UGGH! Extreme frustration...PLEASE HELP!!!

I am getting a 'Win32 Generic Host error...shutdown in 45 seconds' message. I can stop it with the dos command "shutdown -a", but it just happens again when I reboot. My Norton antivirus 'Auto Protect' feature keeps shutting off by itself, now my sound card doesn't work (no sound at all.) I've ran spybot, adaware, trendmicro online scan, symantec online scan, Spyferret, CWshredder, xoft spy, I have all the latest virus definitions, and I just took my tower apart and cleaned everything again...still it is happening! It seems like a virus but why can't anything find it? Please can someone help? I don't know what to try next!!!
Rick

 

In addition, I just wanted to say that I have followed all of Major Attitude's steps. Nothing was found with any of the tools. I am ready with HJT if required. Please help, I don't know what else to do except format the whole system again.

 

http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

OK here is the log as requested.

 

Your HJT log is clean, however lets try these online scans before we procede.

TrendMicro Online Scan
Symantec Online Scan
Panda Online Scan
RAV AntiVirus Online Scan
ComputerAssociates Online Scan
Bit Defender Online Scan
Command On Demand Online Scan
Freedom Online Scan
AhnLab Online Scan
PCPitStop Online Scan

After you run these scans, post your results as in infections found and if they were removed.

 

Ok Bjgarrick, I've done all those scans you asked me to do. No viruses detected from any of them, however, the "Freedom" scan listed all the things that spybot had removed (they must be saved in a quarantined file somewhere), also, Norton clean sweep had a multitude of quarantined files. It did not give me the option of deleting those files but I did have the 'autoclean' feature checked. While I was scanning, that window popped up again "Generic Host Process for Win32 Services encountered a problem and needed to close." Then the shutdown sequence began for 45 seconds. I shut if off using the DOS command (shutdown -a) but after that the system ran very unstable so I had to reboot and start over anyway. This happenned twice during the process of doing all those online scans.

 

I should also mention that every time I reboot, the 'auto protect' feature in my Norton antivirus is disabled. I have to manually re-enable it.

 

Before I say this is a Software Problem instead of a virus problem download and run these removal tools.

W32.Blaster.Worm Removal Tool

W32.Sasser.Worm Removal Tool

 

Ok, I ran both of those, then I ran them in safe mode as well...nothing! Grrrrr. I Ran the CCleaner tool in everyone else's user screens too. I discovered that if there are 5 different users, it will only clean the files within the current user. As I am typing this the darn shutdown thing happened again. What next??? Everytime I reboot now the antivirus 'auto protect' feature is disabled.

 

Five user accounts?

You need to clean each account. Run some of the programs listed in the READ ME on each account.

 

Hello BJGarrick.
I'd like to thank you for helping me. I did, however, have to take my machine into a shop to have it repaired. It was not a virus or spyware problem as such but Norton System Works that caused all the problems. Here is his diagnosis:
LSP hijack (mslsp.dll) attempted to take over the system. Systemworks removal methods did serious damage to the networking subsystem and itself.
Thanks again for your time in attempting to get me fixed up!
Rick

 

Sure