Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 92790 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

dllhost.exe *32 com surrogate spawning-Cpu usage [Closed]


  • This topic is locked This topic is locked
10 replies to this topic

#1 kazzoo

kazzoo

    Authentic Member

  • Visiting Tech
  • PipPip
  • 224 posts

Posted 19 October 2014 - 11:46 AM

Greetings all,

 

I have just recently noticed a slow down in performance when streaming videos and some game play. Checked Task Manager and saw numerous (more than 15) instances of dllhost.exe *32 Com surrogate being active. Cpu usage was fluctuating to 85 percent. Killing the process tree resulted in the process returning. File location was in Syswow64.

 

I have run MBAM and ADWCLEANER also SFC file checker. No infections or files missing were the results. The number of instances are reduced by not gone. (5 to 6)

 

I have also downloaded the ASWMBR and FRST and am ready to run and post Scan logs.  I assume you will get all of the computer specs you need from the scan logs.  I am running a Toshiba laptop with Windows 7 home premium.

 

I have a question, on the ASWMBR do you want a quick scan or the full drive scan posted?

 

 

 

 


Badgers? I dont need no stinking Badgers!

    Advertisements

Register to Remove


#2 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 19 October 2014 - 09:23 PM

Hi kazzoo,

My name is OCD. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • Copy and Paste logs directly into the reply window. DO NOT attach the logs unless specifically instructed to do so.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.

DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Please stay with this topic until I let you know that your system appears to be "All Clear"

Important: All tools MUST be run from the Desktop.

=========================

bullseye_zpse9eaf36e.gif Security Check

Download Security Check by screen317 from here or here.

  • Save it to your Desktop.
    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

=========================

bullseye_zpse9eaf36e.gif aswMBRQuick Scan

Download aswMBR.exe and save it to your desktop.

    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
  • When asked if you want to download Avast's virus definitions please select Yes.
  • Click Scan
  • Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
  • You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

=========================

bullseye_zpse9eaf36e.gif Download Farbar Recovery Scan Tool and save to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click and select "Run as Administrator" to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply

=========================

In your next post please provide the following:


  • checkup.txt
  • aswMBR.txt
  • attach MBR.zip
  • FRST.txt
  • Addition.txt

OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#3 paws

paws

    Tech Team

  • Administrator
  • 6,079 posts

Posted 21 October 2014 - 04:30 PM

@OCD

Kaz is experiencing difficulty in replying to his topic here (keeps getting a message " you do not have permission to reply to this topic")

 

I'm not sure what's going on, but he's one of the good guys, so I'm trying to figure out what needs to be done.... in the meantime please keep his topic open and pm me if you have any ideas..

thanks


The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online. http://www.whatthetech.com/donate

#4 Tomk

Tomk

    Beguilement Monitor

  • Global Moderator
  • 20,357 posts

Posted 21 October 2014 - 04:35 PM

@paws,

 

See if it has something to do with his visiting Tech permissions.


Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014
 

#5 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 21 October 2014 - 10:11 PM

@paws,

 

No problem. I will keep the thread open until kaz is able to post the requested logs.


OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#6 paws

paws

    Tech Team

  • Administrator
  • 6,079 posts

Posted 26 October 2014 - 07:51 AM

Thanks and yes Tom I reckon it must be a permissions issue, but I can't find a remedy for it.... I will have to call for help!


The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online. http://www.whatthetech.com/donate

#7 paws

paws

    Tech Team

  • Administrator
  • 6,079 posts

Posted 26 October 2014 - 10:57 AM

Kazzoo's permisions have now been adjusted, so hopefully he will now be able to post his logs.....I have pm'd Kaz to this effect.


The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online. http://www.whatthetech.com/donate

#8 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,196 posts

Posted 02 November 2014 - 03:22 PM

He should be able to reply to his own topic, reguardless of rank.

We've seen this before and the only fix was for the OP to start a new topic.


The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#9 paws

paws

    Tech Team

  • Administrator
  • 6,079 posts

Posted 04 November 2014 - 05:31 PM

Thanks LDT, I'll pm Kaz

( I had not heard of that situation before)


The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online. http://www.whatthetech.com/donate

#10 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 10 November 2014 - 06:02 PM

Hi kazzoo,

Just checking in to see if you still need help?
OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#11 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 17 November 2014 - 08:29 AM

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatth...ed_t106388.html and start a new topic
OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users