Generic Host Process different problem

[ne0gen]

Hello, ive just read the problem on the generic host process.
At my computer, it usually takes about ten minutes, before it appears, then it SHUTS my internet connection and DISABLES all sound drivers.
Ive downloaded the PATCH, the microsoft has made, but it made completely no difference.
So, just out of CURIOSITY, i turned on the basic windows firewall (although i have NOD32 one), and right after that action, it STOPPED flashing that message.
Well, AD-aware found nothing, and amny people say the microsoft patch removed the problem. So, can you give me any advice? Because I still dont know if its a Microsoft updates realted thing(i turned them off like 2 months ago), or just some stupid spyware i cant find here.
Thank you forwardly, and if you can, please explain to me the connection between the win firewall and the stop of that message.

Oh, of course, i hate win firewall, beacuse no matter what i do, it keeps me from playing some online games, so I cant have it turned on.
Thanks again

[mnosteele52]

Hi ne0gen:), you REALLY need to use a firewall, without on you are asking for trouble. Just FYI, NOD32 doesn't have a firewall, just an antivirus program. Can you please post a HijackThis log?

:)

[ne0gen]

well, i thought it has one,
heres the log file

Logfile of HijackThis v1.99.1
Scan saved at 0:54:53, on 14.8.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\Program Files\Mozilla\firefox.exe
C:\Documents and Settings\Všichni\Plocha\HijackThis.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O17 - HKLM\System\CCS\Services\Tcpip\..\{67285ED5-5D25-48F1-B685-607F2CF3C33D}: NameServer = 194.228.41.65 194.228.41.113
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

well, now, could anyone explain me the connection between the firewall and the message?
Like, is it possible that the firewall stops some hacker from remote - shutting my computer down?
because when i turn the basic win one down, it again shows that message after the same exact time as when i have never turned it on.
Thanks forwardly

[mnosteele52]

It looks like you have disabled many services on your pc, maybe some that you need. Also, you should disable anything that runs in the background with SpySweeper, it has been known to cause some issues.

:)

[ne0gen]

I cant install spy sweeper, it tells me that the file spysweeper.exe cannot be copied, which ensures me even more about the thing that i have some mess here.
There is a lot disabled, ive just now turned off the WIN firewall to see if it breaks in ten mins after ive done all that search and deleting, if it does i guess im out of options, than to reinstall my system and not install SP2, if the mistake is in that thing.
The hijack logfile was made with the WIN FIREWALL on, if it makes a difference.
Well, if theres any other advices, id appreciate that, rather than having the worst firewall turned on so i can work on the net.
Thanks

[mnosteele52]

Your not being clear, you "can't install SpySweeper, it tells me that the file spysweeper.exe cannot be copied" what does that mean?:confused:

Then you agreed you have a lot of services disabled.... I already said that could be the problem, you need to re-enable the services you need.

I can guarantee the problem is NOT SP2.

:confused:

[ne0gen]

I disabled most of them after it started flashing that message.
everytime i try to install that free spysweeper it installs it and by the spysweeper.exe it gives a error message and shuts it down.

[YARDofSTUF]

Sounds like from not using a firewall of any kind, nod32 is a virus scanner, that you have got some kinda adware/spyware or junk on your system. Has windows firewall told you it blocked anything?

What services have you turned off? And what game wont work with XP firewall?

[Arre81]

Hello, ive just read the problem on the generic host process.
At my computer, it usually takes about ten minutes, before it appears, then it SHUTS my internet connection and DISABLES all sound drivers.
Ive downloaded the PATCH, the microsoft has made, but it made completely no difference.
So, just out of CURIOSITY, i turned on the basic windows firewall (although i have NOD32 one), and right after that action, it STOPPED flashing that message.
Well, AD-aware found nothing, and amny people say the microsoft patch removed the problem. So, can you give me any advice? Because I still dont know if its a Microsoft updates realted thing(i turned them off like 2 months ago), or just some stupid spyware i cant find here.
Thank you forwardly, and if you can, please explain to me the connection between the win firewall and the stop of that message.

Oh, of course, i hate win firewall, beacuse no matter what i do, it keeps me from playing some online games, so I cant have it turned on.
Thanks again

Had the same problem, as you I don't use firewall or virus protection, I believe in skilled surfing instead. ;) But sometimes other people use my computer so...

Anyhow, I installed all the updates from MS and the problem went away.
Earlier I scanned with ad-aware, spybot and spysweeper and also did a virus scan. The problem persisted after theose things, but dissapeared when I downloaded the updates.

Before I fixed the problem I noticed that after I had recieved the error I couldn't start the Windows Firewall.. Got a message saying that the service couldn't be started.. Just a little FYI.