After the WINXP system is turned on, generic host process for Win32 services will pop up. In this case, you need to disable it!
The preceding error may occur in three cases.
1. It is a virus. After the machine is started, the system prompts the problem that the generic host process for Win32 services is required.
Disable the remote rrocedure Call (RPC) Service to terminate unexpectedly, and then automatically restart the computer. Generally, this virus will create a msblast.exe key value in the Registry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run, and a trojan program of msblast.exe will be placed in the C: \ WINDOWS \ system32directory. The solution is as follows:
RPC Vulnerability
Detailed description:
Recently, it was found that some RPC processes malformed messages incorrectly when using the TCP/IP protocol for information exchange, resulting in a security vulnerability. This vulnerability affects the use of the rpc dcom interface, which is used to process the DCOM object activation request (such as the UNC path) sent to the server by the client machine ). If an attacker successfully exploits this vulnerability, the attacker will gain Local System privileges and can run arbitrary commands, such as installation Program , View or modify or delete data, or create an account with system administrator permissions.
An attack has been discovered:
An attacker creates a trojan named "invalid msupdatekeys" under the HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run in the user registry. The key value is generally msblast.exe c: \ windows \ system32directory.
In addition, attackers may restart Windows due to errors such as "remote rrocedure Call (RPC) Service unexpectedly terminated when a problem occurs in generic host process for Win32 services.
We recommend that you download the file at http://www.microsoft.com/security/s..ns/ms03-026.asp. If the system has been attacked, we recommend that you first remove the network connection, and then click the msblast.exe process in the task manager to clear the corresponding entries in the registry, delete the trojan program under system32, and patch the system.
The second case is that after the virus is eliminated, such a problem still occurs. Generally, the registration information of the IE component in the registry is damaged. You can solve the problem as follows:
1. Open the "run" window in the "Start" menu and enter "regsvr32 actxprxy. DLL, and then "OK", a dialog box "dllregisterserver in actxprxy. DLL succeeded ", click" OK "again ".
2. Open the "run" window again and enter "regsvr32 shdocvw. dll ".
3. Open the "run" window again and enter "regsvr32 oleaut32.dll ".
4. Open the "run" window again and enter "regsvr32 actxprxy. dll ".
5. Open the "run" window again and enter "regsvr32 mshtml. dll ".
6. Open the "run" window again and enter "regsvr32 msjava. dll ".
7. Open the "run" window again and enter "regsvr32 browseui. dll ".
8. Open the "run" window again and enter "regsvr32 urlmon. dll ".
If the virus problem is eliminated, the general problem can be solved after completing the preceding ie component registration.
3. If the computer has a printer, it may also be caused by incorrect installation of the printer driver. The solution is as follows:
Reinstall the printer driver.
Generally, after completing the preceding three steps, the problem can be fully resolved.
