MSIEXEC.EXE and Generic Host Process for Win32 Services problem

Hi, I have been having a problem with Generic Host Process for Win32 Services for a few weeks now and after reading posts on this and other sites I tried to fix the problem myself.
A minute or 2 after startup the Generic Host Process for Win32 Services error message would pop up and it would shut down.Microsoft's fix for the poblem did not work for my PC.
I had also been recieving an error message anout audio drivers not being compatible with BIOS so I messed around with them with little effect. Eventually I removed my ATI all in wonder video card and put in my old Geforce, and also removed all of my audio drivers, music match, windows, and media player. I then installed the latest audio drivers from VIA. The end result is that as soon as Generic Host stops sound does too and if I open volume controls I see "there are no active mixer devices available.."
I had recently purchased and installed a Hp printer and many posts suggest that Hp drivers are the root of this issue, so I attempted to remove them. As far as I can tell they are all gone but I still had the problem.
I have been running AdAware nearly daily since I recieved this pc and have always kept up to date with Windows updates and kept my Symantic antivirus and firewall software up to date. I have run CWShredder, Search and Destroy, and Trend Houscall. I am sqeaky clean.
So I thought that maybe my antivirus software was somehow glitched.
I downloaded a new version of it but did not unzip it. Then I uninstalled Symantic and restarted. Now when I try to install the new version I get the "MSIEXEC.EXE has encountered a problem and needs to close." error and installation does not complete.
I tried to download Ewido (couldnt see any reason why not too)and the same error message popped up.
I was able to download and run Hijack This just now and here is the log file follows.

Thank you in advance for any assistance!

Logfile of HijackThis v1.99.1
Scan saved at 9:14:54 AM, on 1/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SNDVOL32.EXE
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\EDEARI~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

N3 - Netscape 7: user_pref( "browser.startup.homepage ", "http://home.netscape.com/bookmark/7_2/home.html "); (C:\Documents and Settings\ed earickson\Application Data\Mozilla\Profiles\default\2nxojz6s.slt\prefs.js)
N3 - Netscape 7: user_pref( "browser.search.defaultengine ", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src "); (C:\Documents and Settings\ed earickson\Application Data\Mozilla\Profiles\default\2nxojz6s.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [masqform.exe] C:\Program Files\PureEdge\Viewer 6.5\masqform.exe -RunOnce
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/1.1.1067.14/WinSSWebAgent.CAB
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase8460.cab
O16 - DPF: {90F7E144-984F-4FA6-83A7-C9C8DCB9974C} (RSActiveXObj Control) - http://www.radarsync.com/RSActiveX.ocx
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\WINDOWS\system32\HPZipm12.exe (file missing)
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe (file missing)

 

update

I managed to install McAfee virus scan and firewall programs without any msiexec problems so at least I am not unprotected anymore.
I have tried Hp's suggestions which are basically to uninstall and reinstall the software a couple times, which not only seems stupid to me (isnt a definition of insanity doing the same thing over and over again and expecting a different result?) but didnt help at all. The final solution suggested by Hp is:
"Change the Windows Image Acquisition (WIA) service from Automatic to Manual by performing the following steps:
Right-click My Computer, then select Manage. The Computer Management window opens.
in the Computer Management window, click the plus ( +) sign next to Services and Applications.
In the list below Services and Applications, select Services.
In the right-hand side of the window, right-click Windows Image Acquisition.
Select Properties.
Change Startup Type to Manual.
Click OK.
Close the Computer Management window.
Add hpqtra08.exe to the Windows Firewall Exception list by performing the following steps:
Click Start, then Control Panel. (Click Start, Settings, then Control Panel if you are in Classic Start menu mode).
Click Security Center.
Scroll to the bottom of the new window.
Click Windows Firewall.
Click the Exceptions tab.
Click Add Program.
Click Browse.
Select C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe.
Click OK.
Click OK.
Close all open windows.
Restart the computer and verify that the unit works correctly. "
This did not work either, in fact when the Generic host processes shuts down the windows firewall does too and therefore it is impossible to do the last part, I was able to restart and get into windows firewall before it shut down, but, as I said, this solution did not work either.

I read somewhere that using Hp's updater to get the latest drivers had solved some peoples issues, but the updater does not run for me, it comes up as a blank white screen and nothing happens, it is listed as a running process in task manager, but it is not doing anything.

My printer is a HP officejet 6210 all in one. I am sending a report of this issue to HP tonight as well, but I am not completely confident in getting any useful support from them right now.

If anyone has any additional suggestions or miraculously knows the exact solution please post! Thank you again.
-Ed

 

HP tech support no real help so far

After trying the remedies suggested by 2 different tech support personell and losing the ability to print (since regained) and scan (still cant do), I am slightly worse off.
here is the event log from the latest Generic Host Properties shutdown

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 1/11/2007
Time: 9:16:09 AM
User: N/A
Computer: CLUBBERLANG
Description:
Faulting application svchost.exe, version 5.1.2600.2180, faulting module kernel32.dll, version 5.1.2600.2945, fault address 0x00018943.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 6b 65 72 6e 65 6c n kernel
0038: 33 32 2e 64 6c 6c 20 35 32.dll 5
0040: 2e 31 2e 32 36 30 30 2e .1.2600.
0048: 32 39 34 35 20 61 74 20 2945 at
0050: 6f 66 66 73 65 74 20 30 offset 0
0058: 30 30 31 38 39 34 33 0018943

Please feel free to ask me for any additional information, and make any suggestions you like, I am pretty well open to anything at this point.
So far the major impact as far as I can determine is that I have lost the ability to update programs including Windows. When I go to the Microsoft Update page <http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us>
regardless of which option I choose between "Express" or "Custom" I get the page that says "Checking for the latest updates for your computer..." and has a bar with green lights running across it. I have left this thing running overnight and it doesnt come up with any updates.

Thanks again
-Ed

 

Appears to be resolved

A web search for "Faulting application svchost.exe, version 5.1.2600.2180" (error message from Event Veiwer) led me to the site- <http://slees.net/2006/09/16/fix-to-faulting-application-svchostexe-version-5126002180-faulting-module-netapi32dll-version-5126002180-fault-address-0%C3%970000a3c0/>

I turned off automatic updates as recommended by:Big C Says:

October 16th, 2006 at 10:44 pm
I actually found an even simpler way to fix this problem it was driving me crazy. All you have to do is
1.Go 2 the start menu
2.Right click "my computerâ€
3.Click "properties" then the "automatic updatesâ€
tab
4.Choose "turn off automatic updatesâ€
5.Reboot your computer
6.Go back to start menu and in all programs go to "windows update" you have to be connected to the internet.
7.Manually update windows.
8.Turn your automatic updates back on.

Then I ran these 2 updates:

http://www.microsoft.com/downloads/...b9-7a6a-49b6-bd89-afad4e049c48&displayLang=en

and:

http://www.microsoft.com/downloads/...b6-03ff-4636-861a-46b3eac7a305&displaylang=en

Then I restarted, and as soon as I could, before any messages appeared, I restarted again. I let it run for over 5 minutes with no error. I have turned it off and on again, and tried running a few programs, so far I am at 20 minutes+ with no issues.

 

Ok, So know it appears that if I enable Automatic Updates in any way, or try to get updates from Microsoft, Generic Host Processes crashes.

Does this mean that I cannot get updates anymore?

 

Seems my problem has you all stumped or bored. My Windows disk is 2000 miles away and I am not headed that way anytime soon, so I guess I will just buy Vista and format my hard drive and start fresh. Good luck to you all,
Ed

 

Hi Ed
After installing the HP all-in-one printer and restarting the computer, the following Generic Host Process for Win32 Services error message displays:
Windows has shut down a process for Win32 services: Data Execution Prevention - Microsoft Windows To help protect your computer, Windows has closed this program.
I seem to understand from your posts that there is NO solution to the problem? I agree that uninstalling and reinstalling seems stupid.
I have found this link on the HP website but must say it does not enlighten me at all.
Please let me know if anybody has found a solution to this very frustrating problem.

 

Hi Abigail,
If you are having this problem and are sure that it is the result of a Hp install, try this:
Put in the install disk that came with the printer,
let it run its "checking your system" thing until it prompts you to uninstall or whatever,
Click "Cancel "
Then go to My Computer, right click on the disk drive, and click Explore
find the folder called "util" and open it
find the folder called "CCC" and open that
run Uninstall_L1
after that runs you may have to restart
next you are going to run Uninstall_L2, Uninstall_L3, Uninstall_L4, you may or may not have to restart after any or all of these steps, but run them all. Follow all on screen directions regarding disconnecting the printer.

When they have all run, restart the computer and if the disk is still in the drive, open and close it so it auto runs.

Do a full reinstall and connection, following the directions on screen.

It does seem retarded, but apparently there is a great deal of potential for some small but critical errors to be written during installation. The regular uninstall, and Add/Remove programs do not fully remove the program, thus any corrupted code will remain and not be overwritten. Only the 4 level uninstall actually removes everything, I had to laugh when I found this out, but thats what they say.

Anyway, I do hope that this solves your problem, if not, try contacting Hp support, they were incredibly attentive if not necessarily helpful. I guess its not easy to diagnose pc problems without being able to get onto the actual pc though.

btw, I had some other issues anyway so I went ahead and formatted the hard drive and reinstalled Windows. This was a big Pain, and I still (2 weeks later) have not finished reinstalling programs. Fortunately I was able to back-up most of my important data before I cleared the hard drive.

Also, just in case anyone out there is interested, the best theory I have come across for what truely started the downward spiral if my pc is: a power surge.

 

Hi Thank you for prompt reply. Before I embark on the uninstalls I need to point out that I downloaded the HP software from their website. The original disc is misplaced and in any case I clearly remember that last time I used it it gave me a headache. Thank you

 

thanks SpecialEd for "generic host process" info.

Only registering & posting to say thanks for your info. re. "generic host process" error. I followed your steps, and got rid of that **** thing at least for a day now:
1. ran a gamut of anti-spyware software-the ones you mentioned.
2. did the update mgr. steps including the 2 noted MS XP updates-1 specifically for generic host process error, I believe.

Still may need the update to XP SP2. I'm not sure what got rid of it. I was installing earthlink software, disabled AVG as instructed, and a little later I was getting the "generic host process..." error. Would pop up after about a half our or sooner. Couldn't do any surfing nor MS exploring of my documents.

Still don't know whether for sure this is mal-ware, corrupt/damaged file, software run amuck, or what.

I've gotten away from IE, and am surfing with a lot less trouble with Mozilla Firefox, running free AVG, and running Spybot S & D and Add-Aware. I'm surprised to find many times no spyware/adware detected. I also run Infoprocess Anti-hook software although I'm not too keen on running it in "normal" mode. Been running in "fingerprint" mode for a while. Later.

Thanks again.