Help w/ Generic Host Process for Win32 Services (RPC) Error

[Mack]

Hi All,
I have a Toshiba Satellite laptop running Windows XP Professional which was
working fine until the following started to happen:
Every time I run the computer while connected to my cable modem, I get the
following error message and another box appears with a clock counting down
from a minute to zero to shutdown the system. The Box asks me to save my
files because the system will shutdown in a minute. After the minute is
over, the system restarts and the following happens again in a few minutes.

Here is the Error Message:

Generic Host Process for Win32 Services
Generic Host Process for Win32 Services encountered a problem and needed to
close.
This error occurred on 8/11/2003 at 8:01:32 PM.
Please tell Microsoft about this problem.

Here is the Details of the Error Message:
Error signature
szAppName: svchost.exe szAppVer: 5.1.2600.0 szModName: unknown
szModVer: 0.0.0.0 offset: 00000000

Error Report Contents
The following files will be included in the error report:
C:\DOCUME~1\Student\LOCALS~1\Temp\WER3.tmp.dir00\s vchost.exe.mdmp
C:\DOCUME~1\Student\LOCALS~1\Temp\WER3.tmp.dir00\a ppcompat.txt

I clicked "Send Error Report" once and get nothing back. Now, I don't know
what to do or how to fix this problem. I appreciate any help to solve this
problem.

Thank you for your much needed help.

Mack.

P.S. If possible, please e-mail me at

[Cari \(MS-MVP\)]

Ron Martell MVP has written the easiest way to fix this.....

There's a new major worm hitting the Internet currently. You can get more
info about the worm here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

'This is caused by a new and rapidly spreading virus.

To clear up the "NT Authority\System" and RPC call errors:

1. Go to http://support.microsoft.com/?kbid=823980 and download the security
patch. If at all possible do this on a clean machine and copy the patch to a
3.5 inch diskette.

2. Boot the infected machine into Safe Mode (use the F8 key multiple times
before and during the boot menu). Insert the 3.5 inch diskette with the
patch on it and run it. Do not reboot yet.

3. Use Start - Run - MSCONFIG and go to the Startup tab. Locate the entry
for MSBLAST.EXE and clear the checkbox for it.

4. Use Start - Search and check all your hard drives for the file
MSBLAST.EXE and delete all copies of it.

5. Shut down and restart the computer normally.

6. Immediately do an update of your antivirus software and when the updates
are installed do a complete virus scan of your hard drive. So far
Symantec/Norton, Trend Micro (PC-Cillin) and Sophos seems to be the only
major companies with an update for this specific virus (4:30 p.m. PDT 11 Aug

2003) but the others will undoubtedly follow within 24 hours.

Cari
www.coribright.com



"Mack" > wrote in message
...
> Hi All,
> I have a Toshiba Satellite laptop running Windows XP Professional which
was
> working fine until the following started to happen:
> Every time I run the computer while connected to my cable modem, I get the
> following error message and another box appears with a clock counting down
> from a minute to zero to shutdown the system. The Box asks me to save my
> files because the system will shutdown in a minute. After the minute is
> over, the system restarts and the following happens again in a few
minutes.
>
> Here is the Error Message:
>
> Generic Host Process for Win32 Services
> Generic Host Process for Win32 Services encountered a problem and needed
to
> close.
> This error occurred on 8/11/2003 at 8:01:32 PM.
> Please tell Microsoft about this problem.
>
> Here is the Details of the Error Message:
> Error signature
> szAppName: svchost.exe szAppVer: 5.1.2600.0 szModName: unknown
> szModVer: 0.0.0.0 offset: 00000000
>
> Error Report Contents
> The following files will be included in the error report:
> C:\DOCUME~1\Student\LOCALS~1\Temp\WER3.tmp.dir00\s vchost.exe.mdmp
> C:\DOCUME~1\Student\LOCALS~1\Temp\WER3.tmp.dir00\a ppcompat.txt
>
> I clicked "Send Error Report" once and get nothing back. Now, I don't know
> what to do or how to fix this problem. I appreciate any help to solve this
> problem.
>
> Thank you for your much needed help.
>
> Mack.
>
> P.S. If possible, please e-mail me at
>
>