Solved SYSWOW64\dllhost.exe and multiple surrogates in system

[Steelguy]

Started on 12/1. System grinding to halt. Tried AVAST and Malwarebytes but no joy. Running FRST64 now and will post logs when done. I know the rules here and will follow like my Sarge taught me in Basic Training many eons ago...

 

[Steelguy]

FRST64 log and Addition Log attached. I will await your review and instructions.

 

[argus]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Steelguy]

Fixing in process. I will report the results.

 

[Steelguy]

Ran the fix overnight and it is still running at 5:30 AM.....6 hrs later. is this normal or is there a FUBAR here?

Don't even know if I should/can reboot....

 

[argus]

Re-run fix

 

[argus]

Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

[Steelguy]

OK so just stop program and re run FIX? Do not reboot? (just want to be clear on this)...

I'll do it when I get in tonite...

Thanks for the assistance.

 

[Steelguy]

OK Just shut down Fix and restarted it. How long should it take to run FIX ? (approx.) so I know if it is not working again...right now stated at 8:07pm and it is 8:16 pm

 

[Steelguy]

At 8:40 pm the green progress bar froze and the blue spinning circle shoed up for about 4 minutes the it started up again and at 8:48 pm it started same cycle again...is this normal/corrector am I in FUBAR cycle?

If I am just phreaking here let me know...

 

[argus]

It depends on the computer. You have complete instructions.

 

[Steelguy]

KK

 

[argus]

10-15 pm

 

[Steelguy]

Ran Fix again starting at 5:30 AM this morning and now at 6:11 PM it is still running.

 

[argus]

Malwarebytes Anti-Rootkit ?

 

[Steelguy]

Instructions were to run FRST64 with Fix program you sent me in same directory. Did that and it hung up. you instructed run again so I ran FRST64 with Fix program in same directory starting this morning and after 12+ hrs it is still running. I have DL'd mbar -1.08 but have not run it as you did not instruct me to do so. Want me to run it now? shut down FRST64 and run mbar-1.08? Yes/No?

 

[Steelguy]

Sorry if I am bitchy...been a long day for me.

 

[argus]

shut down FRST64 and run mbar-1.08? Yes/No?

Yes, run MBAR

 

[argus]

Sorry if I am bitchy...been a long day for me.

No problem.

 

[Steelguy]

OK In process. Is there a report at end I need to post back to you?