Alert Advisor/dllhost.exe

[steve]

I got an alert advisor from zonealarm pro saying that, a
known malicious program( dllhost.exe also known as Nachi
or Welchia) is trying to connect to the internet. Do not
allow this program to connect. So I ran a virus scan with
Trend Mirco PC- cillin. But did not find anything. What
should I do, too find out if I am really infected with a
virus ? Thank you.

 

[Jim Eshelman]

I got an alert advisor from zonealarm pro saying that, a
known malicious program( dllhost.exe also known as Nachi
or Welchia) is trying to connect to the internet. Do not
allow this program to connect. So I ran a virus scan with
Trend Mirco PC- cillin. But did not find anything. What
should I do, too find out if I am really infected with a
virus ? Thank you.

Is Trend updated? If so, it is quite capable of finding this particular
virus.

If you have ZoneAlarm blocking this effort, then you are safe and need not
worry. DLLHOST.EXE is a perfectly good Windows file which, however, some
viruses do replace. You can do a search for all copies of DLLHOST.EXE on
your system -- the file should be 5-6 KB in size -- anything larger can and
should be deleted.

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://forum.aumha.org/

Did you find this newsgroup on the web? A newsreader like Outlook Express
will make your online life a lot easier. Get better help!
See: http://aumha.org/win4/supp1b.htm and
http://support.microsoft.com/support/news/howto/default.asp