Vista - Host Process crashes

I am getting a blue screen crash and memory dump almost daily. When I reboot
I get a Microsoft Windows error message saying Host Process for Windows
Services stopped working and was closed. A problem caused the application to
stop working correctly. Windows will notify you if a solution is available.

I am running Vista 64 bit. My primary software is Office 2007 but I also
seem to have lost connection to my APC battery backup. It is still there but
the setup configuration seems to have been lost.

Also, Vista Memory Test says Hardware Error almost immediately but Memtest
and Dell memory diagnostics find no hardware error.

I am baffled.

Norman Castel

"normviv73" <normviv73@discussions.microsoft.com> wrote in message
news:44651052-7172-44F5-8C76-977B64B2E753@microsoft.com...
>I am getting a blue screen crash and memory dump almost daily. When I
>reboot
> I get a Microsoft Windows error message saying Host Process for Windows
> Services stopped working and was closed. A problem caused the application
> to
> stop working correctly. Windows will notify you if a solution is
> available.
>
> I am running Vista 64 bit. My primary software is Office 2007 but I also
> seem to have lost connection to my APC battery backup. It is still there
> but
> the setup configuration seems to have been lost.
>
> Also, Vista Memory Test says Hardware Error almost immediately but Memtest
> and Dell memory diagnostics find no hardware error.
>

You look in the Event Logs for the error message?

I opened Event Viewer but the number of items and types is vast and all well
beyond my comprehension. I did not spot any error item that said Host
Process.

Norman Castel

"Mr. Arnold" wrote:

>
> "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> news:44651052-7172-44F5-8C76-977B64B2E753@microsoft.com...
> >I am getting a blue screen crash and memory dump almost daily. When I
> >reboot
> > I get a Microsoft Windows error message saying Host Process for Windows
> > Services stopped working and was closed. A problem caused the application
> > to
> > stop working correctly. Windows will notify you if a solution is
> > available.
> >
> > I am running Vista 64 bit. My primary software is Office 2007 but I also
> > seem to have lost connection to my APC battery backup. It is still there
> > but
> > the setup configuration seems to have been lost.
> >
> > Also, Vista Memory Test says Hardware Error almost immediately but Memtest
> > and Dell memory diagnostics find no hardware error.
> >
>
> You look in the Event Logs for the error message?
>
>

"normviv73" <normviv73@discussions.microsoft.com> wrote in message
news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
>I opened Event Viewer but the number of items and types is vast and all
>well
> beyond my comprehension. I did not spot any error item that said Host
> Process.
>


The error message has to be there with something like Host Process has
stopped working.

It should be there in the System log, most likely with a red icon, You
should be able to correlate date and time as to when this is happening to
events in the log

"Mr. Arnold" wrote:

> "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
> >I opened Event Viewer but the number of items and types is vast and all
> >well
> > beyond my comprehension. I did not spot any error item that said Host
> > Process.
> >
>
>
> The error message has to be there with something like Host Process has
> stopped working.
>
> It should be there in the System log, most likely with a red icon, You
> should be able to correlate date and time as to when this is happening to
> events in the log
>
>

Each crash event shows a group of 13 red icon items. 12 are Event ID 7031
and 1 is 7034 and all show source as Service Control Manager Eventlog. The
details are all different but all say 'service terminated unexpectedly'.
That does not seem very usefull.

Norman Castel


"normviv73" wrote:

>
>
> "Mr. Arnold" wrote:
>
> > "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> > news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
> > >I opened Event Viewer but the number of items and types is vast and all
> > >well
> > > beyond my comprehension. I did not spot any error item that said Host
> > > Process.
> > >
> >
> >
> > The error message has to be there with something like Host Process has
> > stopped working.
> >
> > It should be there in the System log, most likely with a red icon, You
> > should be able to correlate date and time as to when this is happening to
> > events in the log
> >
> >

Do you get any specific data in the Problem Reports and Solutions center?
http://zachd.com/pss/pss.html#bucket
can help you look that up if you don't know how.

--
Speaking for myself only.
See http://zachd.com/pss/pss.html for some helpful WMP info.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
"normviv73" <normviv73@discussions.microsoft.com> wrote in message
news:B7CD6AA3-8673-40B3-AA08-40D23C47FF56@microsoft.com...
> Each crash event shows a group of 13 red icon items. 12 are Event ID 7031
> and 1 is 7034 and all show source as Service Control Manager Eventlog.
> The
> details are all different but all say 'service terminated unexpectedly'.
> That does not seem very usefull.
>
> Norman Castel
>
>
> "normviv73" wrote:
>
>>
>>
>> "Mr. Arnold" wrote:
>>
>> > "normviv73" <normviv73@discussions.microsoft.com> wrote in message
>> > news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
>> > >I opened Event Viewer but the number of items and types is vast and
>> > >all
>> > >well
>> > > beyond my comprehension. I did not spot any error item that said
>> > > Host
>> > > Process.
>> > >
>> >
>> >
>> > The error message has to be there with something like Host Process has
>> > stopped working.
>> >
>> > It should be there in the System log, most likely with a red icon, You
>> > should be able to correlate date and time as to when this is happening
>> > to
>> > events in the log
>> >
>> >

Under 'Problem Reports and Solutions' I found a very, very long list of items
but not solutions except for "Probable bad memory" which seems to be
incorrect. The Windows Memory Test always says "Hardware Error" but Dell
Memory Diagnostics finds no errors and Dell says only their diagnostics count.

I have disabled bsod auto restart but is there a way to copy and paste or to
print the blue screen information?

Here is are the details from one 'host process' crash.

Product
Host Process for Windows Services

Problem
Stopped working

Date
5/26/2007 9:03 PM

Status
Report Sent

Problem signature
Problem Event Name: APPCRASH
Application Name: svchost.exe
Application Version: 6.0.6000.16386
Application Timestamp: 4549b5f5
Fault Module Name: sysmain.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549d338
Exception Code: c0000005
Exception Offset: 0000000000034358
OS Version: 6.0.6000.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 05cc
Additional Information 2: bffc398a9aefa36fcc94f7f36e00ef5d
Additional Information 3: 25f6
Additional Information 4: 039d36dd3deb976ed455e5ddc1614ada

Extra information about the problem
Bucket ID: 212876

Norman Castel


"zachd [MSFT]" wrote:

>
> Do you get any specific data in the Problem Reports and Solutions center?
> http://zachd.com/pss/pss.html#bucket
> can help you look that up if you don't know how.
>
> --
> Speaking for myself only.
> See http://zachd.com/pss/pss.html for some helpful WMP info.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --
> "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> news:B7CD6AA3-8673-40B3-AA08-40D23C47FF56@microsoft.com...
> > Each crash event shows a group of 13 red icon items. 12 are Event ID 7031
> > and 1 is 7034 and all show source as Service Control Manager Eventlog.
> > The
> > details are all different but all say 'service terminated unexpectedly'.
> > That does not seem very usefull.
> >
> > Norman Castel
> >
> >
> > "normviv73" wrote:
> >
> >>
> >>
> >> "Mr. Arnold" wrote:
> >>
> >> > "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> >> > news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
> >> > >I opened Event Viewer but the number of items and types is vast and
> >> > >all
> >> > >well
> >> > > beyond my comprehension. I did not spot any error item that said
> >> > > Host
> >> > > Process.
> >> > >
> >> >
> >> >
> >> > The error message has to be there with something like Host Process has
> >> > stopped working.
> >> >
> >> > It should be there in the System log, most likely with a red icon, You
> >> > should be able to correlate date and time as to when this is happening
> >> > to
> >> > events in the log
> >> >
> >> >
>
>
>

Okay. I followed the advice to keep the next bsod from closing and I just
got one. I had to copy this longhand. Is there any method to print a bsod?
Can you decipher the following codes or tell me where to submit them? The
text said (in part):

MEMORY_MANAGEMENT

If problems continue... Disable BIOS memory options such as caching or
shadowing.

Technical information
***STOP: 0x0000001A (0x0000000000041284, 0x0000000007072001,
0x0000000000003376, 0xFFFFF70000081000)

Thank you (really!!!),

Norman Castel
(age 66 and disabled)
"zachd [MSFT]" wrote:

>
> Do you get any specific data in the Problem Reports and Solutions center?
> http://zachd.com/pss/pss.html#bucket
> can help you look that up if you don't know how.
>
> --
> Speaking for myself only.
> See http://zachd.com/pss/pss.html for some helpful WMP info.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --
> "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> news:B7CD6AA3-8673-40B3-AA08-40D23C47FF56@microsoft.com...
> > Each crash event shows a group of 13 red icon items. 12 are Event ID 7031
> > and 1 is 7034 and all show source as Service Control Manager Eventlog.
> > The
> > details are all different but all say 'service terminated unexpectedly'.
> > That does not seem very usefull.
> >
> > Norman Castel
> >
> >
> > "normviv73" wrote:
> >
> >>
> >>
> >> "Mr. Arnold" wrote:
> >>
> >> > "normviv73" <normviv73@discussions.microsoft.com> wrote in message
> >> > news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
> >> > >I opened Event Viewer but the number of items and types is vast and
> >> > >all
> >> > >well
> >> > > beyond my comprehension. I did not spot any error item that said
> >> > > Host
> >> > > Process.
> >> > >
> >> >
> >> >
> >> > The error message has to be there with something like Host Process has
> >> > stopped working.
> >> >
> >> > It should be there in the System log, most likely with a red icon, You
> >> > should be able to correlate date and time as to when this is happening
> >> > to
> >> > events in the log
> >> >
> >> >
>
>
>

That's about the conclusion I got from the crash bucket: it's a crash in the
prefetch paging code.

What processes/services/applications are running? The presumption in the
analysis so far is that a service is causing memory corruption - somehow
memory is getting corrupt. If it's not a bad service, then yeah, I agree
with the blue-screen commentary that it would be good to look into the
memory/BIOS analysis areas. =P

--
Speaking for myself only.
See http://zachd.com/pss/pss.html for some helpful WMP info.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
"normviv73" <normviv73@discussions.microsoft.com> wrote in message
news:B1BB90B6-833E-4793-9670-A41EACBF4B83@microsoft.com...
> Okay. I followed the advice to keep the next bsod from closing and I just
> got one. I had to copy this longhand. Is there any method to print a
> bsod?
> Can you decipher the following codes or tell me where to submit them? The
> text said (in part):
>
> MEMORY_MANAGEMENT
>
> If problems continue... Disable BIOS memory options such as caching or
> shadowing.
>
> Technical information
> ***STOP: 0x0000001A (0x0000000000041284, 0x0000000007072001,
> 0x0000000000003376, 0xFFFFF70000081000)
>
> Thank you (really!!!),
>
> Norman Castel
> (age 66 and disabled)
> "zachd [MSFT]" wrote:
>
>>
>> Do you get any specific data in the Problem Reports and Solutions center?
>> http://zachd.com/pss/pss.html#bucket
>> can help you look that up if you don't know how.
>>
>> --
>> Speaking for myself only.
>> See http://zachd.com/pss/pss.html for some helpful WMP info.
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> --
>> "normviv73" <normviv73@discussions.microsoft.com> wrote in message
>> news:B7CD6AA3-8673-40B3-AA08-40D23C47FF56@microsoft.com...
>> > Each crash event shows a group of 13 red icon items. 12 are Event ID
>> > 7031
>> > and 1 is 7034 and all show source as Service Control Manager Eventlog.
>> > The
>> > details are all different but all say 'service terminated
>> > unexpectedly'.
>> > That does not seem very usefull.
>> >
>> > Norman Castel
>> >
>> >
>> > "normviv73" wrote:
>> >
>> >>
>> >>
>> >> "Mr. Arnold" wrote:
>> >>
>> >> > "normviv73" <normviv73@discussions.microsoft.com> wrote in message
>> >> > news:BCFA3B6E-ECA2-42BD-9CFF-EACD8D3AACA5@microsoft.com...
>> >> > >I opened Event Viewer but the number of items and types is vast and
>> >> > >all
>> >> > >well
>> >> > > beyond my comprehension. I did not spot any error item that said
>> >> > > Host
>> >> > > Process.
>> >> > >
>> >> >
>> >> >
>> >> > The error message has to be there with something like Host Process
>> >> > has
>> >> > stopped working.
>> >> >
>> >> > It should be there in the System log, most likely with a red icon,
>> >> > You
>> >> > should be able to correlate date and time as to when this is
>> >> > happening
>> >> > to
>> >> > events in the log
>> >> >
>> >> >
>>
>>
>>