dllhost.exe taking up CPU processes and slowing down DSL connection

LS20

Banned
Jan 22, 2002
5,858
0
0
just reformatted my home computer, and put on XP Pro. i installed AGP driver, nvidia detonator, sound driver, lan driver, and then AIM. thats ALL.

thought it was funny how my computer was running a bit slow with the web running crawling along... went to task manager and saw that dllhost was eating up 60-90% of the CPu cycles... so i cut it and everything went fast again.

i dont understand whats causing this... i know i cant just take off dllhost as a permanent solution because its a crucial part of the windows OS... or is it
 

yukichigai

Diamond Member
Apr 23, 2003
6,404
0
76
Go to download.com and get Process Viewer, then examine the file to see what directory it is in. If it is in a folder named Wins off of your System or System32 folder you most likely have the Welchia Worm. A case of white hat hacking gone slightly awry, but I suppose it does help to keep the stupid people who never update safe.
 

KLin

Lifer
Feb 29, 2000
30,454
763
126
Yup sounds like Welchia all right. I had that on a computer here at work. I found it strange that it only hit one computer out of the 60 that are running 2000/xp here.
 

yukichigai

Diamond Member
Apr 23, 2003
6,404
0
76
Originally posted by: KLin
Yup sounds like Welchia all right. I had that on a computer here at work. I found it strange that it only hit one computer out of the 60 that are running 2000/xp here.

I would suspect the other computers have TFTP disabled or unable to be installed, or they were patched for RPC vulnerability already. Someone might have put it on the computer on purpose or something as well.
 

dawks

Diamond Member
Oct 9, 1999
5,071
2
81
RUN A FIREWALL PEOPLE. THE FIRST THING WHEN YOU INSTALL. DONT EVEN HAVE A NETWORK CABLE CONNECTED TILL YOU HAVE A FIREWALL RUNNING!

:D

I got a virus once while installing a service pack, two minutes after I had completed installing Windows 2000.