svchost.exe - Application Error after waking up from standby

[dob]

Dear all,
I have a IBM X41 ThinkPad with Win XP SP3 and the following problem since a few days. Whenever I wake the computer up form standby there occurs the usual log-in screen and with it the following error message in a little window:

svchost.exe - Application Error
The exception unknown software exception (0x0100409) occurred in the application at location 0x7ab437b4

I only can press "OK". When I log in, the computer still runs ok but the whole network subsystem seems to be affected:

- LAN: works but sometimes shows "limited or no connectivity"
- WLAN: when I enable WLAN is says "connection failed
it is not possible to connect at this time. no network was detected. you may need to plugin your network cable to complete the connection."
- dial-in: works after a few error messages but does not show a symbol in the task bar


In one instance there occurred and additional window : Unexpected shut down of computer by NT AUTHORITY\SYSTEM ...
DCOM Server Process Launcher terminated unexpectedly ... and a countdown of 1min for restart.

I invested several hours in searching forums etc. I already tried the following without success:

- McAfee delivers a false-positive detection of the W32/wecorl.a virus when version 5958 of the DAT file is used (sounded promising since I have McAffee running - but the tool from McAffee for remedy did not change anything)

- PC Hell: How to Fix SVCHOST.EXE Application Error (also no change)

I would be very grateful for any tips

Best regards
Daniel

 

[Elmo]

undisclosed wrote:
> Dear all,
> I have an IBM X41 ThinkPad with Win XP SP3 and the following problem
> since a few days. Whenever I wake the computer up form standby there
> occurs the usual log-in screen and with it the following error message
> in a little window:
>
> svchost.exe - Application Error
> The exception unknown software exception (0x0100409) occurred in the
> application at location 0x7ab437b4
>
> I only can press "OK". When I log in, the computer still runs OK but
> the whole network subsystem seems to be affected:
>
> - LAN: works but sometimes shows "limited or no connectivity"
> - WLAN: when I enable WLAN is says "Connection failed
> It is not possible to connect at this time. No network was detected.
> You may need to plug in your network cable to complete the connection."
> - Dial-in: works after a few error messages but does not show a symbol
> in the task bar.
>
>
> In one instance there occurred an additional window: "Unexpected shut
> down of computer by NT AUTHORITY\SYSTEM ...
> DCOM Server Process Launcher terminated unexpectedly" ... and a
> countdown of 1 min for restart.
>
> I invested several hours in searching forums etc. I already tried the
> following without success:
>
> - 'McAfee delivers a false-positive detection of the W32/wecorl.a
> virus when version 5958 of the DAT file is used'
> (http://support.microsoft.com/kb/2025695/en-us) (sounded promising since
> I have McAffee running - but the tool from McAffee for remedy did not
> change anything)
>
> - 'PC Hell: How to Fix SVCHOST.EXE Application Error'
> (http://www.pchell.com/support/svchosterror.shtml) (also no change)
>
> I would be very grateful for any tips

This might help with the connectivity issues:

Open Device Manager, open the properties on your ethernet card, click
the Power tab, and deselect "Allow the computer to turn off this device
to save power".

You can do the same thing with a USB device by disabling the power
saving feature of each "USB Root Hub" entry.

--

Joe =o)

 

[PA Bear [MS MVP]]

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?

undisclosed wrote:
> Dear all,
> I have a IBM X41 ThinkPad with Win XP SP3 and the following problem
> since a few days. Whenever I wake the computer up form standby there
> occurs the usual log-in screen and with it the following error message
> in a little window:
>
> svchost.exe - Application Error
> The exception unknown software exception (0x0100409) occurred in the
> application at location 0x7ab437b4
>
> I only can press "OK". When I log in, the computer still runs ok but
> the whole network subsystem seems to be affected:
>
> - LAN: works but sometimes shows "limited or no connectivity"
> - WLAN: when I enable WLAN is says "connection failed
> it is not possible to connect at this time. no network was detected.
> you may need to plugin your network cable to complete the connection."
> - dial-in: works after a few error messages but does not show a symbol
> in the task bar
>
>
> In one instance there occurred and additional window : Unexpected shut
> down of computer by NT AUTHORITY\SYSTEM ...
> DCOM Server Process Launcher terminated unexpectedly ... and a
> countdown of 1min for restart.
>
> I invested several hours in searching forums etc. I already tried the
> following without success:
>
> - 'McAfee delivers a false-positive detection of the W32/wecorl.a
> virus when version 5958 of the DAT file is used'
> (http://support.microsoft.com/kb/2025695/en-us) (sounded promising since
> I have McAffee running - but the tool from McAffee for remedy did not
> change anything)
>
> - 'PC Hell: How to Fix SVCHOST.EXE Application Error'
> (http://www.pchell.com/support/svchosterror.shtml) (also no change)
>
> I would be very grateful for any tips
>
> Best regards
> Daniel

 

[dob]

Dear all,
thanks for your replies so far. Elmo, your hint sounds very sensible - will let you know asap after testing it.

Wrt to antivirus software: It is in fact a company PC (my employer is SAP in Germany). It has been running for 4 years now with the same installation and, as you can imagine, updates are constantly enforced by global IT. AFAIK, at the moment there is only McAffee with

- AutoUpdate 3.6.0.574
- Host Intrusion Prevention 7.0.0.1021
- System Compliance Profile 1.1.0.182
- Product Coverage Report 3.6.0.574
- Virusscan enterprise workstation 8.5.0.781
- virus defs 6036.0000
- scan engine 5400.1158
- hotfixes v8
- antispyware enterprise module 8.5.0.163

There used to be something called "BlackIce" before upgrades and maybe even other stuff that has been there years before but has been upgrade automatically.

Hope that helps
Daniel

 

[HeyBub]

undisclosed wrote:
> Dear all,
> I have a IBM X41 ThinkPad with Win XP SP3 and the following problem
> since a few days. Whenever I wake the computer up form standby there
> occurs the usual log-in screen and with it the following error message
> in a little window:
>
> svchost.exe - Application Error
> The exception unknown software exception (0x0100409) occurred in the
> application at location 0x7ab437b4
>
> I only can press "OK". When I log in, the computer still runs ok but
> the whole network subsystem seems to be affected:
>
> - LAN: works but sometimes shows "limited or no connectivity"
> - WLAN: when I enable WLAN is says "connection failed
> it is not possible to connect at this time. no network was detected.
> you may need to plugin your network cable to complete the connection."
> - dial-in: works after a few error messages but does not show a symbol
> in the task bar
>
>
> In one instance there occurred and additional window : Unexpected shut
> down of computer by NT AUTHORITY\SYSTEM ...
> DCOM Server Process Launcher terminated unexpectedly ... and a
> countdown of 1min for restart.
>
> I invested several hours in searching forums etc. I already tried the
> following without success:
>
> - 'McAfee delivers a false-positive detection of the W32/wecorl.a
> virus when version 5958 of the DAT file is used'
> (http://support.microsoft.com/kb/2025695/en-us) (sounded promising
> since I have McAffee running - but the tool from McAffee for remedy
> did not change anything)
>
> - 'PC Hell: How to Fix SVCHOST.EXE Application Error'
> (http://www.pchell.com/support/svchosterror.shtml) (also no change)
>
> I would be very grateful for any tips
>

Completely turn off, disable, or slash the throat of McAfee, and try again.
If the error disappears, well, it's time for Microsoft Security Essentials
(or similar free service). If the error remains, at least you've eliminated
one (likely) possibility.

 

[dob]

Dear Joe/Elmo,
thanks again for your sensible tip. Indeed the power mgmt of the Ethernet adaptor had "Allow the computer to turn off device to save power" was turned on. After I turned it off the error still occurred however. For the WLAN adaptor I could not really turn this feature off - it is an adaptor from Intel which only allow power save to "slide" between high and low which I set to lowest.

btw, here is another observation. After the error occurred I tried an ISDN dial in. Here is what happened:

1st error window: cannot load phone book - error 1726 : the remote procedure call failed
2nd error window: cannot load dialog - error 1726 : the remote procedure call failed

then the dial-in dialog appears as usual, when i am dialed in there is no symbol in task bar but connection is there.

Maybe that gives another hint.

Best
Daniel

 

[Elmo]

undisclosed wrote:
> Dear Joe/Elmo,
> thanks again for your sensible tip. Indeed the power mgmt of the
> Ethernet adaptor had "Allow the computer to turn off device to save
> power" was turned on. After I turned it off the error still occurred
> however. For the WLAN adaptor I could not really turn this feature off -
> it is an adaptor from Intel which only allow power save to "slide"
> between high and low which I set to lowest.
>
> btw, here is another observation. After the error occurred I tried an
> ISDN dial in. Here is what happened:
>
> 1st error window: cannot load phone book - error 1726 : the remote
> procedure call failed
> 2nd error window: cannot load dialog - error 1726 : the remote
> procedure call failed
>
> then the dial-in dialog appears as usual, when i am dialed in there is
> no symbol in task bar but connection is there.
>
> Maybe that gives another hint.
>
> Best
> Daniel

The one article I found on the error mentioned that malware had recently
been removed.

You might download, install, update and run Malwarebytes
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

--

Joe =o)

 

[dob]

Dear all,
the problem seems to be gone. I think it had the following cause: I realized that I had Apache and MySQL services running unconsciously. It was a few weeks ago that I started a web app on my computer via the xamp tool. It allows you to easily startup a web server and database with a convenient console. I thought when exiting the console and restarting the Apache and MySQL are automatically stopped - that was not the case. When turning them off, the problem still occurred but after 1-3 restarts they were gone. I suspect they caused the error (besides, there were 2 apache.exe processes running) ...

Thanks again for your support
Daniel