PC Pals Forum
Technical Help & Discussion => Windows PCs & Software: Help, News & Discussion => Topic started by: Dominic on September 03, 2003, 23:39
-
Just formatted, and this keeps asking to access net. what is it :/
-
Hi Dominic,
Doesn't mean a thing to me, but I found this:
Dllhost.exe:
DCOM support module for DLL based COM objects (DCOM = Distributed Component Object Model). DCOM is a software architecture model which is an intrinsic part of Windows, of most Microsoft products, and of many non-Microsoft products. In most cases you should never see DLLHOST in your Task List, as, typically, DLLHOST starts, does what it has to do, and then terminates. However, sometimes, if a Java COM object runs (this could happen if you are browsing the Internet and come to a page which has Java code), DLLHOST may not terminate, which is when you would see it in your Task List.
Recommendation :
Do not "End Task" it as there is no way to determine whether DLLHOST has completed its task or not. For the more advanced users, however, deleting the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Java VM\MSDebug" can often solve the problem of DLLHOST constantly appearing in the Task List. Finally, if you keep getting DLLHOST errors on a Windows 2000/XP/2003 PC, then you may have the Welchia virus.
-
Depends.
Could be the welchia virus
http://www.pchell.com/virus/welchia.shtml
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
or could just be a windows executable used for executing COM files
http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=14355
-
It's not in the tast list as yet, as i denied it internet access. also i dont have the "HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Java VM\MSDebug" to remove it :/
-
Best run an AV scan Dominic if its not listed in your registry :(
-
i just formatted, 10 mins ago .. to sort my downloading prob lol, also i got msblast as soon as i installed my modem lol, dunno what dll host is tho.
-
i just formatted, 10 mins ago .. to sort my downloading prob lol, also i got msblast as soon as i installed my modem lol, dunno what dll host is tho.
Not having much luck are you Dominic,
prior to you doing a reformat and clean install I would always advise you to download SpyBot, SpyGuard, SpyBlaster, ZoneAlarm, EmpTemp, Mailwasher, and an Anti Virus programe on to a CD. They will not cost you one solitary penny and will give you some strong defences against system attacks. You can find links to all these free programs at the bottom of the home page.
Never go on the web without first installing all those programs. and never open email, or download programs from iffy sites or shared folders until you have up dated all the aforementioned programs plus the zillions of Windows security patches
-
Good advice Tony :good: :)
-
It had summin to do with msblast, also had "trivia file transfer application" asking for net access. this time i format is it ok to run the msblast patch before config the net/modem?
-
Do what Tony says above Dominic. It is the only way to ensure that you will definitely not get infected again.
-
I have zonealarm and a AV, but msblast gets in easy, what i wanna know is can i install the patch to prevent before installing my modem/net.
-
How about putting the patch onto a Floppy or CD (not sure how big it is), then you can install it before you go online.
Here's (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp) where you can find it. :)
-
I have zonealarm and a AV, but msblast gets in easy, what i wanna know is can i install the patch to prevent before installing my modem/net.
If your ZoneAlarm is letting MSBlast through it isn't configured properly :( You need to ensure that it is running in stealth mode. Use the ShieldsUp port scanner at grc.com to verify your firewall is working before you do anything else.
-
How about putting the patch onto a Floppy or CD (not sure how big it is), then you can install it before you go online.
Here's (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp) where you can find it. :)
Thats my question, wondering if i could do that :P also zonelaram lets it though because, as soon as im online msblast seems to hit me.
-
The patch does fit on a floppy and the removal tool does too,(one floppy for each), as I posted them to some Welsh ( ::) ) people when it came out at first :)
-
I posted them to some Welsh ( ::) ) people when it came out at first :)
Come clean Sandra - it was only one Welsh person wasn't it? And I bet she's blonde ;) :baad:
-
Im welsh 0_o i dont need to back the patch up, i have a 2nd hdd what im asking is it ok to install the patch first after a fresh install. no internet set up etc
-
Yes you can do that Dominic and you can run the fix it tool at any time you want too.
Wasnt The Blonde Adept but actually a cousin of mine who now lives in Wales so not really true Welsh :)
-
Im welsh
We have quite a "Taffia" here on Pals Dominic. I'm from Ammanford (I work in Swansea), Clive is from Bridgend and Serenity is in Cardiff.
I'm sure we used to have some other Welsh members, but I've temporarily forgotten who they were ;)
-
its so busy in here I thought I'd have a look but its all far too techie for me LOL so to sum up here is dllhost.exe a virus then? :lol:
Do I ask the most stupid questions or what? :P
-
Not normally but there is a virus that calls itself that apparently Michelle :)
-
oh right so really that file is good and a normal files ........... but there are dodgy ones about is that what you are saying?
-
I have zonealarm and a AV, but msblast gets in easy, what i wanna know is can i install the patch to prevent before installing my modem/net.
reading your post Dominic, reminds me of a poster a mate of mine had in his place of business, it read; Why didn't all my life problems come to me when I was a teenager.....and I had all the answers ;) of course whats really important is having the 'right' answers.
Sandra, you can get both the patch and the repair tool on one floppy.
As to loading the patch prior to connecting to the web, with my W2K, it would not allow the patch to be installed untill SP4 had been downloaded...which meant of course connecting to the web.
I know that because I have just reformatted my Hard Drives...not because I had a MSblast but because I like doing it ;D Never had an infection in six years of being connected to the web, been attacked alright but non got through...but there again I took advice when it was offered ;)
-
Yes thats it Michelle it masquerades as the real one :(
-
The patch doesnt require any SP's prior to installing the blast patch, so i assume it's safe to install it before installing internet?
-
If it will install ...install it ::)
-
Just realised, it's not blast, it's W32.Welchia.Worm. there seems to be a removeal tool, but i cant see a patch for when it's been removed, is there one?
-
Have you not got SP1 on cd as well Dominic in case you need to reinstall XP sometime?
As Tony says it should install anyway but I would definately have SP1 on cd in case of problems later if you need to wipe it again sometime :doggie:
-
I've got a ghost image of XP/Sp1 which i created for easy formatting, but as soon as i load it, set net up i was getting that prob, i thought it was blast, but its W32.Welchia.Worm.
-
Its got the info and a removal tool here dominic :)
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.html
-
Yup just readin that, what im thinking, like blast when u remove it, theres a patch to stop getting infected again, i see a removeal for W32.Welchia.Worm but not a patch :/ Is norton 2001 compatable with XP? i think i tried before and it wasn't if it is, im gonna dig in my cd's and find it :P
-
As far as I know it is but I havent used it myself as I started with 2002 and moved up to 2003 last year :)
-
Im welsh
We have quite a "Taffia" here on Pals Dominic. I'm from Ammanford (I work in Swansea), Clive is from Bridgend and Serenity is in Cardiff.
I'm sure we used to have some other Welsh members, but I've temporarily forgotten who they were ;)
I'm from neath :P
-
I'm from neath :P
Does that make you a trogladite then as they live 'neath the earth dont they ;D ;D ;D
-
I'm afraid Norton 2001 is NOT compatible with XP, Dominic. I know, because I've tried it.
I've got a ghost image of XP/Sp1 which i created for easy formatting, but as soon as i load it, set net up i was getting that prob, i thought it was blast, but its W32.Welchia.Worm.
Now, this might sound stupid, but sometimes the obvious things are overlooked - are you certain you haven't got the Welchia worm in your ghost image?
-
The image is nearly a year old, the worm wasn't created then :/
-
Also can u recommend any good free AV? i need a temp one till get norton 2003 :/
-
Also can u recommend any good free AV? i need a temp one till get norton 2003 :/
Not used it myself http://www.free-av.com/ but those who use this free program http://www.grisoft.com/us/us_dwnl_free.php say they will migrate to it, when they have to start paying for AVG.
And I would be doing the same if I had not got Norton, and by that I'm not saying Norton is better.