when xp pro comming up a error popup saing:
"Generic host process for win32 services has encountered a problem and needs to close"
I klick enter on ok and  and then it took a while and 
continue working untill its pop again.

any idea???

Tip: Run a free scan for common Windows errors ad

re: generic host problem Monday, June 2, 2003 at 1:22 pm Posted by Bill Underwood (1 messages posted) I am seeing the same problem. Anyone? Anyone? On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Friday, June 13, 2003 at 12:44 am Posted by louis hinds (1 messages posted) I have been seeing this message as well and I am puzzled as well. On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Monday, July 7, 2003 at 4:49 pm Posted by Matthew (1 messages posted) Hi Did you get a fix for this? I am running WinXP SP 1 and im receiving the same error every time i restart windows. Very annoying! On Monday, June 2, 2003 at 1:22 pm, Bill Underwood wrote: >I am seeing the same problem. Anyone? Anyone? > > [Reply or follow-up to this message] re: generic host problem Tuesday, July 29, 2003 at 10:31 am Posted by John Cox (1 messages posted) I've been seeing the same problem ever since my virus protection said it had found a virus but couldn't fix it. win32 host is part of the Windows XP which deals with Networking I think. Have any of the people who have this message pop up got their PC working on a network, because mine stopped working on the network in my house ever since this message started poping up. [Reply or follow-up to this message] re: generic host problem Thursday, July 31, 2003 at 9:53 am Posted by Andras Bocz (1 messages posted) Hi guys: I have been having the same problem, with one awful difference. Once i get this message about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", I click on it and then another window pops up and gives me 1 minute to close all programs, before it restarts windows xp. I cannot stop it, so every time windows restarts. Please help me, if you can, I have asked around some people but nobody had any idea what to do. TIA Andras from Hungary On Tuesday, July 29, 2003 at 10:31 am, John Cox wrote: >I've been seeing the same problem ever since my virus protection said it had found >a virus but couldn't fix it. win32 host is part of the Windows XP which deals with >Networking I think. Have any of the people who have this message pop up got their >PC working on a network, because mine stopped working on the network in my house >ever since this message started poping up. [Reply or follow-up to this message] re: generic host problem Friday, August 1, 2003 at 6:57 am Posted by ken (1 messages posted) I had the same problem. It has something to do with old HP printer driver. MS support has answer/fix for this. http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q821690 On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Monday, August 4, 2003 at 12:27 pm Posted by Shaun (1 messages posted) I had the same problem last night and I didn't know what to do. I had Mcafee firewall installed and also trojan remover and nothing was picked up by either of them, but I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows these messages would pop up and it came out of nowhere. I reformatted my computer and I logged onto windows and the message didn't pop up anymore, but I only left it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem is gone. On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Monday, August 4, 2003 at 10:21 pm Posted by Khaboh (1 messages posted) The different with mine is that instead of reporting a problem with an HP driver dile in the details, it reports a problem with kernel32.dll - this and occasionally my right-click specific functions stop working properly, such as copy/paste, drag/drop, etc. This message with no really clear resolution is the best info I've been able to find so far, please tell me someone is still monitoring this and loking for a solution? On Friday, August 1, 2003 at 6:57 am, ken wrote: >I had the same problem. It has something to do with old HP printer driver. >MS support has answer/fix for this. >http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q821690 > > [Reply or follow-up to this message] re: generic host problem Monday, August 4, 2003 at 11:05 pm Posted by smashtastic (1 messages posted) i am having the same problem now. tempted to reinstall but i'm kinda lazy. I did find out how to thwart that freaking retarded NT AUTHORITY 60 SECOND SHUTDOWN piece of crap. load up a cmd window and type shutdown -a it will abort the shutdown, but things might not be pretty afterwards. For me, i can no longer drag anything and it gets glitchy quick. i usually just leave the little crashy window open or move it on to another monitor until i'm done. I'm writing this message right now with the error window on the screen. Sometimes i use hidewndw.exe to hide the stupid message because everything is OK until you click the "close" button. the shutdown command is pretty cool, and it works on 2k machines you just have to copy the .exe over. it can remotely tell a 2k or xp machine to shutdown / restart. or a whole domain if you want. you have to have the password for an account that has permission. pretty neat. On Monday, August 4, 2003 at 12:27 pm, Shaun wrote: > >I had the same problem last night and I didn't know what to do. I had Mcafee firewall >installed and also trojan remover and nothing was picked up by either of them, but >I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY >SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows >these messages would pop up and it came out of nowhere. I reformatted my computer >and I logged onto windows and the message didn't pop up anymore, but I only left >it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem >is gone. > [Reply or follow-up to this message] re: generic host problem Monday, August 4, 2003 at 11:47 pm Posted by seppuku (2 messages posted) I tried to just ignore the window, but after a while the shutdown countdown window still pops up out of no where. this is REALLY annoying. On Monday, August 4, 2003 at 11:05 pm, smashtastic wrote: >i am having the same problem now. tempted to reinstall but i'm kinda lazy. I did >find out how to thwart that freaking retarded NT AUTHORITY 60 SECOND SHUTDOWN piece >of crap. > >load up a cmd window and type > >shutdown -a > >it will abort the shutdown, but things might not be pretty afterwards. For me, i >can no longer drag anything and it gets glitchy quick. i usually just leave the little >crashy window open or move it on to another monitor until i'm done. I'm writing this >message right now with the error window on the screen. Sometimes i use hidewndw.exe >to hide the stupid message because everything is OK until you click the "close" button. > >the shutdown command is pretty cool, and it works on 2k machines you just have to >copy the .exe over. it can remotely tell a 2k or xp machine to shutdown / restart. >or a whole domain if you want. you have to have the password for an account that >has permission. pretty neat. > > [Reply or follow-up to this message] re: generic host problem Monday, August 4, 2003 at 11:55 pm Posted by JAMES (4 messages posted) This may be a coincidence, but this "Generic Host Process" issue has just started happening to both my mothers computer and a friends computer. Both ending up in the computer restarting. All this happening in the last week leads me to believe its some sort of new virus\worm etc.. thats going around. Hopefully we can find the cure. On Monday, August 4, 2003 at 11:47 pm, seppuku wrote: >I tried to just ignore the window, but after a while the shutdown countdown window >still pops up out of no where. this is REALLY annoying. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 12:09 am Posted by Dylan (1 messages posted) I'm having the same problem with the kernell32.dll file, not the hp driver. Please help!!!! On Monday, August 4, 2003 at 11:55 pm, JAMES wrote: > >This may be a coincidence, but this "Generic Host Process" issue has just started >happening to both my mothers computer and a friends computer. Both ending up in the >computer restarting. All this happening in the last week leads me to believe its >some sort of new virus\worm etc.. thats going around. Hopefully we can find the cure. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 12:17 am Posted by JAMES (4 messages posted) Check this out, this may be the worm: http://www.sophos.com/virusinfo/analyses/w32gruela.html On Monday, August 4, 2003 at 11:55 pm, JAMES wrote: > >This may be a coincidence, but this "Generic Host Process" issue has just started >happening to both my mothers computer and a friends computer. Both ending up in the >computer restarting. All this happening in the last week leads me to believe its >some sort of new virus\worm etc.. thats going around. Hopefully we can find the cure. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 12:21 am Posted by JAMES (4 messages posted) DONT CLICK Send and Close!!!!!!!!!!!!!!! Clicking on "Send Error" displays a bogus technical-looking error message, similar to the above, with "<< Back" and "Close" buttons. "Close" does nothing and "<< Back" takes you back to the previous screen. Clicking on "Send and Close" will cause the worm to run many control panel applets, eject the CD-Rom drive, remove the taskbar and display a rant about Windows which cannot be closed. Click on the link in the message above and read on youll read that the Virus then completely Screws your system rendering it useless. On Tuesday, August 5, 2003 at 12:17 am, JAMES wrote: >Check this out, this may be the worm: > >http://www.sophos.com/virusinfo/analyses/w32gruela.html > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 12:25 am Posted by seppuku (2 messages posted) This doesn't happen to me. It's not a virus. On Tuesday, August 5, 2003 at 12:21 am, JAMES wrote: >DONT CLICK Send and Close!!!!!!!!!!!!!!! > >Clicking on "Send Error" displays a bogus technical-looking error message, similar >to the above, with "<< Back" and "Close" buttons. "Close" does nothing and "<< Back" >takes you back to the previous screen. > >Clicking on "Send and Close" will cause the worm to run many control panel applets, >eject the CD-Rom drive, remove the taskbar and display a rant about Windows which >cannot be closed. > >Click on the link in the message above and read on youll read that the Virus then >completely Screws your system rendering it useless. > > > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 12:48 am Posted by jealoussound (2 messages posted) This is what I did to help accomodate this problem. I simply popped in my Windows Cd that came with the computer and boot my computer from the cd. I then chose the recovery console option. When i got to this screen i typed in 1 on the first question it asks. It then asks for administrator password, just press enter. The C: prompt should then pop up. You need to then type "chkdsk /r" then press enter. The application will then scan the entire hard drive while attempting to fix any problems that it encounters. Be patient because this does take a while. Good Luck! On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 5, 2003 at 1:23 am Posted by x__faded (2 messages posted) Try this - Go to "Control Panel" - "System" - "Advanced" - "Error Reporting" - "Disable". (shrugs) It worked for me. [Reply or follow-up to this message] Fixed. Tuesday, August 5, 2003 at 7:02 am Posted by Viper X (1 messages posted) This happend to me when a program caused a serious GPF error. Anyways it would not stop until I booted to safe mode and back. On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: Fixed. Tuesday, August 5, 2003 at 10:25 am Posted by R Criddle (1 messages posted) Go here. Fix that. http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp On Tuesday, August 5, 2003 at 7:02 am, Viper X wrote: >This happend to me when a program caused a serious GPF error. Anyways it would not >stop until I booted to safe mode and back. > > [Reply or follow-up to this message] re: generic host problem Wednesday, August 6, 2003 at 1:42 am Posted by jealoussound (2 messages posted) If you guys have the windows boot disk that came with the comp or you have a copy of the windows CD handy, put it in restart the comp and boot from the CD. Let windows do its thing then you get to the screen where u choose what u want to do. Type in "R" and then press enter. This is the recovery console option. You are then taken to a screen that asks what u want to repair, type in "1" press enter. Then it asks for the administrative password. This is only utilized in the business field, so all u do is press "enter." Then the lovely C: prompt is gonna pop up. You then want to type "chkdsk /r" in the prompt. Press enter. Then all this stuff starts shooting down the screen, don't worry that means its working. What windows is now doing is scanning file by file every little thing on that hard drive of yours. When its spots an error, it takes what it needs from that CD and fixes it. XP is cool like that. It takes a while, so do it when you have some time to spare. This is a guaranteed way to fix this damn annyoying generic host process error crap. It worked for me, hopefully it helps u guys out. On Monday, August 4, 2003 at 11:47 pm, seppuku wrote: >I tried to just ignore the window, but after a while the shutdown countdown window >still pops up out of no where. this is REALLY annoying. > > [Reply or follow-up to this message] Patch doesn't work Monday, August 11, 2003 at 10:10 am Posted by Jim (1 messages posted) Win XP patch doesn't work for my computer. Tried both 32-bit and 64-bit. I get errors for both, one saying setup cant verify the integrity of update.inf and the other saying im missing a file. Help. On Tuesday, August 5, 2003 at 10:25 am, R Criddle wrote: >Go here. Fix that. >http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp > [Reply or follow-up to this message] um yea Monday, August 11, 2003 at 11:11 am Posted by Dan (4 messages posted) Ok guys, you're all stuck in a rut here. Heres the symptoms im having: I'm minding my own business when this generic host crap comes up. I already have error reporting disabled so all i can do is press close. After 3 restarts and 3 times of pressing close, i just dragged the window to the side and left it there. 5 minutes later it starts to shut down anyway. with 6 seconds left i found the post that said the shutdown -a which saved my ass (thanks man). I'm now continuing on. I can't copy text and paste it in. I cant save files, something about not being able to register. I'm sure this isn't a virus and is just windows having a bitch at my pc. I'm now going to run a virus scan anyway, then try the system fix thing. [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 11:19 am Posted by Danny (1 messages posted) Is this some critical problem that Microsoft haven't discovered? I start getting these errors on my ftp server at work, now today I'm getting them on my home machine. Both run Windows XP Pro. Both Generic host errors but on MY machine it says RPC service terminated and begins shutting down my computer. this is a pain in the ass, it's happened twice whilst I've been burning DVD's and I'm not happy. On Monday, August 11, 2003 at 11:11 am, Dan wrote: >Ok guys, you're all stuck in a rut here. Heres the symptoms im having: > >I'm minding my own business when this generic host crap comes up. I already have >error reporting disabled so all i can do is press close. After 3 restarts and 3 times >of pressing close, i just dragged the window to the side and left it there. 5 minutes >later it starts to shut down anyway. with 6 seconds left i found the post that said >the shutdown -a which saved my ass (thanks man). I'm now continuing on. I can't copy >text and paste it in. I cant save files, something about not being able to register. >I'm sure this isn't a virus and is just windows having a bitch at my pc. I'm now >going to run a virus scan anyway, then try the system fix thing. [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 11:39 am Posted by Adam Mallett (1 messages posted) I too had the same problem, and its been since i put microsoft active sync on my pc. i have taken it off and its been ok since. touch wood! give it a try! (if u got active sync) On Monday, August 4, 2003 at 12:27 pm, Shaun wrote: > >I had the same problem last night and I didn't know what to do. I had Mcafee firewall >installed and also trojan remover and nothing was picked up by either of them, but >I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY >SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows >these messages would pop up and it came out of nowhere. I reformatted my computer >and I logged onto windows and the message didn't pop up anymore, but I only left >it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem >is gone. > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 11:43 am Posted by FlipCyde (2 messages posted) Exact same thing is happening to me. Luckily I found the abort shutdown command. Is the the error sig nature that you guys get? szAppName : svchost.exe szAppVer : 5.1.2600.0 szModName : unknown szModVer : 0.0.0.0 offset : 00000000 I will try the chkdsk /r command, hope it works. I wonder why this is all happening at the same time. On Monday, August 11, 2003 at 11:19 am, Danny wrote: >Is this some critical problem that Microsoft haven't discovered? I start getting >these errors on my ftp server at work, now today I'm getting them on my home machine. >Both run Windows XP Pro. Both Generic host errors but on MY machine it says RPC service >terminated and begins shutting down my computer. this is a pain in the ass, it's >happened twice whilst I've been burning DVD's and I'm not happy. > > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 11:44 am Posted by charlieclaw (1 messages posted) I started getting the same message today while chatting on msn messenger 6.. that was the last thing i installed, once the generic nonsense problem has popped up and i've closed the window i can no longer double click files for them to work, i have to right click and use the 'open with' option.. I had the auto-restart in 60secs message too, but disabled that in the start>control panel>admin tools>services window.. changing the 'failure' options to 'recover prog' instead of 'restart pc'.. That stopped my pc restarting, but it still aint over.. all this generic silliness. Unlikely to be a virus. I'm not running a network or anything, but the rpc thing that is the cause of the auto restart has a lot of network based progs 'depending' on it.. On Monday, August 11, 2003 at 11:19 am, Danny wrote: >Is this some critical problem that Microsoft haven't discovered? I start getting >these errors on my ftp server at work, now today I'm getting them on my home machine. >Both run Windows XP Pro. Both Generic host errors but on MY machine it says RPC service >terminated and begins shutting down my computer. this is a pain in the ass, it's >happened twice whilst I've been burning DVD's and I'm not happy. > > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 11:47 am Posted by chad (2 messages posted) http://www.bootdisk.com/bootlist/090.htm scroll down to #2, and read the solution given for this problem. try this, it may help On Monday, August 11, 2003 at 11:19 am, Danny wrote: >Is this some critical problem that Microsoft haven't discovered? I start getting >these errors on my ftp server at work, now today I'm getting them on my home machine. >Both run Windows XP Pro. Both Generic host errors but on MY machine it says RPC service >terminated and begins shutting down my computer. this is a pain in the ass, it's >happened twice whilst I've been burning DVD's and I'm not happy. > > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 12:05 pm Posted by Dan (4 messages posted) oh my good god. I was just about to say that the system recovery worked. and when this page was loading guess what!!! Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience. i don't have a clue what to do. On Monday, August 11, 2003 at 11:44 am, charlieclaw wrote: > >I started getting the same message today while chatting on msn messenger 6.. that >was the last thing i installed, once the generic nonsense problem has popped up and >i've closed the window i can no longer double click files for them to work, i have >to right click and use the 'open with' option.. I had the auto-restart in 60secs >message too, but disabled that in the start>control panel>admin tools>services window.. >changing the 'failure' options to 'recover prog' instead of 'restart pc'.. That stopped >my pc restarting, but it still aint over.. all this generic silliness. Unlikely to >be a virus. I'm not running a network or anything, but the rpc thing that is the >cause of the auto restart has a lot of network based progs 'depending' on it.. > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 12:41 pm Posted by ezzo (1 messages posted) i thought i was the only person with this problem, its driving me crazay! do all you guys have dsl? anyway, i have no idea what to do, i tried the windows patch for the RPC error and that did nothing. so, im gonna try to keep searching the net for something, tell us if anyone finds out anything. On Monday, August 11, 2003 at 12:05 pm, Dan wrote: >oh my good god. I was just about to say that the system recovery worked. and when >this page was loading guess what!!! >Generic Host Process for Win32 Services has encountered a problem and needs to close. > We are sorry for the inconvenience. >i don't have a clue what to do. > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 12:48 pm Posted by Chris (1 messages posted) sorry folks but i got two words for you...CodeBlue Virus http://www.f-secure.com/v-descs/codeblue.shtml On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 12:57 pm Posted by John (1 messages posted) I hate to be a me too kinda guy....but me too is having this problem. Well its not actually me but my boss. Has 3 seperate PC's on a seperate network I believe COVAD running WinXP. The past week his computers have been acting up. I would leave them on overnight with internet explorer open and when I would come in to work in the morning all his internet explorer's were shut down (i just figured out today that they didnt just turn off but the whole system did a reboot). I would just double click them and reload them for him (he is really bad when it comes to computers) but then they would be fine for the rest of the day and they wouldn't shut down again. Now, today all of a sudden we are getting the same problems BUT when I come back from a system restart I reload internet explorer, its up again for only a minute and the error comes up "generic host blah blah" and the system restarts. I have seen on MS site too people are reporting this problem. Its impossible this is a coincidence and I have not loaded up anything new on this system since we received it from Dell. I know this post is nothing in the form of help....but also for me it was a gradual problem and not a "all of a sudden" problem. On Monday, August 11, 2003 at 12:41 pm, ezzo wrote: >i thought i was the only person with this problem, its driving me crazay! do all >you guys have dsl? anyway, i have no idea what to do, i tried the windows patch for >the RPC error and that did nothing. so, im gonna try to keep searching the net for >something, tell us if anyone finds out anything. > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:04 pm Posted by rmcginnis (1 messages posted) http://lsd-pl.net/special.html I'm thinking the following: Roll back the OS to a few days ago, while not connected to the internet. Then block ports 135, 139, and 445 using the XP firewall, or a firewall in general, or a router. Then connect up. It should be okay at that point. Apparently this exploit is used through those ports listed above (MS-DS, Net BIOS, and epmap), and just blocking the ports after the fact do not fix the issue. This is a nation wide problem as of today. :/ Good luck with those suggestions. On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:09 pm Posted by Ian Herrick (1 messages posted) Not so sure this is Code Blue, since I'm not running IIS on any of the machines affected. It may be something similar, however. I have had this happen on two different machines today, different hardware and everything. Both were using Outlook XP at the time. This "worm" would have to be brand new as both the machines are protected with current virus defs. On Monday, August 11, 2003 at 12:48 pm, Chris wrote: >sorry folks but i got two words for you...CodeBlue Virus > >http://www.f-secure.com/v-descs/codeblue.shtml > > [Reply or follow-up to this message] re: Fixed. Monday, August 11, 2003 at 1:14 pm Posted by Ken Hamner (1 messages posted) I used the 32 Bit Fix and after 2 reboots and several minutes, it seems to have worked. Seeing as how so many of us are sending this problem in the 1st 2 weeks of August, it wouldn't actually surprise me if this were a virus or worm. My problems REALLY started when I tried to update MSN Messenger. One more reason to boycott Microsoft, I guess. If the fix fails, I'll repost. On Tuesday, August 5, 2003 at 10:25 am, R Criddle wrote: >Go here. Fix that. >http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:26 pm Posted by Natalie (1 messages posted) Hi, you said code blue virus, i looked at that but it doesn't say anything about this behavior? Do you have any more info on this? Thanks you. "sorry folks but i got two words for you...CodeBlue Virus" On Monday, August 11, 2003 at 12:48 pm, Chris wrote: >sorry folks but i got two words for you...CodeBlue Virus > >http://www.f-secure.com/v-descs/codeblue.shtml > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:27 pm Posted by Rose Serna (1 messages posted) I am really sorry about this but I am one of the PC stupid crowd if you could e-mail me with the fix to this problem I would be extremly thankful. Also if you could tell me how to stop the popups on XP you could have my first born....(just kidding). Thank you for your time. Rose On Monday, August 4, 2003 at 12:27 pm, Shaun wrote: > >I had the same problem last night and I didn't know what to do. I had Mcafee firewall >installed and also trojan remover and nothing was picked up by either of them, but >I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY >SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows >these messages would pop up and it came out of nowhere. I reformatted my computer >and I logged onto windows and the message didn't pop up anymore, but I only left >it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem >is gone. > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:33 pm Posted by Lavychan (3 messages posted) I'm having the same error message come up, but with one other huge difference; my task manager, regedit and msconfig wont work (I'm on XP Pro). I found a way around this (making a copy of tskmngr.exe and renaming it, then closing what is causing the problem), which I thought was working, but i restarted...same problems. So, I do it again, but this time I check msconfig. I find msblast.exe, mshost.exe, and RNCXEZO. The RNCXEZO is what stops my task manager and whatnot from loading, so I decided to delete it. Well, i went into the registry location where msconfig had it listed as being, but its NOT THERE. I ran Norton Anti-Virus, it found nothing. I can't think of where it could have come from since I dont even open e-mail unless Im 100% sure who it's from. I run Anti-Virus at least once a week, and I'm not on a network with anyone else. This has been happening for about a week now. Any ideas on what could be causing this?? [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 1:44 pm Posted by John (3 messages posted) I got the same problem as all of u, dont know if u all managed to fix your machines, but i managed to fix mine. at first i thought the virus came through the Terminator 3 dvd rip i'd just downloaded and watched, but that's not where it came from. I remembered opening an e mail with msn messenger this morning.Big mistake, since mes messenger opens up the e mail directly, even if it's junk mail. It was a porn message, i deleted it, and logged right out. But i got the "generic host process for win32 services" error a few hours later as soon as i was connected. Think back, and try to figure out if this may have happenned to u. Anyway, the solution for windows xp and other oS is in: http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en i downloaded it and installed it, restarted the machine, and, as i am writing to u, the problem went away. I know because it took me 20 restarts and about 2 hours just to read all of the posts on this forum, and now it's as smooth as ever.keep your fingers crossed! [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 1:45 pm Posted by JAMES (4 messages posted) Ok here it is, now 5 people I know are having this happen to them. Here is what I have discovered so far on how to fix it. 1. First of all, you will not get the Error if your not connected to the internet. So those of you who have DSL/Cable connections need to unplug the network cable from your NIC. Dont worry this is only temporary. 2. Now, the Crappy part, you need to re-install windows XP. Dont worry, you wont lose anything. Just pop in the CD in your Drive and let it auto run, Choose "Upgrade" NOT NEW INSTALL! Let it do its thing and your computer will reset and start the install. 3. Now, the Install will detect that you already have windows and ask if you want a "repair installation" be sure you choose this. This is diffrent than the darn "Recovery Console" so dont get them confused. 4. After your done Re-installing windows XP plug your internet back in and go to the "WINDOWS UPDATE" in the start menu. 5. Install the Windows Service Pack 1 (When you choose this it wont let you do any other updates till it is fully installed) 6. After SP1 is installed and the computer has rebooted go back to "Windows Update" and install all of the latest critical updates and service packs. 7. Your Done. A little side note if you dont have a virus scanning software GET ONE!! I use Norton but you can go to: http://housecall.trendmicro.com/ and do the online scan for free. I really hope this helps you guys. [Reply or follow-up to this message] re: Fixed. Monday, August 11, 2003 at 1:57 pm Posted by sean (1 messages posted) I have been hit with this as well. I understand that the patch will prevent this vulnerability, but do I need to do anything special after applying the patch if my computer was already hit? Thanks in advance. -- Sean On Monday, August 11, 2003 at 1:14 pm, Ken Hamner wrote: >I used the 32 Bit Fix and after 2 reboots and several minutes, it seems to have worked. >Seeing as how so many of us are sending this problem in the 1st 2 weeks of August, >it wouldn't actually surprise me if this were a virus or worm. My problems REALLY >started when I tried to update MSN Messenger. One more reason to boycott Microsoft, >I guess. If the fix fails, I'll repost. > > [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 2:05 pm Posted by Lavychan (3 messages posted) Update: I found out why the RNCXEZO.exe wasnt showing up at all; whatever the bastardly thing was, it was hidden as a protected system file. Anyway...one problem down, im hoping this download works for the generic host problem. On Monday, August 11, 2003 at 1:44 pm, johnny wrote: > >I got the same problem as all of u, dont know if u all managed to fix your machines, >but i managed to fix mine. at first i thought the virus came through the Terminator >3 dvd rip i'd just downloaded and watched, but that's not where it came from. I remembered >opening an e mail with msn messenger this morning.Big mistake, since mes messenger >opens up the e mail directly, even if it's junk mail. It was a porn message, i deleted >it, and logged right out. But i got the "generic host process for win32 services" >error a few hours later as soon as i was connected. Think back, and try to figure >out if this may have happenned to u. Anyway, the solution for windows xp and other >oS is in: >http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en > >i downloaded it and installed it, restarted the machine, and, as i am writing to >u, the problem went away. I know because it took me 20 restarts and about 2 hours >just to read all of the posts on this forum, and now it's as smooth as ever.keep >your fingers crossed! [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 2:16 pm Posted by Ryan (1 messages posted) Okay... same problem here. Trying the fix above. Crossing fingers. For the record, a system restore to a week before the problem started didn't help, but you can stop your computer from restarting by going to... controll panel - administrative tools - services - remote procedure call (RPC) - properties - recovery - set all three options to "take no action" You will still get the generic host error, but it will not shut you down until you click close, so you can just move it out of the way while you apply a fix. [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 2:16 pm Posted by FlipCyde (2 messages posted) I've tried using chkdsk /r and running sfc /scannow and they do not work. I'll try using the windows update site one of you posted, but since i can't copy and paste, im going to have to type it all out :(. Crossing my fingers. On Monday, August 11, 2003 at 11:43 am, FlipCyde wrote: >Exact same thing is happening to me. Luckily I found the abort shutdown command. > Is the the error sig nature that you guys get? >szAppName : svchost.exe szAppVer : 5.1.2600.0 szModName : unknown >szModVer : 0.0.0.0 offset : 00000000 >I will try the chkdsk /r command, hope it works. I wonder why this is all happening >at the same time. > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 2:27 pm Posted by Biffy (2 messages posted) My boss got this today also! Just did a clean install of XP yesterday, installed outlook this morning and by this afternoon, he started getting this. One thing I noticed- windows update is set to notify before installation and updates were available in the system tray. After rebooting, there were no updates available. Scary to think windows update has a problem. System: dell dimension 450 256 mb RAM Clean install of XP, norton AV 2003, Office 2000 Modem: dial-up to mindspring Hope someone finds an answer! [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 2:31 pm Posted by Nirvelli (1 messages posted) I tried the Microsoft patch: http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp So far, it is working. All of my problems starded this morning after I turned on my computer. Yesterday I fixed my computer from the virus "W32.Spybot.Worm". That is I think where my problem came from. On Monday, August 11, 2003 at 2:16 pm, Ryan wrote: >Okay... same problem here. Trying the fix above. Crossing fingers. For the record, >a system restore to a week before the problem started didn't help, but you can stop >your computer from restarting by going to... > >controll panel - administrative tools - services - remote procedure call (RPC) - >properties - recovery - set all three options to "take no action" > >You will still get the generic host error, but it will not shut you down until you >click close, so you can just move it out of the way while you apply a fix. [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 2:35 pm Posted by Jonathan (1 messages posted) I have that same problem, and this is how u get rid of that message that shuts down ur comp. U go to ur control panel, then u go to services, then scrool down to remote procedure call(RPC) and double click it, then go to the recovery tab on the box that just opened, then for the fist, second, and subsequest failure boxes, choose take no action. That will get rid of that box that shuts down ur comp. I havent figured out how to fix that other problem yet, but at least ur comp wont be shutting down on u when ur trying to fix it. On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 2:37 pm Posted by photon (1 messages posted) http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en works for me. i was having same problems, thanks whoever put that up. [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 2:37 pm Posted by Likan (1 messages posted) Well, indeed blocking the ports once you are already a victim of this attack does not help. However, what you can do (what I successfully did) was downloading the appropriate patch (they can all be found at http://lsd-pl.net/special.html , in the left column), rebooting my computer without any network (network cable unplugged) and then applying it. If you do not do a network-less reboot, the patch just won't install, it'll hang somewhere during the back-up process. However, after rebooting, applying the patch, then rebooting again the problem was solved. I do not think (well, not in my case anyway) that you additionnally need to rollback to solve the problem, however I am just one example... -- Lik. On Monday, August 11, 2003 at 1:04 pm, rmcginnis wrote: >http://lsd-pl.net/special.html > >I'm thinking the following: > >Roll back the OS to a few days ago, while not connected to the internet. Then block >ports 135, 139, and 445 using the XP firewall, or a firewall in general, or a router. >Then connect up. It should be okay at that point. > >Apparently this exploit is used through those ports listed above (MS-DS, Net BIOS, >and epmap), and just blocking the ports after the fact do not fix the issue. This >is a nation wide problem as of today. :/ > >Good luck with those suggestions. > > [Reply or follow-up to this message] recap---of all the steps to be done to resolve this iss Monday, August 11, 2003 at 2:44 pm Posted by ramesh (1 messages posted) try getting into safe mode...disable evrything from startup...do a sys restore or Go to "Control Panel" - "System" - "Advanced" - "Error Reporting" - "Disable". or if sys just leaves 60 secs....tell the cust that he has to do the following in 60 secs...start->run->cmd(command prompt) then type shutdown -a then download the patch from the link below http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en ..... THIS IS WORKING or do a chkdsk /r either one will work [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 2:47 pm Posted by lautreamont (1 messages posted) more info here: http://developers.slashdot.org/developers/03/08/11/2048249.shtml?tid=126&tid=172&tid=185&tid=190&tid=201 On Monday, August 11, 2003 at 2:37 pm, photon wrote: >http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en > >works for me. i was having same problems, thanks whoever put that up. [Reply or follow-up to this message] Blast Virus Monday, August 11, 2003 at 2:48 pm Posted by DeeJay (1 messages posted) I can confirm that this problem is being caused by the W32.Blaster Worm. Check out http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html Truth be told - it's a bit of an arse, and incredibly scary for those not in the know. Like symantec suggest - it's pretty much harmless, apart from duplicating itself and using resources (which can do funny things to ur system). Hope this info helps. DeeJay On Monday, August 11, 2003 at 2:37 pm, photon wrote: >http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en > >works for me. i was having same problems, thanks whoever put that up. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 3:06 pm Posted by Martin (2 messages posted) So far this works for me too. I am thanking on my knees the guy who put it up here. Lets hope it stays away now. I didn't open any email with strange attachments or something. I did download sth from Kazaa. Is that the problem. Did all u guys downloaded sth from Kazaa too? On Monday, August 11, 2003 at 2:37 pm, photon wrote: >http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en > >works for me. i was having same problems, thanks whoever put that up. [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 3:06 pm Posted by Mike (1 messages posted) Alright, I have the solutions here... First install the MS03-026 Update. [ http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp ] That rids you of the vulnerability, kind of. Next you'll have to do some cleaning, either manually with regedit and explorer, or using a virii tool that's caught this shit already. Look for a file running in the background called msblast.exe, if it's running or in your system/system32 directories, you're infected. Here's one that has the good info: http://vil.nai.com/vil/content/v_100547.htm I hope that works alright for you all. Feel free to email me if you want, TBO@cfl.rr.com . Take it easy. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 3:17 pm Posted by Martin (2 messages posted) Its gone indeed, the patch from Microsoft was already good but u still need to clean the registry and turn off system restore. Just follow the link from Deejay. Its 2 reply's above. Thanks God its over. Thanks everyone and especially Deejay and the guy who put up the Microsoft link On Monday, August 11, 2003 at 3:06 pm, Martin wrote: >So far this works for me too. I am thanking on my knees the guy who put it up here. > >Lets hope it stays away now. > >I didn't open any email with strange attachments or something. I did download sth >from Kazaa. Is that the problem. Did all u guys downloaded sth from Kazaa too? > > [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 3:18 pm Posted by PhinalPhantasm (1 messages posted) Check this out... check your processes (and system32) for MSBLAST.EXE... if it's there, kill it. I've found 3 people with this problem and they all had it. I have no info on what it is... but it's a major factor I'm sure... also, under MSCONFIG, it's listed as: "Windows Auto Update" and is not found when doing a virus scan. Hope this helps!! On Monday, August 11, 2003 at 2:16 pm, Ryan wrote: >Okay... same problem here. Trying the fix above. Crossing fingers. For the record, >a system restore to a week before the problem started didn't help, but you can stop >your computer from restarting by going to... > >controll panel - administrative tools - services - remote procedure call (RPC) - >properties - recovery - set all three options to "take no action" > >You will still get the generic host error, but it will not shut you down until you >click close, so you can just move it out of the way while you apply a fix. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 3:32 pm Posted by Benny (3 messages posted) i experienced the same problem,here's what to do=go to control panel,administrative tools,applications and services,remote procedure call,select take no action on all 3 options,then go to microsoft website,downloads and if you use xp download the fix for xp RPC after you run that,restart your pc go back to admin tools and set RPC back to restart pc and you should not have the problem again. On Monday, August 11, 2003 at 3:18 pm, PhinalPhantasm wrote: >Check this out... check your processes (and system32) for MSBLAST.EXE... if it's >there, kill it. I've found 3 people with this problem and they all had it. I have >no info on what it is... but it's a major factor I'm sure... also, under MSCONFIG, >it's listed as: "Windows Auto Update" and is not found when doing a virus scan. > Hope this helps!! > [Reply or follow-up to this message] re: Blast Virus Monday, August 11, 2003 at 3:41 pm Posted by Del (1 messages posted) Below is what its all about this should be posted at the TOP!!! On Monday, August 11, 2003 at 2:48 pm, DeeJay wrote: >I can confirm that this problem is being caused by the W32.Blaster Worm. Check out >http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html >Truth be told - it's a bit of an arse, and incredibly scary for those not in the >know. Like symantec suggest - it's pretty much harmless, apart from duplicating itself >and using resources (which can do funny things to ur system). >Hope this info helps. > >DeeJay > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 4:04 pm Posted by Brett (4 messages posted) YES! MSBLAST was running. Getting rid of it(its a pesky bugger) cured my svchost probs as described above. Thanks Mike. On Monday, August 11, 2003 at 3:06 pm, Mike wrote: >Alright, I have the solutions here... >First install the MS03-026 Update. [ http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp >] > >That rids you of the vulnerability, kind of. > >Next you'll have to do some cleaning, either manually with regedit and explorer, >or using a virii tool that's caught this shit already. Look for a file running in >the background called msblast.exe, if it's running or in your system/system32 directories, >you're infected. Here's one that has the good info: http://vil.nai.com/vil/content/v_100547.htm > > >I hope that works alright for you all. Feel free to email me if you want, TBO@cfl.rr.com >. >Take it easy. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 4:15 pm Posted by cdorris (1 messages posted) The problem is one that i also have encountered. Everyone that has had the problem or that is still living with this problem needs to check there system for faulty hardware. Bad cdrom was my problem i had a cdrom burn out this is when my problem started i just left the bad rom in my computer till i got one to replace it then i started getting this error also weak power supply causes strange things to go wrong remove any bad hardware then try running the chkdsk /r this will not work if the faulty hardware is still in the pc maybe something like the floppy something you dont use much or at all the power supply is a very tricky faulty device because it will appear to continue working just at a weak power level neglecting your computer of the full power it needs to run. this is something i tried and it worked for me i read in one of the upper posts someone deleted the partition and reinstalled the os that right there proves there is a hardware conflict somewhere just a thought trying to help yall with the problem email me for any further questions cdorris. On Monday, August 11, 2003 at 3:32 pm, benny wrote: >i experienced the same problem,here's what to do=go to control panel,administrative >tools,applications and services,remote procedure call,select take no action on all >3 options,then go to microsoft website,downloads and if you use xp download the fix >for xp RPC after you run that,restart your pc go back to admin tools and set RPC >back to restart pc and you should not have the problem again. > > > [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 4:16 pm Posted by Bhellsun (1 messages posted) when the error message comes up, i.e , when the counter starts , click on start ->, click on run -> type in command. in the command promt type in "shutdown -a". once it is done the message will disappear. Once the message disappears go to the link "http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en". or u need to download the file "WindowsXP-KB823980-x86-ENU.exe" and update it. This is the best option and it has worked for ALL. On Monday, August 11, 2003 at 3:32 pm, benny wrote: >i experienced the same problem,here's what to do=go to control panel,administrative >tools,applications and services,remote procedure call,select take no action on all >3 options,then go to microsoft website,downloads and if you use xp download the fix >for xp RPC after you run that,restart your pc go back to admin tools and set RPC >back to restart pc and you should not have the problem again. > > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 4:27 pm Posted by Brett (4 messages posted) This msblaster virus upset my windows update. Curing it, fixed this scvhost prob and other functions like windows update are working again also. On Monday, August 11, 2003 at 2:27 pm, Biffy wrote: >My boss got this today also! > >Just did a clean install of XP yesterday, installed outlook this morning and by this >afternoon, he started getting this. One thing I noticed- windows update is set to >notify before installation and updates were available in the system tray. After rebooting, >there were no updates available. Scary to think windows update has a problem. >System: >dell dimension 450 >256 mb RAM >Clean install of XP, norton AV 2003, Office 2000 >Modem: dial-up to mindspring > >Hope someone finds an answer! [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 4:29 pm Posted by Peter (1 messages posted) My problem is: Messege de RPC closing windows in 60 seconds, copy/paste dont works. I think that the problem is a virus. I fix with http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en I repeat: http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en AND REPEAT: http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en I can copy/paste AGAIN....xDDDDD Para los españoles pinchar en el link de arriba te deja el pc de pm. Yo habia formateado incluso y seguia teniendo problemassss. Pero con el parche va de miedo. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 4:32 pm Posted by Lavychan (3 messages posted) Yeah, HUGE THANKS to whoever posted that patch link! More than 1.5 hours of comp on and havent seen an error yet. I still need to go clean my registry up a bit though. On Monday, August 11, 2003 at 3:06 pm, Martin wrote: >So far this works for me too. I am thanking on my knees the guy who put it up here. > >Lets hope it stays away now. > >I didn't open any email with strange attachments or something. I did download sth >from Kazaa. Is that the problem. Did all u guys downloaded sth from Kazaa too? > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 4:38 pm Posted by Dmitriy Myedvyedyev (4 messages posted) I guarantee that most, if not all, of you have this new virus: http://vil.nai.com/vil/content/v_100547.htm msblast.exe IS the file that's responsible for this, so no wonder someone said that stopping it in ur process list(ctrl+alt+del, then processes, msblast) solves the problem. To get rid of it, how I did, go here to download a virus scanner that scans for this and 25 other viruses/worms: http://vil.nai.com/vil/stinger/ Download stinger.exe and scan C:. I used all checkbox-options under preferences to scan every single file, subdirectory, and archive. I also downloaded the previously mentioned MS Vulnerability update, just in case. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 4:54 pm Posted by Giovanni (4 messages posted) Yes! I have the same problem (generic host process...etc.) and I have found msblast.exe in my system. But what damn..it is? I have searched google, but nothing. I have scanned with AVG and Symantec...nothing. Do you thing that I should remove it? On Monday, August 11, 2003 at 3:18 pm, PhinalPhantasm wrote: >Check this out... check your processes (and system32) for MSBLAST.EXE... if it's >there, kill it. I've found 3 people with this problem and they all had it. I have >no info on what it is... but it's a major factor I'm sure... also, under MSCONFIG, >it's listed as: "Windows Auto Update" and is not found when doing a virus scan. > Hope this helps!! > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 5:59 pm Posted by badblackcat (1 messages posted) I agree, in most cases this is indeed the virus msblast.exe. I found it on my computer using the online virus checker at: http://housecall.trendmicro.com/ (thank you) It also found the trojan "Netblue A" and "Joke Salary A" I need to get serious about using a virus checker. Thanks to all for your generous help. I will now get the patch. Thank you, Thank you On Monday, August 11, 2003 at 4:38 pm, Dmitriy Myedvyedyev wrote: >I guarantee that most, if not all, of you have this new virus: > >http://vil.nai.com/vil/content/v_100547.htm > >msblast.exe IS the file that's responsible for this, so no wonder someone said that >stopping it in ur process list(ctrl+alt+del, then processes, msblast) solves the >problem. > >To get rid of it, how I did, go here to download a virus scanner that scans for this >and 25 other viruses/worms: > >http://vil.nai.com/vil/stinger/ > >Download stinger.exe and scan C:. I used all checkbox-options under preferences to >scan every single file, subdirectory, and archive. > >I also downloaded the previously mentioned MS Vulnerability update, just in case. [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 6:04 pm Posted by Eduardo Hinojosa (1 messages posted) It worked!! I installed Kazza and my problems began after that. I had the msblast.exe and this post solved my problem. Thanks! Eduardo On Monday, August 11, 2003 at 3:06 pm, Mike wrote: >Alright, I have the solutions here... >First install the MS03-026 Update. [ http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp >] > >That rids you of the vulnerability, kind of. > >Next you'll have to do some cleaning, either manually with regedit and explorer, >or using a virii tool that's caught this shit already. Look for a file running in >the background called msblast.exe, if it's running or in your system/system32 directories, >you're infected. Here's one that has the good info: http://vil.nai.com/vil/content/v_100547.htm > > >I hope that works alright for you all. Feel free to email me if you want, TBO@cfl.rr.com >. >Take it easy. [Reply or follow-up to this message] re: generic host problem fix!! Monday, August 11, 2003 at 6:19 pm Posted by Daniel (1 messages posted) Besides downloading the fixing patch from microsoft, you should go to Norton website, there is a new virus called w32.blaster.worm, they have instructions for cleaning the msblast.exe. Remember, to fix it all, you need the microsoft fixing patch suggested by Johny and then by Benny earlier today and clean from virus your machine. Is it coincidence or not, well I do not know. On Monday, August 11, 2003 at 3:32 pm, benny wrote: >i experienced the same problem,here's what to do=go to control panel,administrative >tools,applications and services,remote procedure call,select take no action on all >3 options,then go to microsoft website,downloads and if you use xp download the fix >for xp RPC after you run that,restart your pc go back to admin tools and set RPC >back to restart pc and you should not have the problem again. > > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 7:08 pm Posted by hovva (1 messages posted) Downloaded the MS patch and used Stinger. I still get the box which reads: Can't find TFTP1892 file. What should I do about that? Thanks! On Monday, August 11, 2003 at 5:59 pm, badblackcat wrote: >I agree, in most cases this is indeed the virus msblast.exe. >I found it on my computer using the online virus checker at: >http://housecall.trendmicro.com/ (thank you) It also found >the trojan "Netblue A" and "Joke Salary A" >I need to get serious about using a virus checker. >Thanks to all for your generous help. >I will now get the patch. >Thank you, Thank you > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 7:18 pm Posted by Psyclone (1 messages posted) I have had no luck as well. So far, i've: System restored to last week (before any of this was happening). No luck. Ran the system in Safemode w/ Networking to use the net. Still got popups. Did the bootup recovery CHKDSK /r thing and it didn't work. Disabled System Restore. Dl'd the MS patch and installed it then used Stinger. Had no popups for an hr. Installed XP again using the upgrade function. Popups still here. Ran http://housecall.trendmicro.com and it found nothing. Also tried 3 other scanners and no luck. I searched my comp for msblast using "Find" but got nothing. Finally, i ran Regedit and searched for msblast and found a few files including msblast and msblast.exe. What should i do? This virus/worm doesn't show up on stinger or any other of my scanners (i have mcafee as a basic one plus 3 more online ones). Anyone got any ideas? Can i manually delete these files? [Reply or follow-up to this message] THAT IS A VIRUS!!!It is a new one, just discovered today Monday, August 11, 2003 at 7:56 pm Posted by Mobile PC Doctor (52 messages posted) I'm going to guess that the messege you get on the box with the countdown says:"Windows must now restart because Remote Procedure Call Service terminated unexpectadly"? You need to check your PC for a file called msblast.exe , or anything with msblast in the name.It sends a messege out to whoever each time you boot up that your pc is on and it can crash your PC. You need to go to http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html and read it very carefully, because the worm may attempt to keep you from getting the patch needed from windowsliveupdate.com We were having the exact same problem as you, and now it has stopped after doing the fix, and yes, it goes right past your firewall. On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 8:33 pm Posted by pascal (2 messages posted) i had the same problem and resolve it by scanning my computer for free at ... http://housecall.trendmicro.com/housecall/start_corp.asp .....good luck On Monday, August 11, 2003 at 7:18 pm, Psyclone wrote: > >I have had no luck as well. So far, i've: > >System restored to last week (before any of this was happening). No luck. > >Ran the system in Safemode w/ Networking to use the net. Still got popups. > >Did the bootup recovery CHKDSK /r thing and it didn't work. > >Disabled System Restore. Dl'd the MS patch and installed it then used Stinger. Had >no popups for an hr. > >Installed XP again using the upgrade function. Popups still here. > >Ran http://housecall.trendmicro.com and it found nothing. Also tried 3 other scanners >and no luck. > >I searched my comp for msblast using "Find" but got nothing. > > >Finally, i ran Regedit and searched for msblast and found a few files including msblast >and msblast.exe. What should i do? This virus/worm doesn't show up on stinger or >any other of my scanners (i have mcafee as a basic one plus 3 more online ones). >Anyone got any ideas? Can i manually delete these files? [Reply or follow-up to this message] More Help with problem Monday, August 11, 2003 at 8:38 pm Posted by Matt Osborn (1 messages posted) I will list 3 more websites with info about the virus if anyone else is interested on what it does. 1.) http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html 2.) http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp 3.) http://securityresponse.symantec.com/avcenter/security/Content/8205.html Hope that helps any of you. So far, what I know is to make sure it is completely gone from your system, you need to end (process) msblast.exe from the task manager menu. Then you need to delete it from C:\Windows\System32\ folder. Then go into RegEdit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run- And delte the key "windows auto update." That should get it totally off your computer. To keep it from coming back on to your computer go to http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp and download the patch at the bottom of the page. Hope that Helps! Matt Osborn University of Louisville [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 8:52 pm Posted by darla (1 messages posted) i found ms blast on my computer and it doesnt let me delete it how do i go about getting rid of it On Monday, August 11, 2003 at 7:18 pm, Psyclone wrote: > >I have had no luck as well. So far, i've: > >System restored to last week (before any of this was happening). No luck. > >Ran the system in Safemode w/ Networking to use the net. Still got popups. > >Did the bootup recovery CHKDSK /r thing and it didn't work. > >Disabled System Restore. Dl'd the MS patch and installed it then used Stinger. Had >no popups for an hr. > >Installed XP again using the upgrade function. Popups still here. > >Ran http://housecall.trendmicro.com and it found nothing. Also tried 3 other scanners >and no luck. > >I searched my comp for msblast using "Find" but got nothing. > > >Finally, i ran Regedit and searched for msblast and found a few files including msblast >and msblast.exe. What should i do? This virus/worm doesn't show up on stinger or >any other of my scanners (i have mcafee as a basic one plus 3 more online ones). >Anyone got any ideas? Can i manually delete these files? [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 8:58 pm Posted by Jacob C. Robinson (1 messages posted) Has anyone alerted Microsoft about it? [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 9:50 pm Posted by mit (1 messages posted) Whoever brought up the idea of running chkdsk from the XP boot disk, thank you. I ran this and was able to eliminate the Win32 error and the NTAuthentication 60 sec shutdown. I suspected this may only be a short term fix, and as fate would have it minutes later Norton Anti-Virus gave me this alert: Scan type: Realtime Protection Scan Event: Virus Found! Virus name: W32.Blaster.Worm File: C:\WINDOWS\system32\msblast.exe Location: C:\WINDOWS\system32 Action taken: Clean failed : Quarantine failed : Access denied **Note NAV was unable to Clean or Quarantine the virus file (msblast.exe). I could not erase it either (pretty scary, I could not find a fix online for it). So I did the only thing I could think of, I ran a system restore. I was fortunate to know when my PC got infected so running a restore was simple. You can probably just check the properties of the virus file to see when it enterred your machine. Since I ran the restore everything seems fine and there is no trace of the virus file. Hopefully it will not slip through again. I hope this is helpful to some one. On Monday, August 11, 2003 at 8:52 pm, darla wrote: >i found ms blast on my computer and it doesnt let me delete it how do i go about >getting rid of it > > [Reply or follow-up to this message] re: um yea Monday, August 11, 2003 at 9:52 pm Posted by pip (1 messages posted) if you recently downloaded dvd(/or dvdrip) software from kazaa or something that is where my problems came from.. check it out.. i installed the same questionable software on a test machine and caused the same problems. dvd shrink, dvd decrypter and dup-dvd were all infected and caused this crappy error on my compy On Monday, August 11, 2003 at 11:19 am, Danny wrote: >Is this some critical problem that Microsoft haven't discovered? I start getting >these errors on my ftp server at work, now today I'm getting them on my home machine. >Both run Windows XP Pro. Both Generic host errors but on MY machine it says RPC service >terminated and begins shutting down my computer. this is a pain in the ass, it's >happened twice whilst I've been burning DVD's and I'm not happy. > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 10:33 pm Posted by Miter (1 messages posted) Probably u can't delete it, because it is running and therefore locked. To stop it: Run the Task manager (Ctrl+Alt+Del and task manger), find the 'msblast.exe' on the Processes tab and stop it (End Process). Then go ahead and delete the file. Just for checkup then u could run Stinger (after all it cleans 25 viruses more :-) ) from http://vil.nai.com/vil/stinger/ On Monday, August 11, 2003 at 8:52 pm, darla wrote: >i found ms blast on my computer and it doesnt let me delete it how do i go about >getting rid of it > > [Reply or follow-up to this message] generic host problem Monday, August 11, 2003 at 10:44 pm Posted by AlexK (1 messages posted) Hi, Go to www.antivirus.com and do the online virus scan. It will remove this virus. My computer works now! Phew! [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 11:12 pm Posted by Tom (1 messages posted) I can help you solve half of the problem - restarting. When the error occur, the application svchost.exe stops processing. (There are four svchost.exe, two used by system, one by network, another by local). The one that shuts down is used by system. It's called "Remote Procedure Call." Your system restarts because your system sets it to restart itself when this application fails. You can change this setting by going to Control Panel\Administrative Tools\Services, find the "Remote Procedure Call" (not the locator), right click -> properties -> recovery -> change the settings to "Restart the service" instead of restart your computer. I am sorry that I cannot give you to solve the root of the problem which I have too. Microsoft explains that its the old HP printer driver that's making the trouble. Anyway, good luck. Tom On Friday, August 1, 2003 at 6:57 am, ken wrote: >I had the same problem. It has something to do with old HP printer driver. >MS support has answer/fix for this. >http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q821690 > > [Reply or follow-up to this message] re: generic host problem Monday, August 11, 2003 at 11:41 pm Posted by Brock Greman (1 messages posted) I wish I'd checked this forum before I tried to 'fix' my problem. Rest assured that I finally stopped this behavior...but not after totally screwing up my system. I initially found the msblast file and deleted it quickly, and deleted the registry entry. This, however, wasn't good enough, so I tried various system restores (which of course really screw up your system badly). All of my user profiles are gone. All of my hardware drivers are gone. A lot of programs don't work. My Computer simply yields the turning flashlight. Norton stops working, claiming something about an integrator. I finally downloaded that patch, after reading this, and stopped the behavior, but so much is screwed up now that I'm considering reformatting. This might be a problem though, as I don't have a XP boot cd, as we bought this computer from another family. Good news is that this is my family computer, and I'll be leaving for college shortly with a brand new laptop. *Mentally strokes his new laptop...* If anyone can offer any insight (or consolation) as to how to fix my totally broken system, drop me a line here. On Monday, August 11, 2003 at 10:44 pm, AlexK wrote: >Hi, >Go to www.antivirus.com and do the online virus scan. It will remove this virus. >My computer works now! Phew! > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 12:48 am Posted by Eric (1 messages posted) If you guys havn't noticed... There was only like 3-4 people who had this problem until August 11th, when all of a sudden 200 people post about it. Going to Control panel, than Administrative Tools, Than Services, Than going down To RPC and right clicking, go to properties, than to the recovery tab, than take them all off restart system. This takes care of the restarting computer in 60 secs problem for me and I also havn't had any other problems, so GOOD LUCK. On Monday, August 11, 2003 at 11:41 pm, Brock Greman wrote: > >I wish I'd checked this forum before I tried to 'fix' my problem. Rest assured that >I finally stopped this behavior...but not after totally screwing up my system. > >I initially found the msblast file and deleted it quickly, and deleted the registry >entry. This, however, wasn't good enough, so I tried various system restores (which >of course really screw up your system badly). >All of my user profiles are gone. All of my hardware drivers are gone. A lot of >programs don't work. My Computer simply yields the turning flashlight. Norton stops >working, claiming something about an integrator. I finally downloaded that patch, >after reading this, and stopped the behavior, but so much is screwed up now that >I'm considering reformatting. > >This might be a problem though, as I don't have a XP boot cd, as we bought this computer >from another family. Good news is that this is my family computer, and I'll be leaving >for college shortly with a brand new laptop. *Mentally strokes his new laptop...* > >If anyone can offer any insight (or consolation) as to how to fix my totally broken >system, drop me a line here. > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 1:29 am Posted by ALC Mr D.L (2 messages posted) I Have installed a copie of winxp sp1 and I have got the same problem since 08/11/2003. Perhaps a protection in XP or a new virus.... On Friday, June 13, 2003 at 12:44 am, louis hinds wrote: >I have been seeing this message as well and I am puzzled as well. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 1:33 am Posted by Rick-G (2 messages posted) THANK YOU!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! god damn MSBLAST.EXE GRRRRRRRRRRRRRRRRRRRRR.. On Monday, August 11, 2003 at 3:06 pm, Mike wrote: >Alright, I have the solutions here... >First install the MS03-026 Update. [ http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp >] > >That rids you of the vulnerability, kind of. > >Next you'll have to do some cleaning, either manually with regedit and explorer, >or using a virii tool that's caught this shit already. Look for a file running in >the background called msblast.exe, if it's running or in your system/system32 directories, >you're infected. Here's one that has the good info: http://vil.nai.com/vil/content/v_100547.htm > > >I hope that works alright for you all. Feel free to email me if you want, TBO@cfl.rr.com >. >Take it easy. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 3:02 am Posted by Giovanni (4 messages posted) I have deleted manualy msblast in winsystem and in regedit (running in safe mode), but it is still here. Running Stinger it tell me that had removed infected files, but msblast is stille here. Finally I have updated my AVG antivirus, run it and it had found LovanWorm, Msblast and two dialers programs an delete them. I hope now it is finish... thanks On Monday, August 11, 2003 at 10:44 pm, AlexK wrote: >Hi, >Go to www.antivirus.com and do the online virus scan. It will remove this virus. >My computer works now! Phew! > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 3:34 am Posted by pascal (2 messages posted) !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! if you have the virus msblast (w32.blaster.worm)runnning you can have the tool for delete it at symantec... http://securityresponse.symantec.com/avcenter/FixBlast.exe !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! On Tuesday, August 12, 2003 at 3:02 am, Giovanni wrote: >I have deleted manualy msblast in winsystem and in regedit (running in safe mode), >but it is still here. Running Stinger it tell me that had removed infected files, >but msblast is stille here. Finally I have updated my AVG antivirus, run it and it >had found LovanWorm, Msblast and two dialers programs an delete them. I hope now >it is finish... > >thanks > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 4:21 am Posted by ALC Mr D.L (2 messages posted) Well, In fact it's a virus named Worm_MSBLAST Kill MSBLAST From memory CTRL+ALT+SUP go to process tab and kill it After delete registry entry dans ..\currentversion\run (windows update) So after this you can delete MSBLAST.EXE located in your WINDOWS\SYSTEM32 directory But you have to install the security update patch from microsoft to disable the RPC exploit so the virus could'nt reinfect your computer. Hope, it will help some of you On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem fix!! Tuesday, August 12, 2003 at 4:34 am Posted by Natch (1 messages posted) Another solution to the problem of Generic Host Process for WIN32 trying to force your computer to shutdown can be found at http://www.natch.net [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 4:50 am Posted by BadboyInglis (1 messages posted) yeah man i had this problem aswell, although the first program i noticed problems with was messenger 6.0 This exploit has spread like wildfire just over the last couple of days. I think Microsoft releasing their patch actually gave someone the idea of going in and exploiting the danger. There are already so many fixes that i won't bother putting anything like that, but rest assured that the problem is not being ignored and in fact a memo has been sent to a large number of people advising them of the problem, and how to deal with it. It's still a ball ache when you've got it though!!! :) On Tuesday, August 12, 2003 at 3:34 am, pascal wrote: >!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > if you have the virus msblast >(w32.blaster.worm)runnning you can have the tool for delete it at symantec... http://securityresponse.symantec.com/avcenter/FixBlast.exe > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > > [Reply or follow-up to this message] re: generic host problem fix!! Tuesday, August 12, 2003 at 4:59 am Posted by Alyson (1 messages posted) Thanks, Ryan for your advice. I thought I was going to cry if the computer shut down on me one more time. On Monday, August 11, 2003 at 2:16 pm, Ryan wrote: >Okay... same problem here. Trying the fix above. Crossing fingers. For the record, >a system restore to a week before the problem started didn't help, but you can stop >your computer from restarting by going to... > >controll panel - administrative tools - services - remote procedure call (RPC) - >properties - recovery - set all three options to "take no action" > >You will still get the generic host error, but it will not shut you down until you >click close, so you can just move it out of the way while you apply a fix. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 5:33 am Posted by Mike (1 messages posted) Same problem here. I noticed that it only happens when I am physically connected to the internet, though. If I disconnect my ethernet cable, the error does not occur. It started happening shortly after installing Windows XP update SP1. On Monday, August 4, 2003 at 12:27 pm, Shaun wrote: > >I had the same problem last night and I didn't know what to do. I had Mcafee firewall >installed and also trojan remover and nothing was picked up by either of them, but >I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY >SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows >these messages would pop up and it came out of nowhere. I reformatted my computer >and I logged onto windows and the message didn't pop up anymore, but I only left >it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem >is gone. > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 5:39 am Posted by Jamie Clemens (1 messages posted) I'm having the same problem at work: "Generic Host Process for Win32 Services has encountered a problem and needs to close"..."Please tell Microsoft about this problem." If you click Send Error Report or Don't Send, then the window pops up with "This system is shutting down. Please save all work in progress and logoff."... I have seen the tech document from Microsoft regarding the HP print drivers, but our drivers are the latest and up-to-date as you can get. In addition, this is also happening at two different sites (two construction sites 45 minutes apart) and started on the same day. I haven't seen any viruses picked up on either system as of yet. Anyone have any new ideas?! On Monday, August 4, 2003 at 11:55 pm, JAMES wrote: > >This may be a coincidence, but this "Generic Host Process" issue has just started >happening to both my mothers computer and a friends computer. Both ending up in the >computer restarting. All this happening in the last week leads me to believe its >some sort of new virus\worm etc.. thats going around. Hopefully we can find the cure. > > [Reply or follow-up to this message] re: THAT IS A VIRUS!!!It is a new one, just discovered today Tuesday, August 12, 2003 at 5:55 am Posted by Tosha (1 messages posted) Yes it's a virus I saw msblast.exe running in my system, don't try another method, it won't work. Go to the symmantec page and download the application. On Monday, August 11, 2003 at 7:56 pm, Mobile PC Doctor wrote: >I'm going to guess that the messege you get on the box with the countdown says:"Windows >must now restart because Remote Procedure Call Service terminated unexpectadly"? >You need to check your PC for a file called msblast.exe , or anything with msblast >in the name.It sends a messege out to whoever each time you boot up that your pc >is on and it can crash your PC. You need to go to http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html > and read it very carefully, because the worm may attempt to keep you from getting >the patch needed from windowsliveupdate.com We were having the exact same problem >as you, and now it has stopped after doing the fix, and yes, it goes right past your >firewall. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 7:52 am Posted by Stephanie (4 messages posted) First I have to say that all of you have been a HUGE help in giving directions on how to remove this "annoyance". My friend got a virus on her computer last week (w32spybot/no fixing hers, she screwed it up bad), I found one on my computer last night and this morning when I got to work a co-worker found it on hers(w32blaster). What did we all have in common, a music download site (2 of them being KaZaa). You can bet I removed it immediately. I was able to get my computer to stop doing a System Shutdown following all of your instructions. First off, it shut down my Automatic Live Updates on Norton Anti-Virus. Because I did a scan and found nothing. I then got the new updates and it found 29 infected files from the W32.Spybot.worm virus. I was able to remove 28 of them with no problem. When it found an infected file msconfig35.exe the quaratine and delete options both failed. I found that the file should be located at c:\\WINNT\system32\msconfig35.exe........went there and found nothing. I did a complte search on my computer and it came back with nothing. I tried the ctrl>alt>delete and the box comes up real quick and disappears. I have used the patch from microsoft for the RPC thingy and the patch from symantec for the w32spybot. I have hit a roadblock and don't know what to do next. If any of you have any other suggestions or resultions........I'm listening! Thanks in advance for all of your help! On Monday, August 11, 2003 at 10:33 pm, Miter wrote: > >Probably u can't delete it, because it is running and therefore locked. >To stop it: >Run the Task manager (Ctrl+Alt+Del and task manger), >find the 'msblast.exe' on the Processes tab and >stop it (End Process). >Then go ahead and delete the file. >Just for checkup then u could run Stinger (after all it cleans 25 viruses more :-) >) from http://vil.nai.com/vil/stinger/ > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 8:16 am Posted by Rob (1 messages posted) A rapidly duplicating worm known alternatively as LoveSan, Blaster, and MSBlaster is spreading to Windows systems across the Internet, exploiting a vulnerability Microsoft fixed over a month ago. This is also the same remote procedure call (RPC) ... See: http://www.secadministrator.com/Articles/Index.cfm?ArticleID=39840 http://zdnet.com.com/2100-1105_2-5062524.html http://money.cnn.com/services/tickerheadlines/for5/200308112231DOWJONESDJONLINE001226_FORTUNE5.htm [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 8:18 am Posted by DAREEL (7 messages posted) go to www.mess.be this explains all about how to get rid off msblast manually 5throught the registery On Monday, August 11, 2003 at 8:52 pm, darla wrote: >i found ms blast on my computer and it doesnt let me delete it how do i go about >getting rid of it > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 10:01 am Posted by rp (1 messages posted) thanks a lot guys the symantec cure worked for me -------at least i havent had any error pop ups in the last couple of hours(keeping my fingers crossed)---but be sure to download the patch which the symantec fix prompts you to do after you run it---it wont work otherwise---or at least it did not for me [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 10:10 am Posted by Mark (1 messages posted) God damn I just did a full re-install before reading this thread. My pc slowly became more screwed as I tried to fix the problem. I realised that msbalst.exe was running when it had never been before, but deleting it didnt seem to do anything and my system just degenerated until it wouldn't even bring me to the logon screen. Well thanks anyway, because I just did a total re-install (needed it anyway) and STILL had the problem. Thanks dudes, Mark On Tuesday, August 12, 2003 at 8:16 am, Rob wrote: >A rapidly duplicating worm known alternatively as LoveSan, Blaster, and MSBlaster >is spreading to Windows systems across the Internet, exploiting a vulnerability Microsoft >fixed over a month ago. This is also the same remote procedure call (RPC) ... >See: http://www.secadministrator.com/Articles/Index.cfm?ArticleID=39840 > >http://zdnet.com.com/2100-1105_2-5062524.html > >http://money.cnn.com/services/tickerheadlines/for5/200308112231DOWJONESDJONLINE001226_FORTUNE5.htm [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 10:14 am Posted by Biffy (2 messages posted) After reading this thread and a few others last night, I told my kids to stop any kazaa/limewire DLs because something bad is happening on the internet. This morning my boss realized he was an mblast statistic. Here's how to fixed this little sucker: 1.) on a non-infected PC, grab the update and burn to disk. :http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp 2.) On the infected PC, Use taskmanager to end mblast.exe. 3.) use regedit to delete any references to mblast in the registry. 4.) turn off the computer, remove net/modem jack from back of pc and turn pc back on. 5.) delete the file \windows\system32\mblast.exe and any suspect files in your kazaa/limewire shared folders. 6.) Run the windows patch from the disk from step 1 to keep this from happening again. Good luck and lots of thanks to the peeps who contributed here. On Tuesday, August 12, 2003 at 8:16 am, Rob wrote: >A rapidly duplicating worm known alternatively as LoveSan, Blaster, and MSBlaster >is spreading to Windows systems across the Internet, exploiting a vulnerability Microsoft >fixed over a month ago. This is also the same remote procedure call (RPC) ... >See: http://www.secadministrator.com/Articles/Index.cfm?ArticleID=39840 > >http://zdnet.com.com/2100-1105_2-5062524.html > >http://money.cnn.com/services/tickerheadlines/for5/200308112231DOWJONESDJONLINE001226_FORTUNE5.htm [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 10:21 am Posted by mark (2 messages posted) I would highly suggest going to www.mess.be and following the directions for manual removal. Its easy and its the only way to guarantee it works. Symantec's remover said it worked, but then it really didn't. Something in the virus keeps you from dling the fix for it...manually removing the virus is the only way i could get it to work. Thanks to all of you for your help. On Tuesday, August 12, 2003 at 10:10 am, Mark wrote: >God damn I just did a full re-install before reading this thread. My pc slowly became >more screwed as I tried to fix the problem. I realised that msbalst.exe was running >when it had never been before, but deleting it didnt seem to do anything and my system >just degenerated until it wouldn't even bring me to the logon screen. > >Well thanks anyway, because I just did a total re-install (needed it anyway) and >STILL had the problem. > >Thanks dudes, Mark > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 10:58 am Posted by Gre (1 messages posted) !!! SOLUTION !!! IT IS A VIRUS !!! I'VE HAD ALL SYMPTOMS YOU GUYS WROTE ABOUT, BUT THE REAL SOLUTION IS: 1. GO TO SYMANTEC http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html AND DOWNLOAD THE TOOL, IT WILL SCAN YOUR SYSTEM CLEAN OF THE BUGGER 2. IT WILL SEND YOU TO MICROSOFT PAGE WHERE THEY ALREADY PLACED THE PATCH TO CLOSE THE WHOLE THAT VIRUS CAME THROUGH... IF YOU'RE NOT ABLE TO DO ANYTHING, PRESS CTR+ALT+DEL ==> PROCESSES AND "END PROCESS" NAMED "MSBLAST" - THAT'S THE VIRUS! you can also search your hard drive to locate it (msblast.exe or so...) but symantec prograv will do it better!!! Good luck!!! I Hope I've Helped ... On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 11:13 am Posted by Jed (1 messages posted) Alright, well what do I do... I CANNOT open task manager. It stays open for 1 second and then closes. I CANNOT open regedit...I have the virus deleted currently, using the symantec removal tool. However, I have no clue as to how I can fix my task manager. On Tuesday, August 12, 2003 at 10:58 am, Gre wrote: >!!! SOLUTION !!! >IT IS A VIRUS !!! >I'VE HAD ALL SYMPTOMS YOU GUYS WROTE ABOUT, BUT THE REAL SOLUTION IS: >1. GO TO SYMANTEC >http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html >AND DOWNLOAD THE TOOL, IT WILL SCAN YOUR SYSTEM CLEAN OF THE BUGGER >2. IT WILL SEND YOU TO MICROSOFT PAGE WHERE THEY ALREADY PLACED THE PATCH TO CLOSE >THE WHOLE THAT VIRUS CAME THROUGH... > >IF YOU'RE NOT ABLE TO DO ANYTHING, PRESS CTR+ALT+DEL ==> PROCESSES AND "END PROCESS" >NAMED "MSBLAST" - THAT'S THE VIRUS! >you can also search your hard drive to locate it (msblast.exe or so...) but symantec >prograv will do it better!!! >Good luck!!! I Hope I've Helped ... > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 11:41 am Posted by StuW (1 messages posted) I have had the same problem as everyone on here, Generic Host Process for Win32 failing and then an NT AUTHORITY/SYSTEM Shutdown because of a Remote Procedure Call terminated. To fix as mentioned above go to the Symantec website and download the fixBlast.exe, if you has the same prob as me when you connect to the internet it brings up this error you should just about be able to download the fix before windows shuts down. Double click on the fix and it will wipe out W32.blaster.worm! ha excellent, no more error messages, also as mentioned above download the patch from Symantec and run it, hey presto no worm! On Tuesday, August 12, 2003 at 11:13 am, Jed wrote: >Alright, well what do I do... > >I CANNOT open task manager. It stays open for 1 second and then closes. I CANNOT >open regedit...I have the virus deleted currently, using the symantec removal tool. > However, I have no clue as to how I can fix my task manager. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 12:04 pm Posted by Arthur Q Mud (1 messages posted) I'm sure you probably already know this, but you have the new Ms.Blaster.exe bug. It takes advantage of the security holes in Windows XP that Microsoft recently posted Patches for. Go to Symantec.com, and click on the Security Response tab, then click on the w32.Blaster.worm and follow the directions. Hope this helps.... On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 12:32 pm Posted by Sky Pirate (1 messages posted) Hey sup guys im so glad i found you guys i thought i was alone and the only one with this problem. Im going to do everything that is said to do and hopefully my comp will be cured. Thanks for the help. You guys are awesome peeps! [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 1:12 pm Posted by chunt (1 messages posted) Cheers Everyone! This virus had me stumped. You sorted me! Thanks again all. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 2:33 pm Posted by Valerie (1 messages posted) I uninstalled all the HP printer drivers on my computer and immediately solved my problem. Good Luck On Monday, August 4, 2003 at 11:05 pm, smashtastic wrote: >i am having the same problem now. tempted to reinstall but i'm kinda lazy. I did >find out how to thwart that freaking retarded NT AUTHORITY 60 SECOND SHUTDOWN piece >of crap. > >load up a cmd window and type > >shutdown -a > >it will abort the shutdown, but things might not be pretty afterwards. For me, i >can no longer drag anything and it gets glitchy quick. i usually just leave the little >crashy window open or move it on to another monitor until i'm done. I'm writing this >message right now with the error window on the screen. Sometimes i use hidewndw.exe >to hide the stupid message because everything is OK until you click the "close" button. > >the shutdown command is pretty cool, and it works on 2k machines you just have to >copy the .exe over. it can remotely tell a 2k or xp machine to shutdown / restart. >or a whole domain if you want. you have to have the password for an account that >has permission. pretty neat. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 3:48 pm Posted by Martin Butterfield (1 messages posted) Thanks to everyone here. You gotta download and run the patch first before you blast blaster otherwise it won't work. It's certainly worked for me now. On Tuesday, August 12, 2003 at 1:12 pm, chunt wrote: >Cheers Everyone! > >This virus had me stumped. >You sorted me! > >Thanks again all. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 3:50 pm Posted by varadarajam (1 messages posted) Hi guys r u facing the problem about Generic Host error?? System is shutting down automatically?? Dont worry.. just try this one. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp Just go through the link and download the patch file. then ur problem will solve..i have done it. I also having the same problem before. But after dowloading the above patch System is working fine. No problems. Betst of luck. thank u very much friends.. Varadarajam(Raja.) On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 3:59 pm Posted by gabisan (1 messages posted) thanks a lot man, i also had that problem and now is gone On Monday, August 11, 2003 at 3:06 pm, Mike wrote: >Alright, I have the solutions here... >First install the MS03-026 Update. [ http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp >] > >That rids you of the vulnerability, kind of. > >Next you'll have to do some cleaning, either manually with regedit and explorer, >or using a virii tool that's caught this shit already. Look for a file running in >the background called msblast.exe, if it's running or in your system/system32 directories, >you're infected. Here's one that has the good info: http://vil.nai.com/vil/content/v_100547.htm > > >I hope that works alright for you all. Feel free to email me if you want, TBO@cfl.rr.com >. >Take it easy. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 4:48 pm Posted by Jocelyn (1 messages posted) uh oh..... i removed the virus... and then installed the patch and am still getting the problem. the only difference is that now it takes about 30 min for me to the the "Generic Host Process 32 has encountered a problem" instead of a couple minutes. has anyone else had this problem... any suggestions? On Tuesday, August 12, 2003 at 3:48 pm, Martin Butterfield wrote: >Thanks to everyone here. You gotta download and run the patch first before you blast >blaster otherwise it won't work. It's certainly worked for me now. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 6:31 pm Posted by Jim (1 messages posted) Why doesn't the microsoft patches work for me On Tuesday, August 12, 2003 at 3:50 pm, varadarajam wrote: >Hi guys > >r u facing the problem about Generic Host error?? System is shutting down automatically?? >Dont worry.. just try this one. > >http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp > >Just go through the link and download the patch file. then ur problem will solve..i >have done it. I also having the same problem before. But after dowloading the above >patch System is working fine. No problems. Betst of luck. thank u very much friends.. > >Varadarajam(Raja.) > > > > > > > [Reply or follow-up to this message] I have afound a way to kill mine. it was identical to that of everyone. Tuesday, August 12, 2003 at 7:16 pm Posted by Moody (2 messages posted) It is a worm "W32blasterworm" I had exactly the same problem. I now have fixed the problem. It doesn't come up anymore. I have windows XP so I followed all the steps and removed it for free!!! thanks to symantec. Click on the below and remove it now for free. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html Let me know if you all have manged to remove it !! Moody [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 7:24 pm Posted by Moody (2 messages posted) It is a worm "W32blasterworm" I had exactly the same problem. I now have fixed the problem. It doesn't come up anymore. I have windows XP so I followed all the steps and removed it for free!!! thanks to symantec. Click on the below and remove it now for free. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html Let me know if you all have manged to remove it !! Moody On Wednesday, November 13, 2002 at 7:11 am, jimi wrote: >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 7:40 pm Posted by Daniel Flynn (1 messages posted) Yes, this is something to do with the windows networking. However yourrebooting problem is what windows is doing to try and correct this problem. In order to fix the rebooting problem you simply need to go into control panel then to admin tools, then computer managment, then select services. Once you find the Remote Proceedure Call (RPC) double click it and set it to restart process on the 1st and 2nd attempt and reboot on the third. this will have windows autofix the problem for you and keep from rebooting unless it absolutly will not restart. I just got this error today and am looking into the fix.. On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 8:04 pm Posted by nick (4 messages posted) Hey people For all of you who didnt figure out how do get rid of the *VIRUS* or just didnt falll in the trap of reformating your system then here are six easy steps to clarify your way. Also remember to disconnect the internet as it will stop the problem. 1. Download this patch ( A MUST) or the VIRUS will keep on regenerating itself. This is best done if you have 2 computers and put the patch on diskette. http://www.microsoft.com/technet/treeview/default.asp? url=/technet/security/bulletin/MS03-026.asp Install it and reboot 2. Press crtl + alt + delete and a menu should pop up. Click on the second tab (Proccesses) and look for msblast.exe and end proccess it. 3. Go to start, run , type msconfig and go to the last tab (Startup), look for msblast and uncheck the box. 4. Go to start,run, type regedit. Click Hkey_local_machine, then Software, then Microsoft, Then Windows, then current version and then click on run. On the right hand side of the screen should say some stuff. You have to fine a line that says auto update. Double-click on it and if it says msblast.exe then you gotta delete the auto update line by rightclick and delete on the line that says auto update. 5. Finally, go to start, search and then on the left and side click all files and folders, then type in msblast and select your windows directory usually c:. Wait until it finds it and delete the 2 files that it searches up. 6. Reboot and Enjoy. This is made for windows xp and gets rid of the 60 second countdown that the VIRUS does to your computer. feel free to email me nickindahouse2000@hotmail.com for any further instructions. This post was written for people who are not use to computer. Thank you Good luck. Oh you may now plug in your internet. [Reply or follow-up to this message] re: generic host problem Tuesday, August 12, 2003 at 8:32 pm Posted by nick (4 messages posted) Hey people For all of you who didnt figure out how do get rid of the *VIRUS* or just didnt falll in the trap of reformating your system then here are six easy steps to clarify your way. Also remember to disconnect the internet as it will stop the problem. 1. Download this patch ( A MUST) or the VIRUS will keep on regenerating itself. This is best done if you have 2 computers and put the patch on diskette. http://www.microsoft.com/technet/treeview/default.asp? url=/technet/security/bulletin/MS03-026.asp Install it and reboot 2. Press crtl + alt + delete and a menu should pop up. Click on the second tab (Proccesses) and look for msblast.exe and end proccess it. 3. Go to start, run , type msconfig and go to the last tab (Startup), look for msblast and uncheck the box. 4. Go to start,run, type regedit. Click Hkey_local_machine, then Software, then Microsoft, Then Windows, then current version and then click on run. On the right hand side of the screen should say some stuff. You have to fine a line that says auto update. Double-click on it and if it says msblast.exe then you gotta delete the auto update line by rightclick and delete on the line that says auto update. 5. Finally, go to start, search and then on the left and side click all files and folders, then type in msblast and select your windows directory usually c:. Wait until it finds it and delete the 2 files that it searches up. 6. Reboot and Enjoy. This is made for windows xp and gets rid of the 60 second countdown that the VIRUS does to your computer. feel free to email me nickindahouse2000@hotmail.com for any further instructions. This post was written for people who are not use to computer. Thank you Good luck. Oh you may now plug in your internet. On Tuesday, August 12, 2003 at 6:31 pm, Jim wrote: >Why doesn't the microsoft patches work for me > > jh [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 3:34 am Posted by Nidal (1 messages posted) The only fix I have so far is to type (shutdown -a) in command prompt. This will cancel the shutdown operation and windows will continue to work, but with some functions disabled. If you find a fix, please let me know. Thanks On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] me too Wednesday, August 13, 2003 at 3:46 am Posted by cfc (1 messages posted) I have the same fault. The Symantec fix removed the msblast.exe file but the fault remains. The fault only happens when I connect to the internet and MSN Messenger is running. If I stop Messenger from running all seems OK. On Monday, August 11, 2003 at 12:41 pm, ezzo wrote: >i thought i was the only person with this problem, its driving me crazay! do all >you guys have dsl? anyway, i have no idea what to do, i tried the windows patch for >the RPC error and that did nothing. so, im gonna try to keep searching the net for >something, tell us if anyone finds out anything. > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 4:05 am Posted by Flint (1 messages posted) Hi .. Gre.... Thanks for your help, and for taking the time to share your wisdom .. all sorted, no problem .. it's worth a lot to have help and advice when you need it .. Flint On Tuesday, August 12, 2003 at 10:58 am, Gre wrote: >!!! SOLUTION !!! >IT IS A VIRUS !!! >I'VE HAD ALL SYMPTOMS YOU GUYS WROTE ABOUT, BUT THE REAL SOLUTION IS: >1. GO TO SYMANTEC >http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html >AND DOWNLOAD THE TOOL, IT WILL SCAN YOUR SYSTEM CLEAN OF THE BUGGER >2. IT WILL SEND YOU TO MICROSOFT PAGE WHERE THEY ALREADY PLACED THE PATCH TO CLOSE >THE WHOLE THAT VIRUS CAME THROUGH... > >IF YOU'RE NOT ABLE TO DO ANYTHING, PRESS CTR+ALT+DEL ==> PROCESSES AND "END PROCESS" >NAMED "MSBLAST" - THAT'S THE VIRUS! >you can also search your hard drive to locate it (msblast.exe or so...) but symantec >prograv will do it better!!! >Good luck!!! I Hope I've Helped ... > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 5:01 am Posted by markleic26 (1 messages posted) I have download the fix, but it says "worm not found" I aldo did it in safe mode with the same result, After that everything was ok for 4 hours then today its starts all over again, did the fix again but still says worm not found! On Tuesday, August 12, 2003 at 7:24 pm, Moody wrote: >It is a worm "W32blasterworm" I had exactly the same problem. I now have fixed the >problem. It doesn't come up anymore. I have windows XP so I followed all the steps >and removed it for free!!! thanks to symantec. Click on the below and remove it now >for free. >http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html >Let me know if you all have manged to remove it !! Moody > > > [Reply or follow-up to this message] re: THAT IS A VIRUS!!!It is a new one, just discovered today Wednesday, August 13, 2003 at 6:09 am Posted by Zaven (2 messages posted) Hi guys. Yesterday I found that it's a new worm (W32.Blast.Worm), downloaded the patches for win2k and winXP and fixblaster.exe from symantec. I had 2 infected PCs: first with win2k SP3 installed and the second winXP SP1 installed. The worm was found and removed from both PC-s. The patches were installed. Then I reinstalled the Norton AntyVirus 2003 and updated them (The i32 Intelligent Updater package - 20030811-019-i32.exe) Today I found that the win2k is normal, but winXP was infected again (the same sitation: the Remote Procedure Call service is stopped and in registry "windows auto update"="msblast.exe" value exists in key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Please help me.... On Monday, August 11, 2003 at 7:56 pm, Mobile PC Doctor wrote: >I'm going to guess that the messege you get on the box with the countdown says:"Windows >must now restart because Remote Procedure Call Service terminated unexpectadly"? >You need to check your PC for a file called msblast.exe , or anything with msblast >in the name.It sends a messege out to whoever each time you boot up that your pc >is on and it can crash your PC. You need to go to http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html > and read it very carefully, because the worm may attempt to keep you from getting >the patch needed from windowsliveupdate.com We were having the exact same problem >as you, and now it has stopped after doing the fix, and yes, it goes right past your >firewall. > > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 8:10 am Posted by Rick (1 messages posted) Well, I'm happy for everyone who has fixed this problem! BUT.. Symantec's tool did not find anything on my computer, so the symptoms remain. Shortly before this I had lopsearch mess with my computer, ran a series of exe files with random 4 letter names (located in my windows temp dir), I deleted these files. I don't know if the two things may be connected. Anyway.. just installed the MS patch.. don't know if it is fixed.. will see in about.. oh.. 10 minutes. On Wednesday, August 13, 2003 at 5:01 am, markleic26 wrote: >I have download the fix, but it says "worm not found" I aldo did it in safe mode >with the same result, After that everything was ok for 4 hours then today its starts >all over again, did the fix again but still says worm not found! > > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 9:25 am Posted by Anthony Ross G. Nañas (1 messages posted) I think we've been all getting the same problems... to the exact details that is. I tried enabling the Internet Firewall Connection of the dial-up of my PC. You can do this by clicking "start" then go to "connect to" right click one of your dial-up connections and go to its properties. At the advanced tab option tick the firewall option ( that should have a check mark) to enable. So far I'm not experiencing it anymore..... as of this mailing. Enjoying my internet surfing as of the moment, as of this mailing..... Since I first run my PC and go to the net after installing windows xp, i have encountered the same problem after just a few minutes of logging in..... Now its not happening after I enabled the firewall. Hope this can help.... On Monday, August 11, 2003 at 1:27 pm, Rose Serna wrote: >I am really sorry about this but I am one of the PC stupid crowd if you could e-mail >me with the fix to this problem I would be extremly thankful. Also if you could tell >me how to stop the popups on XP you could have my first born....(just kidding). Thank >you for your time. >Rose > > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 9:40 am Posted by mark (2 messages posted) ***SYMANTEC DOES NOT ALWAYS WORK*** Please just do the following. 1)Go to start menu 2)Go to Run 3)type in regedit, hit enter 4)Go to HKEY_LOCAL_MACHINE fold 5)Go to software folder 6)Go to microsoft folder 7)Go to windows folder 8)Go to current version folder 9)Go to run folder 10)Delete msblast file 11)Exit registry 12)Go to my computer 13)Go to C drive 14)Go to windows folder 15)Go to system folder 16)Delete msblast.exe 17)Check system32 folder 18)delete msblast.exe 19)Now delete and install microsoft patch. Symantec's program said it worked for me, but it lied. It might do the same to you, so remove it manually. On Wednesday, August 13, 2003 at 8:10 am, Rick wrote: >Well, I'm happy for everyone who has fixed this problem! BUT.. Symantec's tool did >not find anything on my computer, so the symptoms remain. Shortly before this I >had lopsearch mess with my computer, ran a series of exe files with random 4 letter >names (located in my windows temp dir), I deleted these files. I don't know if the >two things may be connected. Anyway.. just installed the MS patch.. don't know if >it is fixed.. will see in about.. oh.. 10 minutes. > > [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 10:39 am Posted by jiminov (2 messages posted) I had the same problem, but i didn't find anywhere the famous MSblast, I finally stopped the remote procedure call and dlelete microsoft autoupdate from the register, now it works, but i cannot cut and paste, i have to retire the cable of the modem to disconnect from inernet, and lo'ts of programs don't work properly (office etc.) Help me please, and thank you all [Reply or follow-up to this message] re: generic host problem Wednesday, August 13, 2003 at 11:41 pm Posted by Zaven (2 messages posted) Hi guys. One of the problems of Win XP is system restore: after removing and applying the patch it can restore old settings. And do not forget to start Remote Procedure Call service, it is a critical service and that's why you can't copy and paste. If that service is stopped a lots of other services in win XP (unlike win2000) are stopped too (look in dependencies). Good luck. On Wednesday, August 13, 2003 at 10:39 am, jiminov wrote: > >I had the same problem, but i didn't find anywhere the famous MSblast, I finally >stopped the remote procedure call and dlelete microsoft autoupdate from the register, >now it works, but i cannot cut and paste, i have to retire the cable of the modem >to disconnect from inernet, and lo'ts of programs don't work properly (office etc.) >Help me please, and thank you all [Reply or follow-up to this message] re: generic host problem Thursday, August 14, 2003 at 4:02 pm Posted by jiminov (2 messages posted) Ok, thank you Zazen, now it seems to work, i turn on the RPC and the service of system restore (even if it never works correctly), I didn't understand how I have fixed the problem, It was not the msblast.exe, it should have been when i delete the microsoft autoupdate from the register. As a friend of mine says, in windows there's nothing logic, nothing to understand, sometimes when you have a problem of drivers, just move the mouse a little bit, and it works, anyway thanks a lot. [Reply or follow-up to this message] re: Patch doesn't work Friday, August 15, 2003 at 6:16 pm Posted by Steve (1 messages posted) Hi Jim, Hopefully you've managed to sort it out by now; if not - I found that my cryptographic thingy wasn't even working and it's a bugger to find if you don't know where to look. Go to Control Panel, Admin, Tools, Services, Cryptographic... and see if it's working. Mine wasn't, and wouldn't left or right click enable, it was just a dead listing. So... There are instructions on this page, way earlier, for booting from your windows cd, type R (enter),1(enter), password if needed (enter), CHKDSK /R (enter) & let things run... When your system's finally up, go and look for Cryptographic again, right click, Properties, and this time, hopefully, you can switch the damn thing to 'automatic', then Properties again and 'start' should be enabled. Then! go to 'Run', cmd, and type all those regsvr codes in. ThenThen!! reboot, it'll faff about and chug but finally be up and running. ThenThenThen! try and install your patch... this worked for me, after 5 days of dicking about. I'm off to bed to dream about me, the guy(?) that invented this worm, a lighter, and a can of petrol... On Monday, August 11, 2003 at 10:10 am, Jim wrote: >Win XP patch doesn't work for my computer. Tried both 32-bit and 64-bit. I get errors >for both, one saying setup cant verify the integrity of update.inf and the other >saying im missing a file. Help. > > [Reply or follow-up to this message] re: generic host problem Wednesday, September 24, 2003 at 12:16 pm Posted by dan (1 messages posted) what you have - if you hgaven't figured it out by now is a virus. we had it here at work for a while. an easy fix but you've probably found that out by now as well since this message is old On Friday, August 1, 2003 at 6:57 am, ken wrote: >I had the same problem. It has something to do with old HP printer driver. >MS support has answer/fix for this. >http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q821690 > > [Reply or follow-up to this message] generic host process for win 32 problem Sunday, December 21, 2003 at 12:07 am Posted by Loan (1 messages posted) When start internet, open e-mail, I can not reply e-mail. When start a website I can not open web site. Thank you so much [Reply or follow-up to this message] re: generic host problem Saturday, January 3, 2004 at 3:32 pm Posted by Kenny (1 messages posted) when u turn ur computer on go to control panel switch to classic view, then go to admin. tools, then in there go to services, after that u can go to Remote procedure call right click on that and put properties i think u go to recovery but its one of those tabs at the top...anyways it will say restart the computer click on that and put take no action. this will stop it from shutting down. i was told to go to symantec.com and download the worm32 anti virus thing download it then it will take u to a patch for the computers protection. but ill warn u my computer is messed up ever since so it will only make things less frustrating On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Monday, February 2, 2004 at 4:18 pm Posted by DARRYL SOCIA (1 messages posted) okay....I've had the same problem with the shutdown now the ? is whether or not your firewall is enabled to your internet connection check that first then if not get back to me ok...... [Reply or follow-up to this message] re: generic host problem Thursday, February 19, 2004 at 8:49 pm Posted by Nadia (1 messages posted) I get the error message on Win XP, that win XP has encountered a generic host problem and needs to close, then it displayed a time interval after which windows has to re-start. what's the source of this problem and how it can be fixed? On Friday, August 1, 2003 at 6:57 am, ken wrote: >I had the same problem. It has something to do with old HP printer driver. >MS support has answer/fix for this. >http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q821690 > > [Reply or follow-up to this message] re: generic host problem Tuesday, March 23, 2004 at 12:54 pm Posted by ashraf (7 messages posted) >>I had the same problem last night and I didn't know what to do. I had Mcafee firewall >>installed and also trojan remover and nothing was picked up by either of them, but >>I ekpt getting this "Generic host win32 error report" and it was followed by a "NTAUTHORITY >>SYSTEM TERMINATED ENEXPECTEDLY WILL SHUT DOWN IN 60 SEC." Everytime I started windows >>these messages would pop up and it came out of nowhere. I reformatted my computer >>and I logged onto windows and the message didn't pop up anymore, but I only left >>it on for like 5 minutes. I'll have to leave it up for awhile and see if the problem >>is gone. >>and a message appear that there is win32 services problem where there is problem in svchost.exe file [Reply or follow-up to this message] The worm removal says worm hasnt been found!! Tuesday, April 6, 2004 at 8:28 am Posted by ssunlimited (1 messages posted) I cant seem to open Task manager and yet i instealled worm removal patch and it says worm hasnt been found on my computer but i still cant open task manager. On Sunday, December 21, 2003 at 12:07 am, Loan wrote: >When start internet, open e-mail, I can not reply e-mail. >When start a website I can not open web site. >Thank you so much [Reply or follow-up to this message] re: generic host problem Thursday, April 22, 2004 at 7:24 pm Posted by Sensen (1 messages posted) I now have this problem after converting from Win me to XP. What was the fix? Thanks On Thursday, February 19, 2004 at 8:49 pm, Nadia wrote: > >I get the error message on Win XP, that win XP has encountered a generic host problem >and needs to close, then it displayed a time interval after which windows has to >re-start. what's the source of this problem and how it can be fixed? > [Reply or follow-up to this message] re: generic host problem Tuesday, May 25, 2004 at 11:52 pm Posted by Shawn (1 messages posted) Ihave a problem with this Win32 stuff too. Whenever I connect to the internet, this message always pop up; 'Generic Host process service Win32 has encountered a problem and needs to be close.' (something like that) That's ok for me...but when i renew my window, this message appears again. After these message appears, I can't use the net until I restart my pc. Can anyone help me please? Solutions or anthing to solve this problem. [Reply or follow-up to this message] re: generic host problem Tuesday, August 17, 2004 at 7:18 pm Posted by Tim Parker (1 messages posted) I checked out the site on the CodeBlue virus, and actually I think it is something similar. Just before I got the Generic Host error, my firewall registered several attempts to access the TFTP command, which I blocked because it was unusual behavior for my computer. It was after that when the error came up and it shut down my computer. After the restart, it has been fine so far, but I don't know how long that will last. On Monday, August 11, 2003 at 1:09 pm, Ian Herrick wrote: >Not so sure this is Code Blue, since I'm not running IIS on any of the machines affected. > It may be something similar, however. I have had this happen on two different machines >today, different hardware and everything. Both were using Outlook XP at the time. > >This "worm" would have to be brand new as both the machines are protected with current >virus defs. > > [Reply or follow-up to this message] re: generic host problem Tuesday, August 24, 2004 at 8:06 am Posted by Robert (1 messages posted) well your problem is you have a trojan and you have been hacked. use mcafee or norton to get rid of it On Monday, August 4, 2003 at 10:21 pm, Khaboh wrote: >The different with mine is that instead of reporting a problem with an HP driver >dile in the details, it reports a problem with kernel32.dll - this and occasionally >my right-click specific functions stop working properly, such as copy/paste, drag/drop, >etc. > >This message with no really clear resolution is the best info I've been able to find >so far, please tell me someone is still monitoring this and loking for a solution? > > > [Reply or follow-up to this message] re: generic host problem Saturday, October 2, 2004 at 5:26 am Posted by Tammy (1 messages posted) actually i do believe it has something to do with the nic card i am getting the same problem i did a low level format and it was finally stopped so i thought i woke up this am to the message but my puter doesnt shut down after i just cant get on the net til i reboot maybe im wrong about the nic but i have norton and there is no virus if anyone has better ideas please let me know On Tuesday, August 24, 2004 at 8:06 am, Robert wrote: >well your problem is you have a trojan and you have been hacked. use mcafee or norton >to get rid of it > > > [Reply or follow-up to this message] re: generic host problem Monday, October 18, 2004 at 5:00 am Posted by noriman (1 messages posted) somebody told me to use any firewall. it worked about 3 week and i freely use internet connection. but when i formated my PC it come again and again and again. i tried the way before it but it still make my PC it house...thank al ot for all of your information friends... [Reply or follow-up to this message] re: generic host problem Wednesday, October 20, 2004 at 10:27 pm Posted by Melvin Diggs (1 messages posted) You may have a worm or virus. Go to one of the Anti-virus web sites to find a removal tool. Think "Sasser" or the like. On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Wednesday, November 10, 2004 at 12:39 am Posted by nagger (1 messages posted) what do you mean by copy the .exe over in 2000 cause thats what i have and it doesnt stop the shutdown. On Monday, August 4, 2003 at 11:47 pm, seppuku wrote: >I tried to just ignore the window, but after a while the shutdown countdown window >still pops up out of no where. this is REALLY annoying. > > [Reply or follow-up to this message] re: generic host problem Saturday, March 5, 2005 at 9:52 am Posted by Calamity Jane (1 messages posted) Do you think this will work if I already have Service Pack 2? I just don't want to lose anything. Won't try this step until I hear back. On Tuesday, August 5, 2003 at 12:48 am, jealoussound wrote: > >This is what I did to help accomodate this problem. I simply popped in my Windows >Cd that came with the computer and boot my computer from the cd. I then chose the >recovery console option. When i got to this screen i typed in 1 on the first question >it asks. It then asks for administrator password, just press enter. The C: prompt >should then pop up. You need to then type "chkdsk /r" then press enter. The application >will then scan the entire hard drive while attempting to fix any problems that it >encounters. Be patient because this does take a while. Good Luck! > > [Reply or follow-up to this message] re: generic host problem Wednesday, March 30, 2005 at 9:03 pm Posted by Corey Billiet (1 messages posted) You have a worm, google removal of worm virus and read instructions, it should fix your problem On Thursday, July 31, 2003 at 9:53 am, Andras Bocz wrote: >Hi guys: > >I have been having the same problem, with one awful difference. Once i get this message >about "Gen. Host Pr. for Win32 has encountered a problem and it needs to close", >I click on it and then another window pops up and gives me 1 minute to close all >programs, before it restarts windows xp. I cannot stop it, so every time windows >restarts. >Please help me, if you can, I have asked around some people but nobody had any idea >what to do. >TIA >Andras from Hungary > > [Reply or follow-up to this message] re: generic host problem Friday, April 1, 2005 at 4:03 pm Posted by leathercraft (1 messages posted) Everything was fine with the computer until I updated my AOL 9.0 to the Aol 9.0 Security Edition. Then I started getting the message - the generic host for Win32 encountered a problem and needs to shut down. I sent the "error report" to microsoft everytime until they told me it was AOL and AOL was working hard to fix the problem. I also had some other problems with my e-mail. So I then I uninstalled AOL, I then used the computer search funtion to find everything AOL left behind.I deleted everything with AOL in it. I then cleaned up the registry and shortcuts with my Norton SystemWorks (the only safe way to do this that I know of). I then found an old AOL 9.0 and installed it. No more problems with error messages about a generic host for Win32! No more problems with my e-mail. On Wednesday, November 13, 2002 at 7:11 am, alek wrote: > >when xp pro comming up a error popup saing: >"Generic host process for win32 services has encountered a problem and needs to close" >I klick enter on ok and and then it took a while and >continue working untill its pop again. > >any idea??? [Reply or follow-up to this message] re: generic host problem Monday, May 2, 2005 at 4:52 pm Posted by Pythagoras (1 messages posted) I just used my windows cd to run the recovery console. It took upwards of 2hours to complete but I did not lose any software thank god (work machine) However upon boot up I got that frickin error right off the bat and am at a complete loss. windowsXP Pro sp2 completely updated with everythign available from microsoft Mcaffee spybot and adaware and still this thing torments me.........someone help!!!!! On Saturday, March 5, 2005 at 9:52 am, Calamity Jane wrote: >Do you think this will work if I already have Service Pack 2? I just don't want >to lose anything. Won't try this step until I hear back. > > [Reply or follow-up to this message] re: generic host problem Monday, May 9, 2005 at 1:41 am Posted by casper (1 messages posted) gv me ur e-mail n than i will send the fix shutdown virus to u. On Monday, August 4, 2003 at 11:05 pm, smashtastic wrote: > >i am having the same problem now. tempted to reinstall but i'm kinda lazy. I did >find out how to thwart that freaking retarded NT AUTHORITY 60 SECOND SHUTDOWN piece >of crap. > >load up a cmd window and type > >shutdown -a > >it will abort the shutdown, but things might not be pretty afterwards. For me, i >can no longer drag anything and it gets glitchy quick. i usually just leave the little >crashy window open or move it on to another monitor until i'm done. I'm writing this >message right now with the error window on the screen. Sometimes i use hidewndw.exe >to hide the stupid message because everything is OK until you click the "close" button. > >the shutdown command is pretty cool, and it works on 2k machines you just have to >copy the .exe over. it can remotely tell a 2k or xp machine to shutdown / restart. >or a whole domain if you want. you have to have the password for an account that >has permission. pretty neat. > > [Reply or follow-up to this message] re: generic host problem Saturday, June 4, 2005 at 6:31 am Posted by Ray (1 messages posted) This generic host problem only starts while a new HP All in One officejet is connected. Disconnect the printer from the Dell 8400 computer and the problem stops. The problem does not cause the computer to shut down as the Blaster worm will make it do but the computer slows right down and minutes go by before it responds to a command. The printer will not print because this generic host comes up as soon as it is connected. Drivers have been uninstalled and reinstalled but the problem keeps repeating. Interestingly the computer is always connected online and as the HP technician is due in a few days to try and overcome the problem I will suggest to try it offline. However HP think it may be a hardware problem and will bring another printer to try. If it is cured I will advise what was done. [Reply or follow-up to this message] re: generic host problem Sunday, July 3, 2005 at 3:07 am Posted by Lou (1 messages posted) For me, this generic host problem only starts while a new 80gig External HD from CompUSA is connected. Power off the external drive and the problem stops. The problem does not cause the computer to shut down. I get the error message Generic Host Process for Win32 Services, etc. and it references svchost.exe and the dll file ntdll.dll (When the PC boots with the external drive turned on). The 2 things (that I've found so far) is that (1) when I right clik the speaker icon in my desktop tray, everything is grayed out and is not selectable and (2) when I open Norton System Works, it indicates that my "live update" function has been turned off. These are the only two things I have found so far. Again, if I power off the external HDD and reboot, the problem does not occur. I have virus scanned my system (including the files on the external drive, but find no problems). I still would love to find the resolution though, because this HDD which has been hooked up for about 1 month, and the problem only started occuring about 1 week ago. >This generic host problem only starts while a new HP All in One officejet is connected. >Disconnect the printer from the Dell 8400 computer and the problem stops. >The problem does not cause the computer to shut down as the Blaster worm will make >it do but the computer slows right down and minutes go by before it responds to a >command. >The printer will not print because this generic host comes up as soon as it is connected. >Drivers have been uninstalled and reinstalled but the problem keeps repeating. Interestingly >the computer is always connected online and as the HP technician is due in a few >days to try and overcome the problem I will suggest to try it offline. However HP >think it may be a hardware problem and will bring another printer to try. >If it is cured I will advise what was done. [Reply or follow-up to this message] Critical update for network installed HP All-in-One devices Thursday, October 27, 2005 at 12:17 pm Posted by Todd E. Bryant (2 messages posted) I've been struggling with a persistent and worsening "Generic Host" problem too. Finally, I gave up and reinstalled Windows from scratch. I reinstalled software one by one, and sure enough, I got the DEP errors again, right after installing my very new HP 7410 All-in-One printer/fax/scanner, hooked up via ethernet. I suspect this isn't the problem for most people, becasue the product is newish, and I suspect most don't have networked printers/scanners. But, at least in my case, the problem is not only for OLD HP drivers. I've been using this printer a few weeks before the blowup too, so I'm not sure what causes the crash party to get started. HP provides a "Critical update for network installed HP All-in-One devices" on their website, dated Jan 2005. Description is here: Resolves network performance issues when an HP All-in-One device is installed. If you have experienced a DEP (Data Execution Prevention) error, you may see more DEP errors during reboot until the patch takes effect. The first DEP error may have happened hours before. Successive DEP errors will occur in real time until the patch is fully installed. On Saturday, June 4, 2005 at 6:31 am, Ray wrote: >This generic host problem only starts while a new HP All in One officejet is connected. [Reply or follow-up to this message] re: generic host problem Thursday, November 10, 2005 at 12:31 am Posted by Swiss guest (1 messages posted) Hi! I own 2 Toshiba Satellite Pro M30 notebooks. I've addressed my problem to Toshiba and they suggested that I upgrade the BIOS. I’ve since found that I already run the latest BIOS version (1.70). I've also tried to contact Microsoft, but they do not offer support in this case, they refer me to the OEM, who installed XP. In Windows XP I keep getting Application Error messages for svchost.exe ("The instruction at "00aa96bc" referenced memory at "0x00000000". The memory could not be 'written'") and then messages that DEP has closed the Generic Host for Services to protect my computer. I'm getting somewhat desperate. This is now all but continuous, ie. every time something tries to open svchost.exe, which seems particularly IE related, and I cannot find anything of relevance on the MS website, other than relating to W2K or XP SP1. It looks like this problem is not supposed to exist on SP2. I have it on 2 PCs, though. I have lost functionality in connecting to network drives (TCP/IP) and the computers do not recognise a USB-connected digital camera. I may have lost other functionality as well, but I've not discovered what yet, other than that IE6 seems to be somewhat 'funny' (it needs the full web address, including http:// to do anything at all, where previously I could just type in www.xxx.xxx and the browser would complete the http:// part). I use Windows' firewall, I have scanned the computers several times for viruses and other malware (Norton AV -latest virus definitions- and Panda, as well as the Microsoft Windows Malicious Software Removal Tool). All come up clean. I run XP SP2 and have re-installed SP2 from a downloaded version, rather than depending on the Microsoft Update tool, which I also subscribe to. I've run PCTools Registry Mechanic, it has not solved the problem. I am not using any special software (MS Office, Adobe Acrobat and Audition, Paintshop, iTunes) and my machine is mechanically as standard as it came from the factory: no extra memory or swapped parts. I use an HP2510 all-in-one on WLAN. Strange thing is also that I've had this before and solved it (for a while) by a total clean install on a formatted HD. That was last January, when the machines were still new, and things have gone well since then. Now, all of a sudden, both machines are 'sick' again. One would almost suspect there's some element of time in there. Also, a clean install does not seem to solve the problem, apart from the substantial amount of work to get it done, it clearly re-occurs. I am at a loss, I know nothing about technology. What do I need to do to solve this? On Monday, May 2, 2005 at 4:52 pm, Pythagoras wrote: > > >I just used my windows cd to run the recovery console. It took upwards of 2hours >to complete but I did not lose any software thank god (work machine) However upon >boot up I got that frickin error right off the bat and am at a complete loss. windowsXP >Pro sp2 completely updated with everythign available from microsoft Mcaffee spybot >and adaware and still this thing torments me.........someone help!!!!! > [Reply or follow-up to this message] re: generic host problem Tuesday, November 7, 2006 at 10:24 pm Posted by Joe Miller (1 messages posted) I have the same problem on a Toshiba Satellite 1955 laptop. It is annoying and I generally just kill the report dump. But I sure would like to know what the problem is. I have also been through Norton AV, various antispyware programs etc. And it is not the Blaster worm or Norton Utiliites, which seem to be favorite culprits for other svchost errors.. At one point I tried to kill all active processes with WinPatrol and even that did not work. You are apparently the only other person on the Internet that has this specific P7:00aa96bc. The rest of the error message is Type : BEX P1 : svchost.exe P2 : 5.1.2600.2180 P3 : 41107ed6 P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00aa96bc P8 : c0000005 P9 : 00000008 There are many other explanations for svchost.exe error messages, but I have not seen anything on this one. The one thing we have in common is an HP All-in-one printer. Mine is a Photosmart 2710. I'm suspicious of it but have not tried a driver update yet. Have you made any progress figuring out what is causing this? Best, Joe Miller On Thursday, November 10, 2005 at 12:31 am, Swiss guest wrote: >Hi! I own 2 Toshiba Satellite Pro M30 notebooks. I've addressed my problem to Toshiba >and they suggested that I upgrade the BIOS. I’ve since found that I already run the >latest BIOS version (1.70). I've also tried to contact Microsoft, but they do not >offer support in this case, they refer me to the OEM, who installed XP. >In Windows XP I keep getting Application Error messages for svchost.exe ("The instruction >at "00aa96bc" referenced memory at "0x00000000". The memory could not be 'written'") >and then messages that DEP has closed the Generic Host for Services to protect my >computer. I'm getting somewhat desperate. This is now all but continuous, ie. every >time something tries to open svchost.exe, which seems particularly IE related, and >I cannot find anything of relevance on the MS website, other than relating to W2K >or XP SP1. It looks like this problem is not supposed to exist on SP2. I have it >on 2 PCs, though. I have lost functionality in connecting to network drives (TCP/IP) >and the computers do not recognise a USB-connected digital camera. I may have lost >other functionality as well, but I've not discovered what yet, other than that IE6 >seems to be somewhat 'funny' (it needs the full web address, including http:// to >do anything at all, where previously I could just type in www.xxx.xxx and the browser >would complete the http:// part). >I use Windows' firewall, I have scanned the computers several times for viruses and >other malware (Norton AV -latest virus definitions- and Panda, as well as the Microsoft >Windows Malicious Software Removal Tool). All come up clean. I run XP SP2 and have >re-installed SP2 from a downloaded version, rather than depending on the Microsoft >Update tool, which I also subscribe to. I've run PCTools Registry Mechanic, it has >not solved the problem. >I am not using any special software (MS Office, Adobe Acrobat and Audition, Paintshop, >iTunes) and my machine is mechanically as standard as it came from the factory: no >extra memory or swapped parts. I use an HP2510 all-in-one on WLAN. >Strange thing is also that I've had this before and solved it (for a while) by a >total clean install on a formatted HD. That was last January, when the machines were >still new, and things have gone well since then. Now, all of a sudden, both machines >are 'sick' again. One would almost suspect there's some element of time in there. >Also, a clean install does not seem to solve the problem, apart from the substantial >amount of work to get it done, it clearly re-occurs. >I am at a loss, I know nothing about technology. >What do I need to do to solve this? > > > > [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum