Results 1 to 8 of 8
  1. #1
    Lounger
    Join Date
    Dec 2009
    Location
    London, UK
    Posts
    32
    Thanks
    4
    Thanked 1 Time in 1 Post
    I regularly check the System Stability Chart in Reliability Monitor, the Index is generally between 7 and 8, but one item has been regularly failing over the last few months.

    Since 6 August 2009, svchost.exe_CryptSvc has stopped about 40 times, before that date it doesn't show at all (PC was new in May 2009).

    I have no idea what svchost.exe_CryptSvc does and have Googled it to try to learn something, but most hits are about it taking excessive CP time or preventing Microsoft Updates. My updates appear to be fully up-to-date and I don't notice excessive CP time (except in my antivirus, AVG).

    On 6 Aug, the first day it stopped working, there were 4 Software (Un)Installs listed:
    Adobe Reader 9.1.3 (configuration change),
    Adobe Reader 9.1.3 (appl. install),
    Java 6 Update 15 (appl. install failed) and
    Vista Services Optimiser 1.1.42 (appl. install)

    Could one of these be causing svchost.exe_CryptSvc to stop? Should I be concerned about this?

  2. #2
    Lounger
    Join Date
    Dec 2009
    Location
    33573
    Posts
    48
    Thanks
    0
    Thanked 2 Times in 2 Posts
    It confirms the signatures of Windows files. I doubt if one of those is causing the problem, but only God and maybe Microsoft know for sure. If one of those caused the problem, it should be all over the Internet. Probably a corrupted file, bad registry key or a virus. There seems to be various ways to handle this, but like you said, most of them are because of CPU speed or updates.
    If it doesn't bother you, don't worry about it. Windows doesn't need signatures to run programs. If it does bother you, post back with OS and build and I'll see what I can do.

  3. #3
    Lounger
    Join Date
    Dec 2009
    Location
    London, UK
    Posts
    32
    Thanks
    4
    Thanked 1 Time in 1 Post
    Thanks, Paul.

    What can I do to pinpoint when it occurs and maybe identify the corrupted file, bad registry key or virus?

    I'm running Windows Vista Home Premium Service Pack 2 (build 6002)

  4. #4
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,592
    Thanks
    5
    Thanked 1,059 Times in 928 Posts
    Quote Originally Posted by Keith Ward View Post
    Thanks, Paul.

    What can I do to pinpoint when it occurs and maybe identify the corrupted file, bad registry key or virus?

    I'm running Windows Vista Home Premium Service Pack 2 (build 6002)
    Have you checked the Event logs?

    Joe
    Joe

  5. #5
    Lounger
    Join Date
    Dec 2009
    Location
    London, UK
    Posts
    32
    Thanks
    4
    Thanked 1 Time in 1 Post
    Quote Originally Posted by joeperez View Post
    Have you checked the Event logs?

    Joe
    No, I haven't.
    I'm new to Event Logs. How do I find them? What am I looking for?

    Keith

  6. #6
    Plutonium Lounger
    Join Date
    Nov 2001
    Posts
    10,550
    Thanks
    0
    Thanked 7 Times in 7 Posts
    Quote Originally Posted by Keith Ward View Post
    I'm new to Event Logs. How do I find them? What am I looking for?
    Start > Run > Eventvwr.exe
    Look for any errors in the system or application logs that have a timestamp close to the time you noted the problem.

    Edited by StuartR to add...
    Yes, I know, Vista doesn't have a RUN button, just type eventvwr.exe into the search box and type enter

  7. #7
    Lounger
    Join Date
    Dec 2009
    Location
    London, UK
    Posts
    32
    Thanks
    4
    Thanked 1 Time in 1 Post
    I found this entry in the Windows, Application log:

    Log Name: Application
    Source: Application Error
    Date: 28/11/2009 12:39:00
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: Keith-PC
    Description:
    Faulting application svchost.exe_CryptSvc, version 6.0.6001.18000, time stamp 0x47918b89, faulting module termsrv.dll, version 6.0.6000.16386, time stamp 0x4549bde8, exception code 0xc0000005, fault offset 0x00006555, process id 0x6ec, application start time 0x01ca7027b309d262.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-11-28T12:39:00.000Z" />
    <EventRecordID>11613</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Keith-PC</Computer>
    <Security />
    </System>
    <EventData>
    <Data>svchost.exe_CryptSvc</Data>
    <Data>6.0.6001.18000</Data>
    <Data>47918b89</Data>
    <Data>termsrv.dll</Data>
    <Data>6.0.6000.16386</Data>
    <Data>4549bde8</Data>
    <Data>c0000005</Data>
    <Data>00006555</Data>
    <Data>6ec</Data>
    <Data>01ca7027b309d262</Data>
    </EventData>
    </Event>


    Keith

  8. #8
    Plutonium Lounger
    Join Date
    Nov 2001
    Posts
    10,550
    Thanks
    0
    Thanked 7 Times in 7 Posts
    Quote Originally Posted by Keith Ward View Post
    I found this entry in the Windows, Application log:
    ...
    This is the event that you already know about. If this has happened more than once then it would be good to compare the entries to see what is common and what changes.

    Were there any other events in the log at about the same time?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •