DLLHOST.EXE as virus?

[Robert M. Lincoln]

I've just reformatted my hard disk, reinstalled WinXP Pro, Office XP, and
Norton Antivirus 2003. Norton antivirus says there is a virus in
DLLHOST.EXE which is located in the C:\Windows\System32\Wins folder.

I have another XP machine, and it doesn't have the file. Norton can't
repair the file. Can I just delete it? What does it do?

Thanks

[john]

How to remove
http://www.pchell.com/virus/welchia.shtml

--
(To reply direct, please ensure address ends with net.au)
Johnf

> I've just reformatted my hard disk, reinstalled WinXP Pro, Office XP,
> and Norton Antivirus 2003. Norton antivirus says there is a virus in
> DLLHOST.EXE which is located in the C:\Windows\System32\Wins folder.
>
> I have another XP machine, and it doesn't have the file. Norton can't
> repair the file. Can I just delete it? What does it do?
>
> Thanks

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Robert M. Lincoln" > wrote in message
...
> I've just reformatted my hard disk, reinstalled WinXP Pro, Office
XP, and
> Norton Antivirus 2003. Norton antivirus says there is a virus in
> DLLHOST.EXE which is located in the C:\Windows\System32\Wins folder.
>
> I have another XP machine, and it doesn't have the file. Norton
can't
> repair the file. Can I just delete it? What does it do?
>
> Thanks
>
>