patches

[Guest]

downloaded fixex for worm welchia and worm blaster but when i try to install them they both stop at windows\system32\pathping.exe and I can go no further. Also worm welchia in in dllhost.exe file which is now quarantined do i need this file
Excuse my ingnoranc

 

[Carey Frisch [MVP]]

Check for viruses:

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

And check for the presence of spyware:

Bazooka Adware and Spyware Scanner 1.12
http://download.com.com/3000-2144-10247783.html

Frequently Asked Questions (FAQ) regarding "malware,"
a general term coined for all forms of malicious software.
http://www.microsoft.com/technet/Security/topics/virus/malware.mspx

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------------------


| downloaded fixex for worm welchia and worm blaster but when i try to install them they both stop at
windows\system32\pathping.exe and I can go no further. Also worm welchia in in dllhost.exe file which is now
quarantined do i need this file.
| Excuse my ingnorance
|

 

[Sadie]

Zola,Hello,

dllhost.exe IS Nachi/Welchia.You can delete it with
impunity!

Sadie

-----Original Message-----
downloaded fixex for worm welchia and worm blaster but

when i try to install them they both stop at
windows\system32\pathping.exe and I can go no further.
Also worm welchia in in dllhost.exe file which is now
quarantined do i need this file.

 

[Drew Cooper [MSFT]]

Um . . . *that* dllhost.exe is the virus. It has replaced a valid Windows
binary - the default COM surrogate. It would be a good idea to put the
original back in place.

 

[Sadie]

http://www.liutilities.com/products/wintaskspro/processlib
rary/dllhost/

O.K. Is that why pathping is knackered?

Sadie

-----Original Message-----
Um . . . *that* dllhost.exe is the virus. It has replaced a valid Windows
binary - the default COM surrogate. It would be a good idea to put the
original back in place.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Zola,Hello,

dllhost.exe IS Nachi/Welchia.You can delete it with
impunity!

Sadie
when i try to install them they both stop at
windows\system32\pathping.exe and I can go no further.
Also worm welchia in in dllhost.exe file which is now
quarantined do i need this file.

.

 

[Sadie]

http://www.sophos.com/virusinfo/analyses/w32nachia.html

Drew,

Are you sure about this one?Read the above,because I do
not think the legitimate windows file is in question,here.
Wasn't the dllhost.exe in this instance pure and simple
nachi?
I'm not being impudent,I just want to become better
informed.

Sadie

-----Original Message-----
Um . . . *that* dllhost.exe is the virus. It has replaced a valid Windows
binary - the default COM surrogate. It would be a good idea to put the
original back in place.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Zola,Hello,

dllhost.exe IS Nachi/Welchia.You can delete it with
impunity!

Sadie
when i try to install them they both stop at
windows\system32\pathping.exe and I can go no further.
Also worm welchia in in dllhost.exe file which is now
quarantined do i need this file.

.

 

[Drew Cooper [MSFT]]

Oops!
From what I read before I thought this was in system32. There is a real
Windows binary named dllhost.exe that lives in the system32 directory.

That article says it uses the wins directory. %windir%\wins\dllhost.exe is
definitely the virus.

Sorry. I wasn't trying to spread misinformation.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

http://www.sophos.com/virusinfo/analyses/w32nachia.html

Drew,

Are you sure about this one?Read the above,because I do
not think the legitimate windows file is in question,here.
Wasn't the dllhost.exe in this instance pure and simple
nachi?
I'm not being impudent,I just want to become better
informed.

Sadie

-----Original Message-----
Um . . . *that* dllhost.exe is the virus. It has replaced a valid Windows
binary - the default COM surrogate. It would be a good idea to put the
original back in place.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Zola,Hello,

dllhost.exe IS Nachi/Welchia.You can delete it with
impunity!

Sadie
-----Original Message-----
downloaded fixex for worm welchia and worm blaster but
when i try to install them they both stop at
windows\system32\pathping.exe and I can go no further.
Also worm welchia in in dllhost.exe file which is now
quarantined do i need this file.
Excuse my ingnorance

.

.