none
Application error in regards to svchost.exe.

    Question

  • On our Windows 7 Pro boxes we are experiencing an application error that occurs every day in regards to svchost.exe.  We are also seeing two information events(the appear to be duplicates) that also occur.  Does anyone know what is causing these?

    ERROR

    Log Name:      Application
    Source:        Application Error
    Date:          4/7/2011 3:22:29 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      SHTL-CEDG-1
    Description:
    Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
    Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
    Exception code: 0xc000071f
    Fault offset: 0x000000000006dd2c
    Faulting process id: 0x244
    Faulting application start time: 0x01cbf4d20cbd4a34
    Faulting application path: C:\Windows\system32\svchost.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: 44304e84-60c6-11e0-9ce9-003048919f07
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-04-07T03:22:29.000000000Z" />
        <EventRecordID>32539</EventRecordID>
        <Channel>Application</Channel>
        <Computer>SHTL-CEDG-1</Computer>
        <Security />
      </System>
      <EventData>
        <Data>svchost.exe</Data>
        <Data>6.1.7600.16385</Data>
        <Data>4a5bc3c1</Data>
        <Data>ntdll.dll</Data>
        <Data>6.1.7600.16695</Data>
        <Data>4cc7b325</Data>
        <Data>c000071f</Data>
        <Data>000000000006dd2c</Data>
        <Data>244</Data>
        <Data>01cbf4d20cbd4a34</Data>
        <Data>C:\Windows\system32\svchost.exe</Data>
        <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
        <Data>44304e84-60c6-11e0-9ce9-003048919f07</Data>
      </EventData>
    </Event>

    INFORMATION EVENTS

    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          4/7/2011 3:22:29 AM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      SHTL-CEDG-1
    Description:
    Fault bucket , type 0
    Event Name: APPCRASH
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1: svchost.exe
    P2: 6.1.7600.16385
    P3: 4a5bc3c1
    P4: ntdll.dll
    P5: 6.1.7600.16695
    P6: 4cc7b325
    P7: c000071f
    P8: 000000000006dd2c
    P9:
    P10:

    Attached files:

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_fc18d79a13020a0435135d86c012d9152c2c3c_21ea842e

    Analysis symbol:
    Rechecking for solution: 0
    Report Id: 44304e84-60c6-11e0-9ce9-003048919f07
    Report Status: 4
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2011-04-07T03:22:29.000000000Z" />
        <EventRecordID>32540</EventRecordID>
        <Channel>Application</Channel>
        <Computer>SHTL-CEDG-1</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>APPCRASH</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>svchost.exe</Data>
        <Data>6.1.7600.16385</Data>
        <Data>4a5bc3c1</Data>
        <Data>ntdll.dll</Data>
        <Data>6.1.7600.16695</Data>
        <Data>4cc7b325</Data>
        <Data>c000071f</Data>
        <Data>000000000006dd2c</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_fc18d79a13020a0435135d86c012d9152c2c3c_21ea842e</Data>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>44304e84-60c6-11e0-9ce9-003048919f07</Data>
        <Data>4</Data>
      </EventData>
    </Event>

     

     

    Thursday, April 07, 2011 9:24 PM

Answers

All replies

  • Problem here is with WMI

     

    http://support.microsoft.com/kb/982293

     


    My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT

    Remote Assistance is available for a fee.

    I am best with C++ and I am learning C# using Visual Studio 2010

    Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

    • Marked as answer by abrady123 Friday, April 08, 2011 9:24 PM
    Friday, April 08, 2011 12:00 AM
  • This likely the answer.  Thanks.  We are now testing this.
    Friday, April 08, 2011 9:24 PM
  • We are experiencing the same problems, with the same symptoms as described in the KB-article mentioned. But the install of the hotfix fails because "the update does not apply to your computer". It's Windows 7, x64 as intended by the hotfix, but the version of the affected files is higher than mentioned in the KB-article.

    Is there a way to force this hotfix? Or has it been re-released after more recent updates? Or is there a work-around available?

    Friday, September 27, 2013 10:46 AM
  • http://windows.microsoft.com/en-ca/windows-vista/what-is-svchost-exe

    This will help figure out what is being run with that module


    Corsair Carbide 300R with window
    Corsair TX850V2 70A@12V
    Asus M5A99FX PRO R2.0 CFX/SLI
    AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
    G.SKILL RipjawsX DDR3-2133 8 GB
    EVGA GTX 260 + BFG GTX 260 SLI 55nm 216 core (GT200 Tesla)
    Asus PA238QR IPS LED HDMI DP 1080p
    ST2000DM001 & Windows 8.1 x64 Professional
    LG WH14NS40 14X Blu-Ray Writer BDXL 128GB
    Microsoft Wireless Desktop 2000
    Wacom Bamboo CHT470M


    Friday, September 27, 2013 12:11 PM
  • http://windows.microsoft.com/en-ca/windows-vista/what-is-svchost-exe

    This will help figure out what is being run with that module



    That doesn't help when a "regular" user can't log in because certain services aren't running (as noted in the KB-article), but when an Administrator logs in, all those services are running and there seems to be no problem.
    • Proposed as answer by william 2 Thursday, October 31, 2013 8:57 AM
    Friday, September 27, 2013 2:34 PM