Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Yet another dllhost.exe *32, COM Surrogate infection
Message
<blockquote data-quote="Scott Fulmar" data-source="post: 290027" data-attributes="member: 30025"><p>10/28/2014 - Noticed first warning from Norton that an intrusion attempt was blocked. After this, they quickly became a regular occurrence, happening anywhere from every few hours to every few minutes. Offenders include "f0fff0," "fffSee," and various basic IP addresses.</p><p></p><p>After I did some Google searching, I found other people with the same problem who mentioned system slow-down and multiple instances of dllhost.exe *32 processes (Description: COM Surrogate) running simultaneously, so I checked my processes and found that the same thing was happening to me. At any given time I have anywhere from 5 to 20 instances of dllhost.exe *32 running and an abnormal amount of system RAM and (sometimes) CPU usage (I'm not sure what the typical amount of RAM usage is for my system because I never looked before this, but I know it can't be 5 to 13 GB like it is now).</p><p></p><p>Also, I don't know if it's related in any way, but my Norton security history also shows an ungodly amount of "Unauthorized access blocked (Open File)," going back as far as 7/7/2014. When a batch of these starts, they happen every couple of seconds and last various lengths of time.</p><p></p><p>By the way, the link here that was supposed to take me to a page with links for FRST, AdwCleaner, and aswMBR only had a link to FRST. That's why I didn't include scan uploads from the other two tools.</p><p></p><p>And be gentle with me, this stuff is all very new to me. I apologize in advance if I've broken any protocols in the creation or content of this thread.</p></blockquote><p></p>
[QUOTE="Scott Fulmar, post: 290027, member: 30025"] 10/28/2014 - Noticed first warning from Norton that an intrusion attempt was blocked. After this, they quickly became a regular occurrence, happening anywhere from every few hours to every few minutes. Offenders include "f0fff0," "fffSee," and various basic IP addresses. After I did some Google searching, I found other people with the same problem who mentioned system slow-down and multiple instances of dllhost.exe *32 processes (Description: COM Surrogate) running simultaneously, so I checked my processes and found that the same thing was happening to me. At any given time I have anywhere from 5 to 20 instances of dllhost.exe *32 running and an abnormal amount of system RAM and (sometimes) CPU usage (I'm not sure what the typical amount of RAM usage is for my system because I never looked before this, but I know it can't be 5 to 13 GB like it is now). Also, I don't know if it's related in any way, but my Norton security history also shows an ungodly amount of "Unauthorized access blocked (Open File)," going back as far as 7/7/2014. When a batch of these starts, they happen every couple of seconds and last various lengths of time. By the way, the link here that was supposed to take me to a page with links for FRST, AdwCleaner, and aswMBR only had a link to FRST. That's why I didn't include scan uploads from the other two tools. And be gentle with me, this stuff is all very new to me. I apologize in advance if I've broken any protocols in the creation or content of this thread. [/QUOTE]
Insert quotes…
Verification
Post reply
Top