cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
88
Views
0
Helpful
2
Replies

One of our laptops seems to be taken over by dllhost malware

ganseg
Level 1
Level 1

In Task Manager you can see  more and more dllhost.exe task using up nearly 100% of the resources.  One person suggested preventing dllhost.exe being accessed via the internet.  How would I prevent a file name from being accessed by the internet?

2 Replies 2

kpatullo1
Level 1
Level 1

The OpenDNS service can only block domains, I recommend checking your stats to see if there is an excess of requests for a certain domain that this file may be utilizing and adding that domain to your block list.  If this .exe is using a method other than DNS to connected to the internet you won't be able to block it using our service.

 

rotblitz
Level 6
Level 6

This dllhost.exe is run by the Windows service COMSysApp.  I could not see that this accesses the internet at all.  Check the Windows event logs (eventvwr.exe) to find related messages why the dllhost.exe is started multiple times.  Try also with stopping the COMSysApp service to see if this helps.  Ensure that the dllhost.exe is the genuine Microsoft component and loaded from %windir%\system32 (or equivalent on 64-bit systems).