Skip to content

Using the Event Viewer tool in Vista

--Another one that I couldn't post it here due to another problem to do with a 'mod_security' module on the Apache sever (apparently, I don't understand what it was) - I will blog about that in the Geekzone at some point--
I had the "host process for windows services stopped working and was closed" error again, and had a look around.

The Vista Help says that “the cause could be smaller programs, such as extensions… check with the software publisher to see if there is an updated, DEP-compatible version available, or try uninstalling the program.”

DEP is “Data Execution Prevention”: basically it is a service that stops programs that may be damaging your system (i.e. viruses, etc.); “If a program tries running (also known as executing) code from memory in an incorrect way, DEP closes the program.” (the Help file again). The program it’s closing here is svchost.exe: being something apparently quite important to Windows, it’s kind of worrying that it shuts it down, but everything else seems to continue fine…

Anyway, I Googled the error message and came across a few similar issues: here and here

They mentioned using the “Event Log”, so I decided to try it. You go to Start > Control Panel > Administrative Tools > Event Viewer, and get this

Then you expand the ‘Error’ category, and see which events have occurred in the last hour (or 24 hours, or 7 days), double-click the one that looks likely, and you get information – for example:
Faulting application svchost.exe_HPSLPSVC, version 6.0.6000.16386, time stamp 0x4549adc4, faulting module unknown, version, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x31343233, process id 0xd7c, application start time 0x01c7abc8d43afe41.

Then I Googled “Faulting application svchost.exe_HPSLPSVC”, got this .

So: it’s a problem with the HP driver; like one of the people on the latter forum, I have a HP All-in-One Photosmart C6180.

Well: problem elucidated, but not solved.

And now, back to work!


No Trackbacks


Display comments as Linear | Threaded

Charleston on :

Julian Hopkins,
There's something wrong with the post. Need to read it right but seems the post character has turns into symbol.

DEP is “Data Execution Prevention”:

Pls double check.

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.
E-Mail addresses will not be displayed and will only be used for E-Mail notifications.
:'( :-) :-| :-O :-( 8-) :-D :-P ;-) 
BBCode format allowed
Form options