RE: strange dllhost and email

  • From: "Hery" <hery@xxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 2 Sep 2003 08:54:59 +0700

Messagehow can i know what program is processes dllhost.exe ?  i suspect 
dllhost is infected by virus coz my internet speed going very slow, but no 
viruses report after scan.   
  ----- Original Message ----- 
  From: Dolly Bareqet 
  To: [ExchangeList] 
  Sent: Monday, September 01, 2003 21:37 PM
  Subject: [exchangelist] RE: strange dllhost and email


  http://www.MSExchange.org/

  DLLHOST.EXE is used by many Windows program that support DLL based COM 
objects.

  Process File: dllhost or dllhost.exe
  Process Name: DCOM DLL Host Process.



   

  Dolly Bareqet

  System Administrator

  Tel: 972-3-6449333 Ext.240

  Mobile: 972-54-957550

  dolly@xxxxxxxxxxxx

  www.imd-soft.com

   


------------------------------------------------------------------------------

  From: Hery [mailto:hery@xxxxxxxxxxxxxx] 
  Sent: Monday, September 01, 2003 10:25 AM
  To: [ExchangeList]
  Cc: Exchange2000@xxxxxxxxxxxxxxx
  Subject: [exchangelist] strange dllhost and email

   

  http://www.MSExchange.org/

  hi guys,

   

  check at my task manager, and found DLLHOST.EXE entry at "processes",   Is 
this infected by welchia or sobig.f ?  i try to terminate it using some removal 
tools (doing in safe mode) but after restart and already running in normal 
mode, it will exist again.  fyi, i'm using windows 2000 advance server +sp3, 
and exchange 2000 + sp3.  i have apply the rpc dcom vulnerability patch.  and 
sometimes at the queue viewer, i can see email to domain that not listed at my 
company with size 1.002 KB.    what's this ?

   

  rgds,

  hery

  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
  Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
  Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Other Internet Software Marketing Sites:
  Leading Network Software Directory: http://www.serverfiles.com
  No.1 ISA Server Resource Site: http://www.isaserver.org
  Windows Security Resource Site: http://www.windowsecurity.com/
  Network Security Library: http://www.secinf.net/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this MSExchange.org Discussion List as: 
dolly@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
  Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
  Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Other Internet Software Marketing Sites:
  Leading Network Software Directory: http://www.serverfiles.com
  No.1 ISA Server Resource Site: http://www.isaserver.org
  Windows Security Resource Site: http://www.windowsecurity.com/
  Network Security Library: http://www.secinf.net/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this MSExchange.org Discussion List as: 
hery222@xxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: