Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: dllhost.exe and 50% CPU usage

21 Dec 2009   #1
Naala

Windows 7
 
 
dllhost.exe and 50% CPU usage

Hi,
I noticed this in RC I had installed before final Windows 7 version and it happened again few days after a new install, so for some time now dllhost.exe has been causing high CPU usage, always arround 50%. It seems it always happens while Im watching some movie or browsing movie folders, despite them being in details view (I read thumbnails can cause dllhost.exe to run high CPU). Anyway, movies are always there one way or the other when it happens, and it causes all my icons to disapear too. And it keeps running until I forcibly turn it off.
I looked at Process Explorer and it seems ole32.dll CoGetTreatAsClass is the thread running high CPU. I attached a screen capture with dllhost.exe Threads window.

I read somewhere turning off DEP for dllhost can solve high CPU without other problems but after few days it just happened again. I guess I will put DEP to default and remove dllhost for now, but other than that I have no idea, there are plenty of topics on the internet about dllhost.exe and CPU but I couldnt find any that has ole32.dll and dllhost.exe together.
Its not a problem to shut off the process once it happens but I would rather see it get solved and not having to deal with it because it really bothers me.

Im really thankful to anyone that has any idea what to do.


My System SpecsSystem Spec
.
21 Dec 2009   #2
Orpheous

XP Pro/Vista Ultimate (64)/Windows 7 Ultimate Signature Edition(64)
 
 

Hi Naala,
I wouldn't touch your DEP settings at this stage, there used to be some pretty nasty exploits around that used dllhost.exe.
"(DEP) is intended to prevent an application or service from executing code from a non-executable memory region. This helps prevent certain exploits that store code via a buffer overflow, for example."

The first thing you should do is run a full system scan with your anti-virus program. If you don't have one installed, I'd recommend either Microsoft Security Essentials, Avira Antivir or Avast... you can find the links in this thread.
Just for good measure, once the scan is complete (and your system is clean), I'd reboot into safe mode and run a full scan again - (hit F8 repeatedly while booting up, choose safe mode), although some antivirus programs may not run ok in safe mode
If you're still having problems after that, please install hijackthis, run a scan and save a logfile, and post the .txt logfile here as an attachment
My System SpecsSystem Spec
21 Dec 2009   #3
Naala

Windows 7
 
 

Wow, thanks so much for your response, I never understood what DEP is so Ill read Wiki article and I already set it to default so it should be ok for now.
I already scanned the system with Nod AV but Ill do it again in safe mode. If nothing comes up Ill post Hijackthis log tomorrow, as you said.
Thanks a lot for now!
My System SpecsSystem Spec
.

21 Dec 2009   #4
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Make a test - run your movie with another viewer, e.g. VLC ( Download VLC Media Player 1.0.3 - FileHippo.com ) and see whether that happens too. Whatever you use to view your movies, is trying to run something in emulation mode (that's what the ole32.dll CoGetTreatAsClass does). No idea why that would be the case because it happens apparently with all kinds of movies (are they all from the same source??)
My System SpecsSystem Spec
23 Dec 2009   #5
Orpheous

XP Pro/Vista Ultimate (64)/Windows 7 Ultimate Signature Edition(64)
 
 

Hi Naala,
how did you go with your scans?
My System SpecsSystem Spec
25 Dec 2009   #6
Naala

Windows 7
 
 

Im really sorry for not responding earlier but the holidays came so fast and I just wasnt at home to deal with computer. Im just downloading hijackthis now and will run it after I get my sleep.

whs: its not a specific file and I dont know how to reproduce the error. It just happens when it does. I did have movie on pause one time but other times I think I was just browsing movie folders. They are actually anime files with .mkv, .avi and a few .mp4 file types, all from different sources and I mostly use the KMPlayer to view them but I also use VLC. Last time it happened while I was changing .mp4 files to open with KMPlayer instead of Winamp and after closing Properties panel the icon didnt change and after checking Properties again I noticed CPU running 50 %. But it does happen far less often than before, since I opened this thread it didnt happen again, but its also true that PC was off a lot. I'll see what happens in the coming days.

Merry Christmas to both of you!!!
My System SpecsSystem Spec
25 Dec 2009   #7
Naala

Windows 7
 
 

It seems I cant edit my post so Im posting new one because I just ran HijackThis and it was faster than I thought.
But the log is really short and nothing like other logs Ive seen, I hope everything is ok.


While Im here i would like to ask if anyone knows how to disable Nero BackItUp scheduler service that appears in the log too, I unchecked Nero Back up during Nero instalation but some files for BackItUp were installed in the Common Files folder and the service keeps running for nothing. can I just unregister it and forget about other files in the folder?

Anyway, thanks for all your help, take your time and enjoy the holiday.


Attached Files
File Type: log hijackthis.log (4.0 KB, 114 views)
My System SpecsSystem Spec
25 Dec 2009   #8
Orpheous

XP Pro/Vista Ultimate (64)/Windows 7 Ultimate Signature Edition(64)
 
 

Hi Naala,
your short logfile just means that you don't have as many programs installed as others might, not a bad thing at all
There's nothing in the file there that shows any malicious activity, but one entry that is unknown:
O2 - BHO: D - {29C552F8-A694-308E-A6CF-117F19EE1958} - C:\Windows\system32\xwr58627.dll
doesn't necessarily mean it's a bad one though.... don't use hijackthis to remove or fix any of the results that it came up with, it seems all clear for now

From the sounds of it, it's most likely either a a KLM/VLC conflict, or one of the programs isn't closing properly. Make sure you download the latest versions If the problem persists, try uninstalling one and using the other... If that doesn't work, give Shark007's codec pack a whirl, it works well for me and a lot of others here
Merry Christmas
My System SpecsSystem Spec
25 Dec 2009   #9
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Quote   Quote: Originally Posted by Naala View Post
It seems I cant edit my post so Im posting new one because I just ran HijackThis and it was faster than I thought.
But the log is really short and nothing like other logs Ive seen, I hope everything is ok.


While Im here i would like to ask if anyone knows how to disable Nero BackItUp scheduler service that appears in the log too, I unchecked Nero Back up during Nero instalation but some files for BackItUp were installed in the Common Files folder and the service keeps running for nothing. can I just unregister it and forget about other files in the folder?

Anyway, thanks for all your help, take your time and enjoy the holiday.
Have a look in Services whether you can find the Nero BackItUp scheduler. If yes, right click on it > Properties > disable.
My System SpecsSystem Spec
25 Dec 2009   #10
Naala

Windows 7
 
 

Yeah, I dont have many programs yet since Im installing them when I need them.
I will check the internet for that file you pointed out to see what it is.

I use Shark007 codec pack already and I love it too. My apps are the latest versions already and they do close down properly but perhaps I have some setting that doesnt like it (although Im pretty much on default with everything). I'll try uninstalling as you suggested and see where it takes me. Im really sorry now that I didnt pay more attention as to when it all began... If nothing works I'll uninstall all media apps and start from scratch.

Whs, thanks for reminding me about Services, Im embarassed to say I totally forgot about them because I use The Ultimate Troubleshooter to disable all my startups and services (and of course I just removed a startup and didnt disable the service itself...)

Again, thanks so much for both of your help and have a great end of the year!!!
My System SpecsSystem Spec
Reply

 dllhost.exe and 50% CPU usage




Thread Tools




Similar help and support threads
Thread Forum
dllhost.exe High CPU Usage (Ole32.dll)
Hello! Recently, I have been experiencing high CPU usage by DLLHost, and I am unaware of how to fix it. I think I may know why it's been happening, and let me explain: Anyway, here's the stuff I've tried: Reinstalled Audacity.
Performance & Maintenance
dllhost.exe
I have Computer with memory running high my OS is window pro 64 bit 4gb I had looking at resources Monitor/memory and I notice that have a dllhost.exe in faded grey it stay for a while and another appear and disappears.PID 2008
Performance & Maintenance
DLLHOST.EXE size
Hello I just read on Tom's hardware that the size of a DLLHOST.EXE file should be less than 10kB on a windows 7 machine; any larger and the DLLHOST.EXE file may be infected by a virus. Is this true, please. Also, does this pertain to the Prefetch folder, please. I note the size of the files...
System Security
dllhost.exe?
I started taskmanager and show proccesses from all users. I found a dllhost.exe on i click it then it disappears. Is this a virus? Google dlllhost.exe to see.. Or is that proccess what i see: dllhost.exe but not dlllhost.exe? :huh:
General Discussion
DLLhost.ese
what mean the proces DLLHost.ese ? that is bad or sotime are broke ?
General Discussion
dllhost.exe help
there is two dllhost.exe running one under system and one under the username im task manager i want to know is it normal for a dllhost.exe to run under my username in task manager
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:36.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App