Solved

Flashing icons, Windows Explorer stopping, dllhost.exe *32 high cpu usage

Posted on 2014-04-14
8
858 Views
Last Modified: 2014-04-23
Windows 7 Home Premium
Trend Micro Titanium AV

Most noticeable symptom is that the desktop icons & task bar started flashing on and off every 5 seconds or so.  You can run other programs when that starts but you cannot run any Windows items like control panel, file explorer etc.  You can run Outlook, Chrome and others.  

It does not happen in safe mode.  It does not happen for about 10 minutes after the computer boots.  Did determine that it does happen right after "Windows Explorer has stopped working" message.  Also noticed that dllhost.exe *32 process goes really high when this is happening too -- 100,000+.  

Ran sfc /scannow.  Still happens.
0
Comment
Question by:ComputerMunkey
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
8 Comments
 
LVL 25

Accepted Solution

by:
Tony Giangreco earned 500 total points
ID: 40000735
It sounds like your Pc is infected.

Here is a comprehensive list of items I would check based on your situation.

Hope it helps!

1. Install Process Explorer to find out what runs at startup
http://technet.microsoft.com/en-us/sysinternals/bb896653

2. If you haven't also ready checked for Viruses, update your virus definitions and run a Full Scan, deleting all virus and spyware detected

3. Download and run these free anti spyware apps
AdwCleaner
http://www.bleepingcomputer.com/download/adwcleaner/

Kaspersky TDSSKiller
http://www.bleepingcomputer.com/download/tdsskiller/

ESET online scanner
http://www.eset.com/us/online-scanner/

Malwarebytes Anti-Rootkit
http://www.bleepingcomputer.com/download/malwarebytes-anti-rootkit/

www.malwarebytes.org
www.superantispyware.com
www.hitmanpro.com

4. If you don’t have any Anti Virus installed, here are a few free ones to try:
http://www.avg.com
http://www.avast.com/en-us/index
http://windows.microsoft.com/en-us/windows/security-essentials-download
http://www.bitdefender.com/solutions/free.html

If you are using Google Chrome and have the Conduit Search End and want to get red of it, here is how to do it.

1. Run this process to cleanup hidden adware
http://www.wikihow.com/Get-Rid-of-Conduit-Search-on-Google-Chrome

2. Make sure is completely removed
http://malwaretips.com/blogs/remove-conduit-search-virus/

Check System Logs:
Go to All programs, Administrative Tools, Event Viewer. Check the System and Application sections for errors that may be causing your problems.

Check for corrupt system files:
Open an elevated command prompt and run this to check for corrupted system files.
sfc /scannow

Run a Disk Cleanup
Start, All Programs, Accessories, System Tools, Disk Cleanup.
Include Temporary Internet Files and Temp files

Check for Disk Errors
Run Error Checking: Start, Computer, right click  on C:\, Tools, Error Checking.
Select "Automatically fix file system errors" and click start

Check for all programs that start at Boot using Msconfig
Start, Run, type MSCONFIG, on the startup tab, review the programs listed. Uncheck anything that should not run on startup
0
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40000736
If your system is so badly infected that none of those solutions work, then I suggest backing up your data and performing a clean Windows install.
0
 
LVL 14

Expert Comment

by:Rob Miners
ID: 40000848
Also try another Keyboard.
0
Don't Miss ATEN at InfoComm 2017!

Visit booth #2167 to see the  new ATEN VM3200 32 x 32 Modular Matrix Switch. Other highlights include the VE8950 4K HDMI Over IP Extender, VS1912 12-Port DP Video Wall Media Player  and VK2100 ATEN Control System. Register now with Free Pass Code ATEN288!

 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40001317
Have you made any progress?
0
 
LVL 3

Author Comment

by:ComputerMunkey
ID: 40001460
It isn't my computer it is a customer's and I won't be working on it until later this afternoon.  Just wanted to see feedback on these particular symptoms because I did consider malware, but I see a lot of those and this just didn't quite seem like it.  dllhost.exe is in the correct location - syswow64.  

Thank you for the responses.
0
 
LVL 14

Expert Comment

by:Rob Miners
ID: 40016370
Have you made any further progress?
0
 
LVL 3

Author Closing Comment

by:ComputerMunkey
ID: 40016403
It did, in fact end up being malware.  Answer included much of my typical malware removal steps, but it didn't feel like malware to me at first, so this helped me go in the right direction.
0
 
LVL 14

Expert Comment

by:Rob Miners
ID: 40016411
Thanks for the feed back and good to see that you're up and running. :)
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
When asking a question in a forum or creating documentation, screenshots are vital tools that can convey a lot more information and save you and your reader a lot of time
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question