Hi Terry,

I had a problem a few days ago with continuous ICMP outbound traffic. I us CA EZ antivirus and was totally upto date, but later in the day when my auto upload for EZ fired, within 5 minutes it found the Win32.Nach1.A virus.

The blaster tools did not fin this NACHI virus. I have WIN2K and noticed the culprit file to be DLLHOST.EXE when viewing in the Task Manager.

Regards
Doug Johnston


>I remember coming back from an on site yesterday and noted my system was on. I guess sombody wanted more than they could get from their student computers and just had to use mine:-).
>
>Today it was running slow and the DSL connection was sending out 5K every second. SO I restored the system to a few days back. The restore log showed that RCPSS.DLL, OLE32.DLL and RCRPT.DLL (i think) had to be renamed to complete the restore.
>
>I checked for Big files and ran Symtecs blaster finder - and I got the all clear.
>
>Is there anything else out there that could have modified these files? What is the crptography service? When on does it slow stuff down?