Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
MSN has told me to remove this virus. I have ran the symantec w32.welchia virus removal tool twice and no worm has been found. What do I do?

hello
try these scans
free trojin scan
http://www.trojanscan.com/trojanscan/scanner.htm
panda scan
http://www.pandasoftware.es/activescan/
housecall
http://housecall.trendmicro.com/housecall/start_corp.asp
nrav av
http://www.ravantivirus.com/scan/
avast cleaning tool
http://www.avast.com/i_idt_171.html
mcafee avert stinger
http://vil.nai.com/vil/stinger/
scans for open trojin ports
http://scan.sygate.com/pretrojanscan.html
test my sheilds grc
https://nanoprobe.grc.com/x/ne.dll?bh0bkyd2
dsl port scan
http://www.dslreports.com/scan
pest patrol scan mediocre
http://www.pestscan.com/Scan.asp
security scan
http://www.it-sec.de/index/inhalt/vulchk.php/?sid=2eb8ea121e57434616fa2c6f283c63b7

I also had this virus.
To remove it all you have to do is goto your system32 dirrectory, look for the directory Wins and remove it as well as the files DLLHOST.exe and SVCHOST.exe.then reboot your machine.
Nice n Simple.
Cya

I also had this virus.
The Windows system file is dllhost.exe and is located in the C:\windows\system32 [or equivalent] directory. DO NOT DELETE THIS FILE.
The virus is DLLHOST.exe (uppercase) and is located in the C:\windows\system32\wins directory. Delete the entire folder (you will probably need to restart windows in safe mode to do this).

Deleting the file, as I have just found out, does not completely remove the virus. Complete instructions can be found here:
http://www.pchell.com/virus/welchia.shtml

I came across this board because I was searching for some info on "dllhost.exe" the reason is because recently my computer has been infected with a lot of weird files so I have to check the Task Manager regularly and this time I saw 2 "dllhost.exe", 1 is SYSTEM and the other is IWAM_[mycomputer'sname], it looks really suspicious cuz I've never seen this before in Task Manager... I've read some threads saying that the infected files is in /System32/Wins/ but when I go there, there's no file in that folder, the only 1 "dllhost.exe" I found after doing a search is in the system32 folder and its size is 5kb and the name is lowercase, oh and 2 other .pf files in the windows/prefetch folder... So I'm wondering if my computer is infected with this virus that's been talked about or what? Thanks a lot for your attention!!!

I have found the info in this discussion very useful to get read of the dllhost.exe virus.
Thanks.

This was the best info - I was having all sorts of problems, and I really appreciate the tips on how to get rid of the dllhost.exe virus!

Yes . Its a Virus . Antivirus is Unable to remove this . The Virus makes Certain changes to the Windows Registry. Hence its not adviced to tamper with the registry ourself. To Remove this Virus you have to install the Hotfix given By Microsoft. You can Find the Hotfix at the microsoft Site or at http://www.ntlworld.com/virus. Just install the Hotfix and you will get rid of this Virus
Sorry to Say that Windows is vulnerable to this virus . So this virus might reappear If you use the internet very often .. So Keep this Hotfix handy. Whenever you find your machine processing slow just check if the dllhost.exe is running in your process list . If it is then reinstall this hotfix
Cheers
Praveen Bangera

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |