Error message at bootup: Generic Host Process for Win32 Services encountered a problem and needed to close

[Nate Goulet]

Error message at bootup: Generic Host Process for Win32 Services
encountered a problem and needed to close

Setup a new PC, immediately installed all Microsoft Critical updates
than eTrust corporate anti-virus & updated that.

No signs of a problem the first day. Shut down many times etc.
Turn the machine on the next day, and saw the following error at
startup after the desktop loaded.


"Generic Host Process for Win32 Services encountered a problem and
needed to close.

This error occurred on 3/28/2005 at 4:28:41 PM.

Details mentioned szappname: svchost.exe"

I shut down a few times today, ran FireFox 1.0.2 again, and didn't see
it. This seemed to pop up today after I had run FireFox, shut the
machine down, and turned the machine back on. Then the message came
up after loading the desktop. I had no errors or problems the first
time turning using it or while shutting down.

Running Symantec's online Security Check mentioned port 1723 was open.
Description is PPTP (Point-to-Point Tunneling Protocol). This service
is used for virtual private networking connections.

This pc has been run for 3 days without seeing this problem again. I
installed a new hard drive in another pc, and had the exact same
problem!

Help.

[David H. Lipman]

From: "Nate Goulet" <askifyouwantaaddress@yahoo.com>

| Error message at bootup: Generic Host Process for Win32 Services
| encountered a problem and needed to close
|
| Setup a new PC, immediately installed all Microsoft Critical updates
| than eTrust corporate anti-virus & updated that.
|
| No signs of a problem the first day. Shut down many times etc.
| Turn the machine on the next day, and saw the following error at
| startup after the desktop loaded.
|
| "Generic Host Process for Win32 Services encountered a problem and
| needed to close.
|
| This error occurred on 3/28/2005 at 4:28:41 PM.
|
| Details mentioned szappname: svchost.exe"
|
| I shut down a few times today, ran FireFox 1.0.2 again, and didn't see
| it. This seemed to pop up today after I had run FireFox, shut the
| machine down, and turned the machine back on. Then the message came
| up after loading the desktop. I had no errors or problems the first
| time turning using it or while shutting down.
|
| Running Symantec's online Security Check mentioned port 1723 was open.
| Description is PPTP (Point-to-Point Tunneling Protocol). This service
| is used for virtual private networking connections.
|
| This pc has been run for 3 days without seeing this problem again. I
| installed a new hard drive in another pc, and had the exact same
| problem!
|
| Help.

It sounds like a MS Critical Update installed impoperly.

Try running System File Checker (SFC.EXE) to try repair in the DLLs.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Nate Goulet]

A few people have mentioned this cause sounds like it was likely a MS
Critical Update. In particular, I was told to disable the file
dumpprep from MsConfig.

Someone else had mentioned to run the System File Checker, which I
ended up running on both pcs.

The generic host error has not recurred in a few days on either
machine. The 3rd Windows XP machine did not seem to contain the
dumpprep file, so it seems they may be correct about the cause of
this glitch.

What exactly do you mean by "improperly installed"?.

One of these pc's came pre-installed from Dell with XP Service Pack 2.
The first thing I did was install all of the current updates before
anything else was done on the pc. The XP Firewall was enabled, etc.
I used the Windows update link from the control panel, so it hadn't
even surfed the web other than that.

I'm also wondering why the 3rd machine, which is also a Dell Dimension
2400, did not seem to install whatever patch put dumpprep into
MsConfig. I had double checked that it didn't need any more updates
recently.

Thanks for any help on the issue. I want to be certain
nothing is port scanning our small company's network.

>
>It sounds like a MS Critical Update installed impoperly.
>
>Try running System File Checker (SFC.EXE) to try repair in the DLLs.
>
>--
>Dave
>http://www.claymania.com/removal-trojan-adware.html
>http://www.ik-cs.com/got-a-virus.htm
>
>

[David H. Lipman]

From: "Nate Goulet" <askifyouwantaaddress@yahoo.com>

| A few people have mentioned this cause sounds like it was likely a MS
| Critical Update. In particular, I was told to disable the file
| dumpprep from MsConfig.
|
| Someone else had mentioned to run the System File Checker, which I
| ended up running on both pcs.
|
| The generic host error has not recurred in a few days on either
| machine. The 3rd Windows XP machine did not seem to contain the
| dumpprep file, so it seems they may be correct about the cause of
| this glitch.
|
| What exactly do you mean by "improperly installed"?.
|
| One of these pc's came pre-installed from Dell with XP Service Pack 2.
| The first thing I did was install all of the current updates before
| anything else was done on the pc. The XP Firewall was enabled, etc.
| I used the Windows update link from the control panel, so it hadn't
| even surfed the web other than that.
|
| I'm also wondering why the 3rd machine, which is also a Dell Dimension
| 2400, did not seem to install whatever patch put dumpprep into
| MsConfig. I had double checked that it didn't need any more updates
| recently.
|
| Thanks for any help on the issue. I want to be certain
| nothing is port scanning our small company's network.
|

Nate:

When I stated "improperly installed" it was not inferring you did anything wrong, it means
that the HotFix did not install correctly. Sometimes you have to download the EXE file for
a HotFix and install it in Safe Mode for a successful installation.

Please submit "dumpprep.*" to virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against several different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm