Generic Host Process for Win 32 Services nightmare

  • Thread starter Thread starter Scott
  • Start date Start date
S

Scott

Hi - 2 days ago I had an error message pop up saying:
"Data Execution Prevention - Microsoft Windows
To help protect your computer, Windows has closed this program.
Name: Gerneric Host Process for Win 32 Services"

I closed it and rebooted my system and didn't notice anything for a few
hours until I went to watch an AVI file and there was no sound. Reboot again
and the sound returned. Then the error message popped up again. I closed it
and my tool/taskbar shrank to the default size (I normally keep it at double
height). No Sound.

I went to the update site and installed any of the high priority updates I
had missed lately. The problem continued. I attempted to do a System Restore,
but all of my restore points had been erased. I created a new one and it was
gone after the next reboot/error cycle.

I did some research and found various solutions to this problem going back
to 2005, but none of them seem to fit and I have already installed the
Security Update that was blamed for the issue a few years ago. When most of
the responses talked of malware and serious issues, I checked my Windows
firewall and got the following when I clicked on it:

"Windows Firewall settings cannot be displayed because the associated
service is not running. Do you want to start the Windows Firewall/Internet
Connection Sharing (ICS) service?"

Click YES and I'll sometimes get the Firewall window to pop up and I can be
sure it's on only to have the task/toolbar reset its size and the audio go
out again within 30 mins and the Firewall go down again. If I try to start it
again without rebooting, it simply isn't available.

I've been running McAfee full scans and spybot after every attmept, but I'm
honestly too scared of what could be going on when that Firewall drops. I've
actually disconnected the ethernet cable from the back for safety's sake
until I can get this fixed. And I still get the start up/shut down sounds and
sometimes sounds for a few other programs, but no Windows Media or iTunes.

I really cannot afford to get a new PC right now so I have got to get this
back. I honestly don't recall installing any updates or doing anything
different before this problem started and it really came out of the blue. I'm
so sorry for the length of this, but I'm not computer tech savvy and had to
put it in as much "plain" speak as possible. I appreciate any help or advice
you can offer. You'll be a lifesaver.

Thanks -
Scott
 
Scott

http://bertk.mvps.org/html/healthy.html
http://bertk.mvps.org/html/missingrps.html

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Scott said:
Hi - 2 days ago I had an error message pop up saying:
"Data Execution Prevention - Microsoft Windows
To help protect your computer, Windows has closed this program.
Name: Gerneric Host Process for Win 32 Services"

I closed it and rebooted my system and didn't notice anything for a few
hours until I went to watch an AVI file and there was no sound. Reboot
again
and the sound returned. Then the error message popped up again. I closed
it
and my tool/taskbar shrank to the default size (I normally keep it at
double
height). No Sound.

I went to the update site and installed any of the high priority updates I
had missed lately. The problem continued. I attempted to do a System
Restore,
but all of my restore points had been erased. I created a new one and it
was
gone after the next reboot/error cycle.

I did some research and found various solutions to this problem going back
to 2005, but none of them seem to fit and I have already installed the
Security Update that was blamed for the issue a few years ago. When most
of
the responses talked of malware and serious issues, I checked my Windows
firewall and got the following when I clicked on it:

"Windows Firewall settings cannot be displayed because the associated
service is not running. Do you want to start the Windows Firewall/Internet
Connection Sharing (ICS) service?"

Click YES and I'll sometimes get the Firewall window to pop up and I can
be
sure it's on only to have the task/toolbar reset its size and the audio go
out again within 30 mins and the Firewall go down again. If I try to start
it
again without rebooting, it simply isn't available.

I've been running McAfee full scans and spybot after every attmept, but
I'm
honestly too scared of what could be going on when that Firewall drops.
I've
actually disconnected the ethernet cable from the back for safety's sake
until I can get this fixed. And I still get the start up/shut down sounds
and
sometimes sounds for a few other programs, but no Windows Media or iTunes.

I really cannot afford to get a new PC right now so I have got to get this
back. I honestly don't recall installing any updates or doing anything
different before this problem started and it really came out of the blue.
I'm
so sorry for the length of this, but I'm not computer tech savvy and had
to
put it in as much "plain" speak as possible. I appreciate any help or
advice
you can offer. You'll be a lifesaver.

Thanks -
Scott
Click to expand...


Scott:
Unfortunately there are myriad causes for the error message you've been
receiving and the problems you've been encountering. And these causes can be
the result of a hardware or software issue or a combination of both.

In many cases the problem results from a corrupted OS. If this be so, how &
why the system became corrupted is of no concern to us at this point unless
there's a malware infestation. Anyway, we'll initially proceed on the basis
that the cause of your problem(s) is system corruption of one sort or
another.

You indicate that based on your research you've "found various solutions to
this problem going back to 2005, but none of them seem to fit...". Since you
haven't indicated what steps you've taken to (hopefully) resolve the problem
we'll start from the beginning, so to speak.

1. Presumably your system is free of malware as best you can determine.
2. I assume your boot proceeds without incident. The problems begin sometime
after you've booted to your Desktop, yes?
3. We'll assume your problem(s) occurred "out-of-the-blue". One day the
system worked perfectly; the next day your troubles began. That's right,
isn't it? So you have no clue what could have caused these problems, right?
4. Have you tried running the sfc /scannow & chkdsk /r commands? If not,
this would be a good place to start.
5. If the above commands do not result in resolving the problem, consider
undertaking a Repair install of the OS. Details follow...

Assuming you have a non-OEM-branded XP installation CD at your disposal and
not merely an OEM recovery CD or recovery partition situation, you might
consider running a Repair install of the XP OS at this point in time in view
of your other futile attempts to get the system up & running. Hopefully your
XP installation CD will contain SP3 or at least SP2.

I assume you've never done this before so here's some general info on the
process...

Undertaking a Repair install of the OS is a relatively straightforward
process. It would be roughly akin to making a fresh install of the OS, but
in nearly every case your existing programs & user-created data would be
retained. Notice I said "nearly". While it would be a rather rare situation
where data would be lost or corrupted as a result of the Repair install, and
as unlikely as it may be, it *could* happen.

So if there are any programs and/or other data on your present drive that
are absolutely crucial to you and you could not tolerate their loss, then I
would strongly suggest that before undertaking this Repair install operation
that you first either make a "clone" of your existing HDD (using a disk
imaging program) or, if that's not practical, install the HDD in another
machine as a secondary HDD so that you can pull off whatever data you want
onto some removable media, e.g., flash drive, CD, etc.

Again, while it's a relatively rare event that a loss or corruption of data
will occur even when the Repair install is unsuccessful, it *can* happen. So
I want you to be aware of this. I should also mention that there's a similar
possibility of further data corruption when the chkdsk /r command is invoked
(as suggested above). Again, while the danger of such is slight, it's still
a possibility.

There are a number of websites that contain detailed information on the
Repair install process. Let me assure you that it's not a difficult process
and not terribly time-consuming. As I've indicated it's roughly similar to
making a fresh install of the XP OS. If you do a Google search on "XP repair
install", you'll be pointed to many of these websites that contain
step-by-step instructions for undertaking a Repair install. Here are a
few...
http://www.michaelstevenstech.com/XPrepairinstall.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winxppro/installxpcdrepair/indexfullpage.htm
http://support.microsoft.com/default.aspx?scid=kb;en-us;315341

Assuming the Repair install is successful, you should use your A-V program
to immediately check out your PC for any virus infestation. Also, you will
need to download/install *all* the MS critical updates since SP3. (I'm
assuming that if you undertake this Repair install of the XP OS, you will be
doing so with a XP installation CD that contains SP3).

Anyway, give this Repair install of the OS some thought if you can't get
your system back to a functional state any other way.

Just one other thing...
It's conceivable that you're dealing with some hardware-type problem here
and not just a corruption of the OS. Where a hardware-type problem is the
culprit in cases like the one you describe, it's usually the HDD that's
defective although it's entirely possible some other major component of your
system may be at the root of the problem you're experiencing. In any event,
it's possible that you may be dealing with a defective HDD so it probably
would be wise at this point to check out the HDD with a HDD diagnostic
utility you can (usually) download from the website of the disk's
manufacturer. It's very easy to use - the downloaded program allows you to
create either as a bootable floppy disk or bootable CD containing the HDD
diagnostic program. So give that some consideration.
Anna
 
Hello Gerry -

I started up, connected to the internet again and installed 2 new security
updates and a new Malicious Software Removal tool from Microsoft updates, but
the problem still persists. I, for the time being, seem to have been able to
keep WIndows firewall up for about 30 mins, but still no audio from media
player, itunes, or even youtube. I'll post the most recent error messages
since my last reboot after installing the updates. If anything further back
would help, let me know and I'll add them. Thanks much for taking the time to
help!

Again, I have to apologize for the length, but I'm going to post all of the
most recent error messages. I get 9 System error messages in a row and then a
10th withing a few minutes each time over the past 48 hours.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 3/10/2009
Time: 2:02:24 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 20 30 2e ure 0.
0018: 30 2e 30 2e 30 20 69 6e 0.0.0 in
0020: 20 75 6e 6b 6e 6f 77 6e unknown
0028: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0030: 20 61 74 20 6f 66 66 73 at offs
0038: 65 74 20 30 30 30 30 30 et 00000
0040: 30 30 30 000



Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 3/10/2009
Time: 1:25:25 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
Fault bucket 1179356785.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 31 31 37 39 33 35 36 37 11793567
0010: 38 35 0d 0a 85..



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/10/2009
Time: 1:54:39 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Computer Browser service terminated with the following error:
This operation returned because the timeout period expired.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/10/2009
Time: 1:50:16 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Remote 2009 service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/10/2009
Time: 1:50:16 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Remote service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (UPnP) service depends on the VAIO Media Music
Server (HTTP) service which failed to start because of the following error:
The dependency service or group failed to start.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (HTTP) service depends on the VAIO Media Music
Server (Application) service which failed to start because of the following
error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (Application) service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
Timeout (30000 milliseconds) waiting for the VAIO Media Music Server
(Application) service to connect.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Network Ming service terminated with the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Capture Device Service service failed to start due to the following
error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/10/2009
Time: 1:49:40 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The AOL Spyware Protection Service service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
Scott

How old is your Sony computer?

Were thes services running or are they something new you are trying? Where
did the software come from?

What version of VAIO Media Music Server do you have?
http://vaio-media-music-server.software.informer.com/

Do you need to update drivers?

Uninstall and reinstall the AOL Spyware Protection software, Check with AOL
for software updates.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Gerry - Sorry to take so long to get back on here, but I've had some issues.
First to your questions:

My VAIO is 5 years old and I use it primarily for work so I'm trying to get
it to last until at least Summer before I get something new.

These services aren't new and I really can't recall using the Media Music
Server in the last several years. THe AOL spyware protection was an add-on to
their last release of AOL 9.0 and (I believe) the service was disabled by AOL
in the last year. I'm actually ready to delete AOL anyway and install a
sleeker version running from my D drive (if possible) once I can be sure all
of my archived emails can be copied over.

I've checked with the SONY site and seem to be running version 2.5 of the
Media Music Server and all of the drivers are up to date .

Now, here is my issue: 2 days ago my McAfee virus scan detected and blocked
a "Generic PWS.y" trojan in Windows/setup32/fory557244.exe. I ran Spybot and
it eventually froze after repeatedly asking if I wanted to "kill" malicious
code.

When I reboot my PC, it starts with the Windows Firewall not running and I
have to manually enable it. As soon as I reboot, it's disabled again. My
System Restore capabilities finally seem to be up and running again, but it
has erased all restore points prior to 4 days ago. Up until last night, it
simply said Restore was not available.

Now I wonder if this is all related to an infection that I can't seem to
clear? To be safe, I've not used and sensitive passwords or information while
using this PC and I've turned off 2 external drives that are connected. I
really don't know anything about viruses so paranoia can't hurt. Aside from
that 1 instance of McAfee detecting the trojan, all of my resulting scans
come back clean. The fact that the Windows Firewall still won't stay up after
reboot keeps me from thinking this is over.

I checked the System and Application logs immediately after I booted the PC
this afternoon and got the exact same group of error messages as before, even
though I slightly more functionality than before. The original Generic Host
Process error message has stopped popping up. The tool/taskbar no longer
resets to a default size and I haven't lost audio for iTunes or Windows Media.

What do you think might be the culprit? Can you recommend anything to be
sure I'm running free of malware? Again, prior to all of this I don't
remember doing a single thing out of the ordinary and the only downloads that
happen automatically are updates to my anti-viral software and Windows.

Again, thank you for any help or advice you can offer. Sorry for being such
a novice. I'm a photographer by trade so I know imaging backwards and
forwards, but this.. I'm a babe in the woods. - Scott
 
Anna - Thanks very much for your reply and I apologize for not getting back
to you right away. I have been trying to keep my PC off the internet as much
as possible while I figure this out and my phove isn't the easiest way to go
online.

In regards to your questions:
1. I thought my system was free of malware, but my McAfee blocked a "Generic
PWS.y" trojan the other night. I was using Spybot to look for others and it
frove after repeatedly asking me to click OK to kill "malicious" code (I
counted and the same message came up 27 times before it froze). My WIndows
Firewall still comes out of a boot disabled and I have to manually turn it
back on and my System Restore just started to work again last night after
being "unavailable" for days. (all the restore points prior to Sunday are
gone).
2. The boot does proceed without incident. At least now it does. Twice after
scanning for viruses and rebooting 2 days ago, 2 black "DOS style" windows
popped up layered on top of each other and there was a single line of
something I couldn't make out quick enough before they were gone (no more
than 2 seconds). Those windows have not shown up on the last 3 times I've
booted.
3. Yes, the problems really were out of the blue. I had done nothing
different that day as compared to any other day. No new programs, nothing
installed.
4. I haven't tried the sfc/scannow & chkdsk/r commands yet because the
possible viral/malware infection has gotten me riled up. I try that next.

I have put further details about my issues in responses to Gerry above. I'll
paste the last one below so you don't have to jump through windows. Again, I
do appreciated any help or advice you can offer - Scott




Gerry - Sorry to take so long to get back on here, but I've had some issues.
First to your questions:

My VAIO is 5 years old and I use it primarily for work so I'm trying to get
it to last until at least Summer before I get something new.

These services aren't new and I really can't recall using the Media Music
Server in the last several years. THe AOL spyware protection was an add-on to
their last release of AOL 9.0 and (I believe) the service was disabled by AOL
in the last year. I'm actually ready to delete AOL anyway and install a
sleeker version running from my D drive (if possible) once I can be sure all
of my archived emails can be copied over.

I've checked with the SONY site and seem to be running version 2.5 of the
Media Music Server and all of the drivers are up to date .

Now, here is my issue: 2 days ago my McAfee virus scan detected and blocked
a "Generic PWS.y" trojan in Windows/setup32/fory557244.exe. I ran Spybot and
it eventually froze after repeatedly asking if I wanted to "kill" malicious
code.

When I reboot my PC, it starts with the Windows Firewall not running and I
have to manually enable it. As soon as I reboot, it's disabled again. My
System Restore capabilities finally seem to be up and running again, but it
has erased all restore points prior to 4 days ago. Up until last night, it
simply said Restore was not available.

Now I wonder if this is all related to an infection that I can't seem to
clear? To be safe, I've not used and sensitive passwords or information while
using this PC and I've turned off 2 external drives that are connected. I
really don't know anything about viruses so paranoia can't hurt. Aside from
that 1 instance of McAfee detecting the trojan, all of my resulting scans
come back clean. The fact that the Windows Firewall still won't stay up after
reboot keeps me from thinking this is over.

I checked the System and Application logs immediately after I booted the PC
this afternoon and got the exact same group of error messages as before, even
though I slightly more functionality than before. The original Generic Host
Process error message has stopped popping up. The tool/taskbar no longer
resets to a default size and I haven't lost audio for iTunes or Windows Media.

What do you think might be the culprit? Can you recommend anything to be
sure I'm running free of malware? Again, prior to all of this I don't
remember doing a single thing out of the ordinary and the only downloads that
happen automatically are updates to my anti-viral software and Windows.

Again, thank you for any help or advice you can offer. Sorry for being such
a novice. I'm a photographer by trade so I know imaging backwards and
forwards, but this.. I'm a babe in the woods. - Scott
 
Scott said:
Anna - Thanks very much for your reply and I apologize for not getting
back
to you right away. I have been trying to keep my PC off the internet as
much
as possible while I figure this out and my phove isn't the easiest way to
go
online.

In regards to your questions:
1. I thought my system was free of malware, but my McAfee blocked a
"Generic
PWS.y" trojan the other night. I was using Spybot to look for others and
it
frove after repeatedly asking me to click OK to kill "malicious" code (I
counted and the same message came up 27 times before it froze). My WIndows
Firewall still comes out of a boot disabled and I have to manually turn it
back on and my System Restore just started to work again last night after
being "unavailable" for days. (all the restore points prior to Sunday are
gone).
2. The boot does proceed without incident. At least now it does. Twice
after
scanning for viruses and rebooting 2 days ago, 2 black "DOS style" windows
popped up layered on top of each other and there was a single line of
something I couldn't make out quick enough before they were gone (no more
than 2 seconds). Those windows have not shown up on the last 3 times I've
booted.
3. Yes, the problems really were out of the blue. I had done nothing
different that day as compared to any other day. No new programs, nothing
installed.
4. I haven't tried the sfc/scannow & chkdsk/r commands yet because the
possible viral/malware infection has gotten me riled up. I try that next.

I have put further details about my issues in responses to Gerry above.
I'll
paste the last one below so you don't have to jump through windows. Again,
I
do appreciated any help or advice you can offer - Scott
Click to expand...
Gerry - Sorry to take so long to get back on here, but I've had some
issues.
First to your questions:

My VAIO is 5 years old and I use it primarily for work so I'm trying to
get
it to last until at least Summer before I get something new.

These services aren't new and I really can't recall using the Media Music
Server in the last several years. THe AOL spyware protection was an add-on
to
their last release of AOL 9.0 and (I believe) the service was disabled by
AOL
in the last year. I'm actually ready to delete AOL anyway and install a
sleeker version running from my D drive (if possible) once I can be sure
all
of my archived emails can be copied over.

I've checked with the SONY site and seem to be running version 2.5 of the
Media Music Server and all of the drivers are up to date .

Now, here is my issue: 2 days ago my McAfee virus scan detected and
blocked
a "Generic PWS.y" trojan in Windows/setup32/fory557244.exe. I ran Spybot
and
it eventually froze after repeatedly asking if I wanted to "kill"
malicious
code.

When I reboot my PC, it starts with the Windows Firewall not running and I
have to manually enable it. As soon as I reboot, it's disabled again. My
System Restore capabilities finally seem to be up and running again, but
it
has erased all restore points prior to 4 days ago. Up until last night, it
simply said Restore was not available.

Now I wonder if this is all related to an infection that I can't seem to
clear? To be safe, I've not used and sensitive passwords or information
while
using this PC and I've turned off 2 external drives that are connected. I
really don't know anything about viruses so paranoia can't hurt. Aside
from
that 1 instance of McAfee detecting the trojan, all of my resulting scans
come back clean. The fact that the Windows Firewall still won't stay up
after
reboot keeps me from thinking this is over.

I checked the System and Application logs immediately after I booted the
PC
this afternoon and got the exact same group of error messages as before,
even
though I slightly more functionality than before. The original Generic
Host
Process error message has stopped popping up. The tool/taskbar no longer
resets to a default size and I haven't lost audio for iTunes or Windows
Media.

What do you think might be the culprit? Can you recommend anything to be
sure I'm running free of malware? Again, prior to all of this I don't
remember doing a single thing out of the ordinary and the only downloads
that
happen automatically are updates to my anti-viral software and Windows.

Again, thank you for any help or advice you can offer. Sorry for being
such
a novice. I'm a photographer by trade so I know imaging backwards and
forwards, but this.. I'm a babe in the woods. - Scott
Click to expand...


Scott:
At this point there isn't much more I can offer in suggestions other than
what is contained in my original comments. Perhaps Gerry can offer some
additional insights.

Obviously you have to purge your system from any malware infestation before
any remedy can be successful. So you'll have to concentrate on that aspect
before employing any "fix" (other than a fresh-install of the OS).

I would just reiterate my previous advice to first try invoking the sfc
/scannow and/or chkdsk /r commands to determine if one of those processes
returns a corrupted OS (should that account for the problems you've been
experiencing) to a functional state.

And if those are unsuccessful, undertake a Repair install of the OS as has
been previously suggested.
Anna
 
Scott

You do not want restore points containing malware.

Select Start, Control Panel, Administrative Tools, Services and right click
on Windows Firewall and select Properties. The StartUp type should be
automatic. Is it? Also check Network Connections is set to Manual and
Windows Management Instrumentation to Automatic Make sure all three services
have started.

Please post copies of the Event Viewer Error and Warning Reports since the
last boot..

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Gerry - Here are the Error Reports from the last time my system went through
a "cycle." I just posted the reports from the boot after this incident in my
previous post. These are actual interesting because you can see that
everything from Themes to Security Center gets termionated and the last one
is the Windows Firewall/Internet Connection Service getting terminated with
an "Access is denied" error.

Thank you, again.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Themes service terminated unexpectedly. It has done this 1 time(s).
The following corrective action will be taken in 60000 milliseconds: Restart
the service.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Distributed Link Tracking Client service terminated unexpectedly. It
has done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Windows Time service terminated unexpectedly. It has done this 1
time(s). The following corrective action will be taken in 60000
milliseconds: Restart the service.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Windows Management Instrumentation service terminated unexpectedly. It
has done this 1 time(s). The following corrective action will be taken in
60000 milliseconds: Restart the service.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Security Center service terminated unexpectedly. It has done this 1
time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Wireless Zero Configuration service terminated unexpectedly. It has
done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/12/2009
Time: 11:48:57 PM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Windows Firewall/Internet Connection Sharing (ICS) service terminated
with the following error:
Access is denied.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
Gerry

The Firewall Startup type is automatic, Network Connections set to Manual,
and Windows Management Instrumentaion to automatic.

I had been running seemingly fine since my boot this afternoon with none of
the previous issues coming up (aside from the Firewall not being enabled when
coming out of the boot). I have 2 Maxtor external drives that I had unplugged
just after the start of this because they contain work-related and sensitive
files. I wanted to open a word.doc on the larger of those 2 drives so I
plugged it in. Roughly 45 minutes later, the same cycle from days ago began
again (Firewall down, screen reset, etc) and this was just after I had been
reading an update from January on the Microsoft site about a worm that copies
itself to external drives. Needless to say, all the blood drained out of my
face and I shut everything down and unplugged the external drive again.

I just booted again and saw the same 2 black "DOS style" windows pop up, but
they were gone before I could read anything past "MISSING...". Spybot then
popped up with multiple windows asking me to Allow or Don't Allow several
registry chages. They all said "Spybot Delete" so I assumed they were related
to the last deletion I ran before shutting down. Those were followed by
mutliple windows asking to kill files identified as malicious with the names
"afisicx.exe" and "tpszxyd.sys" Eached appeared several times before the
screen was clear. Now, through my speakers, I'm hearing the same "clicking"
sound I'll sometimes hear on websites with banner ads (the sound you hear as
the ads change). This sound was present even before I opened Internet
Explorer and has be going non-stop every 30-45 seconds. Lastly, IE would not
load a any webpage coming out of the boot. I Hit CTRL ALT DEL to check the
Task Manager and it said IE was not responding. I closed it and it was able
to load on the 2nd try. Thanks again, Gerry. I'm going to wind down and get
some sleep (2:30 AM here).

Here are the Error Reports in chronological order. These are all following
my most recent boot. After this group, I'll post another reply containing the
errors from my last "crash."


Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 3/13/2009
Time: 1:46:36 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The IP address lease 192.168.2.100 for the Network Card with network address
000C6E084A45 has been denied by the DHCP server 192.168.2.1 (The DHCP Server
sent a DHCPNACK message).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The afisicx service failed to start due to the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The AOL Spyware Protection Service service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Capture Device Service service failed to start due to the following
error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Service AntiVir service terminated with the following error:
The specified module could not be found.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Network Ming service terminated with the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
Timeout (30000 milliseconds) waiting for the VAIO Media Music Server
(Application) service to connect.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (Application) service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (HTTP) service depends on the VAIO Media Music
Server (Application) service which failed to start because of the following
error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 3/13/2009
Time: 1:47:05 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The VAIO Media Music Server (UPnP) service depends on the VAIO Media Music
Server (HTTP) service which failed to start because of the following error:
The dependency service or group failed to start.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/13/2009
Time: 1:47:33 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Remote service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 3/13/2009
Time: 1:48:08 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
Timeout (30000 milliseconds) waiting for the Pml Driver HPH11 service to
connect.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 3/13/2009
Time: 1:48:08 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Pml Driver HPH11 service failed to start due to the following error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 3/13/2009
Time: 1:48:40 AM
User: N/A
Computer: VAIO-PCVRZ24G
Description:
The Remote 2009 service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 3/13/2009
Time: 2:16:35 AM
User: NT AUTHORITY\SYSTEM
Computer: VAIO-PCVRZ24G
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
 
Back
Top