel,
Administrative Tools, Event Viewer.

A shortcut to Event Viewer is to click Start, Run and in the box
enter:

%SystemRoot%\system32\eventvwr.msc /s

Click OK to launch the Event Viewer.

The most interesting logs are usually the Application and System.
Some logs may be almost or completely empty.
Not every event is a problem, some are informational messages that
things are working okay and some are warnings.
No event should defy reasonable explanation.

Each event is sorted by Date and Time. Errors will have red Xs,
Warnings will have yellow !s.
Information messages have white is. Not every Error or Warning event
means there is a serious issue.
Some are excusable at startup time when Windows is booting. Try to
find just the events at the date
and time around your problem.

If you double click an event, it will open a Properties windows with
more information. On the right are
black up and down arrow buttons to scroll through the open events. The
third button that looks like
two pages on top of each other is used to copy the event details to
your Windows clipboard.

When you find an interesting event that occurred around the time of
your issue, click the third button
under the up and down arrows to copy the details and then you can
paste the details (right click, Paste
or CTRL-V) the detail text back here for analysis.

To get a fresh start on any Event Viewer log, you can choose to clear
the log (backing up the log is offered),
then reproduce your issue, then look at just the events around the
time of your issue.

If you are planning on replacing your svchost.exe with that patch,
hopefully you will include a plan for putting the original one back if
you need to. svchost.exe is a pretty fundamental XP process, so if
you break it, you need to be able to fix it.
From: GMG on 21 Jan 2010 11:32
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/21/2010
Time: 9:13:49 AM
User: N/A
Computer: YOUR-F78BF48CE2
Description:
Faulting application svchost.exe, version 5.1.2600.5512, faulting module
unknown, version 0.0.0.0, fault address 0x00e8f7a0.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 35 35 31 32 20 69 0.5512 i
0030: 6e 20 75 6e 6b 6e 6f 77 n unknow
0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.
0040: 30 20 61 74 20 6f 66 66 0 at off
0048: 73 65 74 20 30 30 65 38 set 00e8
0050: 66 37 61 30 f7a0


 |  Next  |  Last
Pages: 1 2 3
Prev: need administrator...but no administrator
Next: svchost.exe app error