I had a trojan that used dllhost.exe apparently to upload data from my machine. I read of one that does this and uploads files with the .com extension. I was wondering what types of files are these?

they could have your vital info in them.

I have gotten this "virus". Could it be from MP3s? I recently downloaded a song I saw on MTV, its called "A.F.I. - Girls Not Grey". Those RIAA lamers may have bound it with the MP3. I have read about their plans to do this and they may have started doing so... I isolated the activity and have been monitoring it. I have been getting Smurf attacks for the past 4 hours on my internet connection, in which it has unsuccessfully blocked my access. The odd thing is, when I disconnect, it stops. When I start the connection, it resumes. If you block certain ports it cannot hinder the connection and/or send out information. I cannot tell you the ports it is using, I need to look into it a little further. Luckily I had them closed :) My computer is telling me that is has 100% CPU usage. I need to get rid of this nuisance. Whew!

What vital info?

I think i also got this trojan. At first, im wondering that my network was always transmitting data in the internet. I tried to run my netstat in my box, then i saw many connections. I tried to configure im firewall but still, transmitting data in the net, and the unknown connections that i saw in "netstats". I thought it was ok. Then the following day, i've experienced 100% CPU resource usage. I looked up in my task Manager, i saw DLLHOST.exe running in my processes. I terminated its process and i tried to delete all DLLHOST.exe file. And know nothings bothering me again. And i started to doubt that it was a trojan or something. Now? im sure it was :D

Sorry to intrude, but you should be aware that a copy of dllhost.exe in your ..\system32\wins folder is in fact an operating infection of the welchia worm. Go to www.symantec.com or your AV vendor of choice for more info and a removal tool. This uses the same backdoor as MSBlaster, so you should also visit Microsoft and get the blaster patch. It uses an exploit that MS left in Win2K and XP, and as such is not tranferred in mp3s or programs you may have downloaded. It is not a trojan, although there are reports of trojans exlploiting this same vulnerability. Good Luck. (I've been dealing with this at work for two weeks)

Thanks for giving me such information. Now i know :D Q. What is the dllhost.exe process on my machine that seems to use a lot of CPU? A. DLLHOST.exe acts as a host to execute any COM DLL outside a process address space. Microsoft KB article Q198891 has more details. With SQL Server this may be used for a linked-server/OLE-DB type connection to another machine or if you are invoking a COM object out-of-process using the sp_OAcreate stored-procedures.