Re: svchost.exe application error -> RPC shutdown



Hm ... I don't know. I'm using free AVG (anti-virus, anti-spyware &
anti-rootkit).
But I don't think it's a virus or spyware things.

Argh ... error again. It's different error now. I think it's come from Yahoo
Messenger. I remove the start up registry of Yahoo Messenger from Safe Mode &
Windows run normally. By the way, how to remove Yahoo Messenger from start up
permanently?

Fiuh ...

Ok, here's the error:

1. From Event Viewer (System):

a. Login

Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 06/12/2007
Time: 7:18:34
User: N/A
Computer: RAN
Description:
Application popup: svchost.exe - Application Error : The instruction at
"0x751d379a" referenced memory at "0x00000000". The memory could not be
"read".

Click on OK to terminate the program
Click on CANCEL to debug the program

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

b. 60 second shut down things!

Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 06/12/2007
Time: 7:25:04
User: NT AUTHORITY\SYSTEM
Computer: RAN
Description:
The process winlogon.exe has initiated the restart of RAN for the following
reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: Windows must now restart because the Remote Procedure Call (RPC)
service terminated unexpectedly

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ff 00 00 00 ÿ...

c. reboot (same error with login)


2. From Event Viewer (Application):

a.

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 06/12/2007
Time: 7:22:31
User: N/A
Computer: RAN
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 800706BA from line 44 of
d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact
Microsoft Product Support Services to report this error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

b.

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 06/12/2007
Time: 7:24:01
User: N/A
Computer: RAN
Description:
Faulting application yahoomessenger.exe, version 8.1.0.421, faulting module
wshbth.dll, version 5.1.2600.2180, fault address 0x0000379a.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 79 61 68 ure yah
0018: 6f 6f 6d 65 73 73 65 6e oomessen
0020: 67 65 72 2e 65 78 65 20 ger.exe
0028: 38 2e 31 2e 30 2e 34 32 8.1.0.42
0030: 31 20 69 6e 20 77 73 68 1 in wsh
0038: 62 74 68 2e 64 6c 6c 20 bth.dll
0040: 35 2e 31 2e 32 36 30 30 5.1.2600
0048: 2e 32 31 38 30 20 61 74 .2180 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 30 33 37 39 61 0000379a
0060: 0d 0a ..

"Gerry" wrote:

What are your anto-virus and anti-spyware arrangements?
.



Relevant Pages

  • [NT] Multiple Vulnerabilities in Yahoo! Messenger
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... There are multiple vulnerabilities in Yahoo! ... Yahoo Messenger - Multiple Vulnerabilities. ...
    (Securiteam)
  • CERT Advisory CA-2002-16 Multiple Vulnerabilities in Yahoo! Messenger
    ... There are multiple vulnerabilities in Yahoo! ... Messenger is a widely used program for communicating with other ... that permits a remote attacker to execute arbitrary script and HTML ...
    (Cert)
  • CERT Advisory CA-2002-16 Multiple Vulnerabilities in Yahoo! Messenger
    ... There are multiple vulnerabilities in Yahoo! ... Messenger is a widely used program for communicating with other ... that permits a remote attacker to execute arbitrary script and HTML ...
    (Cert)
  • Re: Windows Messenger behind Firewalls and Routers
    ... My answer would be - Yes you need UPnP on the routers at both ends. ... after 3 months with support and being escalated to the highest level. ... A D-Link DSLG-604T router did work with all machines but was unstable. ... Windows XP Messenger to work. ...
    (microsoft.public.windowsxp.messenger)
  • Re: Only 8 More Days to Go!
    ... A general user may have Yahoo or MSN Messenger installed. ... Both Yahoo and Windows Live Messenger (MSN Messenger no longer exists; please try to keep up) can be configured in Pidgin along with AIM, ... Windows Yahoo Messenger has no direct access to Yahoo chat. ...
    (microsoft.public.windows.vista.general)