THIS IS MY LOG FILE I WOULD APPRECIATE YOUR HELP:cry:

I KEEP GETTING THE WIN32 ERROR


Logfile of HijackThis v1.99.1
Scan saved at 9:13:22 PM, on 2/27/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\HP\KBD\KBD.EXE
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareUpdater.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Timothy O'Neal\My Documents\HJT\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [IcoSet] c:\hp\bin\cloaker.exe c:\hp\bin\IcoSet\adjust.bat seticon
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exe
O4 - Global Startup: customize__IE.lnk = C:\hp\region\customizeIe.wsf
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: MsnFixer.lnk = ?
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe

Recommended Answers

All 21 Replies

There's nothing suspicious in your log.

Please post the full and exact content of the error(s) you're getting; that might give us more of a clue.

There's nothing suspicious in your log.

Please post the full and exact content of the error(s) you're getting; that might give us more of a clue.

OTHER THAN THIS

"Generic Host Process for Win32 Services encountered a problem and needed to close."

WHERE WOULD I GO TO GET THE COMPLETE DESCRIPTION BECAUSE IT WONT LET ME COPY AND PASTE FROM THE ERROR REPORT BOX

Go to Start->Settings->Control Panel->Administrative Tools, and click on "Event Viewer".

The Event Viewer utility will allow you to review your system and application log files. Double-click on any error/warning entries you find that might relate to the problem and see if you can cut-n-paste that info here.

This is the dreadful every now and then hard to catch error

>>>>>>Faulting application svchost.exe, version 5.1.2600.2180, faulting module ole32.dll, version 5.1.2600.2595, fault address 0x000020bb.<<<<<<<<<

Go to Start->Settings->Control Panel->Administrative Tools, and click on "Event Viewer".

The Event Viewer utility will allow you to review your system and application log files. Double-click on any error/warning entries you find that might relate to the problem and see if you can cut-n-paste that info here.

OK- that helps to narrow things down, but errors concerning ole32.dll (a core Windows file) can come from a number of places. Do the following please:

Double-click on the related errors in Event Viewer to bring up the windows that gives you the "Faulting application..." message again. At the top of the windows there should also be an "Event ID:" entry; post the Event ID numbers.

I see that the event id is 101, hope that helps


OK- that helps to narrow things down, but errors concerning ole32.dll (a core Windows file) can come from a number of places. Do the following please:

Double-click on the related errors in Event Viewer to bring up the windows that gives you the "Faulting application..." message again. At the top of the windows there should also be an "Event ID:" entry; post the Event ID numbers.

I see that the event id is 101, hope that helps

101? Can you check that again? The Event ID should be a 4 digit number.

Also- please give us any helpful information that you can concerning the history of the problem:

- When do you get the error? Does it appear when Winodws starts up, or does it happen when you try to use a certain program or perform a certain task?

- Had you added or removed any programs around the time this first started?

- Had any Windows updates been installed at about that time?

Sorry about that it is 1004. I get the error every so often, it used to be every time i logged on but now its not like that. It mostly comes up when the computer starts up. I can't think of what i could have done when this started regarding any thing i removed although i'm sure that is always a possibility. I believe my installation of windows sp2 may have something to do with it.


101? Can you check that again? The Event ID should be a 4 digit number.

Also- please give us any helpful information that you can concerning the history of the problem:

- When do you get the error? Does it appear when Winodws starts up, or does it happen when you try to use a certain program or perform a certain task?

- Had you added or removed any programs around the time this first started?

- Had any Windows updates been installed at about that time?

Did you guys just give up? Now I get the error like everytime i log on now

Sorry about that it is 1004. I get the error every so often, it used to be every time i logged on but now its not like that. It mostly comes up when the computer starts up. I can't think of what i could have done when this started regarding any thing i removed although i'm sure that is always a possibility. I believe my installation of windows sp2 may have something to do with it.

Did you guys just give up?

No, but please keep in mind that none of us who work on these support forums are paid for what we do. Our efforts are on an entirely volunteer basis, and if we're away from the forums for any amount of time, that means that our real-life responsibilities haven't left us with any free time to dedicate to our work here.


In terms of your problem though:

- Unfortunately, Event ID 1004 is too general an ID to be of much help, even with the other information you've supplied.

- Also unfortunately, ole32.dll is a Windows operating system shared library file which can be used be any number of programs and processes. Given that, and the fact that I can't physically sit down in front of your computer, I can't narrow things down any further at this point.

The only suggestions I can offer are some of the standard recommendations:

1. It's definitely possible that your issue could be the result of installing SP2; many programs that worked with previous versions of XP will "break" under SP2. The list of programs and program versions that are reported to have problems under SP2 is quite extensive, so I'm afraid you'll have to research that yourself to make sure that the particular software components on your machine are compatible with SP2.


2. Obviously- scan your system thouroughly for viruses, spyware, etc.; infections can corrupt files and cause the sort of problem you're having.

- Get the most current updates for your McAfee program and run a full system scan.

- McAfee doesn't detect everything; also run at least two of the following free online scans:

http://www.kaspersky.com/scanforvirus.html
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm
http://housecall.trendmicro.com/
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/scan/licence.php


3. If you've determined that all of your applications are compatible with XP SP2, go to Microsoft's Windows Update site and install the most current SP2 updates and fixes if you haven't done so already.


4. Uninstall SP2 if none of the above suggestions work and see if the problem goes away.


Sorry I can't be of more help, but the info you've been able to give isn't enough to pinpoint the exact cause of the error.

Hey, this problem drove me nuts last night. My media Center PC out of the blue just started acting up with the generic host process for win32 services encountered a problem and needs to close (see error desc below) Also there was no sound, but everything was installed in HW manager.

I tried the usual reboots, made sure all my cards were snug, but no luck. Googling the error only got me a bunch of HP printer scanner driver issues that cause this, and of course the usual you got a virus etc...

No printers installed and no viruses here. So I went on my own.

Turns out almost 2 weeks ago I updated my ATI drivers to the latest catalyst, which reeked havoc on my TV output so I completely uninstalled all ATI software, and that annoying ATI control panel then reverted to an OLDER version on my drive that I knew worked. I experienced no issues until last night.

I noticed an ATI driver update was available so I uninstalled my working driver version and the ATI control panel and let windows update take care of the driver this time. After reboot all was well again.

I'm guessing this problem can relate to any hardware driver My guess is the new services added by the ATI control panel caused my problem, not sure why it took so long to surface.

My advice would be go back to the last driver you updated, uninstall it then re-install either the newest version. It's your call weather you want to get the driver from windows update or the manufacturer's site. If that doesn't work do them all ;) it may take a little while, but at least you will be updated.

Good luck.

Event Type:	Error
Event Source:	Application Error
Event Category:	(100)
Event ID:	1000
Date:		4/5/2005
Time:		11:35:19 PM
User:		N/A
Computer:	MEDIA-CENTER
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module ole32.dll, version 5.1.2600.2595, fault address 0x000020bb.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 76 63   ure  svc
0018: 68 6f 73 74 2e 65 78 65   host.exe
0020: 20 35 2e 31 2e 32 36 30    5.1.260
0028: 30 2e 32 31 38 30 20 69   0.2180 i
0030: 6e 20 6f 6c 65 33 32 2e   n ole32.
0038: 64 6c 6c 20 35 2e 31 2e   dll 5.1.
0040: 32 36 30 30 2e 32 35 39   2600.259
0048: 35 20 61 74 20 6f 66 66   5 at off
0050: 73 65 74 20 30 30 30 30   set 0000
0058: 32 30 62 62               20bb

Hey, this problem drove me nuts last night. My media Center PC out of the blue just started acting up with the generic host process for win32 services encountered a problem and needs to close (see error desc below) Also there was no sound, but everything was installed in HW manager.

I tried the usual reboots, made sure all my cards were snug, but no luck. Googling the error only got me a bunch of HP printer scanner driver issues that cause this, and of course the usual you got a virus etc...

No printers installed and no viruses here. So I went on my own.

Turns out almost 2 weeks ago I updated my ATI drivers to the latest catalyst, which reeked havoc on my TV output so I completely uninstalled all ATI software, and that annoying ATI control panel then reverted to an OLDER version on my drive that I knew worked. I experienced no issues until last night.

I noticed an ATI driver update was available so I uninstalled my working driver version and the ATI control panel and let windows update take care of the driver this time. After reboot all was well again.

I'm guessing this problem can relate to any hardware driver My guess is the new services added by the ATI control panel caused my problem, not sure why it took so long to surface.

My advice would be go back to the last driver you updated, uninstall it then re-install either the newest version. It's your call weather you want to get the driver from windows update or the manufacturer's site. If that doesn't work do them all ;) it may take a little while, but at least you will be updated.

Good luck.

Event Type:    Error
Event Source:    Application Error
Event Category:    (100)
Event ID:    1000
Date:        4/5/2005
Time:        11:35:19 PM
User:        N/A
Computer:    MEDIA-CENTER
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module ole32.dll, version 5.1.2600.2595, fault address 0x000020bb.
 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 76 63   ure  svc
0018: 68 6f 73 74 2e 65 78 65   host.exe
0020: 20 35 2e 31 2e 32 36 30    5.1.260
0028: 30 2e 32 31 38 30 20 69   0.2180 i
0030: 6e 20 6f 6c 65 33 32 2e   n ole32.
0038: 64 6c 6c 20 35 2e 31 2e   dll 5.1.
0040: 32 36 30 30 2e 32 35 39   2600.259
0048: 35 20 61 74 20 6f 66 66   5 at off
0050: 73 65 74 20 30 30 30 30   set 0000
0058: 32 30 62 62               20bb

hi i had the same prob: is it allowing you to do updates?if not then you need a file call enable your xp for updates if you dont have it email me and ill send it ....i installed it and worked fine havent had generic host 32 pop up ...what generic host 32 is that its not a virus its a file in xpsp2 that causes the error so you need to to do the updates hope this helps:idea:

hi i had the same prob: is it allowing you to do updates?if not then you need a file call enable your xp for updates if you dont have it email me and ill send it ....i installed it and worked fine havent had generic host 32 pop up ...what generic host 32 is that its not a virus its a file in xpsp2 that causes the error so you need to to do the updates hope this helps:idea:

Try this:
http://support.microsoft.com/?kbid=894391
there is a patch there the one for 32 bit Windows XP should work!

Hi!

About four weeks ago now, out of the blue the "Generic Host Process for Win32 Services ERROR" popped up. I reformatted my hard drive (had some other nasties in there too) and updated to XP Pro, and installed SP2 for the first time. Then the error popped up again, and i installed a Microsoft patch, and for a couple of weeks there, the error seemed to disappear. But now, as of two or so days ago now, it comes up every half our or so and all I can do is reboot my computer as the internet automatically stops working.

I did the suggestion to help you have more details on my system.. my event log is as follows.

Faulting application svchost.exe, version 5.1.2600.2180, faulting module netapi32.dll, version 5.1.2600.2180, fault address 0x0000a3c0.

Event ID: 1000.

and its just popped up (saying "Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience." so before im disconnected, i'll post this. any help would be appreciated! (and AVG and PANDA active havent found any viruses).

ThankyoU!

Hi!

About four weeks ago now, out of the blue the "Generic Host Process for Win32 Services ERROR" popped up. I reformatted my hard drive (had some other nasties in there too) and updated to XP Pro, and installed SP2 for the first time. Then the error popped up again, and i installed a Microsoft patch, and for a couple of weeks there, the error seemed to disappear. But now, as of two or so days ago now, it comes up every half our or so and all I can do is reboot my computer as the internet automatically stops working.

I did the suggestion to help you have more details on my system.. my event log is as follows.

Faulting application svchost.exe, version 5.1.2600.2180, faulting module netapi32.dll, version 5.1.2600.2180, fault address 0x0000a3c0.

Event ID: 1000.

and its just popped up (saying "Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience." so before im disconnected, i'll post this. any help would be appreciated! (and AVG and PANDA active havent found any viruses).

ThankyoU!

I've done some googling. It is quite possibly a hardware error that is triggering this.

But there is a suggestion that if you use a different browser than Internet Explorer (eg Firefox http://www.getfirefox.com) you wont encounter this problem when you are on the internet.
Also if you don't click the "dont send/send" buttons and just move it out of the way it seems that it will keep working along fine.

I know these aren't really fixes, more like work arounds...but they should help in the mean time, until you can test a different processor/ram it seems that even if people format and start again the error persists. So it could be that windows is having problems with certain hardware. Or that the hardware is faulty.

HTH
Luke

Also just found a bit of information that might help:
from : http://www.castlecops.com/postx164516-0-30.html
.........
I blocked RPC Locator (445) and DCOM RPC (135) and this seems to have fixed the problem. I did not block Netbios ports 137/138/139 as I have a LAN. The problem has not reared it's head again so far.. hopefully it will stay that way. .........

So try disabling those ports on the windows firewall .. if you have a seperate "connection" for your internet, you can disable file and print sharing on this connection...by default windows leaves port 445 open to the world.
So that might be something else to give a go.
there is a link to a program which i have not tried on the previous page: http://www.firewallleaktester.com/tools/wwdc.exe Windows Worms Door Cleaner
Which is also worth a try (to block those ports)
Luke

I just tried that utility, it works great! < the reason i've been interested in this is because one of my colleagues at work has been experiencing this problem, and as im on IT Support i've tried to find a fix for it...hopefully this is it...i'll get back to ya!

thankyou thankyou!!

thanks for all your suggestions and help :]

Around the time I first had the problem pop up I had put a new drive in my computer, I'm not sure if that had anything to do with a conflict or not.

and I've used the utility and blocked the ports and haven't had the problem since so hopefully that's done the fix!

thanks so much.. hopefully I wont be back around for a while lol.:)

thankyou thankyou!!

thanks for all your suggestions and help :]

Around the time I first had the problem pop up I had put a new drive in my computer, I'm not sure if that had anything to do with a conflict or not.

and I've used the utility and blocked the ports and haven't had the problem since so hopefully that's done the fix!

thanks so much.. hopefully I wont be back around for a while lol.:)

How do you Block the ports

How do you Block the ports

How do you block the ports this is driving me carzy thanks!

How do you block the ports this is driving me carzy thanks!

How do you Block the ports

The easiest way to block the ports in question is to download the Windows Worms Door Cleaner utility mentioned in one of the above posts. The utility lets you close different groups of vulnerable ports with the click of a button. Please pay attention to the caveats given here and in the utility regarding the effects that closing certain ports may have on your particular network.

Also see this post for more information on the problem.


Due to the fact that the source of the problem has been found, and a solution identified, this thread is now closed.

In accordance with our posting rules, other members having similar questions or problems need to start their own threads and post their questions there.
In order to help us help you most quickly, please include as much information about your problem as possible in your posts.

If the member who originally started this thread wishes to have the thread reopened, please send your request, including a link to this thread, to one of our moderators via email or Private Message.

Thank you.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.