PDA

View Full Version : Windows DLLHost.exe



skimannz
15-12-2003, 09:02 AM
I currently use XP Pro with SP1. Recently I notice our company internet connection slow down to the point no one could access the internet. On investigating the problem, I found my PC was sending large amounts of data to the internet. I then found when I ended the process DLLHost.exe or stopped the WINS Client Service (the two seem to be the same thing), the problem immediately disappeared.

Does anyone know why this happens and how to stop it happening?

Chilling_Silently
15-12-2003, 09:12 AM
Congratulations on being another Victim of the MS.Blaster/Welchia Virus ;-)

You'll wanna download some Antivirus-Protection, as well as the latest Windows Updates.

Goto www.rescueman.orcon.net.nz for some removal instructions (I believe the downloads for the patches are broken, but the removal tools should still be active).

Let us know how you get on with removal.

Cheers


Chill.

Chilling_Silently
15-12-2003, 09:15 AM
My apologies,
In my haste I forgot a couple of things:
1. Its rescuemannz.orcon.net.nz
2. The links should work if you go through to the MS Security Bulletin.
3. Welcome to PressF1 :-) We hope to see you still after you fix your virus ;-)

Cheers


Chill.

Babe Ruth
15-12-2003, 09:16 AM
skimannz,

You have the Welchia/nachi worm. For a removal tool from Symantec see Welchia_Worm (http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html)

or you can use the Stinger tool from McAfee from Stinger_Tools (http://vil.nai.com/vil/stinger/)

Your systems also need to have the security patches installed (part of the WinXP rollup 1 security pack) ... information available from Security_Rollup_1 (http://support.microsoft.com/?kbid=826939)



Cheers, Babe.