What is dllhost.exe? Is dllhost.exe spyware or a virus?

How to fix dllhost.exe related problems?
1. Run Security Task Manager to check your dllhost process
2. Run Windows Repair Tool to repair dllhost.exe related Windows Errors
3. Run MalwareBytes to remove persistent malware

Process name: DCOM DLL host process

Product: Windows

Company: Microsoft

File: dllhost.exe

Security Rating:

The COM+ hosting process controls processes in Internet Information Services (IIS) and is used by many programs. For example, it loads the .NET runtime. There can be multiple instances of the DLLhost.exe process running. www.neuber.com/taskmanager/process/dllhost.exe.html 

Note: The dllhost.exe file is located in the folder C:\Windows\System32. In other cases, dllhost.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

Virus with same file name:
Worm/Nachi.A.1 - antivir.de

Click to Run a Free Scan for dllhost.exe related errors

Users Opinions

Average user rating of dllhost.exe: based on 274 votes. Read also the 218 reviews.

  • 18362 users ask for this file. 106 users rated it as not dangerous. 13 users rated it as not so dangerous. 51 users rated it as neutral. 38 users rated it as little bit dangerous. 66 users rated it as dangerous. 32 users didn't rate it ("don't know").

All comments about dllhost.exe:
Windows DCOM DLL Host Process Alex
memmory virus at this level what to do
ASP development  See also: Link Bhagawan das
on web server 8 instances loaded using more then 200mb of memory caused server to run very slow and drop connections
Consumes CPU resources to almost 100% but seems to do nothing. Must kill the process to get the server to respond properly again. The process re-spawns almost immediately.
Dot Net Framework AGHH
During the installation of Microsoft .NET Framework 1.1 Service Pack 1, ZoneAlarm firewall alerted me that dllhost.exe was trying to connect to the internet and it is a known malicious program. AVG6 scan found nothing. Andy
legitimite part of windows update, if located in c:\windows\system32. But in c:\windows\system32\wins it can signal a worm. sprite
Also asked me during .NET Framework 1.1 installation Eric
This file is loaded in the windows\system32 directory and is for the .net framework. However when located inthe windows\system 32\wins directory it is a virus.
intalls with service pack 2 -=ΞΩΔΡΞ=-™
Its a known malicious file. It calls upon other variants it can automatically download from the internet, to rummage more intently through your files for passwords, credit card numbers, and who knows what else. It can automatically call upon variants from the internet if they are needed. After doing this it emails all of the source that its gathered to various random emails ALL located in Kuwait and Russia. This is all we know about it at the moment we will try to get back to you with more.  See also: Link Edward Shaw
That it slow down your interconnection jim
dllhost.exe is a Windows DCOM DLL Host Process it run web applications dll based with IIS. Stop. No virus, everything can be a virus, notepad.exe also! Palnus
This file produces a surrogate process in which to host COM+ applications, and is provided by Component Services in Windows 2000, Windows XP and Windows 2003 Server. COM+ allow for the development and use of distributed applications  See also: Link Allistair Lomax MCSD
It came out of no where in my proces list, never saw it before. _XC_
Dllhost executes dll's. It is not malicious by itself - it is the dll's it hosts that are the problem. If it is hosting a malicious dll then it is malicious. Donovan
All applications on computer freeze up, CPU maxed out, couldn't do anything, even Ctrl-Alt-Del took minutes to respond! Did an internal search and found the file in the directory it's apparently supposed to be stored in, also found another associated file under c:\windows\Prefetch called "DLLHOST.EXE-2B8A63A0.pf. Scanned both files with Kaspersky Antivirus Personal Pro TheBeast
dllhost.exe provides the necessary hooks to allow existing COM DLLs to behave as a local (or remote) server by wrapping them into a surrogate process. The dllhost.exe utility will load COM-based DLLs and expose their functionality from a distinct process, leaving the COM servers code base unaltered (no need to change and recompile the source code). I used it for some software projects. Michael
High memory usage when viewed in Task manager. Sus and Web hosting service stopped and dllhost.exe went down to reasonable memory usage duggy
Consumes CPU resources to almost 100% but seems to do nothing. Must kill the process to get the server to respond properly again. The process re-spawns almost immediately Momo
It slows down Interconnection S. Samad Khokhar
two instances indeed came with "Internet Information Services (IIS)" (win2k here) along with 2 other processes. if you don't want to run a site from your computer (for an intranet for example) uninstall that through the windows-components screen (a tab in software settings) Theobald Kafé
It is present since I installed my WEB server demonia987
Part of DCOM needed if you want to access various ActiveX controls, can be used as a pathway for viruses, but by itself it isn't Blackbomb
while running long ASP scripts,DLL HOST.exe is taking upto 99% CPU Pavithra
Slow down the system running same time with ''legal'' dllhost.exe (user name = system)
This is a file which maybe a system file or the virus w32.welchia.worm Cool Duncan
dllhost.exe is not a virus, it's windows utility for COM. But trojan called Winkiller is replacing this and other files.  See also: Link xor
I am an ASP developer and my PC CPU maxed out by this app. Could this be becuase another developer is running a web application from my machine? The user running was "IWAM_ my_computer_name ". Joe
With the mentioning of the COM applications, I'm lead to believe that my instance of dllhost.exe was installed with Visual Basic 6.0. I have seen it before, but not before the VB installation. Ryan
this file is a natural part of windows, but like all programs, it can be used in a manner which would mimic a virus/worm/trojan. however, in normal cases it is relatively safe. Mr PC Know-It-All
dllhost.exe a runtime component service, most of the time this process is left in use even if its called application has terminated, users of IIS do not get surprise to see this mostly on use of ASP pages, this process can be manually ended if you are sure it was initiated by of your applications  See also: Link Raina Samnani
This program is required access the internet, in order to have a sucessful installation of Microsoft .NET Framework (my ocurrance happened during the installation of version 1.1). Only allow access if downloading from http://www.Microsoft.com or Windows Update. Windows XP SP 1 or SP 2 is required.  See also: Link Matthew
This is dynamic link libary and multiple instances runs especially on web servers or servers using IIS effecting the CPU utilisation. Need to kill the instances to bring back the server to normal which doesn't effects the server in any means. Tirupasuri Nagaraja
dllhost.exe appears only when I start my b ATI Multimedia Center /b , its a program I use to capture videos. When I turn the ATI program off, the dllhost.exe dissappears.
basicaly jack..... i just wanna know if it being in the prefetch and dllcache means anything other than the obvious......... Klown
This is dynamic link libary and multiple instances runs effecting th eCPU utilisation Tirupasuri Nagaraja
Cranks up the CPU usage to 100% after uninstalling .NET Framework 2.0 Beta B
It's not needed for most systems, better to not have it running at all
zone alarm alerts during install of .NET framework service pack 1.1 Clarke
just came out of nowhere, also helpsvc.exe and helpctr.exe
It does exactly what it says on tin!! It's a host process for COM dlls. The is the host process which runs ANY requested DLLs which are registered on your machine. So Yes, this can be used to run a virus (If you unfortunately have one installed and registered and who's functionality is compiled into a DLL), It is also used to run nice friendly DLLs which are shipped with Windows, especially when IIS is installed. In short, it's meant to be used for the powers of good but can become corrupt like an evil pixie and run nasty code. Craig Gilchrist
This is a very annoying file. It creates adware and neededware popups, but doesn't show them to you. I am pretty sure its trying to install software to the computer. If you delete it manually, another program will keep trying to restore, therefore giving you the unseen popups anyways. It gets very annoying when you are typing and it trys to open an IE program, so it de-selects the program you are using. Kellen
As far as I can tell all this is doing to me is a weird prank thing...after i clear my recycle bin it becomes full again, when you try to empty again it says "are you sure you want to delete 'window's?"...chacked and dllhost is the only odd process running, cant seem to get rid of if though jeff
Came out of nowhere, I look at my processes every day. Could be spyware type of thing. Pissing me off that I cant remove it. Not a part of w32.welch dllhost=toast
Stop the world wide web publishing service and then restarted it. dllhost.exe CPU usage dropped from 99% down to 4%. Lloyd Jura
Used for .net programs to connect to databases via ODBC. Server shows the connection coming from dllhost Martin
Runs DLLs, etc within IIS. Runs as service by IWAM_ computer name , unless changed. quite normal. Brett
CPU utilization gets high due dll host file Sandesh Pawar
sudden appearance franniesings
I wonder this a velnerability which hacker can use it. Ryan
Used to execute dll COM inproc servers as exe COM outproc servers. andvalb
dllhost.exe is a REQUIRED component of Microsoft Windows, and should not be terminated or deleted. It manages DLL level programs (98% of 32-bit programs). If you terminate dllhost.exe, you will need to hard boot your machine. If you delete it, you will need to reinstall your operating system. Anyone reporting this one as a virus either has no clue what they are talking about or is posting malicious information intentionally. DJ
One file of .net framework only LkS
People, there is the legit version of this file that is the COM process, and there is a spyware file that uses the same name, located in c:/windows/shelltray. Delete the latter, and delete the corresponding startup registry entry Fixer
I have zone alarm blocking its access to the internet and have no problem with cpu speed jw
This file is used by ASP Server (IIS). It isn't dangerous. AspCoderMan
Dot Net Framework m0rpheus88
if the file implements or uses functions like CoRegisterSurrogateEx (open the file in some text viewer, like Notepad or WinCmd Lister), then it's COM surrogate thah comes with SP2, IIS and .NET stuff, else it's welchia. Peeking at file contents is good practice anyway, it reveals stuff like what dlls is the app linked to, which functions does it use or provide, etc. v!rus
Appeared after I installed .netAnnoying that I can't shut it off deleted_scenes
chrashes my ATI 9700 AIW in TV-Mode everytime Michael
Well I know everytime you try to delete it it comes back, and my dads PC has it too, so I say its not dangerous. Marcus
By some of the responces in this it seems to me that SMTP processes could be viral. Viruses use what they can get their hands on dllhost.exe is one of them. Viper
dllhost.exe - DCOM DLL host process supports DLL-based COM objects and is used by many Windows programs. .NET Runtime and IIS are probably the two most common applications that use this process.The original file from Microsoft gets placed in the C:\WINDOWS\System32\dllhost.exe directory. if you find it anywhere else then you should be suspicious for sure. Rafiuddin.K
Is a windows file. dllhost.exe = COM Surrogate. Control of diferents instances.  See also: Link MicroLMV
This is legal part of windows op.systems,some viruses replace this file but file itself is not virus!!! Lubo999
This file creates lots of problems while running com+ components. Sarvesh Damle
Unless there is a firewall, it is definitely a vulnerability to the security of OS. It can definitely act as a server... Cant its working be modified for good? RR
also started running out of nowhere on my system, uses resources. using procmon i found weird call stack: ntoskrnl.exe!NtReplyWaitReceivePortEx+0x3e2
Only shows up when I open the internet browser. E.C
As already said it`s a host process for COM dlls. Takes CPU time though but isn`t dangerous as long as not located in "Windows\System32\wins". Killing the process may result in very strange behavior of web servers. Kazroth
host process which runs any requested DLLs which are registered on your machine.It is not harmful to terminate the process as stated previously as I do it every week with no repercussions - it aliviates poor mem utilization. Robert Natiello
It is the host process for DCOM Applications. The applications in side of DCOM are probably what are causing the problem. We have developed a system that usses over 220 components contained in a DCOM Application. Anytime one of those are utilized it will run inside teh DLLHost process. That being said anyone can develop software to run in DCOM including worms etc. It is no more at fault that the OS itself for any malicious applications that are loaded in to it. Rick
disabled this service "COM+ System Application" and dllhost.exe would stop running ss
This file was added when I installed .NET 1.1 update swamy
it starts with i tunes or win media player has to do with accessing wav files martin
computer stated acting slow (xp), force quit and 80mb for page memory was freed up and computer returned to norm. task manager did not report hllhost.exe true performance saying it was zero, when it was really almost 100%. Good ole microsoft, pc hasn't been online in months, and years before that. anonymous
dllhost.EXE the killer it freezes you the cpu even C'A'D didnt work it was a killer the file an comes in more than 1 way so look for a file closes the the same file as in the frist beast there is a run dllhost file 2 it dose nothing if the frist file is gone the beast 2
dllhost.exe is a requiered component on COM base application, it will be horirble when the clients connection is poor, i preffered to kill the dllhost.exe process to solves the problem (using my own autokill Process), and it is works, the server does no need to restart but the clients need to reLogin. it is better than waitting for a long restart server. k4ngucup
Used with Microsoft's Script Editor for Win2K and XP, It is used to run and interface with wscript.exe's DLL's and is needed to run certain programs for databasing such as WinRK.  See also: Link John
It was never in my computer, but when i download the new windows media player it appeard on the windows task manager {opens with new windows media player 11} Phil Z.
its something like a virus, it starts by playing a huge game or some application, it slows down my computer, so i run task manager and i end it!!! Trash
dllhost.exe is an identity theft grabber! someone knew my credit card number and my paypal account... it hadnt happen before but ever since dllhost.exe was up this has happen... ending the process made it come back the program used was plasma ball!
this file was created as an antidote for the blaster virus. The writer was trying to do a good thing but screwed it up. dllhost in windows/system32 is good - if in system32/wins its a bad thing - get symantec removal tool to get rid of it. ron
Began to show up on task manager randomly (never seen it before) Not malicious, but I am wondering why I haven't seen it before. n00b eater
dllhost.exe came with SP2 for our XP, it seems to load after explorer has closed? It is at least on XP found in the DLLCache, ntservicepack, folders, and in the windows prefetch.folder. I usually rename files that are questionable and see if the systems functions change for the good or bad, Renaming dllhost.exe caused nothing more than not seeing it loaded in task manager. However on a side note one of the biggest problems I have found is multiple copies of Iexplore watch out for these duplicates. The only one needed at least for XP is in program files\Internet Explorer. Dan
Suddenly appeared after installing .Net framework SP1, i've been experiencing slower internet connection like never before. Im uninstalling net framwork now and see if it works. Its funny that dllhost only show up when i installed net framework SP1. Now i uninstalled everything about netframework and dllhost keeps in the taskmanager and if i terminate it, it comes back after 1 sec.crap microsoft!! Fred
I first find out this thing when I tried to update my Norton Anti-virus, it blocked the access to symantec.com, then when I tried to run some online anti-virus scan, all the websites were blocked. P. L.
Runs for IIS. me
dllhost.exe tauchte bei mir das erste mal auf nachdem ich mir die englische demo von "Warhammer - Mark Of Chaos"-Demo (engl.) installiert hatte. Musste den Prozess mehrmals beenden bevor er nicht mehr auftauchte. Seit dem nichts mehr davon gemerkt (liegt bei mir in Windows\system32 und Windows\ServicePackFiles\i386 wotanDT
Used for .ASP Scripts running on IIS6 Anonymous
Go to your windows folder and then enter system32 folder. If dllhost is found in this folder, your A-OK! if not, do a search of your computer with spybot S&D or AVG Free. Travis Crincoli
A DLL may it be COM or Ordinary DLL requires that an application that loads it. DLLHost.exe is a general application which can load the COM DLL for use by COM+ Services. Giridhar
COM+ Event System service, stop and disable it, and it goes away
You can check your list of startup programs, if it is there try deleting it. If you are unable to delete it, it is a virus. It also stops you from launching task manager. nogi
Bit more explantion, "stop" the dllhost.exe service running by going to comp mgmt services COM+ System Application and clicking stop because no dependancies were listed for my current configuration/running system. wguru
Why would this appear in your windows/startup? Is it safe to delete it from that point? SMS
executed by Software installers, harmless service ... Chief5B
As mentioned above, there is a legitimate and there is a malicious file with the same name found in Win 2000 machines in our facility. While Sygate cought its activity right away, I couldn't kill the process from the task manager. Fortunately, Spygate was able to terminate the process and after that I was able to delete the malicious files found by the search option. The malicious version has all caps DLLHOST.EXE so it's easy to recognize. While active, the machines were cloged and worked slower than PC XT from 20 years ago. Good luck. MakDen the Terminator
found file hiding in c:/documentsand settings\All Users\Start Menu\Programs\Startup so therefore would start everytime computer started and hung cpu at 99% would only delete when started in safemode then all was ok again Brian
I have two hard disk in my pc both hard disk have operating system, i just boot my pc using the other disk drive operating system , then search for the file dllhost.exe on the infected hard drive from there i deleted that file, then i rebooted my pc using the infected drive there is no more trace of dllhost.exe on my pc. sannysweet
Happened after upgrade to windows media 11 and urge music
I had some sort of worm, filepath C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dll.exe, which is not legit... if you have this, then see the link.... but yeah, if it's located in System32, then everything's OK. I've also found a dll.exe in my I386 folder. Anybody have any idea whether this is legit or not? Can't find any information whatsoever.  See also: Link Lisa
I have found dllhost.exe in Windows C:1386 folder . Is this dangerous ? COM surrogate ; microsoft corp ; size 5 kb the hitman
It won't let me delete it. Also it has been stuck there when I got Windows Mesia Player 10 Shorty
related to IIS internet information services - this may be infected with a virus or worm if appears in task manager when IIS is sisabled or not instaled from add/remove programs/add/remove windows component Vadim
im not really sure what dllhost was made for but i know i got it when i was downloading some programs and it would duplicate my files every time windows started up. also it would not allow me to use windows task manager. if you have it go to Start Run Msconfig and uncheck it on windows start up. then restart your computer, go back to Start search and type in dllhost and delete ALL the dllhosts you see (if u are have the same problem i had) i just got done deleteing it off my comp and my files dont get duplicate anymore and i can Ctrl + Alt + Delete when ever i want now. Justin S.
Installed as part of WebGuide. Huge system resource hog in Vista Ultimate. Uninstalled WebGuide, all is well.
Set to manual service Com+Sys App and MS Software Shadow Copy Provider This will free up memory. Use this step only after you check for virus or spyware for dllhost.exe TonyC
It was hogging 100% of CPU usage. Machine ran like cold molassas. S.T.M ID'd it for me and quaranteed it. Problem solved! Victorian John
This is a network control component from Microsoft which supposed to optimize requests in net but as many things from Microsoft it runs wrong. Microsoft does not care how you are feeling after getting your money. Sre. They know you cannot sue then for that. Just imagine hoe much money, health, time you spend to get simpliest needs. No comment anymore. Just buy Linux. Soo-soo
only shows up for a second or two after starting task manager (actually two of them with exact same name) but immediately dissapears after about 1 second. therefore i cannot highlight it to stop or review properties/location. Ralphy
This exe is responsible for managing DLL based functions. In one of our applications, whenever a big size file is clicked to be downloaded, the negative part of this exe comes into picture. It consumes a hugh amount of memory & does not allows the file to be downloded. Ideally, this program should not be terminated but in our case, this exe is killed manually to download the file. Johari
It killed IE 6.0 multiple times for me AntBriWes
A Windows System File Flav.
Started in uninstallation of .NET 1, taking up a lot of power Toby Lane
Legitimate file, it showed up out of no where and took up massive amounts of memory but no viruses found, ran all virus removal tools that are associated with the viruses that run off this dll. Like it was said, it's legitimate. Do NOT remove. Adam M
Windows System File (DLL) if located in System32 Directory. 6126kB of Memory Usage in the XPSP3 Version (5512), 5120 kB File Length (5512), File Date 04-14-08 (5512), has no Signatures. If located elsewhere or different file or process properties then possibly virus. BerndP
It took my screen away all I could do was click my background pic and thats it. Zachary
Com+ Service Instance Suriya
If it's runned with command line "C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}", so it's COM+ host application. mwizard
This file MAY be dangerous DEPENDING ON WHERE IT IS LOCATED!! Many users above have said that it is safe it is in C:\Windows\System32. Most other locations indicate a virus. I got the ZLOB TROJAN and the DLLHOST.EXE-###### file in C:\WINDOWS\prefetch was modified at the same time I got the trojan. I run Vista x32 Home Premium. I recommend running Malwarebyte's program to check for trojans if you have this in the same foler. I should note though that the DLLHOST.EXE file was originally created 2 years ago and my computer was fine up until yesterday when it was modified. Peter
The DLL host.exe file monitors the Dll files installed and must be useful for the applications to run. These windows processes should not be terminated because this may cause the operating system to crash and registry damages. Mukund
it's loaded as a windows service by "COM+ System Application". Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly.
listen if i can't stop it and put it on manual i want it OUT! if every program legit or not has a process working my cpu over time your pc will be slow period! i installed the .net framework and window media player 11 and this file dllhost.exe poped up, i stopped it in task manager and it turned on again by itself. long story short i stopped it by putting these services on manual (McrdSvc, ehRecvr, ehSched) dllhost.exe is not in my list of running processes as well as anothers. hope i helped.. peace  See also: Link dj moserok
This program is important for the stable and secure running of your computer and should not be terminated. dllhost.exe is a process belonging to Microsoft Windows Operating System. The dllhost.exe file manages DLL based applications. Pay for Antivirus Software. Keep it updated. Think before you click.  See also: Link Kevin Rossiter
if You Install Optional Network Services then you will see this Process . torment
It takes my server win 2000 cpu usage very high may be trojen or spyware Naveed
Makes a hell of thumbs files all over the computer kj
Net framework, if your having problems, update windows or repair your installation Jaron
Puts CPU up to 25% (100% for one core) when toggling images in Windows Picture viewer. Moi
this whole list of responses is completely USELESS! Everyone's opinions are in direct contradiction of each other to the point that there's no consensus about ANYTHING. This thread needs to be cleaned up by someone who actually knows what theyre talking about so the rest of us dont get spun completely around. david
It's a "COM+ System Application", part of Windows OS, found in the Sys32 folder. It isn't a virus and multiple instances of it may be present in the Sys32 folder. No big deal. It's needed to handle the functions of dll's in general Tigwelder56
when u uninstall or install files, this process is processing. TCO
Just got High Risk security warning..after I scanned with Norton 2010 on vista .... Biswanath
The file is an integral part of windows. As such, it is a primary target for malware. sufficient antivirus protection from software that does active scanning should protect you from attacks against this file. I set it as neutral because it is neither good nor bad, just a file that can easily get infected by click-happy users browsing online with an unpatched, unupdated, or unprotected computer. The voice of reason
COM+ Surrogate, part of .NET Framework. May slow down programs extremely. Chris
I have a brand new Windows System, but when this dllhost.exe appeared, a strange key was register and two Svchost.exe was running my internet was very slow, drop many times, definitily a dangerous file. SaveYourPC
COM+ System Application. Harmless if in windows\system32\.  See also: Link AMcGivney
Process installed with Macrium Backup Adamr
This file is sometimes dangerous and adds more Svchost.exe process to your system and also is associated with the file or process called wmiapsrv.exe. If you see this two files associating together you are probably attacked with a spyware or adware or worm and maybe a virus. TM
I'm still looking into the dllhost.exe file... but it keeps showing up in my processes bar in the task manager. Every time it does, my computer's used physical memory goes up to about 99%, even thought the program itself shows it doing nothing. Once I end the process, the used physical memory goes down to about 35% in a matter of seconds. My computer is unusable when it is running. What puzzles me more is that the file dllhost appears to be in its proper location (c:\windows\system32) CaptainTineil
it's file which activates when u do LAN game servers or something which uses COM its 100% safe just if u have firewall and antivirus working properly. raulii
It is like it has been said above, it runs DLL files. It does sometimes jump up processor to around 50% on my system but not often. I can be used to run virus, it can be used to run various spyware too. But in general it is fairly gentle and a part of windows. If it jumps up in resources just ending the task will fix it, no real issue. Nyarlathotepsama
COM Dienst/NET.Framework finaljason
This is an important component of the Windows subsystem. You can probably safely kill it from taskmanager, it should autorestart. Some corrupt media files seem to trigger its high CPU usage some times. Stew
legt den compi bzw. cpu lahm jim
Welchia worm! Burat
on task manager, two processes under the same name dllhost.exe appeared. one was normal and the other was utilising 99% of physical memory but they differed on the username, the windows one belonged to system and the other to a weird username. i stopped the bogus one and everything went back to normal. Kaspa
Go to Control Panel - Administrative Tools - Services and you will find "COM+ Event System Service". Stod or disable the service, and dllhost.exe will go away. Blade16
DE: Bestandteil von Windows, bzw. dotnet. Der COM+-Prozess ("Dllhost.exe") lädt die neueste Version von .NET-Runtime herunter. Daher der Zugriff auf's Internet. Hohe Auslastung kann auftreten, ist MS aber bekannt!, Lösung, siehe Link. EN: Part of Windows/dotnet. It's a dllhost.exe process that is associated with Microsoft COM+ application packages. 'dllhost.exe' also downloads the latest version of .NET-Runtime, therefore the try to connect to the Internet when active. A high workload doesn't necessarily mean anything. It's a known issue. See MS Support-Website for a solution.  See also: Link Lars
DLLHost is an executable that is called by windows to run background/foreground processes unde user credentials Reata
dll convert into codeing in any language desai tushar b
login service used to control irq swapping from internal RAM to bbs Johnny Cockring
Basically noticed my computer running slower then normal, opened up task manager and I right clicked on it cause the cpu was at 5, and i clicked "End Processing Tree" and it stopped showing back up. So i think i fixed it, not sure yet. Audrey
The DLLHost shipped as part of the Windows operating system is used to host COM+/DCOM processes. Several Microsoft system software components use DLLHost. Alan
Some worms etc. copy their versions over the legit one. Use a good antivirus etc prog all the time and should be ok. My version ran to 3Gb of RAM before I could kill it off. JimmyP
Increases CPU usage to %99 every 30 seconds. Unable to kill application and IIS services is unchecked. MG
ity fichier ty dia tsy virus mihintsy, vendra-pory daolo nareo ato  See also: Link Mel
It's just part of Windows, one of the many Dynamic Link Libraries files and many programs will make this file appear in the task manager. It's also used to allow a computer to access the internet, and in malicious cases, allow the internet to access your computer. BallsToTheWall
It's a crappy file, disable it for most (not all) processes if you don't want to have that COM Surrogate error pop up on you Windows 7 machine every now and then, resulting in BSoDs galore. The actual exe file that executes is not the problem - it's the way that it handles DLL's that may add to the crap up. Someone who experienced the problem
Installed itself with NET.Framework, uses up most of memory running in background, explorer went haywire guardianangle89
this can be a spyware,virus,worm..related files to dll host:consent.exe,same consent with some .mui file.its main purpose is to stop running of antivirus..wen antivirus is called,consent.exe runs and it will stop the antivirus process..this may be one among the process..dll host .exe present in windows/sys32 is good..the same file name in ome oter location is :)harmful ..when u check the tracing routes to a website it will be routed to many servers in different countries so the hacker can`t be caught,and he can access the info present in your laptop even with screen shots!!! L
This Program can slow your computer!!! Skipper
bremst die komplette cpu aus...schmeisst den scheiss bloss runter egal wie...dll host.exe is derbst gefährlich da es daten von eurem pc an andre sendet ohne das ihr was davon mitbekommt... ThePain
I have it and it allows remote connection via internet what it does I am not shure as I am only able to view on resource monitor ( have several screen shots ) jeff stuljl1
it lag my connection eat so much upload speed bahaa
do not interfere with this file/process. If you suspect malware is at play, run a virus scan. You don't delete ieexplorer.exe if it takes 99% CPU, do you? Just leave it alone, please. Also, there should be an override to give this a security rating of 1-- it's from Microsoft ffs...
mine is located in Syswow64 killerfgs
This is making my computer very slow. The CPU usage reaches to 100 and my computer becomes very hot at soon as I start up. So every time I have to delete it from task manager Xnis Jr.
COM Surrogate - Microsoft .Net Framework Tanay
It keeps shutting my computer down. Dont know what to do as im not computer literate. Just comes up with a message box saying C:\WINDOWS/system/dllhost.com. Kelvin Paraha
Anyone know anything about dllhost.exe in C:/WINDOWS/ServicePackFiles/i386 ? ..I got an error thing when I tried to watch a movie on Netflix saying it had to close in an unusual way and it said something about dllhost.exe so I googled it. Then I searched on my computer thing "dllhost.exe" and it shows three files in Prefetch, one in System32 and one in ServicePackFiles/i386. I googled that and it brought me here because of the post in German but that didn't tell me much when I translated it. I also got a bluescreen twice the other day when trying to start my computer so I was wondering if it was a virus and if it could cause that. James T. Kirk
Increases CPU usage to %99 Nikijss
its trojan v4 from prorat server and open 445 and 135 port tareq
dllhost is COM+ on the server. A lot of things run in COM+ and usually (being a webserver, it's IIS) Often a badly written script could have this affect. It's hard to spot culprit sites however you can move suspicious ones into "high isolated" mode which means they run in their own dllhost. Its easier to spot which one it is then. We can use handle.exe (tool that you can find on the web) that will list the current files running in the process. This isn't useful on really busy servers since it will list too many to be of any use, however on silent servers or times that the process goes high quickly then it can get your list of possible culprits down quickly. Kaustubh Pendse
It's not malicious, but sometimes it pops up in task manager eating up 50% of my cpu and making stuff slow even though it's not using the other 50%. HolyDevil
just like ralphy, only shows up for a second or two after starting task manager (actually two of them with exact same name) but immediately dissapears after about 1 second. therefore i cannot highlight it to stop or review properties/location. can only surmise at this juncture. more info, this process actually shows up in task mgr as "dllhost.exe surrogate" when it does for the second. ralph - no, really.
From my understanding. dllhost.exe is causing problems with my computer, so in order to fix it i need to allow it through my firewall, however not every dllhost.exe is microsoft so this is causing a risk to my computer.  See also: Link D.L
Dllhost.exe must be in /System32 or else is a virus,worm,trojan,etc.Don't delete it BiLL
its make the cpu full usage the computer so so slow and i think it so clever when i opened the task manager it's close it self !! ahmed myaleh
COM Dienst/NET.Framework 43
MANY SAID it is Net Framework . i uninstall Net Fr 4 updated then solve. I never need Net Fr4 in win 7 ,as basic PC user test
This process should never take up more than 30% CPU! If it does than it has most likely been corruped either by fragmenting (98% of the time) or in rare cases a virus/spyware... I have been terminating it every time i see it in my task manager and my computer is running fine, better than ever actually... not sure to do from here though... Ethan
From what I know, it's safe: It's been up and running since the day I bought my computer, and no scanners have decided it to be safe. Viruses with the same name does supposedly exist, but this particular process is safe. For me it usually takes about 40MB private usage in Activity monitor. Calle. N
It keeps giving me a pop up every time in IE wanting me to allow it to use a website to access an Adobe program. When I check the 'don't show message again' box and click don't allow, it pops up again. Going to try Kaspersky in Safe mode.
Used for .NET Framework stuff, if it uses to much CPU open Resource Monitor and suspend it if you terminate it it will just restart Andrew
Took a long time to see drives, used 6 gb of memory. I killed it and changed extension to ex_. Never had a problem after that. Holguin
made my comp lag like hell and took lots of memory twitch
Explorer started glitching up all over the place; I looked in the process list to see "dllhost.exe" at 3,500,000 memory usage...killed it and everything went back to normal again. It did pop up in the process list again, but at only 3,000 memory usage. However, it disappeared a few minutes later. JosephW
This file is eating up a lot of memory from the CPU. Every time I start the comp, my folder takes a lot of time to load and it almost comes to a standstill because of which I am unable to access any files. I end the dllhost.exe process from the task manager but it again comes back. This is causing a lot of problem. Someone please help me! This was not the case earlier. It has just happened in the last 3 days. Si Chan
Ever since I put a photo camera memory stick in the reader of my laptop this thing showed up,never did before. I think It's some virus or trojan, because It's taking up a lot of memory, 1GB of memory sometimes when Firefox is open, my suspicion is that it is connecting to the internet sending my information, passwords and suck. Had to take measures, going to format the pc. Jamesson
seems necessary in windows 7 ult but like any file at all may be corrupted into malware of some kind. know how to check file integrity of system files. Sal Manella
I just deleted "dllhost.exe".but didn't deleted "dllhost" is still in system32 folder. PC looks fine work. Unknown
DLLHOST.EXE WAS EATING 25% MY CPU. The Process Explorer showed that this was MFC thread processing thumbnails. I realized that video file on my desktop is in wrong codecs/defective and windows is trying to make thumbnail for it. Every time I showed desktop, this thread started and eat CPU. Deleting the file, fixed it. Check your desktop! Is there any video/image file that is corrupted? WIN 7 cannot handle its thumbnail creation and uses a lot of CPU. Richard
It keeps showing up and then staying for a few seconds and it then disappears from my Windows Task Manager in the processes section. It seems strange I have nothing that uses it. Nerokin
Even i stopped Com+ services its running with domain [email protected] server, Its loads 100% cpu Manigandan.P
I have a bunch of these files running at the same time on my computer at the same time, it is also eating lots of CPU power and memory.
I don't know why people are talking about CPU and CPU. Actually In my computer, It is using a lot of memory(RAM). It hangs explorer. I didnot find it dangerous. But this is totally unusable. It doesn't matter if you terminate it and your comuter can run without running this process. And Yes of course, I want to remove this process. Suresh chaudhari
take all of my RAM eats up system resources Joe P
Why does dllhost.exe Com surrogate consumes memory untill crash. It happens when I highlight or view a folder containing video files, Even if I close the folder or select a different folder the memory keeps getting consumed. It seems to happen mostly with 3D Video files but it has done the same with 2D files. So it seems to be a problem with the windows thumb nail system dealing with these files. By the way trying to delete or move the file or folder while the Com Surrogate is consuming memory Delete can not complete the task. What I have been doing is finding offending file selecting Delete, then go to task manager stopping Com Surrogate, then the file will delete. Fix "MS are aware of problems with certain chipset/driver combinations and the KB2670838 update They are also aware of problems with the IE10 install They are working on both issues, and will update as and when they are satisfied that they have solved the problems. The recommendation in the meantime is that if the update doesn't install first time, make sure it's uninstalled, and then hide it - Windows Update will unhide it when it is updated." So Uninstall IE10 and KB2670838 update, hide them from auto updating when thy pop back up to be updated the problem should be fixed. Proof that MS knows that IE10 has problems on some hardware platforms is here. http://technet.microsoft.com/en-us/ie/jj898509.aspx  See also: Link Korbin
there is a virus that act as dllhost.exe, the genuine file should be in the System32 folder. Start Task Manger and open the proerties of the file if the location is not other than C:\Windows\System32 it is virus. To get rid of it, remember the virus file location from the properties start windows on SafeMode and locate and delete the file. Possilbe location of the virus file could be 'C:\Users\ ur name \AppData\Roaming\Microsoft\Windows\Temp'. After deleting the file restart the system normal and the virus should be gone. Lakitha
seems to only give me a problem when i accidentally d/l a YT video that has a 3D extension. Than trying to delete it, it wont and freezes up my PC cranial
it consumes 25% or 50% of cpu and 100% ram. i don't know how it starts. i always end its process in task manager. sometimes it doesn't work,then i have to restart my computer psk
C:\\Windows\System\\dllhost.exe and 2 client server Runtime Process programs running. Dll registry errors. Bde Unlock wizard files are locked cannot delete. Phx
Its safe, it just uses alot of CPU. Killing it seems to do nothing except restore your CPU usage.
As noted by others, dllhost.exe is a legitimate file in Windows (on my computer, Windows 7). However, attacks by a Trojan program called Powelik can cause multiple instances of this file to run as a process, and these multiple processes just pop up again if they are deleted. (The anti-virus program stops the attack but apparently for some reason the dllhost process is triggered by this.) The CPU usage goes up to the point where the computer barely runs. Interestingly, the attacks are confined to just one user on a computer with several profiles. Malwarebytes and Norton system scan do not detect anything. George
Sometimes with 3D video, the file shows up in your task list, gradually grows until it fills your RAM, and crashes the program that runs around it. I was only able to reboot to fix it on my Win7x64 machine.  See also: Link Dave
he just took Security task manager and wiped out most text, graphics and the rest is in german Bobby
If you disable this in XP your System Restore will not work. Tom
Not dangerous but so annoying. Yousef
This process causes popup pages to appear while opening several web pages. The redirections are mainly to popcash.net, flirchi, promoads.net, stamplive.com etc. till date. I use mozilla firefox. When I can end this process (temporarily though), the popups stop. I may not be 100% accurate but this is what I observed. Will return when I find more about it. Imran
block my procces but i just dellet from folder and my computer work normaly again
Can be caused by the Poweliks virus. View the link fore more info  See also: Link Dan
Found an exact 7KB version of it in Windows\winsxs C:\Windows\winsxs\x86_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_43fa44d954d596e7 Dale Jake Corner
160429 As far as I can tell, a proper instance of DLLHOST.EXE always has the /ProcessID: switch. These processes do not because they are executing a .DLL that has been injected directly into memory by the Poweliks trojan. As noted in at the beginning of the referenced article, recent variants no longer start from an entry in the HKEY_CURRENT_USER\...\RUN key but are instead hidden in a hijacked CLSID key. And to make it even harder to detect there are no files written to disk, only these Registry entries.  See also: Link bubu
I don't know about the file location, but if your task manager says: dllhost.exe.exe *32 (.exe two times) it is obviously a virus. For me dllhost.exe.exe was inside Internet Temp folder and if i checked properties it was AutoIt3.exe, which was causing some file loss ofr me. Silver

If you know more about dllhost.exe, share your knowledge and help other users.

Security Rating:
Your opinion about this file:
Web page with more details:
Your first name:

More process information

Is dllhost.exe spyware or a virus, trojans, adware or worm? Is there a known dllhost.exe error?

Other Processes

[dllhost.exe in German] [all processes]