I started up my laptop this morning and to my shock the svchost.exe process was terminated by DEP (Data Execution Prevention) now most the time the DEP system in Windows XP runs quite happliy in the background and does actually save your computer rather than give you false positivies.
So what happened for me to know that the svchost.exe application terminated well this was clear guidence.....
Right, so how do I diagnose this issue with the svchost application....well carefully...as this is a core system process so firstly you need to know the correct error not the friendly error so here it is...
The detailed crash report is as follows....
Please do not get put off my the error signatures they do mean something when trying to diagnose a fault.....however as with most diagnostic you will need to look at the event log to see what is going on here....
Right so from this it will probably something connected to WIA (Windows Image Aquisition) so this will be anything linked to Cameras, Printers, Webcams and other Image rendering devices......if you drill a little deeper you will notice the original svchost.exe error is in an unknown module....not much help.....
Right so this is certainly linked to printing the evidence is shown as a UPHCelan event in the evnt log:
The following handles in user profile hive A6-LAPTOPArtic6 (S-1-5-21-839522115-436374069-682003330-1003) have been remapped because they were preventing the profile from unloading successfully:
spoolsv.exe (3368)
HKCUSoftwarePolicies (0x3d8)
HKCUSoftware (0x3e4)
HKCUSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsBlocked (0x430)
HKCUSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsCached (0x438)
HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings (0x47c)
Unfortunately as this error occured before I had logged in DrWatson did not log any useful information therefore you cannot see my "working out" to solve this problem however the problem was caused by the "HP PhotoSmart 3310 Network Driver" installation.....I have now un-installed this application and all is well.....oohhh by the way "HP" need to make basic drivers and by basic I mean 640kb INF Drivers not 41.54mb Basic Fully Featured Drivers.....stop the bloatware HP give us what we want.....
So what happened for me to know that the svchost.exe application terminated well this was clear guidence.....
Right, so how do I diagnose this issue with the svchost application....well carefully...as this is a core system process so firstly you need to know the correct error not the friendly error so here it is...
The detailed crash report is as follows....
Please do not get put off my the error signatures they do mean something when trying to diagnose a fault.....however as with most diagnostic you will need to look at the event log to see what is going on here....
Right so from this it will probably something connected to WIA (Windows Image Aquisition) so this will be anything linked to Cameras, Printers, Webcams and other Image rendering devices......if you drill a little deeper you will notice the original svchost.exe error is in an unknown module....not much help.....
Right so this is certainly linked to printing the evidence is shown as a UPHCelan event in the evnt log:
The following handles in user profile hive A6-LAPTOPArtic6 (S-1-5-21-839522115-436374069-682003330-1003) have been remapped because they were preventing the profile from unloading successfully:
spoolsv.exe (3368)
HKCUSoftwarePolicies (0x3d8)
HKCUSoftware (0x3e4)
HKCUSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsBlocked (0x430)
HKCUSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsCached (0x438)
HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings (0x47c)
Unfortunately as this error occured before I had logged in DrWatson did not log any useful information therefore you cannot see my "working out" to solve this problem however the problem was caused by the "HP PhotoSmart 3310 Network Driver" installation.....I have now un-installed this application and all is well.....oohhh by the way "HP" need to make basic drivers and by basic I mean 640kb INF Drivers not 41.54mb Basic Fully Featured Drivers.....stop the bloatware HP give us what we want.....
Tags
Windows