• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 234
  • Last Modified:

Non-logged in user is running a process on another PC

When I bring up the Task Manager on a logged in PC by user 1 another user is shown to be running a process. This is not authorized and I’m having problems determining exactly what is going on.

It shows up in Task Manager as dllhost.exe and not run by “user1”, System, or Network service but “user2” on user1’s PC.

Any help is appreciated.
0
bmilne1957
Asked:
bmilne1957
  • 2
1 Solution
 
packetguyCommented:
Dllhost.exe normally is running for each user on a PC. It;s the Windows DCOM DLL Host Process, and the file is located in the folder C:\Windows\System32. There are, however, virus counterfeits of this program; if you're finding it in a location other than the one above, then you likely have an infected system.

The original Microsoft file comes with the DCOM software and is required part of the OS, so don't delete it. Don't terminate it from Windows Task Manager either.

The real Dllhost.exe file is not spyware, it has nothing to do with adware or popups, it is not considered to be malicious and it is not to be removed.

The virus counterfeit Dllhost.exe is dangerous malware/spyware and constitutes a serious security threat. The best fix is to reinstall the OS, but a high-quality anti virus removal tool (or two or more to be sure) could eradicate it.
0
 
bmilne1957Author Commented:
The file Dllhost.exe verified as MS issued but we are still having the same problem of another domain user running a process on a domain PC that is not their own.

Any ideas?
0
 
bmilne1957Author Commented:
Question not answered
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now