Over 1 million tech questions and answers.

dllhost.exe eating my memory!

Q: dllhost.exe eating my memory!

It's been a while since I've been on this site which is great. But here I am with another computer problem that I need help with. I've had fantastic luck in the past with all the smart folks here.
 
When ever I open explorer dllhost.exe begins to consume all of my memory?

RELEVANCY SCORE 200
Preferred Solution: dllhost.exe eating my memory!

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: dllhost.exe eating my memory!

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/555403 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.
Thank you for your patience, and again sorry for the delay.
***************************************************
We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.DDS.com Download LinkDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control can be found HERE.As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Read other 2 answers
RELEVANCY SCORE 82.4

Have an issue with a laptop my sister brought me. It had some weird issues like not being able to go on the internet and being very slow - with Excel taking minutes to open. After launching taskmanager, I saw around 25-30 DLLHOST.EXE with varying memory usage - but enough to get to 99-100%.
 
I could kill them 1x1, but they would launch up again. I then was at least able to open a command prompt and run taskkill /im /f dllhost.exe and it would kill them all and return it to normal usage.
 
I'm able to run malwarebytes and it detected a couple trojans and quarantined them. That restored internet access back so I can finally post this - however the DLLHOST thing has got me stumped as it keeps coming back and launches multiple copies that end up eating up all the memory left.
 
I didn't want to get into too much more scans without posting here.
 
Okay, dds logs up.

A:DLLHost.EXE - loading up to 50x and eating up memory?

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy a... Read more

Read other 2 answers
RELEVANCY SCORE 82.4

Hi everyone!,
 
Recently my laptop has been getting pretty laggy and the cpu temps have increased big time. I traced it back to my processes where there are probably 20-30+ processes of dllhost.exe*32 each with massive amounts of memory usage each. If I am to boot the laptop up without an internet connection I get a constant message from IE saying "are you sure you want to leave this page?" But I cannot find IE in my processes and I have not tried clicking it as it seems to "suppress" the problem for a short time. 
 
What is my first step to fixing this? 
Here are the specs
WIN7 Home Edition 64 bit
HP- G62 Notebook PC
AMDAnthlon™ II P320 Dual-Core Processor    2.10GHz
3gb Ram
 
 
 
EDIT: Have Farbar scan, should I post that too?

A:dllhost.exe*32 too many instances and eating memory up

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your re... Read more

Read other 26 answers
RELEVANCY SCORE 82.4

PC began to crawl, being hard to open any application. Ran virus checkup and MSSE found Exploit:SWF/CVE-2014-0515 and VirTool:JS/Obfuscator.EK. Quarantined cleaned. Malwarebites also found/fixed some problems but still have this issue where randomly DllHost.exe begins to run multiple times and each instance is eating more an more memory.
Via Process Explorer found that is being triggered by a registry entry that I can't edit. Also found that is generating a lot of traffic to multiple IP's, all being locked by a firewall on the network.
 
Here the DSS log:
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16545  BrowserJavaVersion: 10.7.2
Run by Manager at 20:10:00 on 2014-10-02
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3241.2108 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
C:\Program Files\Common Files\SPBA\upeksvr.exe
C:\Windows\system32\atashost.exe
C:\Windows\system32\IProsetMonitor.... Read more

A:Multiple DllHost.exe eating all memory

Download attached fixlist.txt file and save it to the Desktop.NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemRun FRST/FRST64 and press the Fix button just once and wait.If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.  
 fixlist.txt   557bytes
  4 downloads  How is the machine running now? 

Read other 3 answers
RELEVANCY SCORE 80.4

I've used malwarebytes to quarantine and remove threats but the problem still isn't resolved.  Downloading keeps getting turned off in internet explorer and cookies are deleted. 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041  BrowserJavaVersion: 10.67.2
Run by Phillip at 0:38:48 on 2014-11-09
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.4095.1999 [GMT -6:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k ... Read more

A:dllhost taking over task manager and eating up memory

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Re-enable downloads in Internet ExplorerPress the + R on your keyboard at the same time. Type inetcpl.cpl and click OK. Click the Security tab and then on Step 2Please download Powelikscleaner (by ESET)... Read more

Read other 4 answers
RELEVANCY SCORE 80.4

I have been struggling to fix my computer. I have windows 7 (64bit) and have received a lot of messages from my Norton informing me of a Trojan powerliks attack. In task manager I have several dllhost.exe*32 'COM surrogate' processes running that are using 100% of my memory.
 
Another fun fact, I cannot download anything.
Just before this issue I updated my Java this was a few days ago.
 
I have tried NPE, and system recovery, still not working properly.
 
Please help me I have limited knowledge of this stuff, and this is my work computer.
 
JL

A:dllhost.exe*32 COM Surrogate eating memory, unable to download anything

Hello JLWin, welcome to Bleeping Computer's Malware Removal forum!
 
My username is LiquidTension, but you can call me Adam. I will be assisting you with your malware-related problems.
If you would allow me to call you by your first name I would prefer that. 
 
======================================================
 Please read through the points below to ensure this process moves as quickly and efficiently as possible.
Please read through my instructions thoroughly, and ensure you carry out each step in the order specified.
Please do not post logs using the CODE, QUOTE or ATTACHMENT format. Logs should be posted directly in plain text. If you receive an error whilst posting, please break the log in half and use multiple posts.
Please do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in ascertaining the current situation and providing the best set of instructions for you.
Please backup important files before proceeding with my instructions. Malware removal can be unpredictable.  
If you come across any issues whilst following my instructions, please stop and inform me of the issue in as much detail as possible. Please do not hesitate to ask before proceeding.
Topics are locked if no response is made after 4 days. P... Read more

Read other 3 answers
RELEVANCY SCORE 64

Normally I'm proficient enough to find and remove malware, but whatever is causing multiple dllhost.exe processes to spawn is beyond my skill level. I can't even find enough information to give a better decription of the malware. I've tried every trick I know and I'm ready to sit and wait for step by step instructions.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17344  BrowserJavaVersion: 10.55.2
Run by Karl at 8:30:50 on 2014-11-05
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6051.3625 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* /* ---- URLs ---- */
ipb.vars['base_url'] = 'http://www.bleepingcomputer.com/forums/index.php?s=2f8a461a963a7fc8b42f767f597c1e63&';
ipb.vars['board_url'] = 'http://www.bleepingcomputer.com/forums';
ipb.vars['img_url'] = "http://www.bleepingcomputer.com/forums/public/style_images/master";
ipb.vars['loading_img'] = 'http://www.bleepingcomputer.com/forums/public/style_images/master/loading.gif';
ipb.vars['active_app'] = 'forums';
ipb.vars['upload_url'] = 'http://www.bleepingcomputer.com/forums/uploads';
/* ---- Member ---- */
ipb.vars['member_id'] = parseInt( 0 );
ipb.vars['is_supmod'] = parseInt( 0 );
ipb.vars['is_admin'] = parseInt( 0 );
ipb.vars['secure_hash'] = '880ea6a14ea49e853634fbdc5015a024';
ipb.vars['session_id'] = '2f8a461a963a7fc8b42f767f597c1e63';
ipb.vars['twitter_id'] = 0;
ipb.vars['fb_... Read more

A:Dllhost.exe is eating my computer.

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please download Powelikscleaner (by ESET) and save it to your Desktop.Double-click the to start the tool.Read the terms of the End-user license agreement and click Agree if you agree to them.The tool will r... Read more

Read other 29 answers
RELEVANCY SCORE 64

Ok, so my wife's computer, which I built, is having an issue that is making me crazy. At any point the dllhost.exe will decide to start memory leaking and use up her memory and cpu until a BSOD. I have read a few things on the internet, but rarely is the issue actually solved. Their seem to be many ways other people have fixed this issue. However, I am not one. I have heard people say, "oh, this update fixed it" or "delete x update" (doesn't work for me). Other people have said something about deleting and 3d files. she has none. I just don't know what to do at this point. A couple months ago I did a reinstal and it still would do the same thing. I may try another? It will BSOD 5-10 times a day. Please help if possible. Thanks

Also something will constantly ping the internet as well and slow down our connection when this happens.

A:Dllhost.exe COM Surrogate eating Mem and cpu

kb2670838 and IE10 update?
seems to be the common consensus online in the Microsoft forums.
Hopefully one of the techs here will know more and reply.

Read other 1 answers
RELEVANCY SCORE 63.2

Hello all,
I've been browsing the forum for a few days now and trying multiple different fixes to cure my issue but nothing seems to be working.  A few days ago my computer started slowing down and becoming almost impossible to even use.   I found that the DLLHost.exe was using up copious ammounts of CPU.  I immediately ran Avast, Spybot and MalwareBytes and found a few things to delete/quarantine but the issue was still not resolved.
 
Next, I downloaded the Process Explorer program and ended the DLLHost.exe process tree.  This resolved the issue for about 5-10 minutes then it all started happening again.  I ran CCleaner to remove all temp files and clean my registry, re-ran Avast, CCleaner and MalwareBytes, uninstalled anything I could think of that I'd installed in the past week but to no avail.  I'm not really sure where to start but would really appreciate anyone that is willing to take some time and help me out.
 
Also, I don't have any available restore points on my computer and am on Windows 7 64bit. 
 
Thanks for reading!

A:DLLHost.exe - Multiple Processes eating up CPU

You could try giving the Poweliks remover a try: http://download.eset.com/special/ESETPoweliksCleaner.exe

Read other 7 answers
RELEVANCY SCORE 63.2

I have built a computer and have just set it up for the internet and ativated WindowsXP. When I dial in,a process called DLLHOST.EXE uses 80-100% of the processer and has about 3500kb of memory held hostage. If I disconnect, it stops but still retain memory. I slows the comp down to a halt & can't even use Windows update or surf the web(too slow). I thought that maybe Windows update might fix it but I'm not sure.
http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=14355
 

A:[SOLVED] DLLHOST.EXE is eating up resources

Read other 15 answers
RELEVANCY SCORE 63.2

Hello there,  I was looking for some help in getting rid of this Malware issue I see you've helped other's with ...
 
     I believe I have the same issue as posted here - http://www.bleepingcomputer.com/forums/t/525236/30-dllhostexe32-com-surrogate-processes-running-cant-kill/
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Admin (administrator) on NED-PC on 14-03-2014 16:28:04
Running from C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O2Z4TX2B
Windows Vista ™ Home Premium Service Pack 2 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\D... Read more

A:30 Occurrances of "dllhost *32" eating up Processor ...

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. start

Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
URLSearchHook: HKLM-x32 - Zynga Toolbar - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyng.dll (Conduit Ltd.)
URLSearchHook: HKCU - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
SearchScopes: HKLM-x32 - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKLM-x32 - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-x32: Zynga Toolbar - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files (x86)\Zynga\tbZyng.dll (Conduit Ltd.)
Toolbar: HKLM-x32... Read more

Read other 2 answers
RELEVANCY SCORE 63.2

My workstation computer is having really bad performance issues and I have reason to believe that these two files have a lot to do with the issue. Please advise.

A:SVCHOST.EXE and DLLHOST.EXE eating up my resources

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until Iíve given you the ìAll clear.î  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Read other 8 answers
RELEVANCY SCORE 63.2

Hi guys. Since yesterday, I've noticed 20-30 instances of dllhost.exe *32 running at once on my computer. The dllhost.exe will multiply at random intervals throughout the day. I can go through my Task Manager, and manually end process them... but they will pop up and multiply again and again. Sometimes, if I end process the "right" one, all of the rest of them will vanish. I can end process all of the dllhost.exe but one from the Task Manager.
 
I've also just found this website in my history, which I never went to: "[lots of numbers].optimize.clickshieldfilter.com/click.php." That sounds like a keylogger virus to me.
 
Please help!

A:Multiple dllhost.exe's running at once, eating 100% CPU.

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
I need fresh logs so please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool ... Read more

Read other 11 answers
RELEVANCY SCORE 62.4

Thanks in advance for any help.
 
Many dllhost.exe ‘COM Surrogate’ processes are started and are eating up CPU and memory.  After awhile the system becomes unusable.
 
If I let it run, they will keep adding processes to at least 30 or maybe more.  I have always killed them before any more could be initiated.  When several are running, the system bogs down severely.
 
If I let the processes pile up for awhile, eventually a popup will appear saying that my settings do not allow my  download file to be downloaded.  didn't request a file.
 
After Googling, it seems that this is not an isolated problem but there doesn’t seem to be any one root cause. 
 
System Configuration:
Hardware:
   Dell Laptop ‘Studio XPS’ – XPS-1645
- 8 GB memory
- CPU: Intel Core i7 – Q 720 @ 1.60 GHz, 4 core, 8 logical processors
OS:
- MS Windows 7 Professional 64 bit, SP1
Network:
- Hardwired to LAN.
 
If the system is never connected to the network (boot without plugging in the Ethernet cable) and never plugging in the cable while the system is up, the ‘COM Surrogate’ processes never start. 
 
To run the DDS program, I let several of these processes start and then started DDS.  It ran to about 70% of the completion graph and wouldn't progress further.  A check of the task manager showed that it was getting time but very rarely.  I eventually killed the... Read more

A:Many dllhost 'COM Surrogate' processes eating mem & proc

Hi there,please run a FRST scan:Please download Farbar Recovery Scan Tool and save it to your Desktop.Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

Read other 24 answers
RELEVANCY SCORE 60.8

Hey our computer has been misbehaving the last week or two and I finally got down to trying to find the source of the problem. We ran Spyhunter4, Webroot and Malwarebytes without much success other than Malwarebytes constantly popping up a small window in the bottom right hand side of the screen saying that it has blocked outbound actions by various IP and ports, including fff5ee.com. The disk space in the task manager shows multiple COM Surrogate32 and is 96-100%. Could really use some help the disk space makes doing anything impossible.

A:Evil dllhost.exe multiple COM surrogate eating up 100% disk space Windows 8

Did I post this in the right forum?

Read other 9 answers
RELEVANCY SCORE 52.4

Hi. I have three different virus scans and spyware removal. I have posted my hijackthis log below. Can you tell me if it is gone? Whatever it was, was eating my memory. I sure hope it is gone or help me make it go away. thanks. Logfile of Trend Micro HijackThis v2.0.0 (BETA)Scan saved at 7:59:52 AM, on 6/16/2007Platform: Windows XP SP2 (WinNT 5.01.2600)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\AOL\1166538757\ee\services\safetyCore\ver210_5_4_1\AOLSP Scheduler.exeC:\Program Files\mcafee.com\antivirus\oasclnt.exeC:\Program Files\mcafee.com\antivirus\mcvsescn.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\America Online 9.0\waol.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exeC:\Program Files\Kodak\KODAK Software Updater\7288971 ... Read more

A:Something Eating My Memory

Hello JoAnnB,You will need to configure Windows to show Hidden files. Go to next site: http://www.virustotal.com/en/indexf.htmlOn top you'll find 'Browse'Click the browse button and browse to next file:C:\WINDOWS\system32\driverl.dllClick open.Then click the 'Send' button next to it.This will scan the file. Please be patient.Save the results in notepad.Once scanned, copy and paste the results also in your next reply.I usually enter my email address at virus total so they can send me the scan results. They usually only take a couple minutes to reply. You can copy/paste the results of scan results here.****************************Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update. Updating Java: Download the latest version of? Java Runtime Environment (JRE) 6u1. Scroll down to where it says "Java Runtime Environment (JRE) 6u1". Click the "Download" button to the right. Check the box that says: "Accept License Agreement". The page will refresh. Click on the link to download Windows Offline Installation, Multi-language? jre-6-windows-i586.exe and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Examples of older versions in Add or Remove Programs:
Java 2 R... Read more

Read other 16 answers
RELEVANCY SCORE 52.4

I have been having problems lately with getting an error when i open Photoshop "could not import the clipboard because there is not enough ram". Well, I started getting this after i installed norton's Internet Security 2004 and systemWorks 2004. I dont use all the systemworks applications; I did a custom install and only put in Utilities and password Mgr.

When i go to my task manager i see a bunch of processes running which may be related to Norton..are they? Is this using too much memory? I have 512mb of RAM. here are some of the processes that i am not sure about:

svchost.exe (there are 5 of them running! Why 5???)
symlcsvc.exe
wmiprvse.exe
sndSrvc.exe
smss.exe
savscan.exe
qttask.exe
nvsvc32.exe
nprotect.exe
nopdb.exe
navapsvc.exe
csrss.exe
cdac11ba.exe
ccapp.exe
ccevtmgr.exe
alg.exe

And can you believe that i have photoshop set to use 100% of the available RAM but it still gives me this error! Something changed with the norton install. does anyone else use Norton systemworks/internet security and does it also hog all of your memory?
 

A:Eating Too Much Memory

according to answers that work nvsvc32.exe and nopdb.exe are
nonessential resource hogs from norton instalations
csrss.exe.may be a trojan or an essential file. http://www.answersthatwork.com/Tasklist_pages/tasklist_c.htm
most of those are norton processes
 

Read other 1 answers
RELEVANCY SCORE 52.4

I have a fairly new computer.
I was working on Photoshop and had a "scratch disk" error... and checked my memory availability and was shocked to see that most of it was used. I don't have a whole lot on this laptop.

7.34 GB free of 58.5 GB.

I tried disk cleanup. That helped a little but barely made a dent. Lots of memory was sitting in some dump file. Everything is clean that can be clean but there is something hiding. Any help would be appreciated.

Thanks so much!
Melissa
 

A:What's eating my memory?

Read other 10 answers
RELEVANCY SCORE 52.4

In recent weeks my xp machine has started seeing slowdowns which I think may be the result of malware or other bad things install. On average it runs 90% or higher CPU usage and performance is really taking a hit. My hijackthis file is posted below. Any suggestions on how to lower CPU usage as well besides deleting whatever malware you find in this file would help. Please and thankyou.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 2:46:11 AM, on 1/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Bellsouth\HelpCenter40b\bin\sprtcmd.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDO... Read more

Read other answers
RELEVANCY SCORE 52.4

PLEASE help!I must have picked something up when I was trying to watch an episode of Family Guy online. Ever since, everything has been running SO slow. I tried Safe Mode and system restore points. I keep running Crap Cleaner even when I have no activity going on and it is finding huge files in my temp folder to delete, and some that it cannot delete. Please help! All the McAfee this in the logfile is... I don't know where it came from. I don't have McAfee installed.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:34:13 AM, on 11/23/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:WINDOWSsystem32spoolsv.exeC:WINDOWSExplorer.EXEC:WINDOWSSystem32hkcmd.exeC:WINDOWSsystem32dlatfswctrl.exeC:WINDOWSBCMSMMSG.exeC:PROGRA~1PANICW~1POP-UP~1PSFree.exeC:WINDOWSsystem32ctfmon.exeC:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXEC:WINDOWSSystem32svchost.exeC:WINDOWSsystem32wscntfy.exeC:WINDOWSsystem32wuauclt.exeC:Program FilesMozilla Firefoxfirefox.exeC:Program FilesTrend MicroHijackThisHijackThis.exeR0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.comcast.net/R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.comcast.net/R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Wind... Read more

A:Something is eating up all my memory!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 52.4

That's at least an assumption. It started around a week ago when I hooked up a wireless connection for my laptop. But I also have a desktop that's just normally hooked to the modem (not via wireless). The wireless network is password protected. What happened is it looks like I'm losing memory or virtual memory. Normally I have around 10 windows open with no problems at all. I could have like 5 programs running and it would never ever show that virtual memory is low. The thing is, it doesn't SHOW that now either. BUT when I try to open another program like Photo Impact it just makes a "dum!" sound that shows something insanely quickly about memory being low and then closes. It usually wouldn't open until I close one of the windows or programs to free some memory. Or sometimes when I click on a link it won't open until I close one of the programs. Certain functions won't work like right-clicking until I close one window or program. "Submit" buttons won't work until I repeat the same action.

So what is up with my computer? This never happened. I scanned for viruses, there's nothing. I scanned for spyware with spy sweeper and trendmicro...there's nothing. It's driving me insane. :'(

A:Something's eating my memory

Hello and Welcome to TSF

What are you system specifications?

Read other 2 answers
RELEVANCY SCORE 52.4

As soon as the machine reaches Windows XP SP2 the task manager shows that 1gb of RAM is being used. I have another 1524MB as Virtual Memory.

I added up all the memory that shows in the task manager and counted about 300 MB. I don`t know whats eating up my memory.

The computer is not slow, but this is not normal. I know that when the computer reaches windows desktop, the memory should be around 300MB (it depends of course).

I have the program TuneUp Utilities 2009. Its showing that 52% of my memory is being used.
I also have pretty much all the Systernal utilities.

Please advise.


----------------------

Windows SP2
Genuine Intel CPU 2140 1.60GHz
1GB de RAM
Kaspersky 6.xxxxx
 

A:What's eating my memory?

Try updating XP to SP3
 

Read other 1 answers
RELEVANCY SCORE 52.4

I use Windows 7.  I have 8 gig of RAM.  Something eats that memory rapidly whenever I open my video folder.   I have run anti-virus scan and Spybot S&D, which didn't find anything, but I think I have determined what it is.  I discovered that a Youtube video there is a problem.  It will not delete or allow any change to be made, such as relocating or renaming.  No other file presents that problem.  When I open the video folder, the folder goes into a state of continuous loading.  When I try to delete that video, the video goes into a state of continuous loading to the recycle bin without ever deleting.  Meanwhile, my RAM drops very rapidly so that if I use the computer for only a few minutes, it is so low that I have trouble even shutting down.  Closing the vieo folder doen't help, the loading continues.  The video is at - don't download it !  I used Firefox Download Helper, got the Medium MP4 version of the video.  The thing is only 13.7 mb.  What is wrong with it and how do I get rid of it? 
 

A:Something is eating my memory

I didn't mean for the video to appear in my message, I only gave the address to warn people.  I hope it doesn't make a problem. 

Read other 4 answers
RELEVANCY SCORE 52.4

Hi,

I'm running Windows XP home. I think I have a virus or something crazy! My memory keeps shrinking and my computer tells me I need to delete some items on my C drive to make more room... but, I'm not downloading any new programs that could be eating my memory...

Today, I found 100 files like this: $NtUninstallKB887742$ in the Windows folder of my C drive. Inside each of these folders is a bunch of stuff that I have no idea what it is...but each folder has a "spuninst" folder in it and the size from 400 KB to 8 MB in it. Could this be the problem? Is this a virus?

Please help!
 

A:something is eating up my memory!

Those are from the windows updates and are normal

You can delete those that are older but I would leave those that are 2 months or less old
 

Read other 3 answers
RELEVANCY SCORE 51.6

I'm running a Toshiba Satellite A215 with Windows Vista and have recently noticed something eating up my C: drive memory. I get messages telling me I'm running low on space, then shortly after it says I'm out of space on my hard drive. I've gone through and deleted many unnecessary files with high file sizes and my memory still gets devoured. I have scanned my computer with Panda, Norton, Spybot, Windows Defender and nothing has helped. I've tried following what's been suggested in other threads but I don't know how my problem may differ. I have done a HiJack this, posted below:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:28:22 PM, on 4/1/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\Utilities\KeNotify.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DRPU PC Data Manager\apcdm.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files\Toshiba\TOSCDSP... Read more

A:Another Memory Eating Matter

Bump
 

Read other 1 answers
RELEVANCY SCORE 51.6

When I leave my computer on for a while, soon enough, explorer.exe begins to eat more and more memory, along with one of my svchost.exe's. Am I infected with somthing [probably], or is explorer supposed to eat up 30mb of ram (svchost ~= 17mb)?...

Thank you for looking...

A:Explorer Eating Memory

Hi, from what you are showing that is about normal for Vista. Mine is using about 37 meg of ram for explore. One of the best upgrades for using Vista is more ram, 2 gig of ram is about the sweet spot for the average user.

Read other 2 answers
RELEVANCY SCORE 51.6

I only have one tab open so I was like W/T/F

A:Chrome eating memory

Easy answer is Extensions

Read here

Why Does Chrome Have So Many Open Processes?

Read other 5 answers
RELEVANCY SCORE 51.6

Hello,
I have been having a problem with my memory usage.I thought that it was because I was downloading so much content,then I removed all my music to a disc-freeing up 2gigs of space.The next day the space was gone and i had about 50mb left even though I had not downloaded anything.
No matter how many programs I remove about an hr later i have no memory left!
I've tried scanning for viruses with AVAST and Super anti spyware and even though they removed a lot of virus' this problem persists.
I have run Combofix and have a Hijack this log but i am clueless as to what to do with this information..
Please help..

Jason

A:Big memory eating problems :(

Backdoor ThreatIMPORTANT NOTE: Unfortunatly One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallWe can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do.With Regards,Extremeboy

Read other 3 answers
RELEVANCY SCORE 51.6

Hello,
I am new here, but seem to have some issues. Recently my computer has started running ping.exe that eats up a lot of my available memory sometimes it will even freeze my computer. I have to shut it down every couple of minutes to keep my system slowed down.

I used the following program to try and help my issues:
PC Tools Internet security
Registry Booster
SpeedUpMyPC
Spy-Bot Search & Destroy
Malware Detective

Please help me in this endeavor.

A:Ping.exe eating up a lot of memory

Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 1 answers
RELEVANCY SCORE 51.6

Logfile of HijackThis v1.98.2
Scan saved at 1:59:31 AM, on 11/22/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\PROGRA~1\Grisoft\AVG6\avgserv.exe
D:\WINDOWS\System32\WFXSVC.EXE
D:\Program Files\Symantec\WinFax\WFXMOD32.EXE
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\wfxsnt40.exe
D:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\Babylon\babyl.exe
D:\Program Files\Symantec\WinFax\WFXCTL32.EXE
D:\Program Files\Paltalk\pnetaware.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Gaim\gaim.exe
D:\WINDOWS\System32\taskmgr.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
D:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\HijackThis.exe
D:\WINDOWS\addins\harddrv.exe

O2 - BHO: CATLEvents Object - {02F96FB7-8AF6-439B-B7BA-2F952F9E4800} - D:\DOCUME~1\Alexis\LOCALS~1\Temp\vrddrah.dat
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelpe... Read more

A:Harddrv.exe eating my memory

Makeing changes on your own can crash the PC and screw up the fix of the adware/spyware problem. The following FIX is using the info in the last (Bottom) Log.

Hi and Welcome to TSF

MOve hijackthis to the root of D:\ and NOT in another drive or partition!! Also consider installing the SP1/SP2 service packs for both IE6 and XP as your WIDE open.

Before attacking an adware/spyware problem with hijackthis make sure you have already run ad-aware SE with VX2 add-on cleaner, Spybot Search & Destroy (with updated database) and CWShredder as these programs will clean a lot of the crap out first. All links to programs are in my signature. Ok..on to the log?..

If you have a highspeed connection please Run an online virus scan from TrendMicro Please select the ?autoclean? option when prompted to do so.


Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also. Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore.

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)

O2 - BHO: CATLEvents Object - {02F96FB7-8AF6-439B-B7BA-2F952F9E4800} - D:\DOCUME~1\Alexis\LOCALS~1\Temp\vrdsmw.dat
O4 - HKLM\..\Run: ... Read more

Read other 1 answers
RELEVANCY SCORE 51.6

Hi

Got this showing in my task manager eating 350-400K of memory. I understand this is zonealarm (what i've read not my opinion) and the solutions seem non-specific and a bit complex. First I need to determine what it is and then how to go about fixing it for my individual machine. Any thoughts?

I just recovered from aluerian MBR virus, you might see my post still lingering somewhere, got back into the laptop and uninstalled McAfee then installed Zonealarm. Spec is:

HP NX 6110
2 gig RAM
40 Gig HD with about 8 gig free (Needs a clean I know)
XP SP3

A:vsmon.exe eating memory

Hello, it appears you never posted yhe TDSSKiller log so we are not certain you are clean..Please download TDSSKiller.zip and and extract it.Run TDSSKiller.exe. Click on Change Parameters Put a check in the box of Detect TDLFS file system Click Start scan.When it is finished the utility outputs a list of detected objects with description.
The utility automatically selects an action (Cure or Delete) for malicious objects.
The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click ContinueLet reboot if needed and tell me if the tool needed a reboot.Click on Report and post the contents of the text file that will open.

Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log has a name like: TDSSKiller.Version_Date_Time_log.txt.Are you running Zone Alarm tools?

Read other 7 answers
RELEVANCY SCORE 51.6

I noticed my computer was getting slower and slower....looked and noticed my cpu usage was maxxing out at 100%. Looked a little closer and there are not but 28 processes running, there was 2 aolsoftware.exe, and waol.exe was running between 80 to 100%. I am attaching a HJT log for you to look at, thanks for your help.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:36:04 AM, on 11/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\AOL 9.1\waol.exe
C:\Program Files\AOL 9.1\shellmon.exe
C:\WINDOWS\system32\ctfmon.exe
c:\program files\common files\aol\1223876827\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
C:\Program Files\Common Files\AOL\1223876827\EE\aolsoftware.exe
C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Common Files\AOL\1223876827\EE\aolsoftware.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.mi... Read more

Read other answers
RELEVANCY SCORE 51.6

Hi,
my computer has gone terribly slow coz vsmon.exe, a service of zonealarm is eating upto 80-90% of cpu and upto 30MBs of memory. i have latest version of zonealarm security suit v5.5.094.000
this problem is not continuous but remains there most of the time.

pls help!

Thanks
 

A:vsmon.exe eating memory and cpu

Read other 6 answers
RELEVANCY SCORE 51.6

When I run task manager, my computer's physical memory is typically in the 25-30% range when I'm not running any programs (outside of the ones I have running in the background all the time, which are included in the 25-30% range)
 
Anyways, over the past week, my computer has been starting to get slow & when I hit ctrl+alt+del and run task manager to see if anything obvious is causing the slowdown. I'll see that the physical memory is normally 50-75% and that Firefox is the most resource-intensive thing I have going and so I'll close that but the physical memory will still be abnormally high (like 40+%) even though I'll have nothing running except the basic stuff that like I said above only takes 25-30% of the memory. Typically if I'm just using the laptop to surf the web (I always use Firefox), then the Phys Mem is 40-45%
 
I ran an MBAM hyperscan last night & it found nothing. Today, I DLed & installed Windows updates (including a restart after it suggested it) and then ran a full MBAM scan of my laptop & it still found nothing
 
Here's a screenshot of my current task manager to show you what I'm referring to when I say Physical Memory since I don't know if it has a more specific name:

 
Also, it says there are 73 processes running, but I'm not running near as many processes as that. I'm sure there are background processes running on their own that are counted toward that total, but I don't recall seeing that high of a number there in pr... Read more

A:Something eating up my Physical memory

Could you take a screenshot just like you did except with the "Show processes from all users" checked? BTW, how much RAM do you have?

Read other 4 answers
RELEVANCY SCORE 51.6

ok my computer keeps getting slow and when i check the taskmanager aolsoftware.exe is using most of the memory.
Killing the task works but how can I uninstall whatever it it causing this?
the only aol software that i might have is aim buddy chat which is not killed when killing aolsoftware so i don't think it's related

please advise?

A:aolsoftware.exe eating up memory

'aolsoftware.exe' is actually part of AIM, however, it's only needed for the genuine AOL chat client, so if you wanted to uninstall that, you could install Miranda (available free from HERE) which allows you to access AIM, ICQ, MSN and Yahoo! messengers (plus a couple of others) through the same interface, saving on system resources.

Read other 1 answers
RELEVANCY SCORE 51.6

was looking at the task manager and it was kind of shocking to see firefox eating up 500MB of memory.. does that mean something could be wrong? I noticed sometimes when I am typing there is a delay for letters to appear, maybe that's a bad sign.... here is a picy attached!

I only have 2 tabs open at the moment, both pointing to seven forums. could it be cashe settings? I think I was playing around with the cash settings recently but don't remember if it was disk cashe or memory cashe...

I'm using firefox v3.0.11, since I had some issues with v3.5 like not being able to drag & drop URLs to the bookmark toolbar..

as I type these words, again there is a delay when I type letters..

A:firefox eating 480 MB of memory?

  
Quote: Originally Posted by akramh


was looking at the task manager and it was kind of shocking to see firefox eating up 500MB of memory.. does that mean something could be wrong? I noticed sometimes when I am typing there is a delay for letters to appear, maybe that's a bad sign.... here is a picy attached!

I only have 2 tabs open at the moment, both pointing to seven forums. could it be cashe settings? I think I was playing around with the cash settings recently but don't remember if it was disk cashe or memory cashe...

I'm using firefox v3.0.11, since I had some issues with v3.5 like not being able to drag & drop URLs to the bookmark toolbar..

as I type these words, again there is a delay when I type letters..


I have seen that in both 3.0 and to a lesser extent in 3.5. IM using 3.5 and FF is using 215MB.You can lower the cache but that will slw down FF do you want to do that?
Ken

Read other 9 answers
RELEVANCY SCORE 51.6

All,
I found firefox 3.5.2 also eating the RAM Memory. Is there any way to reduce this? or any tweak...??

A:Firefox eating Memory

Hi,

Do you have a lot of extensions? It could be they are still loading in the background. Conflicts between extensions causes problems too.

Open Firefox in Safe Mode and browse a little for a ram usage comparison. Firefox will look bland in Safe Mode as it disables all your extensions and themes.

Start > Programs > Mozilla Firefox > Mozilla Firefox (Safe Mode)

Read other 1 answers
RELEVANCY SCORE 51.6

My computer has been working fine up until a few days ago, when suddenly my computer began to slow to a crawl. Programs would freeze and crash, and sometimes my computer would automatically alt+escape to the desktop while I was playing a game. I looked in the task manager, and there are several (12 right now) "Xflfrlbsgu.exe" programs running. I've googled the program many times, but to no avail. Each one is using 40,000 kb or more memory (some go up to 150,000!), and every time I try to end one, a bunch more come back in its place. I searched my computer for Xflfrlbsgu.exe, and no results were returned, which worries me. Here's all of the information I have on the process (it's not much):

Name: Xflfrlbsgu.exe
Description: Google Chrome

Since the description says "Google Chrome", I tried uninstalling it (google chrome) and restarting the computer, but they're still here. Any ideas? I'm at a loss, and I'm beginning to panic.

A:Suspicious EXE Eating up Memory

Welcome to the forum larynachos.

Their is a very good chance that this is causing part of your problem. I know of no product from IoBit that I and many others would have on their system.

From specs.






Quote:
Antivirus IoBit
Browser Google Chrome; Firefox

Read other 5 answers
RELEVANCY SCORE 51.6

I usually leave my computer on for a day as it has music and files that other users around the house may need. If I start up the computer for the first time in a day and come back a coule hours later the system takes a very long time to get out of the screen saver and continues to act very slowyl. When I press Ctrl+ALT+Del I see that a program called 'mixer.exe' is using 111,000+k of my memory usage.

So basically my question is: what is mixer.exe? I think it is some type of sound program but I never use it. I always end task and the rest of the day the computer never hangs up on me.
 

A:Mixer.exe eating up memory

Read other 6 answers
RELEVANCY SCORE 51.6

The process (ntoskrnl.exe) with a task name System is eating up memory

I found on the other forums that Windows Update setting is causing it, but I can't disable it because when I try to disable it, I can't open Windows Upate

Read other answers
RELEVANCY SCORE 51.6

I have a process running that no matter what I try to do to kill it, has a rerun command that I can't find. The only folder that a file search will find this process is the Windows/Prefetch. If you delete this file, it reappears. Run adware, same 8 entries appear. Terminate the running process drvav.exe(using 50-70% of the memory), it restarts automatically. Attached a Hijackthis log file. Please help me get rid of this guy!

Logfile of HijackThis v1.97.7
Scan saved at 4:52:12 PM, on 11/10/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\system32\fxssvc.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Startup Mechanic\StartupMonitor.exe
C:\WINDOWS\drvav.exe
C:\windows\system32\IEXPLORE.EXE
C:\Program Files\MSN\MSNCoreFiles\MSN6.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\KELLY HURD\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Inte... Read more

A:drvav.exe eating my memory

Very old HJT

http://www.majorgeeks.com/download3155.html

then repost
 

Read other 3 answers
RELEVANCY SCORE 51.6

Hello,

last night my sister noticed that she can't save anymore files because the computer kept saying "Scratch disk full", but I said that's impossible because the night before there was still 8GB left in the hard drive. So when I checked it was down to 1GB. So we started deleting files and programs and managed to get up to 3GB free space.

But after five minutes of doing nothing, the memory went down to 600MB free space.

I started thinking it was a virus so I ran combofix (Sorry if I ran it... My friend told me to do so after my mom's laptop got infected with a worm so I decided it could work)

So after running combofix, my free space went up to 14GB ad I thought the problem was over...

But checking after around ten minutes, the free space went down to 7GB and then after a while went down to 600MB again.

Right now the free space is 7GB. The variability leads me to think it's something fishy. But I think combofix should have done something...

Details:
1.) I get a message every time I start the computer that "Cannot start application because ConnAPI.DDL is missing."
2.) My computer has two drives, C and D. So far only C has been affected by the variable free space.
3.) Drive C has a total size of 29.2GB.
4.) I run avast! antivirus and it's current version of virus database is 090106-1, 01/06. Resident protection is on high
5.) I run on Windows XP professional 2002 Service Pack two and on an AMD Sempron processor 2066+ at 1.60GH... Read more

A:Virus eating up my memory (?)

Please download MalwareBytes Anti-Malware to your desktop.1.Ensure that your computer is connected to the internet and your software firewall is disabled until instructed to re-enable it.2.Double click on the mbam-setup.exe to begin the installation process.3.When the installation begins, please do not change any of the settings and follow the prompts.4.Please make sure that when you finish the installation, these options remain checked;5. *Update MalwareBytes' Anti-Malware6. *Launch MalwareBytes' Anti-Malware7.You may now click finish...8.When MBAM launches, you will be prompted to update before running a scan. If an update is found, MBAM will automatically download and apply the updates and you can then click 'OK' button to close the box and continue. You may now re-enable your firewall9.Please ensure that while you are on the scanner tab the 'Perform Quick Scan' option is selected, then click the 'Scan' button.10.If you are asked which drives to scan, please leave all of them ticked, and click 'Start Scan'.11.The scan will now begin and you will see ?Scan in progress? at the top; It may take a while to complete so please be patient.12.When the scan completes, you will see ?The scan completed successfully. Click 'Show Results' to display all objects found?13.Click the 'OK' button to close the box and continue with the removal process.14.Back on the main scanner screen, click 'Show Results' to see a list of any... Read more

Read other 1 answers
RELEVANCY SCORE 51.6

Good evening, just had computer reformatted because of trojan.

Task manager says NMIndexstoreSvr is using 99%of cpu. Can I end this process, and if so how.

thanks
lee

A:Process eating memory

Look here. Have google in your neck of the woods?

Read other 1 answers
RELEVANCY SCORE 51.6

Logs attached have been ran in safe mode.

Since around a day back, I noticed my computer suddenly became extremely unresponsive. I opened task manager (which took 5 minutes), and saw that a process called iphlpsvcs.exe (probably trying to mimic the valid IP Helper service iphlpsvc) was taking up ~1.5GB of memory.

I tried to google the problem and came up with only one similar case:

twitter.com/twitosh/statuses/237613840316104704

It's actually the exact same problem I'm having. Except that one of them solved it by an Avast scan the other one by deleting the relevant files in ubuntu.

I tried an updated Avast scan in safe mode, it did not help. I searched for iphlpsvcs in Ubuntu, and it found 2 files, one in Prefetch, one in C:/Windows/SysWOW64. I deleted both, and it still didn't make a difference when I booted into Windows. In safe mode if I search for the same, I can still see a file with iphlpsvcs in it's name in Prefetch. I don't know what to do next.

In short I've tried the following:

1. Full scan with Avast
2. Full scan with MSE
3. Full scan with MalwareBytes
4. Scan with Mircrosoft MRT
5. Deleting relevant files in Ubuntu
 

A:iphlpsvcs.exe eating 1.5GB memory

first uninstall avast as you have MSE and the 2 together will clash & make things worse

then you are showing a proxy server set, that is possibly malware related
In IE: Tools Menu -> Internet Options -> Connections Tab ->Lan Settings > uncheck "use a proxy server" or reconfigure the Proxy server again in case you have set it previously.

In Firefox in Tools Menu -> Options... -> Advanced Tab -> Network Tab -> "Settings" under Connection and uncheck the proxyserver, set it to No Proxy.
then

Run tdss killer from http://support.kaspersky.com/viruses/solutions?qid=208280684

let it cure anything it fnds ( except SPTD.SYS or anything detected as UnsignedFile.Multi.Generic, which should be ignored) & then reboot

post back with its log

By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder.
Logs have names like: UtilityName.Version_Date_Time_log.txt.
E.g. C:\TDSSKiller.2.4.7_23.07.2010_15.31.43_log.txt
 

Read other 1 answers
RELEVANCY SCORE 51.6

my IE is eating lots of memory, its gets unstable after sometimes. im attaching a log from hijackthisLogfile of Trend Micro HijackThis v2.0.2Scan saved at 05:42:27 AM, on 12/10/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exeC:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exeC:\Program Files\Nero\Nero8\Nero B... Read more

A:IE eating up lots of memory

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable ... Read more

Read other 2 answers
RELEVANCY SCORE 51.6

Well here I go again I hope that it works this time. I have a Compaq Presario 5000 Series, Model 5008US,Amd K-6(ta)2/256,512 Mb of memory 2 slots Max,Ali chip set,Award Modular Bios V4.51G 1984-98 Award Software,Packard Bell FR510 Bios Ver.1.18, 6 Gb HD UMA. The operating system is Windows Millennium. Bought the computer used. Trying a different approach. I had this post type 9 days ago and had a glitch and lost the post 2 hours of work down the tubes. So from hard learn lessons and advice from bleeping computer members I am doing this offline. At this time I do not know what I got! I got some clues that it pointing to Malawi or a Trojan. The problem when running in normal mode the computer takes and start loading something until my memory is use up. It can happen anytime in normal mode. Sometimes siting it uses up the memory but I don't hear the HD accessing at that time. I tried to catch it by using register monitor but I don't quite have that figure out. I had to run two types of spy ware and a couple of registry cleaners to get it back and running. That is why I am running in diagnostic mode. I think I made all the prerequisites before posting. I ran the HJT in the normal Mode and I turn off the Tea Timer I think. I ran all the spy wares. The only thing that may be missing is the virus scan. At the moment I don't have a virus program working on that. Just bought the computer used. Ironing out problems. MacAfee had offer a older program that they would still suppor... Read more

A:Computer Eating Memory

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new hijackthis log. If we do not hear back from you within a couple of days we will need to close your topic.When posting your logs please post them directly into the reply. Do not attach them.Also make sure you have already followed the steps outlined below:Preparation Guide For Use Before Posting A Hijackthis LogThank you for your patience.

Read other 1 answers