dasHost.exe is causing udp broadcast flood on 22222 or 10004 ports...

Anonymous
2024-10-16T07:33:40+00:00

Hi i have problem with Device Association Framework Provider Host..

I checked das host is running from right place C:\Windows\System32

Its signed by ms.

How to stop it? It is hundreds broadcast connections per miute..

System is updated, antivirus is working.

Windows for home | Windows 11 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

61 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2024-12-16T12:48:01+00:00

    I found a solution to this problem. The root cause is the new printing interface in certain applications like Chrome, Paint, as well as other major systems that use it. To fix this, you just need to switch to the older printing interface by modifying the registry:

    [HKEY_CURRENT_USER\Software\Microsoft\Print\UnifiedPrintDialog]
    Add a DWORD 32-bit named "PreferLegacyPrintDialog" and set it to 1.

    This will disable the new interface and stop the broadcast packets from being sent.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  2. Anonymous
    2025-01-03T19:09:47+00:00

    Go to the Performance tab and click on Open Resource Monitor at the bottom.

    I don't see Open Resource Monitor, it's just a graph. I want to know why I have this file, and why it's running. I cannot check it with any security software because it is open.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2025-01-03T22:08:36+00:00

    You might need to run "Task Manager" as administrator in order to get to the Resource Manager. In the search bar in the Taskbar, type "Task Manager", then right click and run as administrator.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2025-01-06T22:19:04+00:00

    Did anyone find a solution to this that did not disrupt the end user client workstation functionality?

    Was this answer helpful?

    0 comments
  5. Anonymous
    2025-01-07T19:07:38+00:00

    Martin, Do you know if there will eventually be a fix for this?

    I have identified that printing from a browser does initiate this storm but so far have found no way to stop other than creating a Firewall rule on the local PC.

    I have also identified that once initiated dashost.exe tries to broadcast storm over to UDP to 3289, 10004 and 22222.

    Is there any way to put in a ticket with Microsoft regarding this or at least get their attention?

    What is this even suppose to be doing other than flooding networks with non-sense broadcast traffic?

    I tried the registry key entry outlined below but it did not have any effect.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments