Help - Search - Members - Calendar
Full Version: Dhcp Client
BleepingComputer.com > Security > Am I infected? What do I do?
   
scratcher
One of the services that runs automatically in my Win2K system is DHCP Client.

Codestuff Starter says of this that it "manages network configuration by registering and updating IP addresses and DNS names." It certainly seems to be be necessary as when I disabled it to test it I found that I could no longer connect to the Internet.

But on checking the Bleepingcomputer Startup database I found the following:

Name Filename Status Description
DHCP Client dhcpclient.exe X

Added by the W32/Codbot-AG worm. When started, this infection connects to a remote IRC server where it waits for commands to execute.


I then ran a search and there is no dhcpclient.exe file in my computer so it would seem there is no problem.

Or is there?
Grinler
DHCP Client is legitimate. If you statically assign a specific ip address to your computer you can disable it. If on the other hand, a router or server provides the ip address to your computer when you start it, then you need to keep this running.
scratcher
QUOTE(Grinler @ Nov 25 2006, 05:13 PM) *
DHCP Client is legitimate. If you statically assign a specific ip address to your computer you can disable it. If on the other hand, a router or server provides the ip address to your computer when you start it, then you need to keep this running.


Hi Lawrence:

Thank you. Yes, that's pretty well what I thought but I thought it best to check.

Regards,

scratcher.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.