Generic Host Process for Win32 Services - Error + Unable to use internet

Discussion in 'Malware Help (A Specialist Will Reply)' started by tigerlily, Nov 1, 2010.

  1. tigerlily

    tigerlily Private E-2

    After restarting laptop I get a pop up with the following:

    Generic Host Process for Win32 Services
    Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.
    Data Error Report Contains:
    szAppName: svchost.exe
    szAppVer: 5.1.2600.5512
    szModName: unknown
    szModVer0.0.0.0
    offset: 001a624b

    OS is Windows XP Professional SP3.

    If I open some folders, it will change my task bar to classic view. Also the task manager if opened for some time will change it to classic view but without any tabs to exit or view processes.

    I did some looking around found a new folder in C:\Documents and Settings\user\Application Data\Vapowe\loixa.exe - (not sure if that is a virus, but I cannot find any info on the internet on this program) which I've removed, and also disabled in start up, but to restart and seen that it has restarted itself in start up, which I then cleaned registry of it and then it stopped restarting itself. But the problem still persists.

    It is preventing internet access, unable to connect. It is also preventing Windows Firewall/Internet Connection Sharing (ICS) from starting. I've tried to start it in safe mode, says same thing and gives same error at start up. Also CD drive access is denied so was not able to install any anti-virus program or use any current anti-virus program that is installed. Also tried to boot Ubuntu from CD drive but cannot do that either....I've tried all the Win32 error fixes online and none of them work.

    Not sure what I can do, since I have no idea what the virus is called or where to begin to look for it, it could very well be loixa.exe but not sure that's just the only thing I noticed that is new that wasn't there before.

    Please help if possible with any ideas. The laptop is unable to connect to the internet and cannot install any program from disc....it is very frustrating. Thank you~
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not sure what we can do to help you if you can not access the internet nor copy programs from a disc. You can try creating one of these disc's and booting to it. That means that you need to get into the bios and change your boot order so that the cd-rom drive is the first boot device>

    Kaspersky Rescue Disk.
    BitDefender Rescue Disk-with-auto-update.
     
  3. tigerlily

    tigerlily Private E-2

    Yea I've done that. Still will not boot from CD drive. I've even removed all other drives and only left CD drive in boot order in bios and still will not boot from it.
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I suggest that you post in the software forum to try to get your system to a stable state where we can do the malware scans. There just isn't anything we can do if you can't get the scanning programs on your system. Have you tried using a usb thumb drive?
     
  5. tigerlily

    tigerlily Private E-2

    Will not boot from USB either....but it's reading USB so I was able to get Avast installed and it actually is working at the moment and is scanning....So I am able to get programs installed through USB but just will not boot anything but from hard drive.
     
  6. tigerlily

    tigerlily Private E-2

    OK did full scan on Avast, no threats were detected. Then I restarted laptop and all of a sudden internet is working and D drive is now accessible. But still cannot open some programs such as Malwarebytes, and also still getting win32 error and now getting alot of this:

    Internet Explorer Script Error
    Line: 44
    Char: 2
    Error: Object Required
    Code: 0
    URL: http://192.168.1.1/func.js
    Do you want to continue to run scripts on this page?

    When I am not on any website, just restarted laptop. It just pops up script errors every 2-3 mins.
     
  7. tigerlily

    tigerlily Private E-2

    Also mbam, combofix, spybot search&destroy will not run. And D access is denied if I insert a disc. Task bar still changing, some pages on the net will not display correctly or will not load (Avast, Malwarebytes ones I checked will not load or will display incorrectly).
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click and choose Run as Administrator


    You only need to get one of them to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    1. Rkill.exe
    2. Rkill.com
    3. Rkill.scr
    4. Rkill.pif


    * Double-click on the Rkill desktop icon to run the tool.
    * If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    * A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    * If not, delete the file, then download and use the one provided in Link 2.
    * If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    * Do not reboot until instructed.

    If you are having problems running Rkill, you can download iExplore.exe or eXplorer.exe, which are renamed copies of Rkill.com, and try them instead.

    * If the tool does not run from any of the links provided, please let me know.
    Once you've gotten one of them to run then try to immediately run the following.

    Now download and Run exeHelper from Raktor

    • Please download exeHelper to your desktop.
    • Double-click on exeHelper.com to run the fix.
    • A black window should pop up, press any key to close once the fix is completed.
    • A log file named log.txt will be created in the directory where you ran exeHelper.com
    • Attach the log.txt file to your next message.

    Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

    Then see if you can run the scans ( SAS, MBAM, ComboFIx, MGTools.exe).
     
  9. tigerlily

    tigerlily Private E-2

    I somehow got it fixed last night after trying out a few things, D drive still isn't working right but maybe it was already that way before this happened. If I post some logs for you to check would you be able to tell me if it's completely cleaned?
     
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds