wins service does not start wins\DLLHOST.EXE not found

Discussion in 'Anti-Virus' started by google, May 6, 2005.

  1. google

    google Guest

    I got two win 2000 servers, and both are now unable to run wins client
    services.

    When I try to start the WINS service, I get a message that the File
    cannot be found.

    A look at the service definition, shows a startup file of:

    c:\WINNT\System32\wins\DLLHOST.EXE

    Which does not exist.

    Perusing the groups, I see a message or two, stating that this
    DLLHOST.EXE file is a virus. It may be that the Panda found it, and
    removed it.

    Can anybody clue me in as to what to do to get this WINS service
    running again?

    Thanks in advance.
     
    google, May 6, 2005
    #1
    1. Advertisements

  2. From: <>

    | I got two win 2000 servers, and both are now unable to run wins client
    | services.
    |
    | When I try to start the WINS service, I get a message that the File
    | cannot be found.
    |
    | A look at the service definition, shows a startup file of:
    |
    | c:\WINNT\System32\wins\DLLHOST.EXE
    |
    | Which does not exist.
    |
    | Perusing the groups, I see a message or two, stating that this
    | DLLHOST.EXE file is a virus. It may be that the Panda found it, and
    | removed it.
    |
    | Can anybody clue me in as to what to do to get this WINS service
    | running again?
    |
    | Thanks in advance.

    The file c:\WINNT\System32\wins\DLLHOST.EXE is the Nachi worm
    http://vil.nai.com/vil/content/v_100559.htm

    I don't think the legit. DLLHOST.EXE is found in c:\WINNT\System32\wins but should be found
    in; c:\WINNT\System32

    I would suggest re-installing tne WINS service from the add/remove software --> add/remove
    windows components. I "think" the wins service is there. Remove it then reinstall.

    Before you try to reinstall the service, please perform the following...

    Download CLEAN.EXE from the URL --
    http://www.ik-cs.com/programs/virtools/clean.exe

    It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
    http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
    (.lnk) files and a PDF instruction file.

    GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
    Scanner.

    CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
    to scan again at a future date, run this batch file. It will automatically check the date
    of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
    signature files and install them before performing the scan.

    I need you to perform the following...

    Execute; CLEAN.EXE
    Choose; Unzip
    Choose; Close

    Execute; c:\mcafee\GetFiles.BAT
    { or Double-click on 'GetFiles Link' in c:\mcafee }

    Reboot the PC into Safe Mode [F8 key during boot]

    Shutdown as many applications as possible !
    Execute; c:\mcafee\CLEAN.BAT
    { or Double-click on 'Clean Link' in c:\mcafee }

    A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
    end of the scan, it will be displayed in your browser. It is suggested that you move the
    report out of c:\mcafee before performing another scan. It would be a good idea to scan in
    Safe Mode and in Normal Mode and save a copy of the HTML report for each session.


    Please post back your results.
     
    David H. Lipman, May 6, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.