Windows XP Start Up Error Message

Generic Host Process for Win32 Services is a process called SVCHOST.

Some reading material for you on Svchost.exe:

http://support.microsoft.com/?kbid=314056
A Description of Svchost.exe in Windows XP

from Lockergnome, 1-28-03 edition:

Question: How do I find out what is starting a service on my computer? The name of the service is svchost.exe and the user name is Local Service. It starts with the first logon and eats a consistent 25-35% of CPU processing time. I have ended the process using the Windows Task Manager and have not had any problems. Any insight would be appreciated.
Answer: I think we can shed a little light on your svchost.exe problem. You didn't say whether you are using Windows XP or Windows 2000, so I will try to give the information for both. First, let's address what the svchost.exe program is used for. As quoted from Microsoft Knowledge Base Article - 314056: "At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can run, depending on how and where Svchost.exe is started. This allows for better control and easier debugging." In layman's terms, it is basically an easy way for your computer to execute a lot of DLL files that are needed at startup. So instead of just ending one of the instances of svchost.exe, we need to find what set of DLLs might be causing your processing problem.

In Windows XP, you can get a list of running services by going to Start | Run | type "CMD" | click OK. Type "tasklist /svc" (sans quotes) and then press Enter. Now you will have a list of every DLL running under each svchost.exe instance. For Windows 2000, you need to extract the Tlist.exe utility from the Support.cab file on your Windows 2000 installation CD. You still need to open a command window, but you will need to navigate to where you extracted the Tlist.exe file to, type "tlist -s" (sans quotes), and then press Enter.

For more information, see Microsoft Knowledge Base Article - 250320. Svchost.exe groups are identified in the following registry key: HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Svchost. Also, each svchost group extracts its service names from the following registry key, whose Parameters key contains a ServiceDLL value: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ . Be sure to back up the registry key you are configuring before you make a change. You do this by browsing the desired registry key, and then going to File | Export. Follow the prompts, and you will now have a way to bring back that registry key (if you accidentally damaged it).

Usually problems like this are a result of malware.  This could be a problem with viruses/trojans/spyware or other malware. Some free online virus scanners:

http://housecall.antivirus.com 

http://www.pcpitstop.com/antivirus/default.asp 

http://www.pandasoftware.com/activescan/com/activescan_principal.htm 

Also try these free programs to rid your system of spyware, trojans, and other malware:

http://www.superantispyware.com/
SuperAntiSpyware

http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=nl.e415
Malwarebytes' Anti-Malware 1.30

Install the hotfix provided by Microsoft-
"http://www.microsoft.com/downloads/details.aspx?FamilyId=A87B44B9-7A6A-49B6-BD89-AFAD4E049C48&displaylang=en&displaylang=en"
Also don't forget to read this article-
http://support.microsoft.com/kb/894391

will try the suggestions above, thanks for the information.

GISVPN

gisvpn, how is it going?

Hi LeeTutor,

I tried to install the patch, however it said that i had a newer service pack installed and there was no need to install the patch.

This is all it says in events viewer :

Event Type:      Error
Event Source:      Application Error
Event Category:      (100)
Event ID:      1004
Date:            10/05/2009
Time:            10:03:16
User:            N/A
Computer:      ENN_QVT4Y
Description:
Faulting application svchost.exe, version 5.1.2600.5512, faulting module unknown, version 0.0.0.0, fault address 0x00c896bc.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 76 63   ure  svc
0018: 68 6f 73 74 2e 65 78 65   host.exe
0020: 20 35 2e 31 2e 32 36 30    5.1.260
0028: 30 2e 35 35 31 32 20 69   0.5512 i
0030: 6e 20 75 6e 6b 6e 6f 77   n unknow
0038: 6e 20 30 2e 30 2e 30 2e   n 0.0.0.
0040: 30 20 61 74 20 6f 66 66   0 at off
0048: 73 65 74 20 30 30 63 38   set 00c8
0050: 39 36 62 63               96bc    


Im not sure what it is ? ..

Did you try any of the malware scans I recommended?

Yes, I have Windows Defender installed and have done a full scan, however nothing reported back.

Windows Defender isn't necessarily adequate; there are all KINDS of malware out there, and you need to use more than one program to detect and remove them.  (This doesn't mean you should have two antivirus programs installed, for they will interfere with each other.  But for periodic scans of trojans, adware, etc., one or more of the programs I mentioned are usually adequate.)  Try the other programs I mentioned.

Hi LeeTutor,

Just did the scan and it came back ok :

Malwarebytes' Anti-Malware 1.36
Database version: 2105
Windows 5.1.2600 Service Pack 3

10/05/2009 23:47:22
mbam-log-2009-05-10 (23-47-22).txt

Scan type: Full Scan (C:\|)
Objects scanned: 179922
Time elapsed: 2 hour(s), 14 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



Is there anyway I can repair this or would you recommend a reinstall ?

Hi,

Thanks again for the post. I tried what you suggested above and it appears that this is causing the problem :


Start up Item : Adobe Gamma Loader
command : C:\PROGRA~1\COMMON~1\Abode\CALIBR~1\ADOBEG~1.exe
Location : Common Start Up

Seems like we found the problem, it does not appear to affect the computer upon start up (im not sure what this is used for as an application) however the error message no longer appears when this one is stopped at start up.

thanks for the help and the solution to help stop it. Do you know anything about this app and do you think a reinstallation of the application linked to it resolve it and allow me to turn it back on if needed ?

Thanks,

GISVPN

Glad you got the problem fixed.  This is information I found out about Adobe Gamma Loader:

http://www.what-is-exe.com/filenames/adobe%20gamma%20loader-exe.html

Great thanks, will try a reinstall of the Adobe products.