I am infected

Hello

Please could someone possibly help me. I tend to loose my internet everytime I log in after 10 minutes and get "Generic Host Process for Win32 Services has encountered a problem and needs to close".

I ran a hijack this log and I think the error is linked to the following:

023 - Service: Ms Device Manager Services (mscfcosd) - Unknown owner - C:\WINDOWS\system32\mscfco.exe (file missing)

Any help appreciated

Thanks in advance

Chris

Welcome, we would like to see a log from this scan,please.

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Make sure you are connected to the Internet.
• Double-click on mbam-setup.exe to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.
• MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
• On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.
• Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

Hi

Herwith log as requested

Thanks

Malwarebytes' Anti-Malware 1.30
Database version: 1414
Windows 5.1.2600 Service Pack 2

21/11/2008 07:36:35
mbam-log-2008-11-21 (07-36-35).txt

Scan type: Quick Scan
Objects scanned: 69235
Time elapsed: 18 minute(s), 54 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders (Broken.SecurityProviders) -> Bad: (msapsspc.dll schannel.dll digest.dll msnsspc.dll) Good: (msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Have things improved ??

Please run an SAS scan next...
Please download and scan with SUPERAntiSpyware Free

• Double-click SUPERAntiSypware.exe and use the default settings for installation.
• An icon will be created on your desktop. Double-click that icon to launch the program.
• If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)
• In the Main Menu, click the Preferences... button.
• Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
• Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
  • Close browsers before scanning.
  • Scan for tracking cookies.
  • Terminate memory threats before quarantining.
• Click the "Close" button to leave the control center screen and exit the program.
• Do not run a scan just yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:

• Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
• On the left, make sure you check C:\Fixed Drive.
• On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
• After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
• Make sure everything has a checkmark next to it and click "Next".
• A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
• If asked if you want to reboot, click "Yes" and reboot normally.
• To retrieve the removal information after reboot, launch SUPERAntispyware again.
  • Click Preferences, then click the Statistics/Logs tab.
  • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
  • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
  • Please copy and paste the Scan Log results in your next reply.
• Click Close to exit the program.

Hi

Log below as requested

Regards

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/21/2008 at 08:31 PM

Application Version : 4.22.1014

Core Rules Database Version : 3646
Trace Rules Database Version: 1629

Scan type : Complete Scan
Total Scan Time : 03:04:27

Memory items scanned : 170
Memory threats detected : 0
Registry items scanned : 7904
Registry threats detected : 8
File items scanned : 73906
File threats detected : 83

Adware.Tracking Cookie
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wjmysic5icp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@serving-sys[2].txt
C:\Documents and Settings\Chris\Cookies\chris@myroitracking[1].txt
C:\Documents and Settings\Chris\Cookies\chris@server.iad.liveperson[3].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6whkoupcjmdp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@apmebf[1].txt
C:\Documents and Settings\Chris\Cookies\chris@opodo.122.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@adultfriendfinder[2].txt
C:\Documents and Settings\Chris\Cookies\chris@kontera[2].txt
C:\Documents and Settings\Chris\Cookies\chris@tribalfusion[1].txt
C:\Documents and Settings\Chris\Cookies\chris@yx0banners[2].txt
C:\Documents and Settings\Chris\Cookies\chris@virginmedia[1].txt
C:\Documents and Settings\Chris\Cookies\chris@112.2o7[2].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wfkocncjkkp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[1].txt
C:\Documents and Settings\Chris\Cookies\chris@247realmedia[2].txt
C:\Documents and Settings\Chris\Cookies\chris@tacoda[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wfmykidpebo.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@imrworldwide[2].txt
C:\Documents and Settings\Chris\Cookies\chris@servedby.adxpower[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6whliqlazehp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@bluetooth-advertising.co[2].txt
C:\Documents and Settings\Chris\Cookies\chris@server.iad.liveperson[1].txt
C:\Documents and Settings\Chris\Cookies\chris@mediaplex[2].txt
C:\Documents and Settings\Chris\Cookies\chris@www.traffic-splash[1].txt
C:\Documents and Settings\Chris\Cookies\chris@trafficemporium[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.mywebstats[1].txt
C:\Documents and Settings\Chris\Cookies\chris@redirect.clickshield[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wmkisnazekp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@stats.paypal[2].txt
C:\Documents and Settings\Chris\Cookies\chris@click.cashengines[2].txt
C:\Documents and Settings\Chris\Cookies\chris@ad1.clickhype[1].txt
C:\Documents and Settings\Chris\Cookies\chris@pro-market[1].txt
C:\Documents and Settings\Chris\Cookies\chris@ads.clicksor[2].txt
C:\Documents and Settings\Chris\Cookies\chris@questionmarket[1].txt
C:\Documents and Settings\Chris\Cookies\chris@server.lon.liveperson[3].txt
C:\Documents and Settings\Chris\Cookies\chris@latestnews.virginmedia[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.virginmedia[2].txt
C:\Documents and Settings\Chris\Cookies\chris@ads.adbrite[1].txt
C:\Documents and Settings\Chris\Cookies\chris@ad.yieldmanager[2].txt
C:\Documents and Settings\Chris\Cookies\chris@xiti[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wmkyepc5kdo.stats.esomniture[1].txt
C:\Documents and Settings\Chris\Cookies\chris@paypal.112.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@statse.webtrendslive[1].txt
C:\Documents and Settings\Chris\Cookies\chris@clicktorrent[2].txt
C:\Documents and Settings\Chris\Cookies\chris@track.adform[2].txt
C:\Documents and Settings\Chris\Cookies\chris@bs.serving-sys[2].txt
C:\Documents and Settings\Chris\Cookies\chris@msnportal.112.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@overture[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wdmiehc5kgo.stats.esomniture[1].txt
C:\Documents and Settings\Chris\Cookies\chris@ads.bleepingcomputer[1].txt
C:\Documents and Settings\Chris\Cookies\chris@counter.inkfrog[1].txt
C:\Documents and Settings\Chris\Cookies\chris@atdmt[1].txt
C:\Documents and Settings\Chris\Cookies\chris@adserver.easyad[1].txt
C:\Documents and Settings\Chris\Cookies\chris@tradedoubler[2].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[4].txt
C:\Documents and Settings\Chris\Cookies\chris@advertising[1].txt
C:\Documents and Settings\Chris\Cookies\chris@richmedia.yahoo[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[3].txt
C:\Documents and Settings\Chris\Cookies\chris@doubleclick[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[2].txt
C:\Documents and Settings\Chris\Cookies\chris@atoc.112.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@videoegg.adbureau[2].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wfkowndpggo.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wmk4uhcpehq.stats.esomniture[1].txt
C:\Documents and Settings\Chris\Cookies\chris@aoluk.122.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wjlogjajsdq.stats.esomniture[1].txt
C:\Documents and Settings\Chris\Cookies\chris@server.lon.liveperson[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[5].txt
C:\Documents and Settings\Chris\Cookies\chris@adopt.euroclick[1].txt
C:\Documents and Settings\Chris\Cookies\chris@accstandardbank.112.2o7[1].txt
C:\Documents and Settings\Chris\Cookies\chris@www.googleadservices[6].txt
C:\Documents and Settings\Chris\Cookies\chris@specificclick[1].txt
C:\Documents and Settings\Chris\Cookies\chris@adbrite[2].txt
C:\Documents and Settings\Chris\Cookies\chris@revsci[1].txt
C:\Documents and Settings\Chris\Cookies\chris@traffic-splash[1].txt
C:\Documents and Settings\Chris\Cookies\chris@ads.aol.co[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wfliclazwfo.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@adservr[1].txt
C:\Documents and Settings\Chris\Cookies\chris@e-2dj6wgmyumd5shp.stats.esomniture[2].txt
C:\Documents and Settings\Chris\Cookies\chris@ad.zanox[2].txt

Trojan.WinFixer 2006
HKCR\UWFX6PCheck.UWFX6PCheck.1

Rogue.Component/Trace
HKLM\Software\Microsoft\744A8E0E
HKLM\Software\Microsoft\744A8E0E#744a8e0e
HKLM\Software\Microsoft\744A8E0E#Version
HKLM\Software\Microsoft\744A8E0E#red_srv
HKLM\Software\Microsoft\744A8E0E#red_srv_bckp
HKLM\Software\Microsoft\744A8E0E#744a238e
HKLM\Software\Microsoft\744A8E0E#744a4a6b

Adware.Vundo Variant
C:\WINDOWS\SYSTEM32\GMOTTQBA.DLL
C:\WINDOWS\SYSTEM32\GXTSOF.DLL

Boopme

Thanks for previous help, but still get the message "Generic Host Process for Win32 Services has encountered a problem and has shutdown". I lose my net connection after 10minutes.

The error signature is as follows:

szAppName:svchost.exe
szAppVer:5.1.2600.2180
szModName:svchost.exe
szmodVer:5.1.2600.2180
offset: 00001361

Do you know what this means?

I check the txt file and gave me a very long log shown below, not sure if this will help you?

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="SYSTEM INFO" FILTER="GRABMI_FILTER_SYSTEM">
<MATCHING_FILE NAME="advapi32.dll" SIZE="616960" CHECKSUM="0x8E9BCF02" BIN_FILE_VERSION="5.1.2600.2180" BIN_PRODUCT_VERSION="5.1.2600.2180" PRODUCT_VERSION="5.1.2600.2180" FILE_DESCRIPTION="Advanced Windows 32 Base API" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="advapi32.dll" INTERNAL_NAME="advapi32.dll" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xA0DE4" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2180" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2180" LINK_DATE="08/04/2004 07:56:23" UPTO_LINK_DATE="08/04/2004 07:56:23" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="gdi32.dll" SIZE="282624" CHECKSUM="0x92E2A72F" BIN_FILE_VERSION="5.1.2600.3316" BIN_PRODUCT_VERSION="5.1.2600.3316" PRODUCT_VERSION="5.1.2600.3316" FILE_DESCRIPTION="GDI Client DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.3316 (xpsp_sp2_gdr.080219-1316)" ORIGINAL_FILENAME="gdi32" INTERNAL_NAME="gdi32" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x4AB95" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.3316" UPTO_BIN_PRODUCT_VERSION="5.1.2600.3316" LINK_DATE="02/20/2008 06:51:05" UPTO_LINK_DATE="02/20/2008 06:51:05" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="kernel32.dll" SIZE="984576" CHECKSUM="0xF0B331F6" BIN_FILE_VERSION="5.1.2600.3119" BIN_PRODUCT_VERSION="5.1.2600.3119" PRODUCT_VERSION="5.1.2600.3119" FILE_DESCRIPTION="Windows NT BASE API Client DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)" ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xF9293" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.3119" UPTO_BIN_PRODUCT_VERSION="5.1.2600.3119" LINK_DATE="04/16/2007 15:52:53" UPTO_LINK_DATE="04/16/2007 15:52:53" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="ntdll.dll" SIZE="708096" CHECKSUM="0x9D20568" BIN_FILE_VERSION="5.1.2600.2180" BIN_PRODUCT_VERSION="5.1.2600.2180" PRODUCT_VERSION="5.1.2600.2180" FILE_DESCRIPTION="NT Layer DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="ntdll.dll" INTERNAL_NAME="ntdll.dll" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xAF2F7" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2180" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2180" LINK_DATE="08/04/2004 07:56:36" UPTO_LINK_DATE="08/04/2004 07:56:36" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="ole32.dll" SIZE="1285120" CHECKSUM="0xA38DDD0E" BIN_FILE_VERSION="5.1.2600.2726" BIN_PRODUCT_VERSION="5.1.2600.2726" PRODUCT_VERSION="5.1.2600.2726" FILE_DESCRIPTION="Microsoft OLE for Windows" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)" ORIGINAL_FILENAME="OLE32.DLL" INTERNAL_NAME="OLE32.DLL" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x13DC6B" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2726" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2726" LINK_DATE="07/26/2005 04:39:47" UPTO_LINK_DATE="07/26/2005 04:39:47" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="oleaut32.dll" SIZE="550912" CHECKSUM="0x96DD1D1E" BIN_FILE_VERSION="5.1.2600.3266" BIN_PRODUCT_VERSION="5.1.2600.3266" PRODUCT_VERSION="5.1.2600.3266" COMPANY_NAME="Microsoft Corporation" FILE_VERSION="5.1.2600.3266" INTERNAL_NAME="OLEAUT32.DLL" LEGAL_COPYRIGHT="Copyright © Microsoft Corp. 1993-2001." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x86DD3" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.3266" UPTO_BIN_PRODUCT_VERSION="5.1.2600.3266" LINK_DATE="12/04/2007 18:38:12" UPTO_LINK_DATE="12/04/2007 18:38:12" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="shell32.dll" SIZE="8454656" CHECKSUM="0x13694C50" BIN_FILE_VERSION="6.0.2900.3241" BIN_PRODUCT_VERSION="6.0.2900.3241" PRODUCT_VERSION="6.00.2900.3241" FILE_DESCRIPTION="Windows Shell Common Dll" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.3241 (xpsp_sp2_gdr.071025-1248)" ORIGINAL_FILENAME="SHELL32.DLL" INTERNAL_NAME="SHELL32" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x8166C2" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.3241" UPTO_BIN_PRODUCT_VERSION="6.0.2900.3241" LINK_DATE="10/26/2007 03:36:50" UPTO_LINK_DATE="10/26/2007 03:36:50" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="user32.dll" SIZE="577536" CHECKSUM="0x1AB40203" BIN_FILE_VERSION="5.1.2600.3099" BIN_PRODUCT_VERSION="5.1.2600.3099" PRODUCT_VERSION="5.1.2600.3099" FILE_DESCRIPTION="Windows XP USER API Client DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)" ORIGINAL_FILENAME="user32" INTERNAL_NAME="user32" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x940E1" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.3099" UPTO_BIN_PRODUCT_VERSION="5.1.2600.3099" LINK_DATE="03/08/2007 15:36:28" UPTO_LINK_DATE="03/08/2007 15:36:28" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="wininet.dll" SIZE="818688" CHECKSUM="0x14451C19" BIN_FILE_VERSION="7.0.5730.13" BIN_PRODUCT_VERSION="7.0.5730.13" PRODUCT_VERSION="7.00.5730.13" FILE_DESCRIPTION="Internet Extensions for Win32" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Windows® Internet Explorer" FILE_VERSION="7.00.5730.13 (longhorn(wmbla).070711-1130)" ORIGINAL_FILENAME="wininet.dll" INTERNAL_NAME="wininet.dll" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xCFB8F" LINKER_VERSION="0x60000" UPTO_BIN_FILE_VERSION="7.0.5730.13" UPTO_BIN_PRODUCT_VERSION="7.0.5730.13" LINK_DATE="08/14/2007 01:54:09" UPTO_LINK_DATE="08/14/2007 01:54:09" VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="winsock.dll" SIZE="2864" CHECKSUM="0x73AE8088" BIN_FILE_VERSION="3.10.0.103" BIN_PRODUCT_VERSION="3.10.0.103" PRODUCT_VERSION="3.10" FILE_DESCRIPTION="Windows Socket 16-Bit DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows™ Operating System" FILE_VERSION="3.10" ORIGINAL_FILENAME="WINSOCK.DLL" INTERNAL_NAME="WINSOCK" LEGAL_COPYRIGHT="Copyright © Microsoft Corp. 1981-1996" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10001" VERFILETYPE="0x2" MODULE_TYPE="WIN16" S16BIT_DESCRIPTION="BSD Socket API for Windows" S16BIT_MODULE_NAME="WINSOCK" UPTO_BIN_FILE_VERSION="3.10.0.103" UPTO_BIN_PRODUCT_VERSION="3.10.0.103" VER_LANGUAGE="English (United States) [0x409]" />
</EXE>
</DATABASE>

This may be a problem with windows updates. Go here and see if you have the first hotfix, in the first reolution. Then see the next two resolution if you have those symptoms.

Generic Host Process,Microsoft

I am going to split these last 4 posts and move this to XP at the top. AND Title it "computer pinging out but can't navigate"
Malware removed here..http://www.bleepingcomputer.com/forums/index.php?act=post&do=reply_post&f=103&t=181109

I belive you will get better direction from our experts there.