Memory error while logging in to computer

On 8th August, a user called up saying that she wasn't unable to logon to computer.

She was getting error
The instruction at "0x745f2780" reference memory at "0x00000000". The memory could not be 'read'.
When she tried restarting or rebooting it stopped responding at all.


Steps taken to resolve:

1) Tried connecting through Dameware but failed. It showed wiinsock error.
2) Connected using Remote desktop connection. Checked in 'Event viewer' application log and found error related to svchost service.

3) Tried setting Remote Procedure Call to restart itself on first failure. It didn't work.
2) Spoken with Dan and informed him about svchost error. He suggested to a batch file WSUS_Svchost_fix.bat.
3) Ran the fix and informed user to reboot the computer. After that user was able to login normally.


Contents of batch file:
rem Fix issues with windows update
rem causing svchost.exe application errors
rem http://support.microsoft.com/kb/927385

REGSVR32 /s
WUAPI.DLLREGSVR32 /s
WUAUENG.DLLREGSVR32 /s
WUAUENG1.DLLREGSVR32 /s
ATL.DLLREGSVR32 /s
WUCLTUI.DLL REGSVR32 /s
WUPS.DLLREGSVR32 /s
WUPS2.DLLREGSVR32 /s

WUWEB.DLLnet stop Wuauserv
c:
ren C:\WINDOWS\SoftwareDistribution SoftwareDistribution_baknet start Wuauservpause



Manual fix for error:


You receive an error message after a Windows XP-based computer runs an automatic update, and you may be unable to run any programs after you close the "svchost.exe - Application Error" error message dialog box

You configure a Microsoft Windows XP-based computer for Automatic Updates, and the Windows operating system runs an automatic update. Then, you may receive an error message in the svchost.exe - Application Error dialog box that resembles the following:

The instruction at "0x745f2780" reference memory at "0x00000000". The memory could not be 'read'.You may also see an entry that is related to the error message in the Application log.

The entry resembles the following:
Date:
DateTime:
TimeType:
ErrorUser: N/AComputer:
ComputerNameSource: Application
Error Category: (100)Event ID: 1000
Description:Faulting application svchost.exe, version 5.1.2600.2180, faulting module msi.dll, version 3.1.4000.2435, fault address 0x00012780.

Additionally, if you close the error message dialog box, you may be unable to run any programs on the computer. If you leave the error message dialog box open, you can continue to use the computer. But when you try to shut down the computer, the computer stops responding.



CAUSE

This issue may occur because of a problem with the Automatic Updates service.Back to the top
RESOLUTIONTo resolve this problem, apply the hotfix that is described in the following Microsoft Knowledge Base article:927891 (http://support.microsoft.com/kb/927891/)
You receive an access violation when you try to install an update from Windows Update after you apply hotfix package 916089

WORKAROUND
To work around this problem, use one of the follow method:
Method 1Leave the svchost.exe - Application Error dialog box open, and then follow these steps.

Step1: Check whether settings for the Automatic Updates service and for the Background Intelligent Transfer Service (BITS) are correct
To do this, follow these steps:

1. Click Start, point to Run, type services.msc, and then click OK.

2. In the details pane, locate and double-click Automatic Updates.

3. Click the Log On tab.

4. Make sure that the Local System account option is selected and that the Allow service to interact with desktop check box is cleared.

5. Make sure that this service has been enabled in the Hardware Profile list. If this service has not been enabled, click Enable to enable the service.

6. Click the General tab, and make sure that the Automatic option is selected in the Startup Type list. Under Service status, click Start to start the service if it is not already running.

7. Repeat steps 2 through 6 for Background Intelligent Transfer Service (BITS).

Step 2: Reregister Windows Update components
To do this, follow these
steps:1. Click Start, click Run, type REGSVR32 WUAPI.DLL, and then press ENTER.
2. When you receive the "DllRegisterServer in WUAPI.DLL succeeded" message, click OK.
3. Type the following commands in the Open box, one after the other, and then press ENTER after each command: REGSVR32 WUAUENG.DLLREGSVR32 WUAUENG1.DLLREGSVR32 ATL.DLLREGSVR32 WUCLTUI.DLL REGSVR32 WUPS.DLLREGSVR32 WUPS2.DLLREGSVR32 WUWEB.DLL

Step 3: Rename the Windows Update temporary folder

The temporary folder of Windows Update may be corrupted. In this case, you can rename the temporary folder of Windows Update. To do this, follow these steps:

1. Click Start, click Run, type cmd, and then press ENTER.
2. At the command prompt, type net stop Wuauserv, and then press ENTER.
3. Click Start, click Run, type %windir%, and then press ENTER.
4. In the folder that opens, locate and rename the SoftwareDistribution folder to SDold.
5.At the command prompt, type net start Wuauserv, and then press ENTER to start the Automatic Updates service.

Method 2
loadTOCNode(3, 'workaround');
Follow these steps:
1.Click Start, right-click My Computer, and then click Properties.
2.In the System Properties dialog box, click the Automatic Updates tab.
3.Click Turn off Automatic Updates, and then click OK.
4.Restart the computer.
5.Use the Windows Update Web site to install updates manually.
6.After you install the updates manually, turn on Automatic Updates.