Svchost.exe error

  
There are generally three cases where this error occurs. 1. It is a virus. After booting, the Generic Host Process for Win32 Services will be prompted to close the ”“Remote Rrocedure Call (RPC) service will be terminated unexpectedly, and then the computer will be restarted automatically. Generally, the virus will create the msblast.exe key in the registry HKEY_LOCAL_MACHINESOFTWAREMicrosoft WindowsCurrentVersionRun, and will also place a msblast.exe Trojan in the c:windowssystem32 directory. The solution is as follows: RPC vulnerability detailed description: Recently found that some RPC is in use The TCP/IP protocol handles malformed messages incorrectly when processing information exchanges, resulting in a security hole. This vulnerability affects the use of RPC's DCOM interface, which is used to handle DCOM object activation requests (such as UNC paths) sent by the client machine to the server. If an attacker successfully exploits the vulnerability and gains local system privileges, he will be able to run arbitrary commands on the system, such as installing programs, viewing or changing, deleting data, or creating an account with system administrator privileges. Phenomenon: The attacker creates a key called "msupdate" in the user registry HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows CurrentVersionRun. The key value is usually msblast.exeC: a trojan program of msblast.exe will be placed in the windowssystem32 directory. The "Generic Host Process for Win32 Services" problem will need to be closed, "Remote Rrocedure Call (RPC) service will be terminated unexpectedly, Windows must be restarted immediately" and other error messages will be restarted. It is recommended to download the patch at http://www.microsoft.com/security/security_bulletins/ms03-026.asp. If it has been attacked, it is recommended to unplug the network cable, end the msblast.exe process in the task manager, clear the corresponding entries in the registry, delete the Trojans under system32, and finally patch. The second case is that after the virus is excluded, there is still such a problem. Generally, the registration information of the IE component in the registry is destroyed. The following method can be used to solve the problem: 1. Open the Run window in the Start menu, enter regsvr32 actxprxy.dll in it, and then confirm, then a message dialog box DllRegisterServer in actxprxy.dll succeeded, click OK again. 2 Open the run window again, type regsvr32 shdocvw.dll 3 Open the run window again, type regsvr32 oleaut32.dll 4 Open the run window again, type regsvr32 actxprxy.dll 5 Open the run window again, type regsvr32 mshtml.dll 6 Open the run window again. Enter regsvr32 msjava.dll 7 Open the run window again, type regsvr32 browseui.dll 8 Open the run window again, type regsvr32 urlmon.dll If you eliminate the virus problem, you can solve the general problem of registering the above IE components. 3. If the computer has a printer, it may be due to a printer driver installation error, which will also cause this error. The solution is as follows: Reinstall the printer driver. Under normal circumstances, after the above three steps, the problem can be fully solved. [Download] KB894391, windows update, system overview for 2000 or above Install this update to address an issue that may cause a Generic Host Process error message to be displayed after you install security update MS05-012, or cause attachment file names not to be Displayed in Rich Text e-mail messages. After you install this update, you may have to restart your computer. This is not a critical update. This update is for: Some friends have encountered problems in the past: Generic Host Process has an error and needs to be closed. . Xp: http://download.microsoft.com/download/e/5/d/e5d36b32-6f7c-45c1-82a7-3fa483442bda/WindowsXP-KB894391-x86-ENU.exe 2003sp1: http://www.microsoft.com /downloads/details.aspx?FamilyID=c4b0d34c-2796-4be1-b509-c7aff9d593b0&DisplayLang=en You can study and wish you success!
Copyright © Windows knowledge All Rights Reserved