error message "generic host process for win32...."

P

PA Bear [MS MVP]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjunction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
 
F

Farhan

when i connect to internet a message start appearing says:
"generic host process for win32 services has encountered a
problem.......will now close."
and refers to to these files:
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\svchost.exe.mdmp
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\appcompat.txt
(i could not find these files maybe disappear after restart.)

If i close, net stops responding but connection icon is still there in tray
only i have one option left RESTART.
if i don't close this message box, it stops anyway (with taskbar converting
to old style and back to normal) after a while and do as above.

After googling i found some suggestions:
I ran antimalware in normal/safe mode, it gave clean chit.
installed 894391 update but i think its not the answer.
 
F

Farhan

uninstalling nvidia display adapter drivers (which i recently installed,
downloaded from their site, for geforce2) did the job.
But after that windows not installing or even finding from cd previous
drivers which it installed on his own.
 
F

Farhan

Problem solved by enabling Windows Firewall. May be disabled by Nvidia
driver installation.
Someone told me "auto update" should be disabled which i already did.
 
G

GENERIC HOST PROCESS FOR WIN32 PROBLEM

Farhan said:
when i connect to internet a message start appearing says:
"generic host process for win32 services has encountered a
problem.......will now close."
and refers to to these files:
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\svchost.exe.mdmp
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\appcompat.txt
(i could not find these files maybe disappear after restart.)

If i close, net stops responding but connection icon is still there in tray
only i have one option left RESTART.
if i don't close this message box, it stops anyway (with taskbar converting
to old style and back to normal) after a while and do as above.

After googling i found some suggestions:
I ran antimalware in normal/safe mode, it gave clean chit.
installed 894391 update but i think its not the answer.
 
G

Gerry

Now I'm getting this message and I have Service Pack #3. Any suggestions for
fixing this?
 
G

Gerry

Sorry - I didn't see it so I resorted to a hijack. I was hoping someone
would have a solution so I could fix the problem.
--
Gerry


PA Bear said:
Was there something you didn't understand in my reply to your own, new
thread last week [1] that caused you to hijack someone else's thread from
November 2008?

[1]
http://groups.google.com/group/microsoft.public.windowsxp.general/browse_frm/thread/f2dcf462279f1577

Now I am getting this message and I have Service Pack 3. Any thoughts on
how to fix it?

.
 
P

PA Bear [MS MVP]

Here's the current version of that canned reply:

===========
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested information (logs, etc.) in your own, new thread
in one (only) of the following recommended forums for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

• SpywareHammer: Malware Removal
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0

• Spyware Warrior: Help with spyware removal
http://www.spywarewarrior.com/viewforum.php?f=5,

• DSL Reports: Security Cleanup
http://www.dslreports.com/forum/cleanup

• Bluetack: Malware Removal
http://www.bluetack.co.uk/forums/index.php?showforum=172

• AumHa: Malware Removal
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
====================

Sorry - I didn't see it so I resorted to a hijack. I was hoping someone
would have a solution so I could fix the problem.
Was there something you didn't understand in my reply to your own, new
thread last week [1] that caused you to hijack someone else's thread from
November 2008?

[1]
http://groups.google.com/group/microsoft.public.windowsxp.general/browse_frm/thread/f2dcf462279f1577

Now I am getting this message and I have Service Pack 3. Any thoughts
on
how to fix it?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your
hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
use
(in conjunction with some other utilities). HijackThis will NOT fix
anything on its own, but it will help you to both identify and remove
any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for
review by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Farhan wrote:
when i connect to internet a message start appearing says:
"generic host process for win32 services has encountered a
problem.......will now close."
and refers to to these files:
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\svchost.exe.mdmp
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\appcompat.txt
(i could not find these files maybe disappear after restart.)

If i close, net stops responding but connection icon is still there in
tray
only i have one option left RESTART.
if i don't close this message box, it stops anyway (with taskbar
converting
to old style and back to normal) after a while and do as above.

After googling i found some suggestions:
I ran antimalware in normal/safe mode, it gave clean chit.
installed 894391 update but i think its not the answer.

.
 
G

Gerry

I conducted the scan using the link you gave me and it found a file that it
treated or placed into containment. It then recommended I run my security
software (Trend) to remove the file, which I did. Trend has placed it in
quarentine and I will delete it. Thus far I am no longer getting the error
message Thank you for your help I appreciate it.
--
Gerry


PA Bear said:
Here's the current version of that canned reply:

===========
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested information (logs, etc.) in your own, new thread
in one (only) of the following recommended forums for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

• SpywareHammer: Malware Removal
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0

• Spyware Warrior: Help with spyware removal
http://www.spywarewarrior.com/viewforum.php?f=5,

• DSL Reports: Security Cleanup
http://www.dslreports.com/forum/cleanup

• Bluetack: Malware Removal
http://www.bluetack.co.uk/forums/index.php?showforum=172

• AumHa: Malware Removal
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
====================

Sorry - I didn't see it so I resorted to a hijack. I was hoping someone
would have a solution so I could fix the problem.
Was there something you didn't understand in my reply to your own, new
thread last week [1] that caused you to hijack someone else's thread from
November 2008?

[1]
http://groups.google.com/group/microsoft.public.windowsxp.general/browse_frm/thread/f2dcf462279f1577


Gerry wrote:
Now I am getting this message and I have Service Pack 3. Any thoughts
on
how to fix it?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your
hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
use
(in conjunction with some other utilities). HijackThis will NOT fix
anything on its own, but it will help you to both identify and remove
any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for
review by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Farhan wrote:
when i connect to internet a message start appearing says:
"generic host process for win32 services has encountered a
problem.......will now close."
and refers to to these files:
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\svchost.exe.mdmp
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\appcompat.txt
(i could not find these files maybe disappear after restart.)

If i close, net stops responding but connection icon is still there in
tray
only i have one option left RESTART.
if i don't close this message box, it stops anyway (with taskbar
converting
to old style and back to normal) after a while and do as above.

After googling i found some suggestions:
I ran antimalware in normal/safe mode, it gave clean chit.
installed 894391 update but i think its not the answer.

.

.
 
P

PA Bear [MS MVP]

Reposting:
3. Now post the requested information (logs, etc.) in your own, new thread
in one (only) of the following recommended forums for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

I conducted the scan using the link you gave me and it found a file that
it
treated or placed into containment. It then recommended I run my security
software (Trend) to remove the file, which I did. Trend has placed it in
quarentine and I will delete it. Thus far I am no longer getting the
error
message Thank you for your help I appreciate it.
Here's the current version of that canned reply:

===========
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription
had
expired *when the machine first got infected* and/or your subscription
has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including
unwanted software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
(only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested information (logs, etc.) in your own, new
thread
in one (only) of the following recommended forums for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

• SpywareHammer: Malware Removal
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0

• Spyware Warrior: Help with spyware removal
http://www.spywarewarrior.com/viewforum.php?f=5,

• DSL Reports: Security Cleanup
http://www.dslreports.com/forum/cleanup

• Bluetack: Malware Removal
http://www.bluetack.co.uk/forums/index.php?showforum=172

• AumHa: Malware Removal
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
shop.
====================

Sorry - I didn't see it so I resorted to a hijack. I was hoping someone
would have a solution so I could fix the problem.

Was there something you didn't understand in my reply to your own, new
thread last week [1] that caused you to hijack someone else's thread
from
November 2008?

[1]
http://groups.google.com/group/microsoft.public.windowsxp.general/browse_frm/thread/f2dcf462279f1577


Gerry wrote:
Now I am getting this message and I have Service Pack 3. Any thoughts
on
how to fix it?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your
hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
use
(in conjunction with some other utilities). HijackThis will NOT fix
anything on its own, but it will help you to both identify and remove
any
hijackware/spyware with assistance from an expert. **Post your log
to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for
review by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in
admitting
this isn't your cup of tea - take the machine to a local, reputable
and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Farhan wrote:
when i connect to internet a message start appearing says:
"generic host process for win32 services has encountered a
problem.......will now close."
and refers to to these files:
C:\DOCUME~1\my login
name\LOCALS~1\Temp\WER3815.dir00\svchost.exe.mdmp
C:\DOCUME~1\my login name\LOCALS~1\Temp\WER3815.dir00\appcompat.txt
(i could not find these files maybe disappear after restart.)

If i close, net stops responding but connection icon is still there
in
tray
only i have one option left RESTART.
if i don't close this message box, it stops anyway (with taskbar
converting
to old style and back to normal) after a while and do as above.

After googling i found some suggestions:
I ran antimalware in normal/safe mode, it gave clean chit.
installed 894391 update but i think its not the answer.

.

.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top