| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 40797 | 2003-12-18 20:48:00 | Overactive DLLHOST? | Erin Salmon (626) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 201542 | 2003-12-18 20:48:00 | Hi, When I am connected to the internet (either by a dial-up modem, or over a LAN from another computer) my computer is responsible for steadily puring vast amounts of data out through the network. I.e. it is frantically uploading something. My initial reaction was a virus, but Norton didn't find any foul play. So I tried closing down as many non-critical processes as I could, and found that DLLHOST.exe was responsible. Every time I connect to the net I need to end the process. This is fine until I connect again. Why is this happening? Can I do anything about it? It makes uploading anything to an FTP server very time-consuming if I forget to close DLLHOST. Something similar happens on my local machine if I run a bit of buggy (like a loop with no .MoveNext) ASP code using IIS - DLLHOST starts using up physical memory like there's no tomorrow, until it runs out (1GB RAM), and uses the page file... This continues to fill up until the disk has no space for anything to function in, and the computer hangs completely. I know this is just because the loop is running perpetually, but it has the same cure as my current problem - end the DLLHOST process. Thanks in advance! Erin |
Erin Salmon (626) | ||
| 201543 | 2003-12-18 20:57:00 | Are your anti virus definitions up to date? DLL host is used by the welchia worm. There is a legitimate file called dllhost.exe which should reside in your windows\system32 directory and is about 5k in size. The worm file will be located in windows\system32\wins directory. Have a look and see if the file is there. B. |
Barnabas (4562) | ||
| 201544 | 2003-12-18 21:01:00 | Nothing doing there I'm afraid, although the symptoms do have "VIRUS" written all over them. I'll get the latest definitions (though I did it yesterday morning...) Hrrmm... Erin |
Erin Salmon (626) | ||
| 201545 | 2003-12-18 21:08:00 | See rescuemannz.orcon.net.nz A related thread: pressf1.pcworld.co.nz |
Chilling_Silently (228) | ||
| 1 | |||||