Pregunta URGENTE (dllhost.exe)

dllhost.exe es un archivo protegido del sistema. no obstante puedes estar
infectado:

W32.Welchia.Worm Removal Tool
http://securityresponse.symantec.co....tool.html

W32.Welchia Trojan
http://securityresponse.symantec.co....worm.html

Alejandro Curquejo
Microsoft MVP
Windows XP - Shell/User


*Este mensaje se proporciona "COMO ESTA" sin garantias y no otorga ningun
derecho*
*This posting is provided "AS IS" with no warranties, and confers no rights*

-Tips y Articulos XP - http://www.multingles.net/tutoriales.htm#ALE
-DTS-L.Org - http://www.dts-l.org/

Que es el Programa MVP (Most Valuable Professional)
http://mvp.support.microsoft.com/de...pr=mvpfaqs



"Daniel" escribió en el mensaje
news:
| Por primera vez estuve probando hacer copia de seguridad de WinXp con
| ntbackup y al empezar el proceso el ZoneAlarm (Firewall) me indicó
bloquear
| el acceso a Internet del archivo dllhost.exe y me dio el siguiente
informe:
|
| A known malicious program is trying to connect to the Internet
|
| ZoneAlarm Pro is asking you whether to allow the connection. Do not
| allow this program to connect.
| Inside the program alert
|
|
|
| Alert property Alert property value Technical explanation
| Program Name COM Surrogate A program running on your
| computer, which either attempted to send an IP packet over the Internet or
| is waiting for an incoming packet.
| Filename dllhost.exe The filename of the program that
| ZoneAlarm Pro found on your computer.
| Program Version 5.1.2600.0 (XPClient.010817-1148) The
| version of COM Surrogate running on your computer.
| Program Size 4608 The size of the program executable
file
| in bytes.
| Program MD5 915ba63a71f56a7e8f69181801793f17 The MD5
hash,
| or number, that uniquely identifies the executable.
| Date Modified Aug-24-2001 12:00:00 PM The date when
| dllhost.exe was most recently modified.
| Connect Type Access This value can be either Access,
which
| is an Internet connection attempt by COM Surrogate or Server, which
| indicates that COM Surrogate is waiting for connections coming in from the
| Internet.
| Remote Port 53 The port COM Surrogate is using on the
| remote computer.
| Remote IP Address 200.44.32.12 The IP address of the
| remote computer that caused the alert.
| Alert Date Jan-31-2004 05:13:44 PM PST The time when
| ZoneAlarm Pro detected the alert on your computer.
|
|
|
| No obstante averiguando por internet indican que es un archivo de
| windows que hago? por que Zonelabs reporta este archivo como
malicioso?
|
|
|