Member Avatar for rgee

The message "Generic Host Process for Win 32 services has encountered a problem and needs to close" comes up each time I re-boot and seems to cause Sound Card, Firewall and other problems. This seems a common problem. I have looked at many postings and applied many suggested fixes but to no avail.

The error signature is
szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll
szModVer : 5.1.2600.2180 offset : 00011f6c

I have discovered from the windows sound troubleshooter that I can re-activate the sound card using the Add Hardware Wizard in Control Panel, but on re-booting the sound card once again cannot be found by programs that use it. So I have to reactivate it every time. Painful.

Also, Windows Firewall cannot be started. Other issues are intermittent problems with accessing the internet via Explorer, a different look to the task bar, and for a while unable to see removable drive in Windows explorer.

Actions taken include

Run AVG Antivirus daily. It comes up with a Kernel 32.dll error with a result of "changed", but the error still appears next time I run it.
Downloaded Regcure which claims to fix such problems (and paid for it), run and applied fixes with no impact on problem
Run Lavasoft Adaware Se, AVG Anti Spyware and Spybot Search and destroy and removed suggested items.
Downloaded win 32 fixes and other important updates from Microsoft.
Reinstalled Sound Driver 3 times - Realtek High Definition Audio Driver.

I am running XP Pro Media Center Edition version 2002 with service pack 2.

Is this a known virus and how do you get rid of it. Appreciate any help.

  • 2 Contributors
  • 2 Replies
  • 244 Views
  • 1 Year Discussion Span
  • Latest Post Latest Post by guroIII

Dani AI

Generated

This thread describes a recurring svchost/ntdll crash that takes down multiple services so audio, the firewall and Explorer behave as if devices or services disappeared. That pattern usually points at one of three things: corrupted system files, a faulty/incorrect driver or a third‑party service (including rootkits/malware) hooking into the service host. The following checklist focuses on diagnosing the crash reliably and recovering a stable system.

Start by capturing exactly when and which service dies: open Event Viewer (Application and System logs) and note the timestamp, the faulting module and the service names. Use a tool that maps services to each svchost instance (Process Explorer is ideal) or run the built‑in lookup. Then do a clean‑boot test (msconfig → hide Microsoft services → disable the rest) and reboot to see if a non‑Microsoft service is responsible.

Run these core repairs from an elevated command prompt to fix common system/file/stack issues:

sfc /scannow
chkdsk /f C:
netsh winsock reset
netsh int ip reset
tasklist /svc /fi "imagename eq svchost.exe"

If audio or firewall services still fail: uninstall the device/driver from Device Manager (choose to remove driver software if prompted), reboot, and install the latest vendor driver — preferably the one from the motherboard or PC maker rather than a generic package. For firewall failures, check the firewall-related services and their dependencies in Services.msc (start type and whether RPC/BFE-type services are running). If core services or BFE are corrupted and SFC cannot repair them, a Repair Install or restoring to a known good restore point is a reasonable next step (backup data first).

If malware or rootkits are possible, run an offline rescue scan (bootable rescue ISO) and a separate rootkit tool; run a thorough memory test (MemTest86+) if crashes reference ntdll. As later noted, applying the appropriate security fixes resolved their case — if updates fix your system, confirm stability and keep a current backup. Thanks to for confirming the thread was helpful.

Member Avatar for rgee

Well, the problem seems fixed. I have Microsoft Automatic updates turned on and today a security update was downloaded and applied and the problems have gone away!!!! The updates are - Security updates for Windows Internet Explorer 7 (KB938127) and (KB937143) Amazing that Microsoft could finally fix a problem. Maybe because I kept sending them the error report. I hope it stays fixed.

Member Avatar for guroIII

thx bro for that updates

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.