More often than not when I am turning off my computer I get an error box
coming up during the "windows is shutting down" blue screen. Its an
svchst.exe application error "can't write referenced memory ox....... too
quick to write down. The error message is there for a few seconds then
disappears on its own and computer goes off no problem. No other problems at
all. Happens with both my office and home laptop. Ive run Norton, Adaware,
and Spybot - all latest and updated. Nothing found. Would be soooooo
grateful for help, please?

"suzywhite" wrote:

> More often than not when I am turning off my computer I get an error box
> coming up during the "windows is shutting down" blue screen. Its an
> svchst.exe application error "can't write referenced memory ox....... too
> quick to write down. The error message is there for a few seconds then
> disappears on its own and computer goes off no problem. No other problems at
> all. Happens with both my office and home laptop. Ive run Norton, Adaware,
> and Spybot - all latest and updated. Nothing found. Would be soooooo
> grateful for help, please?

Try to get the error message by turning the Automatic Reboot Off to capture
the screen error:
Windows XP Shut Down and Automatic Reboot Problems:
http://www.microsoft.com/windowsxp/u...l_02may13.mspx

Then look in the event Viewer for error message that can shed some light on
the causer.
System Event Viewer Tips
http://technet.microsoft.com/en-us/l.../aa996105.aspx
How to: Launch Event Viewer
http://msdn2.microsoft.com/en-us/lib...7a(VS.80).aspx

1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malware from here:
http://onecare.live.com/site/en-gb/d....htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
http://www.lavasoft.com/products/ad-...e_personal.php
http://www.safer-networking.org ; for Spybot S&D

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malware from here:
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Do...eeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
All about Svchost.exe:
http://www.microsoft.com/communities...xp=&sloc=en-us

The full message happens when windows says it is shutting down. As follows.
Grey box with svchst.exe application error. The instruction at OX69532977
referenced memory OX ??????. The memory could not be read. Click OK to
terminate.
I don't need to click as the message disappears after about 10 seconds.

In the event log I have found Event 1517. Windows saved user .........
administrator registry while an application or service was still using the
registry during log off. The memory used by the user's registry has not been
freed. The registry will be unloaded when it is no longer in use. This is
often caused by services running as a user account. Try configuring the
services to run in either localservice or network service a/c. There is a
link then to Microsoft and suggested downloaded something called UPH clean.
I installed and ran this software but still getting the error.

I have scanned with 4 different programs and no malaware/viruses detected.
Also cleaned out caches, cookies and so on. Still no good. It doesn't
happen every time I use the computer, but several times a week.

Any ideas?

In all other respects, the computer is running fine. I have the problem
with both my laptop at home and my office computer.

Regards

Sue

"nass" wrote:

>
>
> "suzywhite" wrote:
>
> > More often than not when I am turning off my computer I get an error box
> > coming up during the "windows is shutting down" blue screen. Its an
> > svchst.exe application error "can't write referenced memory ox....... too
> > quick to write down. The error message is there for a few seconds then
> > disappears on its own and computer goes off no problem. No other problems at
> > all. Happens with both my office and home laptop. Ive run Norton, Adaware,
> > and Spybot - all latest and updated. Nothing found. Would be soooooo
> > grateful for help, please?
>
> Try to get the error message by turning the Automatic Reboot Off to capture
> the screen error:
> Windows XP Shut Down and Automatic Reboot Problems:
> http://www.microsoft.com/windowsxp/u...l_02may13.mspx
>
> Then look in the event Viewer for error message that can shed some light on
> the causer.
> System Event Viewer Tips
> http://technet.microsoft.com/en-us/l.../aa996105.aspx
> How to: Launch Event Viewer
> http://msdn2.microsoft.com/en-us/lib...7a(VS.80).aspx
>
> 1... First, try to clean up your caches, Internet files and delete cookies
> by doing this:
> Click Start >> Control Panel >> Double click Network and Internet
> Connections >> Double click Internet Options.
> On the IE properties windows you will see these Taps:
> General | Security | Privacy | Content | Connections | Programs |
> Advanced
> Under General Tab clear your History, Internet Files and Cookies.
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> Then click on Programs Tab and click Manage Add-Ons and Disable all non
> Verified Add-Ons (You should Renable them later one-by-one and see the
> culprit and update it or remove it.
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
>
> 2... You need to be sure your system is clean from malware and Viruses by
> scanning for them
> Scan for malware from here:
> http://onecare.live.com/site/en-gb/d....htm?s_cid=sah
> http://onecare.live.com/standard/en-gb/default.htm
> http://www.lavasoft.com/products/ad-...e_personal.php
> http://www.safer-networking.org ; for Spybot S&D
>
> =How to perform a clean boot procedure to prevent background programs from
> interfering with a game or a program that you currently use
> http://support.microsoft.com/kb/331796
> You need to be sure your system is clean from malware and Viruses by
> scanning for them
> Scan for malware from here:
> Run a scan from here on-line:
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
> Lots of tools to download and disinfect your machine:
> http://www.bitdefender.co.uk/site/Do...eeRemovalTool/
> http://free.grisoft.com/doc/5390/lng/us/tpl/v5
> All about Svchost.exe:
> http://www.microsoft.com/communities...xp=&sloc=en-us
>

"suzywhite" wrote:

> The full message happens when windows says it is shutting down. As follows.
> Grey box with svchst.exe application error. The instruction at OX69532977
> referenced memory OX ??????. The memory could not be read. Click OK to
> terminate.
> I don't need to click as the message disappears after about 10 seconds.
>
> In the event log I have found Event 1517. Windows saved user .........
> administrator registry while an application or service was still using the
> registry during log off. The memory used by the user's registry has not been
> freed. The registry will be unloaded when it is no longer in use. This is
> often caused by services running as a user account. Try configuring the
> services to run in either localservice or network service a/c. There is a
> link then to Microsoft and suggested downloaded something called UPH clean.
> I installed and ran this software but still getting the error.
>
> I have scanned with 4 different programs and no malaware/viruses detected.
> Also cleaned out caches, cookies and so on. Still no good. It doesn't
> happen every time I use the computer, but several times a week.
>
> Any ideas?
>
> In all other respects, the computer is running fine. I have the problem
> with both my laptop at home and my office computer.
>
> Regards
>
> Sue


Hi Sue,
This can be caused by a bad RAM or a Dust in the machine, an application
didn't release the memory usage on Shut Down like your Anti-virus or a
third-party application.

1-Download and install UPHClean, visit the following Microsoft Web
site:http://www.microsoft.com/downloads/d...0-42470E2F3582
Troubleshooting profile unload issues
http://support.microsoft.com/kb/837115
Warning error 1517 in Event Viewer after first restart
http://support.microsoft.com/kb/810616

2- The instruction at OX69532977
You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
Open a run command and type in:
sfc /scannow click [OK], you will need the XP CD for this operation to
accomplish.
Turn OFF windows Update from the services control panel and see if the
svchost.exe will disappear.
HTH.
Let us know.
Regards,
nass
----------
www.nasstec.co.uk