Mar

3

Generic Host Process for Win32 Services has encountered a problem

Filed Under Virus | 

hello!

i have a problem in my windows XP …….it gives a warning— win 32 is having a problem and need to be closed and on clicking "don’t send error" the audio just goes off…. and then if i start audio by going into run->services.msc den it works but after around 20 minutes, it creates the same problem …plz help me

i used the DDS utility and got the following results

1. Attach.txt—

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-01-18.01)

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 8/9/2008 11:01:39 PM

System Uptime: 1/20/2009 5:26:23 PM (1 hours ago)

Motherboard: Quanta | | 30BB

Processor: Genuine Intel(R) CPU T2080 @ 1.73GHz | U2E1 | 1729/533mhz

Processor: Genuine Intel(R) CPU T2080 @ 1.73GHz | U2E1 | 1729/533mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 20 GiB total, 8.292 GiB free.

D: is FIXED (NTFS) - 20 GiB total, 5.417 GiB free.

E: is FIXED (NTFS) - 16 GiB total, 1.38 GiB free.

F: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description: Modem Device on High Definition Audio Bus

Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_5045&SUBSYS_103C30BB&REV_1001\4&D5F8BB4&0&0002

Manufacturer:

Name: Modem Device on High Definition Audio Bus

PNP Device ID: HDAUDIO\FUNC_02&VEN_14F1&DEV_5045&SUBSYS_103C30BB&REV_1001\4&D5F8BB4&0&0002

Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description: Network Controller

Device ID: PCI\VEN_14E4&DEV_4311&SUBSYS_1364103C&REV_01\4&192AC53F&0&00E0

Manufacturer:

Name: Network Controller

PNP Device ID: PCI\VEN_14E4&DEV_4311&SUBSYS_1364103C&REV_01\4&192AC53F&0&00E0

Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description:

Device ID: ACPI\HPQ0006\4&38462492&0

Manufacturer:

Name:

PNP Device ID: ACPI\HPQ0006\4&38462492&0

Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description: SM Bus Controller

Device ID: PCI\VEN_8086&DEV_27DA&SUBSYS_30BB103C&REV_02\3&B1BFB68&0&FB

Manufacturer:

Name: SM Bus Controller

PNP Device ID: PCI\VEN_8086&DEV_27DA&SUBSYS_30BB103C&REV_02\3&B1BFB68&0&FB

Service:

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

8085 Simulator

8085 Simulator 2.0

8085 Simulator IDE v2.30

8085 Simulator IDE v2.30 (C:\Program Files\8085 Simulator IDE\)

Adobe Bridge 1.0

Adobe Common File Installer

Adobe Flash Player 10 Plugin

Adobe Help Center 1.0

Adobe Photoshop CS2

Adobe Reader 8.1.3

Adobe Shockwave Player 11

Adobe Stock Photos 1.0

Apple Mobile Device Support

Apple Software Update

Atomic Alarm Clock 5.65

avast! Antivirus

Big Fish Games Client

Bonjour

Concise Oxford Dictionary (Tenth Edition)

Conexant HD Audio

Convert PPT to PDF For PowerPoint 3.00

Defragmenter Lite Plus

Dev-C 5 beta 9 release (4.9.9.2)

Disk Doctors Undelete Version 1.0.0

Disk Doctors Windows Data Recovery 1.0.0

DNA

Gaim (remove only)

GOM Player

Google Chrome

Google Earth

Google Talk (remove only)

Google Toolbar for Internet Explorer

GTK Runtime 2.10.6 rev a (remove only)

Guru’s GRE Wordlist 0.2

HP Wireless Assistant

ibibo Messenger

Intel(R) Graphics Media Accelerator Driver

Intel(R) PRO Network Connections Drivers

iTunes

LingvoSoft Dictionary 2006 (English<->Hindi) for Windows

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office Groove MUI (English) 2007

Microsoft Office Groove Setup Metadata MUI (English) 2007

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office OneNote MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word MUI (English) 2007

Microsoft Software Update for Web Folders (English) 12

Microsoft Speech API 4.0

Microsoft Text-to-Speech Engine

Mozilla Firefox (3.0.5)

MP3 Compressor

MSN

NetBeans IDE 5.5

Opera 9.50

Pdf995

Perfect Sudoku

Picasa 2

Pure Sudoku 1.51

Puzzle Mania

QuickTime

Real Alternative 1.8.2

Safari

SCRABBLE�

Shipra’s Dictionary 1.0

Software Update for Web Folders

Sudoku Puzzle Solver

Super TextTwist

The KMPlayer (remove only)

VLC media player 0.9.8a

Vocab Builder

WakeUp! Alarm Clock

Web Sudoku Deluxe 1.2.2

Winamp

Windows Media Format 11 runtime

Windows Media Player 11

Windows Media Player Firefox Plugin

WinRAR archiver

WordCommand

Xmanager 3

Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

1/14/2009 1:21:19 PM, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: An instance of the service is already running.

1/14/2009 1:05:53 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer ‘time.windows.com,0×1′. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0×80072751)

1/13/2009 11:48:18 PM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: Access is denied.

1/16/2009 7:58:09 AM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer PINKI that believes that it is the master browser for the domain on transport NetBT_Tcpip_{283D1B44-B9F6-425B-933. The master browser is stopping or an election is being forced.

1/16/2009 1:27:59 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer DELL-CEA1CDAB7E that believes that it is the master browser for the domain on transport NetBT_Tcpip_{283D1B44-B9F. The master browser is stopping or an election is being forced.

1/17/2009 1:22:03 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer MNNIT-96EC0B396 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{283D1B44-B9F. The master browser is stopping or an election is being forced.

1/18/2009 10:39:10 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.

==== End Of File ===========================

and

2.DDS.txt

DDS (Ver_09-01-18.01) - NTFSx86

Run by jitu at 18:18:40.65 on Tue 01/20/2009

Internet Explorer: 7.0.5730.11

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.502.107 [GMT 5.5:30]

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

svchost.exe

svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Documents and Settings\jitu\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

C:\Program Files\DNA\btdna.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\Program Files\Google\Google Talk\googletalk.exe

C:\Program Files\VideoLAN\VLC\vlc.exe

C:\Program Files\Opera\opera.exe

C:\Documents and Settings\jitu\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com

uStart Page = hxxp://lookanddiscover.com/

uSearch Bar = hxxp://www.google.com/ie

mDefault_Page_URL = hxxp://in.yahoo.com

mStart Page = hxxp://in.yahoo.com

uInternet Settings,ProxyServer = 172.31.100.29:3128

uInternet Settings,ProxyOverride = *.local

uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

BHO: NoExplorer - No File

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll

TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll

uRun: [Google Update] "c:\documents and settings\jitu\local settings\application data\google\update\GoogleUpdate.exe" /c

uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"

uRun: [swg] c:\program files\google\googletoolbarnotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [IgfxTray] c:\windows\system32\igfxtray.exe

mRun: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe

mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"

dRunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32

StartupFolder: c:\docume~1\jitu\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE

StartupFolder: c:\documents and settings\all users\start menu\programs\startup\winsched.exe

IE: Add to ibibo emoticons - c:\program files\ibibo\messenger\AddEmotion.htm

IE: Add To ibibo Messenger Emoticons - c:\program files\ibibo\messenger\AddEmotion.htm

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000

IE: {ADD95BB1-8B6D-4e0e-A067-8977989F9895} - c:\program files\ibibo\messenger\ibibomsgr.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL

Trusted Zone: google.com\dl

Trusted Zone: google.com\gpdl

Trusted Zone: google.com\tools

Trusted Zone: googlevideo.com\cache

TCP: {283D1B44-B9F6-425B-9337-5DBA7C11AB9E} = 172.31.100.29,172.31.100.8

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL

Notify: igfxcui - igfxdev.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL

SecurityProviders: schannel.dll, digest.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jitu\applic~1\mozilla\firefox\profiles\33ll5one.default\

FF - prefs.js: network.proxy.ftp - 172.31.100.29

FF - prefs.js: network.proxy.ftp_port - 3128

FF - prefs.js: network.proxy.gopher - 172.31.100.29

FF - prefs.js: network.proxy.gopher_port - 3128

FF - prefs.js: network.proxy.http - 172.31.100.29

FF - prefs.js: network.proxy.http_port - 3128

FF - prefs.js: network.proxy.socks - 172.31.100.29

FF - prefs.js: network.proxy.socks_port - 3128

FF - prefs.js: network.proxy.ssl - 172.31.100.29

FF - prefs.js: network.proxy.ssl_port - 3128

FF - prefs.js: network.proxy.type - 1

FF - plugin: c:\program files\ibibo\messenger\npibiboMsgrWebPlugin.dll

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-9-25 111184]

R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2008-9-25 254040]

R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2008-9-25 352920]

R4 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2008-9-25 155160]

=============== Created Last 30 ================

2009-01-20 14:08 <DIR> –d-h— c:\windows\system32\GroupPolicy

2009-01-18 22:03 <DIR> –d—– c:\program files\Disk Doctors Windows Data Recovery (Demo)

2009-01-18 22:01 <DIR> –d—– c:\program files\Disk Doctors Undelete

2009-01-18 21:18 <DIR> –d—– c:\docume~1\jitu\applic~1\NetSarang

2009-01-18 21:17 <DIR> –d—– c:\program files\NetSarang

2009-01-18 21:17 <DIR> –d—– c:\docume~1\alluse~1\applic~1\NetSarang

2009-01-18 21:17 <DIR> –d—– c:\program files\common files\NetSarang

2009-01-18 08:55 23,552 a——- C:\MsnVirRem.exe

2009-01-15 17:37 <DIR> –d—– c:\docume~1\jitu\applic~1\ibibo messenger

2009-01-15 17:18 <DIR> –d—– c:\program files\ibibo

2009-01-10 17:32 <DIR> –d—– c:\program files\8848Soft

2009-01-07 19:50 <DIR> –d—– c:\program files\bfgclient

2009-01-07 19:48 <DIR> –d—– c:\program files\Pure Sudoku

2009-01-07 19:46 <DIR> –d—– c:\docume~1\alluse~1\applic~1\BigFishGamesCache

2009-01-07 19:46 <DIR> –d—– c:\program files\Yahoo!

2009-01-07 19:45 <DIR> –d—– c:\program files\Shockwave.com

2009-01-07 19:45 <DIR> –d—– c:\program files\Sudoku

2009-01-07 19:45 412,672 a——- c:\windows\system32\vbskpro2.ocx

2009-01-07 19:44 <DIR> –d—– c:\program files\WebSudokuDeluxe

2009-01-05 17:25 <DIR> –d—– C:\****

==================== Find3M ====================

2008-12-11 00:41 286,720 ——– c:\windows\Setup1.exe

2008-11-24 21:08 56,852 a—h— c:\windows\system32\mlfcache.dat

2008-11-24 19:45 122,880 a——- c:\windows\system32\pdfmona.dll

2008-11-24 19:45 51,716 a——- c:\windows\system32\pdf995mon.dll

2008-11-05 09:21 73,216 ——– c:\windows\ST6UNST.EXE

2008-08-09 23:02 16,384 a–sh— c:\windows\system32\config\systemprofile\cookies\index.dat

2008-08-09 23:02 32,768 a–sh— c:\windows\system32\config\systemprofile\local settings\history\history.ie5\index.dat

2008-08-09 23:02 32,768 a–sh— c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008080920080810\index.dat

2008-08-09 23:02 32,768 a–sh— c:\windows\system32\config\systemprofile\local settings\temporary internet files\content.ie5\index.dat

============= FINISH: 18:19:07.93 ===============

HELP ME OUT!

thanx in advance

Welcome to linabbs unreliable :)

Please go to Windows Update and do a custom scan for updates. If KB958644 is available, please install it and restart the computer. Let me know if the problem persists.

If that update is not offered, go to the Windows Update Catalog and search for KB958644

Add the download for your system to the basket, download it and install. Reboot when done and let me know the results.

Related Posts:

written by lina \\ tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

Comments

Leave a Reply

You must be logged in to post a comment.