HardwareHeaven.com
Looking for the skin chooser?
 
 
  • Home

  • Reviews

  • Articles

  • News

  • Tools

  • GamingHeaven

  • Forums

  • Network

 

Go Back   HardwareHeaven.com > Forums > Software / Tools > Windows XP / 2000 / NT / 9x Forum


Windows XP / 2000 / NT / 9x Forum Discussion for Windows operating systems from XP right back to the very beginnings!

Reply
 
Thread Tools
Old Jan 27, 2009, 09:17 PM   #1
Beatmaker
 
xProg's Avatar
 
Join Date: Nov 2008
Location: Moldova, Chisinau
Posts: 298
Rep Power: 28
xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!
System Specs

exclamation Windows XP scvhost.exe errors...

look at the pictures....




xProg is offline   Reply With Quote


Old Jan 27, 2009, 10:07 PM   #2
DriverHeaven Junior Member
 
Join Date: Jan 2009
Posts: 47
Rep Power: 19
VampyrByte will become famous soon enough
System Specs

Re: Windows XP scvhost.exe errors...

My first instint when i saw this was to boot in safe mode, and run a virus scan.
I see you got Kaspersky from the screenshot, Make that do a full scan. Grab a copy of Spybot Search and Destroy, make sure you update it to the latest versions and definitions and run that aswell. I'm sure others will have other recomendations too.
If that fails you may want to unistall any software installed recently around the time the error started cropping up.
Also, i think we could do with more detailed information about the OS and what programs are running, perhaps a HijackThis log?
VampyrByte is offline   Reply With Quote
Old Jan 28, 2009, 02:31 PM Threadstarter Thread Starter   #3
Beatmaker
 
xProg's Avatar
 
Join Date: Nov 2008
Location: Moldova, Chisinau
Posts: 298
Rep Power: 28
xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!
System Specs

Re: Windows XP scvhost.exe errors...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:31:32 , on 1/28/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\KM-Software\Theme XPack\apps\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\system32\CAPRPCSK.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK .EXE
C:\Program Files\Styler\Styler.exe
C:\Program Files\Thoosje Vista Sidebar\Thoosje Sidebar.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/intl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {2C9F038C-642C-4BF2-A1D8-08F2C5BD7EC3} - C:\WINDOWS\system32\rastls32.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN. EXE
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\KM-Software\Theme XPack\apps\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e" -launchedbylogin
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user')
O4 - Startup: Styler.lnk = ?
O4 - Startup: Thoosje Sidebar.lnk = C:\Program Files\Thoosje Vista Sidebar\Thoosje Sidebar.exe
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O9 - Extra 'Tools' menuitem: Add to &VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1232890972437
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1232890873234
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA ~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPE R~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASP ER~1\kloehk.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 7117 bytes
xProg is offline   Reply With Quote
Old Jan 28, 2009, 04:10 PM   #4
DriverHeaven Junior Member
 
Join Date: Jan 2009
Posts: 47
Rep Power: 19
VampyrByte will become famous soon enough
System Specs

Re: Windows XP scvhost.exe errors...

O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll

Those 2 arnt doing you any favours, and im very suspicios of this :
O2 - BHO: (no name) - {2C9F038C-642C-4BF2-A1D8-08F2C5BD7EC3} - C:\WINDOWS\system32\rastls32.dll

You may wish to check that these are being used by legitimate applications, askbar.dll is adware, it is advised that you remove it. HJT should be able to do that, as should Spybot when ran.
I cannot find any information on rastls32.dll which makes me suspicios of it, its location also.
I also notice you are running XP SP2, you should consider upgrading to Sp3 now. Service pack 3 has much better security and better performance in some cases.
Also how have you done the theme? is it windowblinds or a similar program, or have you used a uxtheme.dll hack? uxtheme.dll hacks have caused me no end of trouble in my time although never one like this its sure to be something to look at.
__________________

VampyrByte is offline   Reply With Quote
Old Jan 28, 2009, 04:20 PM Threadstarter Thread Starter   #5
Beatmaker
 
xProg's Avatar
 
Join Date: Nov 2008
Location: Moldova, Chisinau
Posts: 298
Rep Power: 28
xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!
System Specs

Re: Windows XP scvhost.exe errors...

I am using uxtheme.dll hack, and Styler.

Deleted rastls32.dll, and have an other file named rastls.dll... This file is using svchost.exe. Checked in Unlocker.
xProg is offline   Reply With Quote
Old Jan 28, 2009, 08:32 PM   #6
DriverHeaven Junior Member
 
Join Date: Jan 2009
Posts: 47
Rep Power: 19
VampyrByte will become famous soon enough
System Specs

Re: Windows XP scvhost.exe errors...

rastls.dll is a genuine system file, something to do with remote access, this would be using svchost. Is the error still occuring? Can i also ask what happens when you clear the error?
__________________

VampyrByte is offline   Reply With Quote
Old Jan 31, 2009, 07:21 PM Threadstarter Thread Starter   #7
Beatmaker
 
xProg's Avatar
 
Join Date: Nov 2008
Location: Moldova, Chisinau
Posts: 298
Rep Power: 28
xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!xProg is just super!
System Specs

Re: Windows XP scvhost.exe errors...

Quote:
Originally Posted by VampyrByte View Post
rastls.dll is a genuine system file, something to do with remote access, this would be using svchost. Is the error still occuring? Can i also ask what happens when you clear the error?
The svchost.exe error is not showing me now, beacause I upgraded my XP sp2 to sp3. When the error appeared, I click ok or cancel and the theme was switching to classic. Now when I quit a game like NFS ProStreet the same error occurs, but is not written "svchost.exe - application error", it is written "nfs.exe - application error"

Oh, I forgot to mention that I installed "Windows CoreX iSeptem Optimizer" from lwgame.net. The error occured after I unistalled this software.

Sorry for my bad english. Hope you'll understand me
xProg is offline   Reply With Quote
Old Jan 31, 2009, 11:25 PM   #8
DriverHeaven Junior Member
 
Join Date: Jan 2009
Posts: 47
Rep Power: 19
VampyrByte will become famous soon enough
System Specs

Re: Windows XP scvhost.exe errors...

I'm hazarding a guess that "NFS.exe" is the Need For Speed exe. Make sure that its patched up to the latest versions. If your using a No-CD fix, try a diffrent one, dodgey fix's can cause wierd errors.
Those "system optimizer" style programs, have never done anything for me and ive tried many, back in the days of before i bought my own computer, i used my dads old Dell, bloddy rubbish it was, but i still played Warcraft on it.
Try reverting to the classic or luna theme's and see if you still get the error, it seems likely to me thats its something to do with the theme and NFS not liking eachother.
__________________

VampyrByte is offline   Reply With Quote
Reply

Bookmarks

Thread Tools