View Single Post
  #4  
Old August 20, 2003, 01:38 PM
Boyd Stone
 
Posts: n/a
Default Here's the weird way my computer started acting

Hi,

Yesterday afternoon while filling out a form at eLance my WinXP machine suddenly rebooted itself. It hadn't ever done that before, but I've had plenty of Windows machines that had, so I wasn't terribly concerned. As soon as I got back online I noticed that something on my machine was sending a lot of bytes off into the internet. I keep my wife's computer and my other computer well protected, but the one I was using yesterday is a fairly new one and I had unwisely failed to protect it.

As soon as I noticed that something was sending a lot of stuff off into the net (it wasn't very obvious that it was happening but I noticed because I'm very in tune with how my computers behave) I got offline and then I downloaded the install file for ZoneAlarm on another computer and copied onto my sick computer. Among other messages ZoneAlarm told me that DLLHOST.EXE was wanting to send to 209.244.0.3:DNS so I researched that at google groups, and heard about something called TrojanHunter ( http://www.misec.net/trojanhunter/ ) and I downloaded the evaluation version and ran it. It reported a possible trojan that seemed related to the dllhost message that ZoneAlarm gave. I'm in the process of trying to discover if it's really a trojan.

I wish I could spank people who write virii, worms and trojans....

Best,

- Boyd