Version: 2008
  • On TechRepublic: 10 lame phrases to cut from your resume
Advanced Search
advertisement
advertisement

Forum display:

Windows XP: Generic Host Process Crash

by The_Computer_Man - 7/25/08 4:18 PM
advertisement
Click Here
Post 1 of 18

Generic Host Process Crash

by The_Computer_Man - 7/25/08 4:18 PM

Generic Host Process Crash
So I have this problem and it's been driving me crazy for some time now. It seems that "randomly" when I lose connection to my wireless access point, I will get a Generic Host Process for Win32 crash. I have disable the forced shutdown that usually occurs after this happens, but since it renders the system mostly unusable, I have to reboot anyway. What's odd is that it doesn't happen every time I lose connectivity to the network. The only clue are these entries in the event log as follows:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 7/17/2008
Time: 17:41:03
User: N/A
Computer: DANHP9000
Description:
Faulting application svchost.exe, version 5.1.2600.5512, faulting module rpcss.dll, version 5.1.2600.5512, fault address 0x0001f455.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 35 35 31 32 20 69 0.5512 i
0030: 6e 20 72 70 63 73 73 2e n rpcss.
0038: 64 6c 6c 20 35 2e 31 2e dll 5.1.
0040: 32 36 30 30 2e 35 35 31 2600.551
0048: 32 20 61 74 20 6f 66 66 2 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 66 34 35 35 f455

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 7/18/2008
Time: 20:23:44
User: N/A
Computer: DANHP9000
Description:
The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 7/21/2008
Time: 18:58:02
User: N/A
Computer: DANHP9000
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BE from line 44 of f:\xpsp3\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This is also accompanied by the disconnect and reconnect of the network adapter:

Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4202
Date: 7/17/2008
Time: 17:41:00
User: N/A
Computer: DANHP9000
Description:
The system detected that network adapter \DEVICE\TCPIP_{38335C4E-A148-4CCF-8BF1-AC7861674194} was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 6a 10 00 40 ....j..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 7/17/2008
Time: 17:41:05
User: N/A
Computer: DANHP9000
Description:
The system detected that network adapter \DEVICE\TCPIP_{38335C4E-A148-4CCF-8BF1-AC7861674194} was connected to the network, and has initiated normal operation over the network adapter.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Obviously, this appears to be a problem with the RPC module (if you can call it that) within Windows itself. I have searched up and down on Google and other search engines with little luck. I found one post about disabling automatic updates and I did this but I still get a crash. I have also run 6 different virus scans along with a SpyBot and AdAware scan, and gone through my HijackThis log. All of them turned up nothing at all. I have been fighting this for probably a month now and am at my whits end. Any help would be GREATLY appreciated. Thanks!
--
Dan

HP DV9000T CTO
Intel Core 2 Duo T7200 @ 2.00GHz
4GB (2x2GB) DDR2 PC2-5300 RAM
Dual 100GB 7200RPM SATA II Drives
Nvidia GeForce Go 7600 512MB
Windows XP Pro SP3 (Fully Patched)

Post 2 of 18

I wonder.

by R. Proffitt Moderator - 7/25/08 4:26 PM In reply to: Generic Host Process Crash by The_Computer_Man

That model is very new and didn't come with XP. Was there something you wanted to add about how XP came to be on this laptop?

Post 3 of 18

Explanation

by The_Computer_Man - 7/25/08 4:29 PM In reply to: I wonder. by R. Proffitt Moderator

Indeed, it came with Vista Home Premium which I immediately dual-booted with Ubuntu 7.04. After fighting to get all my dev tools and other programs to work in Vista, I decided that the best course of action was to wipe it clean and install XP on the system. I have a full copy of XP Pro that had just been removed from my old laptop, and HP supplies all the drives for XP, so I figured that it wouldn't be that hard. I have been running on XP since without any problems (until this one).

Post 4 of 18

Just sharing.

by R. Proffitt Moderator - 7/25/08 6:19 PM In reply to: Explanation by The_Computer_Man

This sounds too much like a recent HP laptop I fixed. You are not going to like this one. The crash was just like yours. We tried many many things but the final fix was to disable the wifi and use a wifi PC-Card.

The clue was the crashes didn't occur when the wifi was off and we used the ethernet.

Since HP is not developing drivers for XP SP3 and there are minor differences this was our fix.
Bob

Post 5 of 18

Thanks

by The_Computer_Man - 7/25/08 6:25 PM In reply to: Just sharing. by R. Proffitt Moderator

Thanks for the info, however the crash was occurring before I installed SP3, but it hasn't always been happening. This leads me to believe that there is something else that has changed, though it's possible that it was another MS update the messed with it. The weird thing is that it's not consistent at all. I just unplugged then plugged the router back in a few time to force a disconnect of the Wireless, but i didn't manage to get a crash. I have set the system up to output a txt file with the error codes of the RPC crash but it will only do that after the actual event.

I have actually considered just buying a wifi card and trying that. Problem is, I have never been able to definitively prove that this thing actually has a PCExpress card slot. It looks like it does, but there is the remote in it and my specs never listed a PCExpress slot. Any ideas on that one?

Thanks for all your help on this Bob, I really do appreciate it!
--
Dan

Post 6 of 18

The owner spent months on this one.

by R. Proffitt Moderator - 7/25/08 6:40 PM In reply to: Thanks by The_Computer_Man

They thought they could "narrow it down" but I was convinced long ago there were an issue here. HP is NOT testing with each little patch Microsoft tosses out.

My big break in the logjam was the ethernet working, the wifi off. Then I loaned them a space wifi card and it never crashed again. They thought it was fixed so returned the wifi card turned on the internal card and the crashes came back. I gave it one last try with HP's updated driver. No fix. They were going to replace the internal card but since a really nice 802.11g card was 20 bucks, worked and the months they had invested they finally took the fix and it's been fine for 6 months.
Bob

Post 7 of 18

(NT) Ouch, typo... "spare" vs space.

by R. Proffitt Moderator - 7/25/08 6:40 PM In reply to: The owner spent months on this one. by R. Proffitt Moderator

Post 8 of 18

Sounds good

by The_Computer_Man - 7/25/08 6:51 PM In reply to: (NT) Ouch, typo... "spare" vs space. by R. Proffitt Moderator

Thanks again for you help. I'm going to try a few more things, since I hate to take the "cop out" (to reference one of my co-works), though I don't have high expectations of finding a fix for it. I will probably go out and pick up a wireless card in the morning also so at least I have it. Thanks again for your help on this.
--
Dan

Post 9 of 18

And the final test we never did.

by R. Proffitt Moderator - 7/25/08 6:55 PM In reply to: Sounds good by The_Computer_Man

A fresh install back to when we knew it worked. We didn't bother since with all the Microsoft patches we'd never unravel where it went awry.

Post 10 of 18

This happens on my bootcamp Mac as well

by auism - 9/26/08 9:48 PM In reply to: And the final test we never did. by R. Proffitt Moderator

Hi all,

My PC is an intel Mac running XP SP3 fully updated.

I wonder if you guys discovered anything new. Like you, I have scanned for MSBlaster many times and with no infection.

Yet, whenever I have any Network disconnects, this Generic host, RPC thing happens. Originally, like you, I thought it was only due to wi-fi onboard, so I disabled it, however, now on wired lan, whenever i unplug the cable, above also happens.

One thing, though, could you confirm that this only happens on XP SP3? I do not remember this to be happening (at least not at all as frequent) under SP2. Also, does it happen on Vista? I might upgrade to Vista for this. I have held off on Vista because it seems to add only prettier graphics for me, and I would rather have more stability.

Thanks,

Alex

Post 11 of 18

"could you confirm that this only happens on XP SP3? "

by R. Proffitt Moderator - 9/27/08 4:54 AM In reply to: This happens on my bootcamp Mac as well by auism

No. It happens under a variety of OS levels and patches.

", this Generic host, RPC thing happens. "

Sorry this is NOT the issue above. This is some other issue and you should not confuse the two.
Bob

Post 12 of 18

Same problem on my Toshiba-M35-S359

by jeff.venters - 11/5/08 7:26 PM In reply to: The owner spent months on this one. by R. Proffitt Moderator

This laptop is about 5 years old (P4 Centrino) with XP home. It's been an excellent, problem free system until earlier this year. As with the other descriptions, RPC crashes and the system has to be rebooted. It happens randomly on both the wired ethernet and the built-in Intel wireless chip. I use the Intel Pro wireless software and Windows to manage my network. It often crashes right after coming out of the suspend state. Once I reboot, I get a memory protection error on the way down... I'm presently on SP3 and run windows update so I stay current. I read in one forum update was the problem. I disabled it... problem still occurs. Basically, this is something to with XP. RPC (or MSRPC; extended by MS) should not crash as it's core to the XP architecture, DCOM, etc. MS Desc:
RPC is a client/server technology in the most generic sense. There is a sender and a receiver; data is transferred between them. This can be classic client/server (for example, Microsoft Outlook communicating with a server running Microsoft Exchange Server) or system services within the computer communicating with each other. The latter is especially common. Much of the Windows architecture is composed of services that communicate with each other to accomplish a task. Most services built into the Windows architecture use RPC to communicate with each other.

Its used for a lot of event driven items in XP:
http://technet.microsoft.com/en-us/library/cc787851.aspx#w2k3tr_rpc_what_pslo

I hope someone posts a solution, I've now lost email and had to reinstall firefox after its state files became corrupted on an abrupt shutdown.

Post 13 of 18

Sounds familiar.

by R. Proffitt Moderator - 11/5/08 7:53 PM In reply to: Same problem on my Toshiba-M35-S359 by jeff.venters

This sounds much like my neighbors laptop. We finally nailed it by disabling the onboard wifi and using a 20 buck wpnt511 card. I know many that won't do this and continue their search for another solution but I continue to share this fix since after my neighbor was gracious enough to let me have time to work the issue I have dozens more laptops that I cured like that.

And at 5 years, tell me if you have been doing your yearly laptop cleanings?
Bob

Post 14 of 18

Re: cleanings

by jeff.venters - 11/5/08 8:51 PM In reply to: Sounds familiar. by R. Proffitt Moderator

Please define "cleanings"... I've upgraded the disk to a 120GB, 5400 RPM and upgraded to 2GB memory. I run Perfectdisk which constantly optimizes NTFS when the system is idle.

Post 15 of 18

The yearly can of air like you read at this link.

by R. Proffitt Moderator - 11/5/08 8:54 PM In reply to: Re: cleanings by jeff.venters

http://www.cnet.com.au/laptops/laptops/0,239035649,339274654,00.htm

Well, my can of air lasts for many months.

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software