Inactive Generic host process for win32 services has encountered a proble

I suspect, we may be dealing with some other issues beside an infection.

Try to restart it couple of times, try Safe Mode.

 

Good
Now, I need that SystemLook log.

 

OK.
Firstly, to avoid that recovery console password issue in the future, do this:

Go Start>Run
Type in:
regedit
Click OK.
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Setup\RecoveryConsole
Set the DWORD SecurityLevel value to 1
Exit registry editor.

=============================================================

Now, let's see, if we can replace those files without using recovery console.


Download BlitzBlank and save it to your desktop.
Double click on Blitzblank.exe

• Click OK at the warning (and take note of it, this is a VERY powerful tool!).
• Click the Script tab and copy/paste the following text there:

Code:

CopyFile:
C:\explorer\explorer.exe C:\WINDOWS\explorer.exe
C:\winlogon\winlogon.exe C:\WINDOWS\system32\winlogon.exe

• Click Execute Now. Your computer will need to reboot in order to replace the files.
• When done, post the report created by Blitzblank.
  You can find it in the root of the drive, normally C:\

 

It doesn't matter what mode you're in.

 

I assume, you copied/pasted, instead of typing it manually?

BTW, did you make that registry change?

 

Copying is what you want to do.
Make sure, you copy only, what's inside code box (without word "code "):

 

OK, let's try recovery console again.

Follow all steps from my reply #19

 

1. Please open Notepad

• Click Start , then Run
• Type notepad .exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code:

FCopy::
C:\explorer\explorer.exe | C:\WINDOWS\explorer.exe
C:\winlogon\winlogon.exe | C:\WINDOWS\system32\winlogon.exe 

3. Save the above as CFScript.txt

4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.




6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:

• Combofix.txt

 

You should click 2.

 

Try the above first before trying Combofix.