SVCHOST.EXE error

[sparky]

from time to time and more often now i have this error when shutting down or
rebooting just after windows post the shutting down message

svchost.exe error
the instruction at "0x10003d58" referenced memory at 0x10003d58. the memory
could not be "written"

can anyone help
tks

[The Real Truth MVP]

Try my Svchosts Fix tool. Download it here http://www.ms-mvp.org/

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"sparky" <spa...@discussions.microsoft.com> wrote in message
news:0E096F9C-FB52-48DB...@microsoft.com...

[Jose]

One thing that gets looked at during shutdown is a check to see if any
MS updates need to be installed. Sometimes this MS update mechanism
becomes fouled resulting in the svchost message.

When you see the messgae what are the options and what do you choose?
If you don't do anything, does the system eventually shutdown?

Once we get more information and check some basics, we can then figure
out what is causing the problem and fix it.

It looks like the post/link/download from The Real Truth attempts to
do just that.

This additional information will still be helpful if you try that
option and it doesn't work out:

To eliminate questions and guessing, please provide additional
information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.

Perform some scans for malicious software, then fix any remaining
issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

[Barry Schwarz]

On Sun, 3 Jan 2010 09:33:15 -0800, "The Real Truth MVP" <t...@void.com>
wrote:

>Try my Svchosts Fix tool. Download it here http://www.ms-mvp.org/

This is not the MVP site despite its fake logos.

The correct MVP site is http://www.mvps.org/.

--
Remove del for email

[Peter Foldes]

Jose

>it looks like the post/link/download from The Real Truth attempts to
>do just that.

The above is stolen from others.

The Real Truth A.K.A. P.C. Butts A.K.A. Christopher Butts is nothing more than
a thief and a very sick individual. His site sometimes contains p0rn. Best to stay
away from anything that he posts (especially links)

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Jose" <jose...@yahoo.com> wrote in message
news:e8590b52-03c6-4e89...@m3g2000yqf.googlegroups.com...

[Jose]

On Jan 3, 7:46 pm, "Peter Foldes" <ok...@hotmail.com> wrote:
> Jose
>
> >it looks like the post/link/download from The Real Truth attempts to
> >do just that.
>
> The above is stolen from others.
>
>  The Real Truth  A.K.A.   P.C. Butts  A.K.A. Christopher Butts is nothing more than
> a thief and a very sick individual. His site sometimes contains p0rn. Best to stay
> away from anything that he posts (especially links)
>
> --
> Peter
>

Yeah, thanks - I know those stories.... I looked at his solution(s)
and it looks reasonable and harmless. I don't know about all the
stuff though. That site does not scare me. Maybe other people have
had issues with it. Shoulda kept that part of my mouth shut maybe.,

After we get the msinfo32, scan results and other questions answered,
we can fix this right up straight away.

[The Real Truth MVP]

Everything on my site is SAFE, HARMLESS, and NOT stolen. Peter Foldes is a
troll who just jumped on the bandwagon with others to try to be part of the
"group". Since he thinks its stolen ask him where and who it is stolen from
and see if you get a straight answer from him.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"Jose" <jose...@yahoo.com> wrote in message

news:59cf3e4d-48d6-4ed9...@22g2000yqr.googlegroups.com...

[PA Bear [MS MVP]]

What's the "real truth" about pcbutts1? Read on...

. Is he an MS MVP? No!
cf. http://mvp.support.microsoft.com/communities/mvp.aspx

. If xxx.ms-mvp.org redirects to xxx.pcbutts1.com, why didn't he post that
link to begin with?

. Is he a proven thief? Yes!
cf.
http://groups.google.com/group/microsoft.public.security.virus/browse_frm/thread/58e6c02dbc6279ad
cf.
http://msmvps.com/blogs/hostsnews/archive/2006/11/10/pcbutts1-_2E00__2E00_.-the-saga-continues-_2E00__2E00__2E00_.aspx
cf.
http://groups.google.com/group/microsoft.public.security.homeusers/msg/213247814fb4d61e
cf.
http://groups.google.com/group/microsoft.public.security.homeusers/msg/e19fce884897662f

. What do real experts have to say about him? It ain't pretty.

http://www.siteadvisor.com/sites/pcbutts1.com (Reviews)

http://www.digg.com/security/PCButts1_Under_Attack

http://www.siteadvisor.com/sites/pcbutts1.com

http://bughunter.it-mate.co.uk/PCBUTTS.TXT

http://www.mywot.com/en/scorecard/pcbutts1.com

http://www.mywot.com/en/scorecard/www.ms-mvp.org

. Does he have all his marbles?
cf. http://en.wikinews.org/wiki/NASA_van_rolls_off_California_mountain

Ignore this MVP imposter!
--
~Robear Dyer
MS MVP-IE, Mail, Security, Windows Client
https://mvp.support.microsoft.com/default.aspx/profile/robear.dyer

[Daave]

Jose wrote:
> On Jan 3, 7:46 pm, "Peter Foldes" <ok...@hotmail.com> wrote:
>> Jose
>>
>>> it looks like the post/link/download from The Real Truth attempts to
>>> do just that.
>>
>> The above is stolen from others.
>>
>> The Real Truth A.K.A. P.C. Butts A.K.A. Christopher Butts is nothing
>> more than
>> a thief and a very sick individual. His site sometimes contains
>> p0rn. Best to stay away from anything that he posts (especially
>> links)

> Yeah, thanks - I know those stories.... I looked at his solution(s)

> and it looks reasonable and harmless. I don't know about all the
> stuff though. That site does not scare me. Maybe other people have
> had issues with it. Shoulda kept that part of my mouth shut maybe.,

One issue is that his HOSTS file prevents connection to reputable Web
pages. That is evidence enough for me that he should be shunned.
Stealing code from others and claiming it to be his own is also
shameful.

[The Real Truth MVP]

The fact that you keep referring to me as "him" is proof enough that don't
know what you are talking about.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"Daave" <da...@example.com> wrote in message
news:e$tlXmajK...@TK2MSFTNGP04.phx.gbl...

[The Real Truth MVP]

The question that was asked was to post proof like who and where you think
my file are stolen from. Why do you always dodge that question. It seems
that would be the easiest way to prove your lies.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"PA Bear [MS MVP]" <PABe...@gmail.com> wrote in message
news:%23e7hcfa...@TK2MSFTNGP02.phx.gbl...

[Bill in Co.]

And that assumes one cares about shame. (These days, that's becoming a bit
rarer).

[PA Bear [MS MVP]]

Are you cross-dressing again, Paddy?

The Real Truth MVP wrote:

> The fact that you keep referring to me as "him" is proof enough that don't
> know what you are talking about.
>
>
>

[Roy]

On Jan 4, 1:33 am, "The Real Truth MVP" <t...@void.com> wrote:
> Try my Svchosts Fix tool. Download it herehttp://www.ms-mvp.org/
>
> --

> The Real Truthhttp://pcbutts1-therealtruth.blogspot.com/

> *WARNING* Do NOT follow any advice given by the people listed below.
> They do NOT have the expertise or knowledge to fix your issue. Do not waste
> your time.
> David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
>
> "sparky" <spa...@discussions.microsoft.com> wrote in message
>
> news:0E096F9C-FB52-48DB...@microsoft.com...
>
>
>
> > from time to time and more often now i have this error when shutting down
> > or
> > rebooting just after windows post the shutting down message
>
> > svchost.exe error
> > the instruction at "0x10003d58" referenced memory at 0x10003d58. the
> > memory
> > could not be "written"
>
> > can anyone help

> > tks- Hide quoted text -
>
> - Show quoted text -

Hmm interesting
Just a few days ago one PC of my friend had a svchost being infected
by a conficker virus and it can't be removed either. Have tried using
the Bit defender, McAFee, and kaspersky kido/ conficker remover tools
with futile results
Can't download or even install antivirus.....
Does this mean that this svchost is utterly corrupted that
reformattiong is the only option?
Roy

[Elmo]

Roy wrote:
> On Jan 4, 1:33 am, "The Real Truth MVP" <t...@void.com> wrote:
>> Try my Svchosts Fix tool. Download it herehttp://www.ms-mvp.org/
>>
>> --
>> The Real Truthhttp://pcbutts1-therealtruth.blogspot.com/
>> *WARNING* Do NOT follow any advice given by the people listed below.
>> They do NOT have the expertise or knowledge to fix your issue. Do not waste
>> your time.
>> David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
>>
>> "sparky" <spa...@discussions.microsoft.com> wrote in message
>>
>> news:0E096F9C-FB52-48DB...@microsoft.com...
>>
>>
>>

>>> from time to time and more often now I have this error when shutting down

>>> or
>>> rebooting just after windows post the shutting down message
>>> svchost.exe error
>>> the instruction at "0x10003d58" referenced memory at 0x10003d58. the
>>> memory
>>> could not be "written"
>>> can anyone help
>>> tks- Hide quoted text -
>> - Show quoted text -
>
> Hmm interesting
> Just a few days ago one PC of my friend had a svchost being infected
> by a conficker virus and it can't be removed either. Have tried using
> the Bit defender, McAFee, and kaspersky kido/ conficker remover tools

> with futile results.

> Can't download or even install antivirus.....
> Does this mean that this svchost is utterly corrupted that

> reformatting is the only option?
> Roy

You didn't try the BitDefender (Knoppix Live) CD.. it runs in RAM,
independent of the hard drive, and if it can connect to the internet,
will update and remove all known malware. It has trouble running on
some Dell machines, a video card incompatibility I believe, but if it
will run on the damaged machine, it will remove conficker:

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).

After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.

Then run these:

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html

--
Joe =o)

[Jose]

Where can I get his HOSTS file that prevents connection to reputable
Web sites and what Web sites will I not be able to connect to if I use
it? What do I download from his site?

I will be happy to try it.

[Jose]

Do you mean that methods you try could not remove it (not that it
could not be removed)?

If you think a file is suspicious upload it to one of these sites for
free scanning by multiple scanning tools:

http://virusscan.jotti.org/en
http://www.virustotal.com/

If you are still suspicious of svchost.exe, just replace the
suspicious file.

Then, if the file is not infected, use appropriate methods to remove
any malware.

If you can't download, install or run MBAM and SAS (or any other
malicious software scanner), that is a common problem and generally
not a difficult to resolve issue.

[Daave]

Jose, since you are clearly more advanced than the average poster here
looking for help, I doubt you would have a hard time accessing the sites
listed in his HOSTS file. That being said, you can look at the info
posted here:

http://msmvps.com/blogs/hostsnews/archive/2009/02/25/1673723.aspx

If you don't agree he should be shunned, I won't try to convince you.
You are of course free to think for yourself.

[The Real Truth MVP]

That was a false positive you dumb idiot. You are not smart enough to try
to troll me so please stop.

http://www.virustotal.com/analisis/9370c12877bc6ae7abbb3ed9f33ee69173b55240f1ba2561a1b54f0d78919afe-1262751461

http://virusscan.jotti.org/en/scanresult/7ecea67e19a8b0b7444543a17bf1001e62f9acf4

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/

*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"Daave" <da...@example.com> wrote in message

news:upRloMmj...@TK2MSFTNGP05.phx.gbl...

[Roy]

> http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-...

>
> Download the executable rather than the .iso image, if one is available,
> (though no .exe is available for BitDefender).
>
> After the scan is run, if you elect to quarantine files, they're
> quarantined to RAM and lost after you reboot.  You'll need to copy any
> quarantined files to the hard drive, a thumb drive or elsewhere before
> exiting.
>
> Then run these:
>
> Malwarebytes© Corporationhttp://www.malwarebytes.org/mbam/program/mbam-setup.exe
>
> SuperAntispywarehttp://www.superantispyware.com/superantispywarefreevspro.html
>
> --

> Joe   =o)- Hide quoted text -

>
> - Show quoted text -

Hhmmm, good idea Jose!
I will relay that information to my friend.....

Thanks!
Roy

[PA Bear [MS MVP]]

STOP, THIEF & CROSSDRESSER!

The Real Truth MVP wrote:

> That was a false positive you dumb idiot. You are not smart enough to try
> to troll me so please stop.
>
> http://www.virustotal.com/analisis/9370c12877bc6ae7abbb3ed9f33ee69173b55240f1ba2561a1b54f0d78919afe-1262751461
>
> http://virusscan.jotti.org/en/scanresult/7ecea67e19a8b0b7444543a17bf1001e62f9acf4
>
>
>
>

[Unknown]

Why do you ask to 'please stop' trolling if he's not smart enough?
"The Real Truth MVP" <t...@void.com> wrote in message
news:4b440ee1$0$23137$8826...@blocknews.net...

[sparky]

Tks I tried two of your tools and it seems to work fine.
You guys seem to be at war. Too bad.
Anyway you help me and I thank you.
Sparky

"The Real Truth MVP" wrote:

> .
>

[The Real Truth MVP]

You're Welcome.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

"sparky" <spa...@discussions.microsoft.com> wrote in message

news:1C107439-2978-451B...@microsoft.com...