C:\WINDOWS\SYSTEM32\WINS\DLLHOST.EXE Is this file important?
I found this file to be infected with worm/nachi when I ran AVG. The oly way to kill the virus is to delete the file, is it safe to delete?
Virus troubles
C:\WINDOWS\SYSTEM32\WINS\DLLHOST.EXE Is this file important?
I found this file to be infected with worm/nachi when I ran AVG. The oly way to kill the virus is to delete the file, is it safe to delete?
Surely you can find some sort of Virus Scanning program that can simply clean the file? I would assume that the file you've quoted there is very important (as most DLL files are). CL will probably be along to correct me very shortly, but I seriously wouldn't consider deleting the file just yet.
As I said, there must be some sort of Worm-Remover tool you can use.
"As the days go by, we face the increasing inevitability that we are alone in a godless,
uninhabited, hostile and meaningless universe. Still, you've got to laugh, haven't you?"
I don't know, but it looks pretty important.
You could try to download the file and replace it with a clean one.
It's part of Windows, yes. Assuming you haven't disabled stuff like System Restore etc., I'd guess Windows would restore a clean copy from it's own backup or ask you for the CD if you just randomly deleted it.
EDIT: dllhost is in a different location on both my computers to the location you mentioned.
It's still on my system but I have the worm protection patch from the microsoft site, and it hasnt done anything yet. Can I download it anywhere?
Your Windows CD, yes
Ok somebody guide me throught the process please.
I have that file too, I've checked and my dad's computer doesn't have it, neither do my friends. What it does to me is it keeps signing my out of MSN messenger and slowing down my internet explorer even though I'm only loading one page and not downloading anything. Also when it's in my processes and I open up ZoneAlarm I get heaps and heaps of people being bloced from hacking me.
I don't know how to delete it, I just end the task every time I load my computer and it stops all of the above.
"... and so I close, realizing that perhaps the ending has not yet been written."
Ok now it's getting annoying, I keep getting a virus that is making my computer do everything but be able to go on the internet, seriously I cant go on the internet unless I format my HD and reinstall windows. I think it might have something to do with a virus that has the word "Worm" in its name its second part of it's name starts with an 'N' I think its 'Nicha' or something. Is there a security patch for it?
Ok full problem in this order.
1. I turn my system off and go to sleep
2. Wake up and turn it on and Adaware starts running all y itself
3. I try to connect to the internet, my modem dials up to my ISP and after it connects no data packets go in or out.
4. I do a system restore but then AVG says that a file in the System volume information folder is infected with worm/nachi and because its in that folder I cant get to it
How exactly do I deal with worm/nachi. I think it might have to do with my connection not accepting packets and the only way I can deal with it is to wipe out my HD completly.
Try this, I don't know if it will work, but I've been having similar troubles.
When you load up your computer, before you dial up to the internet, press CTRL+ALT+DEL to bring up the task manager and end the "DLLHOST" process. It helps me a lot. Otherwise, I don't know.
"... and so I close, realizing that perhaps the ending has not yet been written."
This a new variaton of the worm virus, it's pretty deadly too.
http://www.microsoft.com/downloads/d...displaylang=en
everyone go here and get the patch for it if you are running XP. I cannot stress how important this is.
Actually, the Nachi worm isn't deadly at all, all it does is patch the OS from that rather large exploit recently (which I posted an announcement about here some time ago), then it deletes itself come the new year
You can't stress how important the patch on the link you posted is, because that patch is rather out of date, which is even mentioned on the page you linked to, so it's rather not very important at all and you should be looking for later patches
Well that nachi keeps data packets from going in or out of my computer when I dial up to my isp or any of my other ISPs for that matter. So this patch is nessisary.
You clearly didn't read the payload for nachi, nor what the patch does then, since they're completely seperate form each other. I'd consider your PC has another virus on it then which hasn't been detected, if it's doing other stuff it shouldn't.
Posting Permissions
Reply With Quote
