Tough I removed it, I do not know what it is: dllhost32 data resources

Tough I removed it, I do not know what it is: dllhost32 data resources

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Tough I removed it, I do not know what it is: dllhost32 data resources Rebecca2000 09-08-2006
Posted by on September 8, 2006, 5:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
HI All

Tough I removed it, I do not know what it is.

Have anyone ever seen a virus/spyware with such things:
Dllhost32.exe
Most exe files have a daemon under hidden subfolder
"\data\resources\", and the size of the daemon is 16KB. The
shortcuts to the exe are changed to pointing to the daemon.

Thus, when I launched a program through short cuts, the daemon will be
launched, and then the daemon launch the original exe.

I am running XP Pro.

As I checked newsgroups about Dllhost32.exe, most posts pointed out
dllhost32 is spyware, but did not explain why there are daemon exe
files and hidden folder. So I am not so sure what my computer got
infected.

I eventually delete all these 16KB daemon files, and leave those hidden
folder alone, by searching files and deleted. And I wrote a small
program to convert all shortcuts under "Documents and Settings" to
make them point to the original one, by removing string
"\data\resources"

No problem ever since. I suppose I am not the only one getting these.
Just strange enough no one mentioned in news groups. I did search
"dllhost32 data resources hidden".

Can anyone identify what was happing?

Cheers


Posted by David H. Lipman on September 8, 2006, 6:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| HI All
|
| Tough I removed it, I do not know what it is.
|
| Have anyone ever seen a virus/spyware with such things:
| Dllhost32.exe

< snip >

Plaese do NOT Multi-Post.
Please learn to Cross-Post to pertinent, On Topic, News Groups instead.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Alexa data miner July 17, 2005, 4:33 pm
Alternate data streams October 15, 2005, 1:10 am
all data files corrupted October 28, 2007, 4:52 am
Windows XP SP2 Data Execution Protection Unable access Explorer November 7, 2005, 9:03 pm
W32.alcra.c REMOVED FINALLY!!! August 1, 2006, 10:10 pm
Tell users how to restore files removed by MRT October 7, 2008, 12:06 pm
Virus removed webpages still restricted. Advice please October 7, 2005, 8:03 am
Removed Norton Antivirus and can't connect to internet December 19, 2006, 7:23 pm
How would I have manually removed Trojan-Downloader.Win32.ConHook.bd May 17, 2007, 2:25 pm

The site map in XML format XML site map

Contact Us | Privacy Policy