Generic host error

this is the scan i done

Logfile of HijackThis v1.99.1
Scan saved at 16:47:36, on 01/03/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\BT Broadband\Help\bin\mpbtn.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Mark\My Documents\HJT\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bt.com/btbroadbandstart
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband\Help\bin\matcli.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{9542B53F-F249-4A54-8ED1-BDCA1770EE0B}: NameServer = 194.72.9.38 194.74.65.69
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

HiJackThis logs should be posted in the Viruses, Spyware, and other Nasties forum.

sorry m8 i didnt know i sent you a pm im new to pc's and i am still learning how to use them

im a bit confused if that file is in there do i just delete it

do i not reply to this anymore it was a friend that said to come here im hopeless sorry.

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

do i delete this

maybe its my ram ive read the thing now m8 no problem didnt know if this was a site for learning or not

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

do i delete this

Nope- it's part of your soundcard software.

Your HJT log is totally clean, and since you've encountered the "generic host" error with three installs of XP, I'd say that malicious infections aren't the problem.

The "Generic Host Process for Win32 Services" is a file named svchost.exe; it is a core Windows file which manages/handles various processes running on your system.

The error message that you're getting is basically svchost.exe telling you it is encountering problems with one of the processes it is handling. To determine the real culprit, you need to identify the process that is causing svchost to choke. You can usually do this by looking deeper into the information contained in the full error message; the info which identifies the specific problem will be similar to:

szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll 
szModVer : 5.1.2600.2180 offset : 00018fea

The ModName and ModVer entries identify the specific .dll file that's causing svchost trouble.

Just FYI: Norton/Symantec products have a bit of a history of causing such errors.

Thanks for taking the time to have a look at my message. I understand what you are saying ive actually fixed the error by doing a ram check and finding that my ram had been causing the problem, It is now working perfect Im thinking of getting another AntiVirus, Norton has gave me problems before, I liked Panda Platinum A.V i had it before but seem to have lost the disc

thanks again for your patience

So is this site here for people to learn if so i would be happy to learn and maybe help people in future

best wishes Costa

this is what it says when i check technical info

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\svchost.exe.mdmp

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\appcompat.txt

this is what it says when i check technical info

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\svchost.exe.mdmp

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\appcompat.txt

Hi Costa,

That's only the top portion of the info I was looking for; below those lines there should be more information which looks similar to:

szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : unknown
szModVer : 0.0.0.0 offset : 00000000

That part of the info is the part which could tell us the exact name of the module/file which was being affected.

So is this site here for people to learn if so i would be happy to learn and maybe help people in future

Yes- we're here not only to help people solve their immediate problems, but also to help them learn about their computers so that they can help themselves (and perhaps even others) in the future.

I would guess that most of us who volunteer our help in technical support forums probably first came to the forums because we were looking for answers to problems ouselves. Now that we've learned more, we return the favor by helping others. :)

Hi again

Ive finally got rid of the problem, thanks to you mentioning that Norton AV usually causes these problems i decided to wipe my pc again without installing Norton and its been about a week now with no error report so this must have been the source of the problem. I recommend no-one uses Norton

Thanks again for your help and i hope to be of some use in future.

Take Care
from Costa :cheesy:

I recommend no-one uses Norton

Unfortunately, that advice is becoming more valid.

Norton used to make pretty good and reliable products, but it seems that all of the "features" they're adding in their new releases are bringing a lot of bugs/conflicts with them. Although in all fairness- McAfee's latest offerings suffer from the same sorts of problems.

Nope- it's part of your soundcard software.

Your HJT log is totally clean, and since you've encountered the "generic host" error with three installs of XP, I'd say that malicious infections aren't the problem.

The "Generic Host Process for Win32 Services" is a file named svchost.exe; it is a core Windows file which manages/handles various processes running on your system.

The error message that you're getting is basically svchost.exe telling you it is encountering problems with one of the processes it is handling. To determine the real culprit, you need to identify the process that is causing svchost to choke. You can usually do this by looking deeper into the information contained in the full error message; the info which identifies the specific problem will be similar to:

szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : ntdll.dll 
szModVer : 5.1.2600.2180 offset : 00018fea

The ModName and ModVer entries identify the specific .dll file that's causing svchost trouble.

Just FYI: Norton/Symantec products have a bit of a history of causing such errors.

This is the exact error message that I am getting; however, I don't know what to do about it. If it was explained somewhere earlier in the thread, I seem to be missing it and am sorry.

The error message would come up when my computer starts up, afterwards the sound goes out. While looking for other people with this problem, I found someone who could atleast get the sound working again. "The same happened to me and this is how I fixed it:

CONTROL PANE>ADMINISTRATION SERVICES>SERVICES>SCROLL DOWN TO 'WINDOWS AUDIO' AND START THE SERVICE (HIGHLIGHT IT AND THEN CLICK ON START)"

I have seen in this thread a similar problem that I am having. I am getting this error message and can't seem to get rid of it. I saw one user was having problems due to Norton Antivirus, I am using Panda Titanium, I don't know if that is the problem. Please help.

Generic Host Process for Win32 Services encountered a problem and needed to close.

EventType : BEX P1 : svchost.exe P2 : 5.1.2600.2180 P3 : 41107ed6
P4 : unknown P5 : 0.0.0.0 P6 : 00000000 P7 : 00c696bc
P8 : c0000005 P9 : 00000008

C:\DOCUME~1\CUSINB~1\LOCALS~1\Temp\WER05c5.dir00\svchost.exe.mdmp
C:\DOCUME~1\CUSINB~1\LOCALS~1\Temp\WER05c5.dir00\appcompat.txt

I'm hoping that someone can help me.

Thank you,
Bruce

Hi Bruce,

First of all- welcome to DaniWeb :)

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (the exact error messages, relevant hardware/software specs, etc.).

Also: One of our site's policies is that we don't troubleshoot via email/IM/etc., for the simple reason that having problems and the steps to their resolutions posted here in the forums can assist others in the future. Given that, I've edited your email address from post.

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_policies

Thanks for understanding.