RE: strange dllhost and email

  • From: "Hery" <hery@xxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 2 Sep 2003 11:47:52 +0700

Messagehi jamie,
i'm check the whole drive c:\.  and found only two dllhost.exe at drive c.

c:\winnt\system32\DLLHOST.EXE             (6 KB)
c:\winnt\servicepackfiles\i386\dllhost.exe    (6 KB)

i didn't found anything regarding to dllhost.exe at registry entry.

rgds,
hery
  ----- Original Message ----- 
  From: Jamie A. Byrnes 
  To: [ExchangeList] 
  Sent: Tuesday, September 02, 2003 11:12 AM
  Subject: [exchangelist] RE: strange dllhost and email


  http://www.MSExchange.org/


  This is a multi-part message in MIME format.



------------------------------------------------------------------------------


  Hi Hery,

  I am almost certain you have w32.blaster.d

  check in c:\windows\system32\wins\ as suggested by chris, although you can't 
be sure of which varient of blaster it is so can't be sure where it puts it - 
could try searching whole c: for dllhost.exe. Also check the usual run/runonce 
key in the registry (/HKLM/software/microsoft/current version/run).

  This variant was released only a couple (maybe 3) days ago, update your virus 
defs again or try trend housecall to be sure there is no virus there.


  Jamie.

Other related posts: