Member Avatar for Pattiewithaprob

I'm on a custom Alienware laptop, running Windows XP. I've been having issues for about 4 days with a Generic Host Win22 error message. About 10 minutes later my taskbar turns white and looks all Windows 98 funky.

I have read several of the threads on this problem and am starting my own.

I would like to add that I have Malwarebytes and Exterminate It! on my computer and have run them dozens of times without either detecting a problem. I have since downloaded several other programs and will include any logs in further posts. (Waiting for D.D.S. to complete...)

Here's the latest Malwarebytes log:

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Database version: 6467

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

4/28/2011 10:11:45 PM
mbam-log-2011-04-28 (22-11-45).txt

Scan type: Full scan (C:\|)
Objects scanned: 238461
Time elapsed: 54 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Edited by Pattiewithaprob because: n/a
  • 2 Contributors
  • 4 Replies
  • 211 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by jholland1964

Dani AI

Generated

Short practical summary and next steps (grounded in what has described and ’s advice).

The “Generic Host…” message you mentioned usually refers to svchost.exe and can be caused by bad updates/drivers or by malware that hooks services — when that is combined with a white/“Win98” taskbar, lost audio and browser hijacks it often means something is interfering with Explorer/svchost at a low level. Microsoft’s guidance on svchost/Automatic Updates explains the common Windows-side causes and why this error can look the way it does. (support.microsoft.com)

Short triage (what to do first)

  1. Disconnect the machine from the network and don’t use it for banking or email until cleaned.
  2. Use another (clean) PC to download tools and copy them to a USB stick.
  3. Back up irreplaceable data (documents, photos) from the infected machine before deep remediation — copy files from Safe Mode or use a Linux/Rescue-USB so you don’t preserve active malware.

Suggested, safe workflow to try now

  1. Boot Safe Mode (F8) and, as @jholland1964 recommended, remove any suspicious/unofficial scanners first.
  2. Run RKill to stop known malicious processes so cleaners can run. (bleepingcomputer.com)
  3. Run an on-demand hijacker/adware cleaner such as AdwCleaner to remove toolbars/search hijacks and PUPs. (bleepingcomputer.com)
  4. If scanners won’t run or DDS keeps crashing, use an offline bootable scanner (Kaspersky Rescue Disk or Kaspersky’s KVRT) to scan outside Windows — this can find rootkits that break scanners running inside the OS. (support.kaspersky.com)

Notes, cautions and when to escalate

  • If DDS (or other scanners) crash repeatedly, that’s often a sign of a persistent/rootkit infection; offline rescue media scan is the right next move. (bleepingcomputer.com)
  • Do not run aggressive tools like ComboFix unless a trusted malware-removal expert requests it — those tools can make things worse if used incorrectly. (bleepingcomputer.com)
  • If the system stays unstable after these steps, back up data and consider a clean OS reinstall or have the in‑home technician proceed (collect and save logs/screenshots for them first).

If the machine is still crashing while you try these steps, note any exact error text or file paths and save them — those details are what removal experts use to target rootkits and broken services.

Recommended Answers

All 4 Replies

Member Avatar for Pattiewithaprob

Much as I would like to post more logs, I keep getting a connection reset report. It's just not my night.

Member Avatar for Pattiewithaprob

Okay, who knows how long this session will last.

I cannot get DDS to complete. The system basically crashes when I get to the end. No kidding, last night the cheeky computer told me I was not authorized to turn it off! Very Hal. :)

I have an appointment for a $95 per hour in house person to look at it on Tuesday, but if anyone has ANY suggestions as to a next step, I'm all ears. I'll be moving to the travel laptop for the duration.

Thanks in advance!

Member Avatar for jholland1964

Did you Uninstall that Exterminate It program? You MUST do that immediately.
Boot to Safe Mode and try running DDS Scanner.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.