Over 1 million tech questions and answers.

Removed Internet Security 2010, now Google redirects, windows installer service errors, Generic Host Process errors

Q: Removed Internet Security 2010, now Google redirects, windows installer service errors, Generic Host Process errors

I have had two different instances of Internet Security 2010 over the past month and I have been able to remove that, but now I think I have a nasty rootkit that is affecting my windows installer package and Generic Host Process for Win32 services. Also when browsing the web my search results are redirected usign searchsite.com and other websurvey related sites.I ran the DDS scan and have posted the log, but the RootRepeal crashes and does not finish. Thank you for the help, if possible.DDS (Ver_09-12-01.01) - NTFSx86 Run by AK at 19:25:09.20 on Tue 01/26/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_10AV: PC Tools AntiVirus 5.0.0.22 *On-access scanning enabled* (Updated) {832E7172-E406-4bb2-8B19-6D29F2C93A98}AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}============== Running Processes ============================= Pseudo HJT Report ===============uStart Page = hxxp://google.com/uInternet Settings,ProxyServer = http=127.0.0.1:5555uInternet Settings,ProxyOverride = <local>BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dllBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dlluRun: [ctfmon.exe] c:\windows\system32\ctfmon.exeuRun: [seten] c:\windows\system32\mxyjybcv.exeuRun: [SpywareTerminatorUpdate] "c:\program files\spyware terminator\SpywareTerminatorUpdate.exe"mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartupmRun: [nwiz] nwiz.exe /installmRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInitmRun: [RTHDCPL] RTHDCPL.EXEmRun: [SoundMan] SOUNDMAN.EXEmRun: [AlcWzrd] ALCWZRD.EXEmRun: [Alcmtr] ALCMTR.EXEmRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exemRun: [PCTAVApp] "c:\program files\pc tools antivirus\PCTAV.exe" /MONITORSCANmRun: [AS00_WN311B] c:\program files\netgear\wn311b\utility\WN311B.exe -hidemRun: [BrStsWnd] c:\program files\brownie\BrstsWnd.exe AutorunmRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottimemRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /minmRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -uStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\108mbp~1.lnk - c:\program files\108mbps wireless lan adapter\WLANPRO.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\reg.lnk - c:\program files\108mbps wireless lan adapter\Reg.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXEIE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeIE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLLLSP: c:\program files\common files\pc tools\lsp\PCTLsp.dllTrusted Zone: beatport.comTrusted Zone: beatport.com\wwwDPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabHandler: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} - c:\program files\lizardtech\express view\expressview.dllHandler: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} - c:\program files\lizardtech\express view\expressview.dllHandler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLLSSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll================= FIREFOX ===================FF - ProfilePath - c:\docume~1\ak\applic~1\mozilla\firefox\profiles\h5fq7gj0.default\FF - prefs.js: browser.startup.homepage - yahoo.comFF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}============= SERVICES / DRIVERS ============================== Created Last 30 ==================================== Find3M ================================= FINISH: 19:26:34.43 ===============

RELEVANCY SCORE 200
Preferred Solution: Removed Internet Security 2010, now Google redirects, windows installer service errors, Generic Host Process errors

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Removed Internet Security 2010, now Google redirects, windows installer service errors, Generic Host Process errors

Hello, my name is fenzodahl512 and welcome to the forum.. Please do the following....Please download The Comedian.exe by Rorschach112 to your desktopPlease disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..Double click the program to run it. It will only take around several minutes to run.It will do a series of tasks and tell you when each one is finished.You will be prompted to press any key after each stepWhen it is done it will close and exit itself automatically.You can delete The_Comedian.exe once it is finishedSTOP HERE! if you can't complete this step.. Tell me more about it..NEXTPlease download OTL by OldTimer and save it to your desktop.Under the Custom Scans/Fixes box paste this inCODEnetsvcs%SYSTEMDRIVE%\*.exe/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dlliaStor.sysnvstor.sysatapi.sysIdeChnDr.sysviasraid.sysAGP440.sysvaxscsi.sysnvatabus.sysviamraid.sysnvata.sysnvgts.sysiastorv.sysViPrt.syseNetHook.dllahcix86.sysKR10N.sysnvstor32.sysahcix86s.sysnvrd32.syssymmpi.sys/md5stop%systemroot%\*. /mp /sCREATERESTOREPOINT%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfilesDon't change any setting... Just click on the Run Scan button.. Let it scan till finish..Then a log will pop-up at your Desktop. Post the content of the log hereNEXTWe need to scan for Rootkits with GMERPlease download GMER from one of the following locations, and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zip MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Close any and all open programs, as this process may crash your computer.Double click or on your desktop.Allow the gmer.sys driver to load if asked.You may see this window. If you do, click No.Click on and wait for the scan to finish.If you see a rootkit warning window, click OK.Push and save the logfile to your desktop.Copy and Paste the contents of that file in your next post.Post me these logs in your next reply.. Post each log in separate post..1. OTL2. GMER

Read other 19 answers
RELEVANCY SCORE 136.8

Recently cleaned worms and virus with RKILL and Malaware. Now I have Generic Host Process for Win32 Service errors, Windows Explorer errors and closes, IE errors and won't always open, and Dr Watson errors. I've read and followed instructions. DDS log below and other two logs attached. Please help !

DDS (Ver_10-12-12.02) - NTFSx86
Run by Michael Scott at 21:18:33.64 on Thu 12/30/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.408 [GMT -5:00]
============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Logitech\MouseWare\system\em_exec... Read more

A:Generic Host Process for WIN32 Service errors

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 16 answers
RELEVANCY SCORE 122.8

Thanks for taking time to review my specific problem. I have used this website in the past to rid my computer of security programs that have hi-jacked my computer. Unfortunately the problem i'm currently having I can't self correct.

The Problems,
My internet redirects everytime I click a link
I often get the same website popups
I've noticed my svchost.exe oftens grows VERY large & consumes all my memory
I often get Generic Host Process for Win32 errors.

Thanks for your help,
Tim

A:Internet Search Hijacked, svchost file problems, Popups, Generic Host Process Errors

As it is clear that your computer does have virus infections, first thing you must be doing is to do a scan of your computer.

The best software which I can advice is Malwarebyte Antimalware, there is free version of it availiable over internet.
here is the link for downloading the same http://malwarebytes.org/.
download and install it. later do a quick scan and remove all infections that you find using the scan. Then at the end you will get a log about the scan. Please do post that link in order to look in this matter more precisely.
But most of your issues would be fixed with that scan itself,

Also one more suggetion since you are having some website redirections, it might be an issue of "hosts" file corruption.
Some nasty irus do corrupt those files. inorder to give more info on that tell about your computer and also the Operating system that you are using.

Read other 2 answers
RELEVANCY SCORE 119.2

Our PC has been running slower and slower. Recently we began having random popup browser windows, additionally the PC randomly pops up a "Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience." error. Just in the past day or two, the desktop will freeze. Sometimes you can Ctrl+Alt+Del to get it back, other times a complete hard shutdown and reboot is necessary. Every time I run my virus scan (Avira AntiVir Personal) it detects files that should not be on the system, additionally, my antispyware is detecting things every time I run it.

Any help would be greatly appreciated

The DSS log is below:


DDS (Ver_10-12-12.02) - NTFSx86
Run by Cory at 21:12:16.34 on Sat 01/15/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1117 [GMT -5:00]
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
AV: AntiVir Desktop *Enabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Lavas... Read more

A:Some type of virus - desktop freezing, random internet pages coming up, Generic Host Process for Win32 Services errors

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 24 answers
RELEVANCY SCORE 119.2

I am running a Dell computer with Windows XP home with 4 users. I have no access to a Boot CD or Windows install disc. I don't believe they ever sent one. Here are my problems.

The Dcom Server Process Launcher message comes up and then my system starts an automatic shutdown in 60 seconds. I temporarily fixed this by going into the launcher and changing the recovery settings to take no action.

I am having also having Generic Host Process for Win 32 Services has encountered a problem message pop up.

Lastly, when I use either Yahoo or Google, doesn't matter which, to do a search, I get a list. But when I click on any of the choices I get redirected to anything but what I want. If I copy and past the link I'm fine.

Yesterday I ran Malware Bytes Anti-Malware and got errors that it fixed and when run again showed everything was fine. However, today I was the only one of the four users who could log on. The others just got a blue screen. So I ran the MBA again and it found 147 errors. Again I corrected. Still having issues so I did a system restore ... didn't help. Restored back to now and come to you. Here is the dds log.



DDS (Ver_09-12-01.01) - NTFSx86
Run by Sue at 20:44:47.21 on Sun 01/24/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============


============== Pseudo HJT Re... Read more

A:Dcom Server Process Launcher & Generic host Process Errors

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if it still exists:

My Way Search Assistant<<Please read this

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

Please re-enable your antivirus before posting th... Read more

Read other 9 answers
RELEVANCY SCORE 118.4

I am running WinXP Home Edition. Last week, I started having the Generic Host Process error/RPC error/forced shutdown so many people were having with the Blaster worm. I run a firewall and keep my virus definitions and Window$ updates current, and I couldn't been able to find any trace of any virus, no matter what scanner I use. Then my motherboard fried and took my modem with it, so I didn't have to deal with it for a while.

I finally got up and running again on a brand new hard drive, but I still encountered the error the first time I connected to the Internet. I've fully updated Windows and McAfee VirusScan/Firewall products; I've run Steve Gibson's DCOM proggy; I've run SpyBot S&D and removed all red ! entries; but there's still no relief. I do see a couple of startup entries that I'm not sure about and probably don't need to be there, but I don't know for certain that they're the culprits, so I haven't removed them. I'm at my wits' end trying to flush this out, I'm spouting registry entries in my sleep, and I'm about to pull what's left of my hair out. Any ideas?

My symptoms are as follows:

1) Generic Host Process error, usually within minutes of connecting (although sometimes as long as an hour). When I had the Earthlink TotalAccess software installed, this error didn't occur, although the RPC shutdown still did. I've found that my connection will act fairly normally if... Read more

A:Generic Host Process/RPC errors

Read other 7 answers
RELEVANCY SCORE 117.2

Receiving approximately 8 Generic Host Process Closing on Start up and intermitten svchost mem write to 0 errors

Read other answers
RELEVANCY SCORE 116

My son downloaded something to this computer, and I've been having a tough time cleaning it up. I've used SpyBot, AdAware, AVG anitvirus, HouseCall, and MalwareBytes, along with going through on my own. Anyway, I'm still getting redirects (channel1reports.com, etc) in both browsers (IE and FF), and get the Generic Host Process errors as well. I've scanned with DDS and HJT. Here's HJT log, I can post DS logs if requested. Thanks in advance for your help!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:02:50 PM, on 1/8/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Pro... Read more

A:Redirect issue, and Generic Host Process errors

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

Read other 8 answers
RELEVANCY SCORE 116

Ok so here's the situation. I've had my computer for about five years and these problems didn't really start until a year or so ago, after I had to buy a new motherboard because the old one died. Not sure if it's related or not, just giving you a little history.

It seems that my computer is slowly dying. For the last few months I've been getting these Dr. Watson errors, generic host process errors, critical errors (where the computer completely shuts down and reboots) and internet explorer errors. I ignored them for a while, but finally got fed up. I've wiped the computer clean, reinstalled windows about a dozen times, yet I still get the errors. I took the computer to a repair place at one point but the guys there couldn't seem to figure anything out either, so I just wiped it and reinstalled windows again. The last time I did that was a few weeks ago, and everything was working great until the last few days. The most common error I deal with is the internet explorer error. It usually happens right after I've submitted my login info to a site (gmail, for example), but before I'm actually into the account. It doesn't make any sense to me because all of my windows software is completely up to date. Maybe the updates are the problem? Anyway, that's it. If anybody has any ideas on what I should do, I'd really like to hear them. Thanks for reading.

Jeezer
 

Read other answers
RELEVANCY SCORE 116

Hi all,

I'm a PC support technician whose client continues to receive these Generic Host Process errors within an hour of using IE. This originally started after he hired Symantec support for a remote support session and had them clean up a virus. I was brought in after this was all done so I'm not sure what virus he had (nothing in the log files).

I've gotten him set up on Firefox now which does not generate these errors, so he's functioning for now, but he would still like to be able to use IE when needed so I'm hoping to find out how to help him.

Here's what I've done so far:

Upgraded Win XP Home to SP2 (it had no SPs installed)
Upgraded IE from 6 to 7
Used the "Restore Defaults" in Security settings of IE.
Ran Spybot S&D which found IE settings changes, allowed them to be restored through Spybot.
Ran Ad-Aware, no pests found.
Ran HJT, no suspicious entries listed.
Performed a full virus scan in Safe Mode with System Restore disabled. No virus found. (remember, this was AFTER Symantec cleaned his system)

Client is on dialup Internet access, but this will soon change to DSL.

Here is the syntax of the error he receives when he uses IE:
=====================
Generic Host Process for Win32 Services

Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience ?

Error signature:
szAppName: szAppVer: 0.0.0.0 sModName: unknown
szModVer: 0.0.0.0 offset: 00000000

Te... Read more

A:Generic Host Process errors after virus cleanup

Welcome to TSF

Why havent you updated to SP3 yet?

Read other 3 answers
RELEVANCY SCORE 116

Recently, ~1 month ago, I got a System Tool2011 infection that my Symantec AntiVirus wasn't prepared to fix.

I tried to fix this problem manually by booting in safe mode, scanning my startup programs for new entries, locating pointers to suspicious new files (less than a day old), and deleting these (.exe and windows media player files).

This has allowed me control of my computer when booting normally. However, I am now having issues with internet explorer pop-ups that are downloading trojans. Also, I cannot start my windows firewall service and I will eventually receive a "generic host process for win32" error after each time I reboot. It looks like I didn't catch all of the damage.

I've followed the instructions page and run DDS. Unfortunately, when I try to run gmer my system freezes. The DDS log is posted below.

I appreciate any help.
DDS (Ver_10-12-12.02) - NTFSx86
Run by Administrator at 16:32:38.60 on Sun 01/23/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.86 [GMT -5:00]

AV: Symantec AntiVirus Corporate Edition *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C... Read more

A:Pop-ups and generic host process errors/ sytem tool2011

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 12 answers
RELEVANCY SCORE 116

I am experiencing several issues with my HP laptop with XP (SP3) that i am hoping i can get some assistance with.

1. i'm getting several messages that state: 'Xxx.exe (userinit, winlogon, jusched, SynTPStart, WindowUpdate, and any
new software i'm trying to download (such as virus protection): The application or DLL C:\WINDOW\autontfs.dll is not a valid Windows image. please check this against your installation diskette'. One site i came across said to try registering the xxx.dll file and it would say
if it was successfully registered. so i went to run and typed in 'regsvr32 autontfs.dll' in the command box and the message i received said: 'autontfs: dl lis not an executable file and no registration help is registered for this file type'.

2. every once a while i get an error message that says: 'generic host process for win32 services has encountered a problem and needs to close. we are sorry for the inconvenience, microsoft'. when this happens, I lose the 'XP appearance' and my window bars take on the old look. also, sometimes my audio goes away. when i click on the
volume icon in the tray, it said no audio device can be detected. when i restart the computer, everything goes back to normal. however, sometimes i lose everything on the screen but the background and mouse. i can access the task manager by 'control-alt-delete' and if it lets me, i can log off and try to log back on and that sometimes restores all the task bars and folders. other times, when i try to restart... Read more

A:invalid autontfs.dll & generic host process errors

Please follow the steps here:
NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

Read other 3 answers
RELEVANCY SCORE 116

This is my go-to forum for solving problems. This problem is the toughest yet.

My computer starts up, I can log in. But when I do, 2 boxes pop up: 1) a box with 'Data Execution Prevention - Microsoft Windows' on top. In the box is Generic Host Process for Win32 Services 2) a box with 'svchost.exe - Application Error' on top and in the box: The instruction at "0x00000000" referenced memory at "0x00000000". The memory could not be "written". Click ok to terminate the program. Click on Cancel to debug the program.

The computer locks up, and I have to turn the computer off if I click the boxes to get rid of them. When the computer is turned back on, I can log in, but the same thing happens.

I have malwarebytes and comodo. I've updated them and run them both, but nothing is detected. I'd appreciate any help you can give me. Thanks!

Leslie

A:Generic Host Process and svchost.exe Errors on Start-up

I guess I don't understand...how you can run any scans...if your system locks up right after logging in.

System manufacturer and model?

Can you boot into safe made or any variation thereof?

FWIW: Svchost.exe errors, IME, can be malware items.

Louis

Read other 36 answers
RELEVANCY SCORE 116

I was recently infected with some nasty malware when I accidentally clicked a bad link. I've spent the last 4 days running every anti virus/malware/spyware program known to mankind, but I can't seem to get rid of these errors (as well as popups infected with other malware). I have NO idea why these infections are being so stubborn, but it's driving me insane. I'm pretty close to just wiping my PC, but I'd rather get some help here first to see if I can fix this...

After starting the PC, within an hour or so I'll get an error message saying "Generic Host Process for Win32 services has encountered an error and needs to close", usually followed by a "svchost.exe application error". If I click on anything on these windows, my PC goes into a pseudo windows 98 mode and I can't do anything, other than restart the PC.

I have spent days searching other forums on how to fix these issues, however there is a plethora of reasons why it can happen, and apparently I haven't found it. I assume it to be the malware, either still in my system, or the leftover damage it's done... but I don't know. The fact that I get these pop-ups filled with something bad as well indicate the infection is still here. I've tried everything that seemed relevant, with no luck. I'm at my wit's end here, so... please help me. Let me know what info you need and what I should do.

Thanks

-MT

Edit: I believe it is a variant of ... Read more

A:Relentless Generic host process/svchost.exe errors

Read other 16 answers
RELEVANCY SCORE 114.8

Guys, sorry for messing up the first post by not having the right logs attached. I've been spanked and now I'm back. So here we go again:

About a month ago my computer (Windows XP Professional SP3) was attacked by some malware/virus/trojan (Security Suite 2011 or something like that) that locked all functions/programs and told me that any program I tried to open was infected with a virus. I thought I finally got rid of it by running MBAM (in safe mode). It found some trojans, etc., removed them and I thought that was that. Not exactly.

Since then, I've been getting the "Generic Host Process for Win32 Services has encountered a problem and needs to close" error with increased frequency. Now, the following happens w/in 15-20 minutes of a fresh reboot and connecting to the internet. I first get the error, then my system tray basically "blinks"; I then lose internet connection capability, then my system volume goes out, and finally the entire desktop and all programs lock up and I have to reboot. Sometimes I also get a svchost.exe error window that some memory cant be read. That svchost.exe error also posts in the error log of the Generic Host Process error. Additionally, I have no ability to download Windows updates (even when computer is not in Generic Host Process error mode and whether through IE or Firefox) and programs like Adobe are acting all crazy. Incidentally, the DDS report below shows that I'm using some proxy server; I am NOT (or at leas... Read more

A:Svchost.exe & generic host process errors - darn rats!! (Take 2)

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I?ve given you the ?All clear.? Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - ComboFix will not run until AVG is uninstalled. This is because AVG falsely detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first. You may do this through Control Panel > Add/Remove Programs or you can use this tool for a more complete removal:

Download AppRemover from here saving it to your desktop.Double click to run AppRemover
Follow the prompts to remove AV... Read more

Read other 15 answers
RELEVANCY SCORE 114.8

About a month ago my computer (Windows XP Professional SP3) was attacked by some malware/virus/trojan (Security Suite 2011 or something like that) that locked all functions/programs and told me that any program I tried to open was infected with a virus. I thought I finally got rid of it by running MBAM (in safe mode). It found some trojans, etc., removed them and I thought that was that. Not exactly.

Since then, I've been getting the "Generic Host Process for Win32 Services has encountered a problem and needs to close" error with increased frequency. Now, the following happens w/in 15-20 minutes of a fresh reboot and connecting to the internet. I first get the error, then my system tray basically "blinks"; I then lose internet connection capability, then my system volume goes out, and finally the entire desktop and all programs lock up and I have to reboot. Sometimes I also get a svchost.exe error window that some memory cant be read. That svchost.exe error also posts in the error log of the Generic Host Process error. Additionally, I have no ability to download Windows updates (even when computer is not in Generic Host Process error mode and whether through IE or Firefox) and programs like Adobe are acting all crazy.

The above seems to only happen when I'm connected to the internet. When I reboot from scratch and don't connect to the internet, the computer is pretty stable - like the good old days.

I constantly scan with AVG, MBAM, Spybot, Super... Read more

A:Svchost.exe & generic host process errors - darn rats!!

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed. I currently have as many open topics as I can effectively handle; this will have you back in queue with the proper logs so an available helper would be able to assist.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 114.4

Hey guys,

Definitely appreciate the awesome service you are providing on this forum. I have been getting google redirects, pop-ups, and "generic host process" errors that shut down my audio upon restarting my computer. Malwarebytes has detected the trojan Hiloti, but I am still having issues. AVG is currently installed, and I am planning on uninstalling and replacing with Avira/Avast after this episode. Thanks for your help, as usual.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Vamos Rafa at 1:13:16.76 on Tue 04/19/2011
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_21
.
============== Running Processes ===============
.
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Razer\DeathAdder\razerhi... Read more

A:Google redirects, pop-ups, "Generic host process" error

Sorry for the inconvenience and for clogging up the forum, but I would like to request a close to this topic as I have received help from someone.

Still appreciate the help.

Read other 2 answers
RELEVANCY SCORE 114.4

(My posts do not seem to be going through fully as I keep getting a connection was reset error and only part of my message pastes, I'll wait for a response before trying again, thanks)Hi,Over the past week I've been experiencing redirects in Google along with a "Generic Host Process" crash every time I boot up the computer (the 2 issues started simultaneously). Once the crash occurs, my sound card stops working and all Windows XP visual styles disappear and Windows goes back to looking very "Windows 98". I've posted/attached the DDS logs, but Gmer has been crashing/restarting during the scan so I'm unable to post that. Malwarebytes, Spy bot S&D and Avira anti virus have been unable to find anything. Thanks for any help!DDS (Ver_10-03-17.01) - NTFSx86 Run by Rich Skibinsky at 5:16:36.65 on Fri 07/09/2010Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2379 [GMT -4:00]AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}FW: CA Personal Firewall *disabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exeC:\Pr... Read more

A:Google Redirects and Generic Host Process crash

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process. Please also continue to work with me until I give you the all clear. Even if your computer appears to act better, you may still be infected.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Once we start working together, please reply back within 3 days or this thread may be closed so we can help others who are waiting.We need to create an OTL report,Please download OT... Read more

Read other 44 answers
RELEVANCY SCORE 114

Hi, I have removed several malware from this netbook (Dell mini10) using malwareBytes and Mcaffe. first the problems were severe with an infection of Windows Antivirus Pro popups that had locked down the computer. then I removed several trojans and finally an exploit virus. Now I don't get any malware present when running scans, but I get a generic host error for win32, followed by an NT authority shutdown due to a DCOM error. I override this using the shutdown -a command. Below I paste the DDS and rootrepeal logs. thank you in advance for any help you can provide. I am overwhelmed..DDS (Ver_09-12-01.01) - NTFSx86 Run by karyn embury at 11:34:49.98 on Sat 01/30/2010Internet Explorer: 8.0.6001.18702AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ============================= Pseudo HJT Report ===============uStart Page = hxxp://www.yahoo.com/?fr=fp-yie8uSearch Page = hxxp://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.comuSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7uWindow Title = Windows Internet Explorer provided by Yahoo!uInternet Settings,ProxyServer = http=127.0.0.1:5555uInternet Settings,ProxyOverride = <local>uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%smURLSearchHooks: H - No FileBHO: Adobe PDF ... Read more

A:removed malware now geting generic host errors and NT authority shutdown

Unfortunately my problem was very similar to one described in an earlier post. The resolution for that was the presence of a backdoor trojan, which is also what I was suspecting for this problem. I am going ahead with a reformating of the whole computer.. And changed already all the passwords for sensitive information.. What a pain!

Read other 2 answers
RELEVANCY SCORE 113.6

Ok so I am at my Witts ends with this PC it is windows XP Home service pack 3,I really would like to get down to the bottom of this problem. When the computer first boots i get the data execution error for the Generic Hosts Process for Win32 Service. I have gone in and played with the DEP settings with no luck. After a few minutes the AXWIN frame Window: svchost.exe Application error comes up. If i closed this error i get the DCOM reboot with a 60 second count down. I have Ran MBAM udated as of 1/29/10 and it didnt detect any thing. This PC is running Trend Micro ran a full system scan with the latest defs update it didnt find anything. In the startup there is dumprep 0-u and if i disable that the errors seem to take longer to come up. I am also have google redirects. i have checked the hosts file and there is no entries in there.Hopefully some one can help, here is the hijack this log Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:22:57 PM, on 1/31/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support&#... Read more

A:DEP, Generic Host Process for win32, Axwin Frame and reboot errors

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 112

Like the title says, I picked up malware off some website while looking for a disassembler that started with a rogue antivirus(antivirus safebrowser and fake security essentials) that got removed with malwarebytes. Now I get a generic host process crash win32 relating to svchost.exe and module ntdll.dll. With the crash, the system sort of hangs and doesn't open anything like task manager. I've managed to get the system working again with windows styles disappeared(blue taskbar,green start button) by leaving task manager open before the crash and ending the svchost.exe process that's taking up 100+MB of memory.Not only is the generic host process crashing, but IE keeps redirecting me when I click on google search links and random popups. My situation is exactly like this post http://www.bleepingcomputer.com/forums/topic332187.html. I've run combofix, malwarebytes, norton, gmer, and a few other scanners with no luck on this svchost issue. I've even tried replacing svchost and ntdll.dll files from an identically configured system.Anyways, here is the otl log and gmer log.OTL was scanned using the custom/fix settings from the post above.For some reason, I get connection interupted when I try to post the whole log, and when I post a partial of the log after what's already been posted. is there a post length/size limitation?I've attached the otl log in a zip and the gmer log. Please advise. And thanks in advance for the help!EDIT: Posts merge... Read more

A:Rogue AV, Generic Host process crash, google redirects with popups

TDSSKiller got rid of it. it was lurking in the master boot record. all problems gone!

Read other 2 answers
RELEVANCY SCORE 112

I have a Dell Vostro 1500 laptop running Windows XP 32-bit. A couple weeks ago all of a sudden I started getting an error "Spooler SubSystem App has encountered a problem and needs to close". This doesn't seem to affect anything that I am using. Randomly, my wireless internet connection will disconnect and I have to repair it. The Spooler SubSystem error sometimes comes up again several times at random intervals. Eventually I get an error "Generic Host Process for Win32 Services", and at that point I can no longer repair my wireless connection or use certain applications. I have to reboot the machine to get back full functionality. Sometimes the Win32 error occurs almost immediately after rebooting, sometimes not for 12 hours. I also noticed recently that when I perform a search using Google, and then click on any result I will invariably be redirected to another random webpage.

I have Symantec antivirus, which hasn't found anything. I have run Malwarebytes' Anti-malware and also SUPERAntiSpyware, and removed the few items they found but none of that has improved the problems. Help would be immensely appreciated!

The Spooler error has the following details:
szAppName: spoolsv.exe
szAppVer: 5.1.2600.6024
szModName: unknown
szModVer: 0.0.0.0
offset: 001a63cb

The Win32 error has the following details:
szAppName: svchost.exe
szAppVer: 5.1.2600.5512
szModName: unknown
szModVer: 0.0.0.0
offset: 001a624b

I have run DDS and am attach... Read more

A:Google redirects, spooler app & generic host process for Win32 error

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 2 answers
RELEVANCY SCORE 112

Hi, I'm having trouble with my computer. It was infected with the Defense Center virus a while ago, and I managed to get rid of it, but since then, I have had google redirects all the time, popping up with other search engine websites. Also, more recently, I have begun to get the Generic Host Process crashes. These usually are accompanied by my internet ceasing to function. Afterwards, I also noticed that my computer when trying to hibernate, there is the sound of a usb device being disconnected and reconnected, causing my computer to stop from hibernating. I was wondering what is wrong and what can I do? I already started the dds scan, but the gmer scan causes my computer to lock up. What I mean by that is everything stops responding. Is that normal for the gmer scan and should I just let it continue all the way through? I tried gmer 3 times, the first time the computer froze up, the second time I had a blue screen that told me there was a problem with some new device, and the 3rd time my computer froze up again. Thanks in advance for your help!DDSDDS (Ver_10-03-17.01) - NTFSx86 Run by Joseph at 0:15:43.14 on Wed 09/15/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1183 [GMT -6:00]AV: Defense Center *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F... Read more

A:Google Redirects and Generic Host Process crashes and Hibernate Problems

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 16 answers
RELEVANCY SCORE 109.6

Trying to help a co-worker with these issues;

Started out with the Google redirects now;
"svchost.exe-Application Error" The instruction at 0x001a61ae referenced memory at 0x00000000. The memory could not be written.

Click OK to terminate the program.
Click CANCEL to debug the program.

While this error message was popping up the machine was pretty much non-usable, I couldn't get 'task manager' to work, I couldn't 'right' click on "my computer", sometimes clicking 'start' didn't do anything, the pc would just lock up just the mouse would move around.

After doing some research I found some suggestions to "turn off" MS Automatic Updates, then "manually" run MSUpdates; Which I did and that seemed to have fixed the 'svchost.exe errors'. They weren't coming back and I was able to continue using the machine.

Malewarebyte wouldn't run (installed), I couldn't install Spybot S&D or Superantispyware. I had to change the names of the executable files to get them to install AND to get them to run.
Malewarebytes did find 3 different things; one of them was a DNS Name Server changer, which temporarily fixed my Google redirector.
Spybot found some type spyware, Coupon bar, etc. and Superantispyware didn't find anything (ran that last, 3rd).

Although these found some items I still couldn't get the correct 'executable' files for Malewarebyte, Spybot and Superantispyware... Read more

A:google redirects, svchost.exe - app error, generic host process win32 encountered problem

I have since returned this machine back to it's owner. They were getting impatient with waiting.

I'm sorry if anyone spent any time trying to figure out what this might have needed.

I did run TDSSKiller and it did fix a majority of the issues; The svchost popup error is gone along with the generic host process error.
I am now able to run all my anti-virus and anti malware products with out any problems.

Here is the log from the TDSSKiller for anyones reference;
2010/10/26 21:35:44.0214 TDSS rootkit removing tool 2.4.5.1 Oct 26 2010 11:28:49
2010/10/26 21:35:44.0214 ================================================================================
2010/10/26 21:35:44.0214 SystemInfo:
2010/10/26 21:35:44.0214
2010/10/26 21:35:44.0214 OS Version: 5.1.2600 ServicePack: 3.0
2010/10/26 21:35:44.0214 Product type: Workstation
2010/10/26 21:35:44.0214 ComputerName: ROBOCLOSER
2010/10/26 21:35:44.0214 UserName: HP_Administrator
2010/10/26 21:35:44.0214 Windows directory: C:\WINDOWS
2010/10/26 21:35:44.0214 System windows directory: C:\WINDOWS
2010/10/26 21:35:44.0229 Processor architecture: Intel x86
2010/10/26 21:35:44.0229 Number of processors: 1
2010/10/26 21:35:44.0229 Page size: 0x1000
2010/10/26 21:35:44.0229 Boot type: Normal boot
2010/10/26 21:35:44.0229 ================================================================================
2010/10/26 21:35:44.0589 Initialize success
2010/10/26 21:35:48.0901 =====================================================... Read more

Read other 2 answers
RELEVANCY SCORE 105.6

Over the past few weeks now my computer has been running very slow. I contacted a "tech guy" thinking I needed more space on my computer, i.e. hard drive and memory, (after seeing several pop up messages about virtual memory low). I might add that I assumed virtual memory was the same as any other computer memory. Well, the guy told me I had some viruses on my PC. Hmm, I thought. I was pretty sure I didn't have any VIRUSES. Back in Feb/March, or so, I had several computer viruses that Bleepingcomputer.com helped me removed. I also updated my computer with Bit Defender 2008 total security and was pretty certain I did not have any new viruses. None-the-less, the techie said he added a new hard drive to the same PC tower (making the PC a dual hard drive system - the newer one with faster performance) - and keep the old slow drive as-is. I figured he wasn't skilled enough to fix the original problem. No worries, I imagined, as long as I could still use the old slow hard drive as before. All work and programs are still on the old hard drive - which I really, really need. He also moved my external hard drive files, which was located on old hard drive (F:) and move it to old hard drive (G:) location. He added new or copied files to the old (G:) location. I'm not sure how this affected the programs. Most programs can't find the files any longer. ________________________________________________________First problem I noticed was the inability to send emails. ... Read more

A:Generic Host Process For Win32 & Windows Installer 3.1 Error Messages

Well...often (IMO) a virus or whatever can be removed...but still negatively impact future performances of typical O/S functions.

Files could have been damaged by the malware or during the removal of the malware...or, really, any time.

Did you do a repair install or a clean install of XP after this known malware problem?

Did the person...do anything to remove the newly found viruses?

FWIW: I don't think I know of anyone who has had one known malware problem only. If it happens once, it seems to happen more than just a single instance.

Louis

Read other 3 answers
RELEVANCY SCORE 104

Lately ive been having problems with this Error about svchost.exe..
the problem points to some folder in my local/temp folder called WER3cb6.dir00\ as you can see in the image attached, i deleted the folder and its content thinking that the problem may get fixed but it didnt. and now when i reboot my computer i get the same ERROR pointing at the same location but this WER3cb6.dir00 folder doesnt exixt there anymore...
wonder why it stills showing this error.

Here is my HJ log, thank you to anyone that can share a way to fix this problem.

sincerely , n00ber

Logfile of HijackThis v1.99.0
Scan saved at 11:55:50 PM, on 2/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Norton Per... Read more

Read other answers
RELEVANCY SCORE 102.8

I have a very similar issue as this person did on my moms computer.Generic Host Process for Win32 Services + web redirects + computer won't shut downGeneric Host Process For Win 32 Services----------------------------------------------------------------Generic Host Process for Win 32 Services has encountered aproblem and needs to close. We Sorry for in convenience you.------------------------------------------------------------------------------------If you were in middle of something the information you wereworking on might be lost.------------------------------------------------------------------------------------For more information about the error (chick Here.).---------------------------------------------------------------------------------------When she pressed it, this what it said...==================================================Error Signature-----------------------------------------------------------------------------------------sz Appname: Svchost.exesz Appver: 5.1. 26005512sz Mod Name: Flash6 ocxsz ModVer: 6088.0 off 00013d19------------------------------------------------------------------------------------------To View Technical about the error report----------------------------------------------------------------------------------------Now just like the other user, when googling things the first click on a link redirects to some other sites. Also it changes the theme to the very basic gray.Also she now has a Virus that poses as an Antivirus and won&#... Read more

A:Generic Host Process for Win32 Services + web redirects + Windows Antivirus scam

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 18 answers
RELEVANCY SCORE 100.8

when i turned on my laptop this morning, i had 2 errors pop up. the first states "C:\Windows\system32\GfxUI.exe Windows cannot access the specified device, path, or file. You may not have appropriate permissions to access the item." the second states "Microsoft Windows Windows host process (Rundll32) has stopped working. Windows can check online for a solution to the problem." i clicked for it to check online but it doesn't get any results.

I've checked various forums and taken several course of action, to no avail. i've replaced the rundll32.exe file from another source on my laptop. i ran system file checker/repair, with this result "Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log." after a reboot, the following was in logfile $cbs-log-0425-08.txt

2010-10-28 09:38:53, Info CSI 0000015e [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-10-28 09:38:55, Info CSI 00000160 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0... Read more

A:GfxUI.exe and Windows host process errors

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open wit... Read more

Read other 2 answers
RELEVANCY SCORE 98

Hello,

I've just come from malware forum, and although I'm now apparently malware free but I'm still having issues updating and downloading certain programs.

For instance, when I try to update iTunes I get an error message that says "Windows Installer Service could not be accessed..."

The MRU analyst seems to think that some system files have been deleted and for some reason Windows File Protection hasn't replaced them. He suggested i post over here.

Here's my previous thread:

http://www.techsupportforum.com/secu...-programs.html

Thanks in advance for any help you can give!

Read other answers
RELEVANCY SCORE 97.2

I have a very similar issue as this person did on my moms computer.Generic Host Process for Win32 Services + web redirects + computer won't shut downGeneric Host Process For Win 32 Services----------------------------------------------------------------Generic Host Process for Win 32 Services has encountered aproblem and needs to close. We Sorry for in convenience you.------------------------------------------------------------------------------------If you were in middle of something the information you wereworking on might be lost.------------------------------------------------------------------------------------For more information about the error (chick Here.).---------------------------------------------------------------------------------------When she pressed it, this what it said...==================================================Error Signature-----------------------------------------------------------------------------------------sz Appname: Svchost.exesz Appver: 5.1. 26005512sz Mod Name: Flash6 ocxsz ModVer: 6088.0 off 00013d19------------------------------------------------------------------------------------------To View Technical about the error report----------------------------------------------------------------------------------------Now just like the other user, when googling things the first click on a link redirects to some other sites. Also it changes the theme to the very basic gray.Looking forward to any help, thanks.

A:Generic Host Process for Win32 Services + web redirects(2)

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 1 answers
RELEVANCY SCORE 97.2

Hello - any help would be much appreciated.Running Norton 360 and Malwarebytes finds nothing.What started a few weeks ago with redirects and pop ups, now we have:Generic Host Process For Win32 ServicesGeneric Host Process for Win32 Services has encountered a poblem and needs to close. We are sorry for the inconvenience. If you were in the middle of something, the information you were working on might be lost. Please tell Microsoft about this problem.We have created an error report that you can send to help us improve Generic Host Process for Win32 Services. We will treat this report as confidential and anonymous." The NT Authority System Shutdown Box comes up after this and this is what it says:"This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT Authority/System.Message: Windows must now restart because the DCOM Server Process Launcher Service terminated unexpectedly" In my search I have found that start/run/shutdown -a will stop the shutdown but it is not solving the problem. I have attached files per advice on bleeping computer - hijack this, dds, ark. Please advise, again, any help much appreciated. Thank you.

A:Generic Host Process shutdown + redirects + popups

Hello,My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Please download GMER from one of the following locations, and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zip MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs, as this process may crash your computer.Temporarily disable any real-time active protection so your security program drivers will not conflict with gmer's driver.Double click on Gmer to run it.Allow the gmer.sys driver to load if asked.You may see a rootkit warning window, If you do, click No.Untick the following boxes on the right side of the Gmer sc... Read more

Read other 2 answers
RELEVANCY SCORE 96.4

The above is the error message I was receiving. I ran the security update 873333 suggested here, however, the computer keeps freezing up. I already ran Malwarebytes, Spybot and onecare.live.com (microsoft); last thing I did prior to the security update 873333 you suggested here, I also ran eset.com/online-scanner. Apparently there is some kind of a virus that none of these are able to get rid of. This is a Dell optiplex 320 computer with windows xp version 5.1, service pack 2, 1GB of ram. Can not get any of windows updates and internet explorer does not work all the time and at times when I open it, it appears some sort of webside like a supermarket type, with a window that "you are a winner" and it starts counting. Please help.ThanksjudithmAfter carefully reading your website , I follow the instructions and ran some of the programs you suggest for you to analize. I am a total novice but I certainly appreciate your help. I know I posted some information yesterday, but I did not know how to get to it to continue adding what I did today. I am still struggling finding everything and it its the first time I register to one of this websites.Please see attachments.It is almost impossible to work from this computer, because it freezes and sometimes internet windows open unstopable to the point that I have to turn the computer off.DDS (Ver_10-11-10.01) - NTFSx86 Run by PaulR at 14:53:49.62 on Thu 11/11/2010Internet Explorer: 6.0.2900.2180Microsoft Windows XP Professional ... Read more

A:Generic Host Process for Win32 Service

Hello and welcome to Bleeping Computer.My name is km2357 and I will be helping you to remove any infection(s) that you may have.I will be giving you a series of instructions that need to be followed in the order in which I give them to you.If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.Please do not start another thread or topic, I will assist you at this thread until we solve your problems.Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:Step # 1 Download and run DDSDownload DDS and save it to your desktop from here or here or hereDisable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Step # 2: Download and Run GmerPlease download gmer.zip from Gmer and save it to your desktop.***Please close any open programs ***Double-click gmer.exe. The program will begin to run.**Caution**These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security AnalystIf possible rootkit activity is found, you will be asked if you would like to perform a full scan. Cli... Read more

Read other 3 answers
RELEVANCY SCORE 96.4

Messes with the connection and browsing. Thanks.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:32:14 AM, on 4/2/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\SetPoint\LBTWiz.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\WIND... Read more

A:Generic Host Process for Win 32 Service Virus

You need to describe your problem or question. Your thread title includes the word "virus." If you suspect malware ...

Read Everyone MUST read this BEFORE posting for help in this forum, post the requested information here, and then click on Report at the bottom of your post and request this thread be moved to the Virus & Other Malware Removal forum.

Bump your thread there once a day--no more often--until you get a reply. They're kinda busy over there.
 

Read other 1 answers
RELEVANCY SCORE 96.4

Hi Everyone,

This virus, messes with my connection when I connect by wireless. When I begin to browse it relocates all my pages with spam. And after about 10 minutes I have no net connection. Thanks much in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:32:14 AM, on 4/2/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\SetPoint\LBTWiz.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Progr... Read more

Read other answers
RELEVANCY SCORE 96.4

Hi there,My computer functions normally for about 10 minutes (not including redirects and pop-ups) after turning it on before Generic Host Process for Win32 Services encounters an error and closes. At that point, the computer slows down considerably, Internet sporadically turns on and off, menu bar changes colors, Windows Audio turns off, and my printer drivers are disabled, among other symptoms.DDS.txt is below; I could not run the gmer scan without having the computer blue-screen and restart.DDS (Ver_10-03-17.01) - NTFSx86 Run by George Zuo at 14:25:24.95 on Fri 10/01/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_16Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1322 [GMT -4:00]AV: VirusScan Enterprise + AntiSpyware Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}============== Running Processes ===============C:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\WINDOWS\system32\IPSSVC.EXEC:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exeC:\WINDOWS\system32\acs.exeC:\Program Files\Common Files\Apple\Mobile Device... Read more

A:Generic Host Process for Win32 Services Shutdown, Redirects/Pop-ups

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 13 answers
RELEVANCY SCORE 96.4

Hello BleepingComputer.

Recently I have been getting several problems on my desktop, running Windows XP Home Edition, which I believe to be virus related. I believe I got rid of Internet Security 2010, but cannot be completely sure. I am also still experiencing the browser redirects to random websites (on Firefox, I don't use IE). I ran Malwarebyte's Antimalware's quick scan multiple times and nothing came up.

I also had a problem where a popup with the message "DCOM server process launcher service has terminated unexpectedly" with a timer of 60 seconds. I googled it and turned the shutdown timer off, and it seems to be a virus or malware related problem.

Any suggestions on what I should do next?

Your help is much appreciated, thank you in advance.

EDIT: I just realized that I posted 3 problems in the same post, but all of these problems started at the same time so I assume they originated from the same problem. If there is a problem with this, please let me know.

A:Several problems- browser redirects, Internet Security 2010, DCOM server process termination

I'm not sure if I'm allowed to bump this, and sorry if I'm not, but it's been almost a month and these problems are driving me crazy. Thanks in advance.

Read other 3 answers
RELEVANCY SCORE 96

Hi there!
As of a few weeks back, I noticed I was no longer able to install some programs. This was due to the 'Windows Installer Service could not be accessed' error, and was usually accompanied by a 1601 or 1708 error code. I tried many methods to try and resolve this issue (Re-registering the installer service, cleaning the registry values etc) but was to no avail. I began to delay this issue, and more problems rose to my attention. These included the 'The ordinal 304 could not be located in the dynamic link library iertutil.dll' error, that is alerted to my computer several times upon opening a program. Besides the Installer Service issue, the other problems seemed to arise after I had began downloading updates for Windows, despite the fact I am now also unable to scan for windows updates. I came to the conclusion that a windows repair from a usb boot drive might be the best option here, unfortunately I was unable to select an operating system in the system recovery section despite activating the correct partition via cmd.
Any help would be much appreciated!

Read other answers
RELEVANCY SCORE 95.6

My kids were using the computer and called to me saying that there was a program that popped up saying we had a virus. I immediately turned off the computer but when it rebooted the Internet Security program popped up everytime I attempted to launch IE8. After trying to launch IE8 several times I would eventually be able to get to the internet. But if I attempted to do a google search for how to remove the virus the search would either redirect or say the webpage was unavailable.

I rebooted into safe mode and ran spybot - search & destroy. It found several things, two of which were things I've seen before on friends computers - Desktop Security 2010 and also Internet Security 2011. I allowed spybot to remove the entries found and then I rebooted again into safe mode. I ran spybot again and it found a few more non-descript items which it then removed and I rebooted into safe mode again. After the 3rd time spybot did not find anything. So then I ran Malwarebytes and it found a few items, which it removed. I rebooted again into safemode and ran Malwarebytes again and it said the system was clean. I rebooted and allowed Windows XP to launch normally. when windows loaded it appeard that Internet Security 2011 was still present, and when I attempted to launch IE8 the system asked me what program I wanted to use to open the file. What I then discovered is when I attempted to open any of my programs I was always given a pop up box that asked what program to u... Read more

A:infected with desktop security 2010 and Internet security 2011 and Google redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 24 answers
RELEVANCY SCORE 95.2

At startup, I get the following Generic Host Process for Win32 Services message:Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.If you were in the middle of something, the information you were working on might be lost.For more information about this error, click here.When I click the link, I get this:Error signatureszAppName: svshost.exe szAppVer: 5.1.2600.5512 szModName: unknownszModVer: 0.0.0.0 offset: 001a624bTo view technical information about the error report, click here.When I click this link, I get this:Error Report ContentsThe following files will be included in this error report:C:\DOCUME~1\RMills\LOCALS~1\Temp\WERd2e8.dir00\svchost.exe.mdmpC:\DOCUME~1\RMills\LOCALS~1\Temp\WERd2e8.dir00\appcompat.txtWhen I debug or close this process error window, it causes my computer to not open any windows and will not log off. Also it changes my task bar at the bottom of my screen to a grey, very basic bar. I have to manually power it down with the power button.When I go a google search I get redirected to other sites. I think it may be related to a scour virus as it will sometimes go to a scour site.Now, leading up to the point I am at now, I was getting a svchost.exe application error message (along with the generic host process message). I followed the following directions online with how to fix that and it is not coming up ... Read more

A:Generic Host Process for Win32 Services + web redirects + computer won't shut down

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 3 answers
RELEVANCY SCORE 95.2

I have noticed that this problem has only occurred over the last few days, when I boot my computer, it tells me generic host process for win32 services has encountered a problem and needs to close. It gives me the standard "send error message to windows" thing and i click "send". Then after that box closes an error comes up telling that svchost.exe has caused an error. I've checked out the forums to find out if anyone else had Has this problem. One post suggested (http://forums.techguy.org/windows-nt-2000-xp/664709-yet-another-generic-host-process.html : "Click Start, click Run, type eventvwr.msc in the Open box, and then press Enter. Click the Application category. Look For Recent Errors " I did exactly that, but I don't know how to read/understand what the error message relates to. Please can anyone offer some assistance/advice?
Cheers all helpers.
 

A:Another Generic Host Process for Win32 service problem

This link may help in understanding how to use the event viewer

How To Use the Event Viewer Applet
http://www.bleepingcomputer.com/forums/topic40108.html
 

Read other 1 answers
RELEVANCY SCORE 95.2

Hello Team ~

YIKES! Everytime I start the computer I receive the errors shown.
Here is the error problem, in three screens:


I am running the following:

What ever is wrong with the computer, it is using up the processer pretty regular causing jumps. I took a snap of the performance graph taken at a time when i was supposedly "idle".


Most of the processes using CPU were svchost.exe and Idle Process. Here is a snap of the services sorted by CPU use.
http://i267.photobucket.com/albums/i...uringerror.jpg


Suspecting it may be Malware, I went to Major Geeks and followed every instruction and download to a "T". I have run Macafee, AVG virus detect, SpyBot, Microsoft Defender and LavaSoft AdAware, most of them twice.

I opened my device manager and saw there was two question marks by my Logictech mouse and webcam driver so i deleted both of them.

What ever is going on, there seems to be something in the background regularly chugging and the error messages just keep on coming, whether i am connected to the internet or not.(I have physically shut off my wireless and rebooted a number of times.

Please let me know what else I may provide that will be helpful for you to determine how to get this computer back on track. I have lost a day of work.

Best regards ~ Jebullis

Read other answers
RELEVANCY SCORE 95.2

Two weeks ago we got a window repair virus. I was able to remove a portion of the virus but I am left with google redirects, internet explorer script errors and misc sounds. I have followed several of the other forum posts which seem to have similar problems. It appears that each posts takes a specific resolve based on my system and thus I am posting my information. Thanks in Advance for your help.

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by HP_Administrator at 16:02:50.90 on Sat 04/23/2011
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_24
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.139 [GMT -7:00]
.
AV: Norton AntiVirus *Enabled/Updated* post:22432332
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files... Read more

A:Google Redirects, Internet Explorer script errors

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about the Windows version you are using: What we in particular need to know is version, edition and if it is a 32bit or a 64bit system. If you are unsure about any of these caracteristics, just let us know and we'll help you figuring it out. Please also tell us if you have your Windows CD/DVD handy.Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your ... Read more

Read other 26 answers
RELEVANCY SCORE 95.2

Hello,
Please can you try to help me? I recently received a barrage of messages from a program called 'XP Internet Security 2010 which told me that my PC was full of viruses. I seem to have removed it (the fake Internet Security program) using Super AntiSpyWare but I now have an issue with 'Open With' screen. Every time I click on an application the Open With dialog box opens, asks me to select a program from the list and in most cases I have to browse the program file directory to find the link.
Worryingly, the XP Internet Security 2010 application has been back again and I have removed it again, and I am also concerned that I pay for an applicatin such as Norton yet I don't have much protection from these other attacks?
I have downloaded my log from HiJackThis - I hope this includes enough information otherwise please let me know if I can provide anything further so that I can get assistance in cleaning up my PC. Any advice on keeping it clean would be much appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:44:17, on 24/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTSvcCDA.... Read more

Read other answers
RELEVANCY SCORE 94.4

I need some help folks. Recently my wifes PC started having Generic Host Services crashing which shuts down some functions of the machine including the print spooler and audio device manager. She had picked up a fake security threat warning awhile back and clicked on it. It had loaded a couple of viruses that we thought we had taken care of, but then it started doing more wierd stuff with the host services thing and redirecting webpages to freegiveaways.com/weekly winner. I actually had this all typed up on her machine but I could not post it because the connection kept getting reset on me. I'm writing this again on my PC now.

I have gone back and scanned it with McAfee, Spybot, MalwareBytes, & Microsoft Security Essentials, but found nothing. Do I have a MBR infection possibly? Any help would be greatly appreciated. Here are the logfiles as requested in the "Everyone must read this...." sticky. These were actually done a week ago, but she hasn't used the machine since.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:57:39 PM, on 11/28/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WI... Read more

A:Generic host service crashing / webpage redirects

I forgot to add that I can not update Microsoft Security Essentials or Windows Update either. Thanks.
 

Read other 3 answers
RELEVANCY SCORE 94.4

hi tyhere..i have a friend that has got xp. but he keeps getting this error message

generic host process for win32 service has encounted a problem

and the machine shutsdown in about 40 seconds... does anyone have any ideas on how this can be resolved...thanx guys n gals
 

A:generic host process for win32 service has encounted a problem

http://forums.techguy.org/t152866/s.html

It's right above your post, and theres like 4 right below it...
 

Read other 2 answers
RELEVANCY SCORE 94

Recently my computer has started displaying the "svchost.exe Application Error" message. There is also another window that appears frequently that says "Generic Host Process for Win32 Services" and then "Generic Host Process for Win32 Service has encountered a problem and needs to close."

Usually after I close these messages, or have been using the computer for a little while (maybe 20-40 minutes, it depends), my computer starts freaking out. Everything starts running slow and freezes (and sometimes un-freezes a few minutes later), the toolbar at the bottom of the screen will freeze (so I cannot access the Start menu), and the taskbars at the top of windows (and usually the toolbar) will revert to a Windows 98 type look.

I don't know what to do to fix these problems, your help and advice will be much appreciated!!

A:svchost.exe and Generic Host Errors

Hello rebelchic10

This error is sometimes caused by Windows Updates

Turn off Automatic Updates then go to the Updates Site and see if there are any Updates for you. If so, download and install these Updates.

Turn Automatic Updates on again.

.

Read other 2 answers