Solved

Windows 7 system slow and overloaded due to multiple dllhost tasks

Posted on 2013-11-20
13
645 Views
Last Modified: 2013-11-27
The machine is a windows 7 machine with 4 gb of ram. I have run a full malwarebytes scan on the machine which came up clean. I also ran tdsskiller which did not find any rootkits.

Process manager shows multiple dllhost.exe tasks. These tasks are using lots of cpu time and system memory . How can I determine what they are running?
0
Comment
Question by:dovidf
  • 6
  • 2
  • 2
  • +2
13 Comments
 
LVL 9

Expert Comment

by:MHMAdmins
Comment Utility
I would use process monitor to take captures and see what is taking up all of your resources, also you may want to go to msconfig.msc and turn off a few programs from running at start up and see if that helps with the speed of the pc a little bit. Also you may want to check the event viewer to see if there are any major issues being flagged on the system.
0
 
LVL 22

Accepted Solution

by:
Nick Rhode earned 500 total points
Comment Utility
You can refer to this article to hopefully point you in the right direction

http://blogs.technet.com/b/markrussinovich/archive/2008/09/24/3126858.aspx?PageIndex=5

Another thing you could try is roguekiller to see if there are any hijackers.  Roguekiller can be found in my virus removal article.

http://www.experts-exchange.com/Security/Vulnerabilities/A_12285-Virus-Removal-Methods.html

Another thing is to make sure its not just a bunch of updates attempting to download.  Are you on service pack 1?  Do you have all the latest updates for your antivirus and other software etc?
0
 
LVL 50

Expert Comment

by:jcimarron
Comment Utility
dovidf --
It seems weird, but it could have to do with thumbnails.
 
"go to Organize/Folder and search options, then to View, then  check the first one: "Always show icons, never thumbnails", then to uncheck: "Display file icon on thumbnails". "


Modified from http://www.techsupportforum.com/forums/f210/solved-dllhost-exe-high-cpu-usage-695950.html
0
 
LVL 3

Author Comment

by:dovidf
Comment Utility
NRhode,

I ran rkill and roguekiller before tdsskiller and a malwarebytes full scan.

I also left Malwarebytes on in addition to Microsoft Security Extensions.
0
 
LVL 3

Author Comment

by:dovidf
Comment Utility
jcimarron,

I don't think this should make a difference because no file explorer windows were open while the multiple dllhost tasks were running.
0
 
LVL 50

Expert Comment

by:jcimarron
Comment Utility
dovidf--
Does that mean you will not try the suggestion I made?  

I do not believe that having Windows Explorer open has anything to do with the multiple dllhost.exe files running in Task Manager.  My suggestion was to use Windows Explorer only to make the changes suggested.  Once made you can close Windows Explorer.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 3

Author Comment

by:dovidf
Comment Utility
I made the Windows Explorer change for thumbnails and icons and it didn't help.
0
 
LVL 9

Expert Comment

by:MHMAdmins
Comment Utility
Did you run the process monitor to see exactly what was causing latency on the server?
0
 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
Comment Utility
Open up a command prompt as administrator and run:

sfc /scannow

See if that helps.
0
 
LVL 3

Author Comment

by:dovidf
Comment Utility
I'm in the middle of doing the Russonovich type analysis.

sfc/scannow checks for integrity of system files. Why would that apply here?
0
 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
Comment Utility
It's something I like to do when things don't seem to be running quite right.
0
 
LVL 3

Author Comment

by:dovidf
Comment Utility
I am still looking into the dllhost tasks using process monitor
0
 
LVL 3

Author Closing Comment

by:dovidf
Comment Utility
I no longer have access to the system. This seems to be the most promising approach.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now