svchost.exe_CryptSvc and Reliability Monitor

Topic

New Reply

I regularly check the System Stability Chart in Reliability Monitor, the Index is generally between 7 and 8, but one item has been regularly failing over the last few months.

Since 6 August 2009, svchost.exe_CryptSvc has stopped about 40 times, before that date it doesn’t show at all (PC was new in May 2009).

I have no idea what svchost.exe_CryptSvc does and have Googled it to try to learn something, but most hits are about it taking excessive CP time or preventing Microsoft Updates. My updates appear to be fully up-to-date and I don’t notice excessive CP time (except in my antivirus, AVG).

On 6 Aug, the first day it stopped working, there were 4 Software (Un)Installs listed:
Adobe Reader 9.1.3 (configuration change),
Adobe Reader 9.1.3 (appl. install),
Java 6 Update 15 (appl. install failed) and
Vista Services Optimiser 1.1.42 (appl. install)

Could one of these be causing svchost.exe_CryptSvc to stop? Should I be concerned about this?

Reply | Quote

Replies

It confirms the signatures of Windows files. I doubt if one of those is causing the problem, but only God and maybe Microsoft know for sure. If one of those caused the problem, it should be all over the Internet. Probably a corrupted file, bad registry key or a virus. There seems to be various ways to handle this, but like you said, most of them are because of CPU speed or updates.
If it doesn’t bother you, don’t worry about it. Windows doesn’t need signatures to run programs. If it does bother you, post back with OS and build and I’ll see what I can do.

Reply | Quote

Thanks, Paul.

What can I do to pinpoint when it occurs and maybe identify the corrupted file, bad registry key or virus?

I’m running Windows Vista Home Premium Service Pack 2 (build 6002)

Reply | Quote

Thanks, Paul.

What can I do to pinpoint when it occurs and maybe identify the corrupted file, bad registry key or virus?

I’m running Windows Vista Home Premium Service Pack 2 (build 6002)

Have you checked the Event logs?

Joe

--Joe

Reply | Quote

Have you checked the Event logs?

Joe

No, I haven’t.
I’m new to Event Logs. How do I find them? What am I looking for?

Keith

Reply | Quote

I’m new to Event Logs. How do I find them? What am I looking for?

Start > Run > Eventvwr.exe
Look for any errors in the system or application logs that have a timestamp close to the time you noted the problem.

Edited by StuartR to add…[/i]
Yes, I know, Vista doesn’t have a RUN button, just type eventvwr.exe into the search box and type enter

Reply | Quote

I found this entry in the Windows, Application log:

Log Name: Application
Source: Application Error
Date: 28/11/2009 12:39:00
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Keith-PC
Description:
Faulting application svchost.exe_CryptSvc, version 6.0.6001.18000, time stamp 0x47918b89, faulting module termsrv.dll, version 6.0.6000.16386, time stamp 0x4549bde8, exception code 0xc0000005, fault offset 0x00006555, process id 0x6ec, application start time 0x01ca7027b309d262.
Event Xml:

1000
2
100
0x80000000000000

11613
Application
Keith-PC

svchost.exe_CryptSvc
6.0.6001.18000
47918b89
termsrv.dll
6.0.6000.16386
4549bde8
c0000005
00006555
6ec
01ca7027b309d262

Keith

Reply | Quote

I found this entry in the Windows, Application log:
…

This is the event that you already know about. If this has happened more than once then it would be good to compare the entries to see what is common and what changes.

Were there any other events in the log at about the same time?

Reply | Quote