RE: strange dllhost and email
- From: "Dolly Bareqet" <dolly@xxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Tue, 2 Sep 2003 09:03:28 +0200
DCOM support module for DLL based COM objects (DCOM = Distributed
Component Object Model). DCOM is a software architecture model which is
an intrinsic part of Windows, of most Microsoft products, and of many
non-Microsoft products. In most cases you should never see DLLHOST in
your Task List, as, typically, DLLHOST starts, does what it has to do,
and then terminates. However, sometimes, if a Java COM object runs
(this could happen if you are browsing the Internet and come to a page
which has Java code), DLLHOST may not terminate, which is when you would
see it in your Task List.
Recommendation :
Do not "End Task" it as there is no way to determine whether DLLHOST has
completed its task or not. For the more advanced users, however,
deleting the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Java
VM\MSDebug" can often solve the problem of DLLHOST constantly appearing
in the Task List. Finally, if you keep getting DLLHOST errors on a
Windows 2000/XP/2003 PC, then you may have the Welchia virus.
Dolly Bareqet
System Administrator
Tel: 972-3-6449333 Ext.240
Mobile: 972-54-957550
dolly@xxxxxxxxxxxx
www.imd-soft.com
_____
From: Hery [mailto:hery@xxxxxxxxxxxxxx]
Sent: Tuesday, September 02, 2003 3:55 AM
To: [ExchangeList]
Subject: [exchangelist] RE: strange dllhost and email
http://www.MSExchange.org/
how can i know what program is processes dllhost.exe ? i suspect
dllhost is infected by virus coz my internet speed going very slow, but
no viruses report after scan.
----- Original Message -----
From: Dolly Bareqet <mailto:dolly@xxxxxxxxxxxx>
To: [ExchangeList] <mailto:exchangelist@xxxxxxxxxxxxx>
Sent: Monday, September 01, 2003 21:37 PM
Subject: [exchangelist] RE: strange dllhost and email
http://www.MSExchange.org/
DLLHOST.EXE is used by many Windows program that support DLL
based COM objects.
Process File: dllhost or dllhost.exe
Process Name: DCOM DLL Host Process.
Dolly Bareqet
System Administrator
Tel: 972-3-6449333 Ext.240
Mobile: 972-54-957550
dolly@xxxxxxxxxxxx
www.imd-soft.com
_____
From: Hery [mailto:hery@xxxxxxxxxxxxxx]
Sent: Monday, September 01, 2003 10:25 AM
To: [ExchangeList]
Cc: Exchange2000@xxxxxxxxxxxxxxx
Subject: [exchangelist] strange dllhost and email
http://www.MSExchange.org/
hi guys,
check at my task manager, and found DLLHOST.EXE entry at
"processes", Is this infected by welchia or sobig.f ? i try to
terminate it using some removal tools (doing in safe mode) but after
restart and already running in normal mode, it will exist again. fyi,
i'm using windows 2000 advance server +sp3, and exchange 2000 + sp3. i
have apply the rpc dcom vulnerability patch. and sometimes at the queue
viewer, i can see email to domain that not listed at my company with
size 1.002 KB. what's this ?
rgds,
hery
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion
List as: dolly@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion
List as: hery222@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
dolly@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
