Win32 error

Can anyone offer some advice?

I'm using windows XP and recently been getting a problem, were I get the error message below

Generic host process Win32 has encountered a problem and needs to close.

The time it takes to come up varies, It seems to be linked to when anything wants an internet connection, the first program I use that needs the connection (IE, Outlook Send and Receive, WMP) freezes, when it eventually starts working properly, I get the error message.

But, the system then continues with problems

It can’t find any of my audio devices, it tells me that there is a problem with the audio device
When trying to bring up volume controls it tells me that ‘there are no mixer devices available’
And when checking for wireless networks, message says ‘Windows cannot configure this wireless connection’

I’ve looked in Task Manager and noticed when the problem started SVCHOST.exe was using almost 100% cpu until the error message, but recently it hasn’t been.

I did have a virus when I checked after all this started, but Malware forum gave me the all clear.

Any help is would be appreciatedconfused

 

You need to post some system details.

If you have Realtek audio look at

http://www.microsoft.com/downloads/...88-3131-429C-8FCB-F7B3B0FD3D86&displaylang=en


Studio T

 

I do have Realtek, and have both of the updates listed on the site, I installed the update, and I still have the problem.

system details below, let me know if you need to know more.

OS Name - Microsoft Windows XP Home Edition
Version - 5.1.2600 Service Pack 2 Build 2600
System Manufacturer – Acer Aspire 3610
System Type - X86-based PC
Processor - x86 Family 6 Model 13 Stepping 8 GenuineIntel ~1596 Mhz
Total Physical Memory 1,024.00 MB

Audio Realtek AC'97 Audio

IE – 7.0.5730.11

WMP 11.0.5721.5145

Anti Virus – Avast Home edition and is up to date

Whats my next step?

 

Firstly run checkdisk

in an explorer window right click on the hard drive
choose properties>tools
choose check now
tick automatically repair file system
tick automatically repair sectors
click start
If required click yes perform check at restart
click Ok,OK
restart

Then run the system file checker

run system file checker - it may ask for your windows cd.

start>run>typein
cmd
press return
at the > prompt typein
sfc /scannow (note double n)
press return
type exit to close command window

If, after this you still get errors, take a note or screen shot of the error AND THE TIME THE EROR OCCURS and post it along with the output from Event Viewer.

Start>run>typein
eventvwr
Look at all three logs around the time of problem. The program or file which is having trouble should be noted.


Studio T

 

Ok, ran scan disk and system file checker - problem still present

Rebooted twice error occured at 22:11 (imediately following restart) and 22:17 (about 5 mins after restart)

I wasn't sure how you wanted the log created (save as or export) so have done both and attached along with JPG of error message.

Thanks for your help confused

 

Running Check Disk and SFC is never a bad thing to do. Especially after a bout with some malware. Now we know the problem is not due to corrupt sytem files or hard drive.

I see that three failures occurred at the relevant times.

The Belkin printer server. Do you have one and does it work?

The C-dilla anti copy software. Do you have any known software that this would have come with?

The Diamond CS protection. Are you running this, or did Chas get you to run this as part of the cleanup? Did he ask you to uninstall it and did you do it?
It could be in conflict with AVAST.

please also click on the Microsoft 'click here' to see the message to send to microsoft. Read the (probably) two lines of information. One will read appcompat.txt and is of no consequence, it is the actual file to be sent. The other is the name of the calling program that has offended windows.

Studio T

 

I agree disk checking is always a good idea, I’ve done it quite often on this machine.

As for the problem areas:

Belkin – Yes I do have one, and it sort of works. It installed and found my printer but nothing would print from it, I went away for the weekend (took the laptop and used it quite a lot) when I got home and booted up, that was when the trouble started, so haven’t even looked at it any further, it’s currently switched off until I can this problem sorted.

c-dilla – Not intentionally installed by me, this is the name of a folder that Avast quarantined after I started getting this problem, it may have been part of a movie download program I installed, didn’t have any problems with it and the PC ran ok, but I uninstalled it after I started getting this problem, as it was the last item to be installed.

The Diamond CS protection – No idea where this has come from, It wasn’t installed as part of the checks, unless it goes by another name on the system? Possibly downloaded as part of the above program?

I’ve checked the ‘click here’ on a few occasions and this is the detail it gives, the file name remains the same, but the file it’s in changes, not sure if that’s of any consequence

C:\DOCUME~1\GWENAN~1\LOCALS~1\Temp\WER9bfd.dir00\svchost.exe.mdmp

 

OK you seem to have various leftovers from the cleanup.

Unfortunately the Microsoft error message refers to the blaster/lovsan virus/worm, or is left over from infection by it. Another poster has a similar problem.

http://forums.majorgeeks.com/showthread.php?t=123958

I don't think you still hav ethe virus but here is the removal tool.

http://www.symantec.com/security_response/writeup.jsp?docid=2003-081119-5051-99

However in view of the other problems noted I wonder if you could save you data and go for a CLEAN reinstall. It would probably be much quicker in the long run.

C-dilla is required for certain progs to run and can halt your pc if you need it but dont have it. It's semi legit in that it is a security anti copy prog, that willl only be installed by a prog that needs it. It does no harm, just limits you use of the calling prog. So you would only get it back after a clean reinstall if you needed it. Killing it off in the registry is a pig, because you have to search out the calling prog as well.

Diamond CS is a commercial antirootkit program that 'works' (controversial) by intercepting service calls and controlling access to services running on your pc. There is a simplified free home use version. Again killing it off in the registry will be difficult.

let us know you decision on the way forward.

Studio T

 

I've run the blaster tool, as you said, it's not there any more

If getting rid of the other problems is going to be a pain, then I think a clean reinstall would be best, I would need your advice on doing this.

I've ordered an external hard drive for backing up my files, so 'll do that when it arrives.

If the other programs are needed then they'll be reinstalled when I start again.

Again thanks for your help

 

I don't have many details of you system at the moment, but the geeks are happy to help further. It pays to do some preliminary preparation for (re)-installation.

First you will need drivers for some of the hardware. You can copy these from any drivers folder on the C drive or maybe you have a cd? Otherwise download them from the manufacturer(s) before you start.

Second make sure your coa label on the pc matches the one on the Windows disk and that your disk is a proper Microsoft or OEM, not an upgrade, unless you have a previous version windows disk.

Third download the geeks autopatcher and put it on cd or your new hard drive. Its much easier to reinstall all the windows update this way than to try to connect to microsoft after installation.

http://www.majorgeeks.com/AutoPatcher_XP_Full_d4901.html

Now for some planning. I always recommend running with several partitions, rather than one big one.

My minimum would be
One partition for Windows and the main programs. Keep this less than half full.
One partition for 'permanent' data.
One partition for 'workspace'.
You may find others of benefit depending upon your use of the pc.

If you do this it provides protection in the event that windows has to be reinstalled as the data remains untouched on its partition. This partition will not change greatly and hardly ever need defragmenting. It also provides an easy way to specify and control offline backup. you should set this as the default save to partition.

The workspace partition is for downloads, trying things out, video/audio/graphics editing or whatever you do. you should set all programs to use this by default for working. Its contents will be in a constant state of flux and need frequent defragmenting for peak performance, particularly for video editing. Defragmenting can often be achieved more quickly by simply reformatting the partition!

The windows/programs partition. There is no point in a separate progs partition because you would have to reinstall them after windows anyway. However by separating the main program files from the working ones and the data ones you keep windows and the programs from becomming fragmented so quickly and only need defragment this drive occasionally.

Studio T

 

Ok looking good, update as follows

zbd21, thanks for the links but none of the things suggested worked, was worth a try though.

studiot, thanks for the advice. No installation disk came with the laptop, so this had me worried for a second.confused
However I did read on the web that some manufacturers put the installation program on a partition, so I had a look around and found a third (hidden) partition, which carries a program which restores XP to it’s original state.

The user manual explained how to access this at start up, and it took all of about 10mins to do, and it also loaded all my device drivers as well.

So 48hrs later and still error free. Just got to re-install all m other programs now…

Thanks for all your help and advice, very much appreciated, was at a bit of a loss before I found this site.