I have this system that gives me messages once I get into Windows XP saying GENERIC HOST PROCESS FOR WIN32 services has encountered a problem and needs to close and then after a few minutes I get RPC terminated unexpectedly and gives me like 60 seconds countdown to shut down or restart. I looked around and noticed the symptoms were related to the msblast.exe virus but i do not have the msblast.exe in my processes. can it still be that virus or be running under something else? I need some help guys. I changed the RPC settings to not restart automatically but to TAKE NO ACTION for each failure and now im just lost to what else to do. thank you for your help...look forward to hearing from you all.

If you think it is the MsBlast worm (or even as a precaution): Msblast fix tool download page or direct link to the tool: FixBlast.exe

"can it still be that virus or be running under something else?" Yes, run FixBlast.exe & if you still have more problems, here is extra info. Click on the STARTUP tab at the top. Look for WINDOWS AUTO UPDATER or MSBLAST.exe and click the tick next to it to stop it running. Now click OK Restart your PC Click on START, and then RUN, type in REGEDIT On the new window, click on EDIT and then FIND. Type in MSBLAST* and click FIND NEXT As soon as the search finds an entry, press the DELETE key and remove it On your hard drive, go to C:\WINDOWS\SYSTEM32 and remove the MSBLAST.EXE* file We now need to delete any potential copies of the virus that the system may be hoarding in the System Restore folders Click START and with the RIGHT MOUSE BUTTON, click on MY COMPUTER You should have a small menu now, LEFT CLICK on PROPERTIES On this new window, click on the SYSTEM RESTORE tab at the top and then click on the box next to TURN OF SYSTEM RESTORE Now restart your PC and if you have configured your firewall effectively you should be able to get online without any problems Now you can restart System Restore. Click on START and right click on My Computer. Left click on the PROPERTIES item Now left-click on the SYSTEM RESTORE tab at the top. Take the tick out of the "Turn off System Restore" item and click OK *New strains of Blaster have been found now where the viral program has a different name. Please expand your searches for the following files: Blaster.A: MSBLAST.exe Blaster.B: PENIS32.exe Blaster.C: TEEKIDS.exe or ROOT32.exe Blaster.D: MSPATCH.exe Blaster.E: MSLAUGH.exe Blaster.F: ENBIEI.exe Blaster.K: MSCHOST.exe Blaster.T: ESCHLP.exe or SVCHOSTHP.exe

Back when I had msblast, I found it in msconfig. You can do Start, then RUN, then type msconfig Look for it on the Startup tab.

I tried it all..still nothing. I tried using the FixBlast.exe tool and didn't find it it said. I can't get online too that I noticed. It says LIMITED OR NO CONNECTIVITY. Then at times when my Network Connections goes away and I click on Internet Explorer it pops up and it goes straight back out, just a white screen gets to show and it goes away. I REALLY NEED SOME HELP YOU ALL. PLEASE HELP. sucks trying to get this working again. I get the error message again of Generic Host Process and no internet working. I'm scanning for viruses, too...still nothing. I noticed there was a fix on microsoft for the Generic Host Process, but I still can not get it working. I used the WinSockXP Fix and it showed my Network Connections and then when the GENERIC HOST PROCESS pops up they go away. NEED HELP..THANK YOU FOR WRITING

Use HiJackThis to track down or check for possible infections. Here is all the the info needed to empower yourself, anything you are not sure of, put into a search engine like Google. Read this link 1st, it has step by step. http://www.wilderssecurity.com/show... Important: Create a specific folder on your hard drive called HijackThis to keep its backups. You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder. http://www.trendsecure.com/portal/e... Or, http://www.merijn.org/downloads.html Or, http://tomcoyote.com/hjt/ Or, http://www.spywareinfo.com/~merijn/... If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working. HijackThis Tutorial - How to Analyze your own log. http://spywarewarrior.com/viewtopic... http://hometown.aol.co.uk/jrmc137/h... http://www.bleepingcomputer.com/tut... http://www.malwarehelp.org/understa... http://www.extradisambiguator.co.uk... HijackThis log file analysis ( online ) http://hijackthis.de/index.php?lang... Malware Prevention: Prevent Re-infection http://wiki.castlecops.com/Malware_...