Forum Home
Press F1
 
Thread ID: 40680 2003-12-14 21:02:00 Windows DLLHost.exe skimannz (5001) Press F1
Post ID Timestamp Content User
200519 2003-12-14 21:02:00 I currently use XP Pro with SP1. Recently I notice our company internet connection slow down to the point no one could access the internet. On investigating the problem, I found my PC was sending large amounts of data to the internet. I then found when I ended the process DLLHost.exe or stopped the WINS Client Service (the two seem to be the same thing), the problem immediately disappeared.

Does anyone know why this happens and how to stop it happening?
skimannz (5001)
200520 2003-12-14 21:12:00 Congratulations on being another Victim of the MS.Blaster/Welchia Virus ;-)

You'll wanna download some Antivirus-Protection, as well as the latest Windows Updates.

Goto www.rescueman.orcon.net.nz for some removal instructions (I believe the downloads for the patches are broken, but the removal tools should still be active).

Let us know how you get on with removal.

Cheers


Chill.
Chilling_Silently (228)
200521 2003-12-14 21:15:00 My apologies,
In my haste I forgot a couple of things:
1. Its rescuemannz.orcon.net.nz
2. The links should work if you go through to the MS Security Bulletin.
3. Welcome to PressF1 :-) We hope to see you still after you fix your virus ;-)

Cheers


Chill.
Chilling_Silently (228)
200522 2003-12-14 21:16:00 skimannz,

You have the Welchia/nachi worm. For a removal tool from Symantec see Welchia_Worm (securityresponse.symantec.com)

or you can use the Stinger tool from McAfee from Stinger_Tools (vil.nai.com)

Your systems also need to have the security patches installed (part of the WinXP rollup 1 security pack) ... information available from Security_Rollup_1 (support.microsoft.com)



Cheers, Babe.
Babe Ruth (416)
1