Why does dllhost.exe Com surrogate consumes memory untill crash

This is happening to a computer at my work.  There are multiple instances of the COM Surrogate (dllhost) appearing and using up 90%+ of the available RAM.  I was able to sort by ram usage and kill the dllhost files that were taking up the majority of the RAM.  No negative impact when this was done -- only freed up RAM to allow for other functions.

I am diagnosing the problem now.  I have determined that it appears to be malware in my instance, or I have malware and a microsoft issue.  I have seen at least one trojan on the computer after a malwarebyts scan.  The malware is generating new folders in a temp directory under one of the users on the PC. When I boot in safemode with Networking, I was able to run Ccleaner to wipe temp files (in normal mode, it can't keep up with the files/folders being created -- thus it never finishes the initial scan).  I will post more about this when I've identified the virus/malware responsible.

I am also using (and highly recommend) the use of "eset online scanner" (google it) for finding and removing viruses/malware.  It will ALWAYS find stuff that malwarebytes, spybot, and anti-virus misses.  

Good luck!  I will post more when I've resolved the issue.

This is happening to a computer at my work.  There are multiple instances of the COM Surrogate (dllhost) appearing and using up 90%+ of the available RAM.  I was able to sort by ram usage and kill the dllhost files that were taking up the majority of the RAM.  No negative impact when this was done -- only freed up RAM to allow for other functions.

I am diagnosing the problem now.  I have determined that it appears to be malware in my instance, or I have malware and a microsoft issue.  I have seen at least one trojan on the computer after a malwarebyts scan.  The malware is generating new folders in a temp directory under one of the users on the PC. When I boot in safemode with Networking, I was able to run Ccleaner to wipe temp files (in normal mode, it can't keep up with the files/folders being created -- thus it never finishes the initial scan).  I will post more about this when I've identified the virus/malware responsible.

I am also using (and highly recommend) the use of "eset online scanner" (google it) for finding and removing viruses/malware.  It will ALWAYS find stuff that malwarebytes, spybot, and anti-virus misses.  

Good luck!  I will post more when I've resolved the issue.

Glad you can do something - I can't even boot into safe mode, nor can I use a System Restore.

" I can't even boot into safe mode"

• If you can start your computer, you should be able to press F8 and boot into safemode... do you mean it still gobbles up RAM in safemode?

-Here are things that have worked for me so far:

1. Remove all temp files, and any malware using favorite tools (malwarebytes, eset online scanner, etc.) while in safemode
2. Setup Windows Clean Boot: msconfig.exe, selective startup (uncheck load startup items); services tab: hide, Microsoft services, then disable all
3. Change file folder options (organize > folder & search options > view) and check ONLY "Always show icons, never thumbnails" uncheck the rest.

Reboot - should work now.  Booting in clean boot is really only helping diagnose, but it gives you most functionality, you can add things one at a time to isolate the source.

" I can't even boot into safe mode"

• If you can start your computer, you should be able to press F8 and boot into safemode... do you mean it still gobbles up RAM in safemode?

-Here are things that have worked for me so far:

1. Remove all temp files, and any malware using favorite tools (malwarebytes, eset online scanner, etc.) while in safemode
2. Setup Windows Clean Boot: msconfig.exe, selective startup (uncheck load startup items); services tab: hide, Microsoft services, then disable all
3. Change file folder options (organize > folder & search options > view) and check ONLY "Always show icons, never thumbnails" uncheck the rest.

Reboot - should work now.  Booting in clean boot is really only helping diagnose, but it gives you most functionality, you can add things one at a time to isolate the source.

When the system is booting up and I hit F8, as usual it will take me to the screen where I can choose which version of safe mode I want.  The problem is that no matter which option I choose, after I select a safe mode option it automatically goes to shutting down the computer and restarting.  In essence, I never get to actually start the computer in safe mode at all.  The only options that seem to work are a normal boot up, or System Repair - and trying to use System Restore even under the Repair mode doesn't work either.

I don't know that the issue with safe mode has anything to do with this particular problem with dllhost, but as I haven't had to start my computer in safe mode since installing Malwarebytes (almost 2 years ago), I didn't realize it was a problem until I just tried using safe mode.

If you can boot in normal mode, try setting up the clean boot.  It might help!