1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Generic Host Process for Win32 Services error, firefox crashes

Discussion in 'Malware and Virus Removal Archive' started by Invasion87, 2011/05/01.

  1. 2011/05/02
    Invasion87

    Invasion87 Inactive Thread Starter

    Joined:
    2011/05/01
    Messages:
    26
    Likes Received:
    0
    SystemLook 04.09.10 by jpshortstuff
    Log created at 00:03 on 03/05/2011 by Ricky Jim
    Administrator - Elevation successful

    ========== filefind ==========

    Searching for "MSVCRT40.dll "
    C:\WINDOWS\$NtServicePackUninstall$\msvcrt40.dll -----c- 61440 bytes [22:43 04/11/2008] [05:58 04/08/2004] 146D198E3AD9D4B69C9EB0AEA6EF333B
    C:\WINDOWS\ServicePackFiles\i386\msvcrt40.dll ------- 61440 bytes [21:53 24/05/2008] [18:30 13/04/2008] 7A660EDC0757849DF5F8706FB6E9F740

    -= EOF =-
     
  2. 2011/05/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Yeah, you have MSVCRT40.dll file missing from C:\Windows\System32 folder.
    We'll try to fix it.....

    Download BlitzBlank and save it to your desktop.
    Double click on Blitzblank.exe

    • Click OK at the warning (and take note of it, this is a VERY powerful tool!).
    • Click the Script tab and copy/paste the following text there:
    Code:
    CopyFile:
    C:\WINDOWS\$NtServicePackUninstall$\msvcrt40.dll C:\Windows\System32
    

    • Click Execute Now. Your computer will need to reboot in order to replace the files.
    • When done, post the report created by Blitzblank.
      You can find it in the root of the drive, normally C:\
     

  3. to hide this advert.

  4. 2011/05/02
    Invasion87

    Invasion87 Inactive Thread Starter

    Joined:
    2011/05/01
    Messages:
    26
    Likes Received:
    0
    BlitzBlank 1.0.0.32

    File/Registry Modification Engine native application
    CopyFileOnReboot: sourceFile = "\??\c:\windows\$ntservicepackuninstall$\msvcrt40.dll ", destinationFile = "\??\c:\windows\system32 "CopyFile: ZwCreateFile failed: status = c00000ba
     
  5. 2011/05/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I apologize. Wrong script.

    Re-run the program one more time with this script:
    Code:
    CopyFile:
    C:\WINDOWS\$NtServicePackUninstall$\msvcrt40.dll C:\Windows\System32\msvcrt40.dll
    
     
  6. 2011/05/02
    Invasion87

    Invasion87 Inactive Thread Starter

    Joined:
    2011/05/01
    Messages:
    26
    Likes Received:
    0
    BlitzBlank 1.0.0.32

    File/Registry Modification Engine native application
    CopyFileOnReboot: sourceFile = "\??\c:\windows\$ntservicepackuninstall$\msvcrt40.dll ", destinationFile = "\??\c:\windows\system32\msvcrt40.dll "


    Everything seems fine now, no more error messages.

    I will update you if I come across any other problems, otherwise I'll run/install all the things you mentioned in your above post (post #36) and will get back to you asap to confirm that my computer is fine. Thanks a great deal for your help!
     
  7. 2011/05/02
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're welcome :)
     
  8. 2011/05/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    The issue seems to be resolved.
     
  9. 2011/05/05
    Invasion87

    Invasion87 Inactive Thread Starter

    Joined:
    2011/05/01
    Messages:
    26
    Likes Received:
    0
    Yes my computer is all fine now. Thanks again for your help!
     
  10. 2011/05/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're welcome :)
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.