Generic Host process for Win32 services error

[Ed]

I keep getting the infamous Generic Host Process for Win32 services has
encountered an error and needs to close. This typically (i.e. always)
happens about ten times when I restart my computer which is running XP home
edition. I found a solution entitled "Error messages when you stat a Windows
XP-based computer and then try to download Windows Updates" which has one
disable/stop "wuauserv" and "cryptsvc" then go into the System32 folder and
rename a number of subfolders, then go into the system 32 folder and rename a
number of .dll and .cpl and .exe files. I did all that, but in a number of
cases there were multiple instances of these files in for example a folder
named "service pack 2", Am I to rename ALL instances of these files? on only
the ones in /system32 folder?
Thanks in advance.

 

[Leonard Grey]

This message is frequently caused by an infamous malware infection which
is trying to mask its activity inside an otherwise legitimate system
process.

 

[Gerry]

Ed

Does the problem occur during or after the boot process has completed?

The Generic Host Process error is not a single error. You will see an
error in Event Viewer naming svchost.exe as the application and another
file named as the module. Although svchost.exe is named as the
application causing the problem, the cause is actually another
application using svchost.exe as an intermediary. You therefore need to
identify the unknown application manipulating svchost.exe to resolve the
problem.

Identification of the problem application is rendered difficult
because at any one time you can have a number of copies of svchost.exe
running as processes in Task Manager. The Automatic Windows Update
service (wuaerv) is just one of these. You can investigate Processes
using Process Explorer (freeware), which is a better tool than Task
Manager.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

It would be helpful if you could post the Command Line of the svchost
process generating the problem. In Process Explorer place
cursor on Process and select Properties, Image.

The module may also offer a clue.

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

You should find a report referring svchost.exe. We need a copy of that
report and any in the minute or so before the report.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Black Knight]

Create a file called Fix.reg and put this text in it

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
"EnableDCOM"="N"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetBT\Parameters]
"TransportBindName"=""