dllhost.exe com surrogate

[WastedUte]

I first noticed this trouble 12-31-14. Great way to ring in the new year. When my laptop started to get sluggish, I opened the task manager to notice a whole lot of processes running that aren't normally there. I disabled the wifi connection and killed the processes. When I re-enabled the wifi and opened up my IE to surf the net, the same issue started. Again I disabled the wifi.

 

Next I ran the Windows Defender since I don't use (or didn't at that time) AV s/w. Windows Defender seemed to hang on certain files, one of which was mcupdate. When I tried to update the virus db, I was unable to proceed. I reconnected to the net and searched the microsoft support websites. One problem they said might happen when attempting to run any of their solutions is that the virus might not allow me to get to any of the security websites to fix my problem. I ran across this issue.

 

New Year's Day I went to get the ESET security from the store to install and attempt to clean my laptop. I ran their virus scan/clean utility which hung my machine twice until BSOD. Third attempt, I made sure I was not connected to the net and all extraneous processes not running. 3rd time utility found plenty of issues with the option to clean, which I selected.

 

After ESET cleaning, I rebooted, logged in and connected to the net. I pulled up task manager and noticed a dllhost.exe (with description COM surrogate) for every instance I'm connected to the net. I knew I wasn't out of the woods yet. I can't remember when, but I now have to press F1 to finish the bootup process for my laptop. That happened during this time. I did some more searching and found your site and started the steps you suggested before opening a topic.

FRST.txt

Addition.txt

[TwinHeadedEagle]

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
     
    
Before we start please read and note the following:

• Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
• Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
• Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
• Note that we may live in totally different time zones, what may cause some delays between answers.
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!
There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
  Rules and policies
 
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
 
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
 
 
 

Download Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

 

 

Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please upload them into your next reply.

[WastedUte]

I don't want to sound like a smart-aleck but in your directions you initially state (under the heading Before we start please read and note the following:)   Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.

 

In the next section under 'Download Malwarebytes Anti-Rootkit to your desktop', you request Open the MBAR folder and paste the content of the following files in your next reply:

 

So I am clear before attaching or pasting, which do you want? Attached or pasted logs?

[TwinHeadedEagle]

Sorry, I will change it. Please upload/attach reports.

[WastedUte]

Ok. I have 3 files to attach. I cannot find the system-log.txt anywhere on my laptop. What should I do about the missing file?

mbar-log-2015-01-10 (14-51-54).txt

FRST.txt

Addition.txt

[TwinHeadedEagle]

Uninstall Conduit Engine
 
 
Fix with Farbar Recovery Scan Tool
 

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

 
Download attached fixlist.txt file and save it to the Desktop:
 
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please post it to your reply.

fixlist.txt

[WastedUte]

I am unable to uninstall conduit engine. In add/remove programs, I highlight conduit engine, click uninstall and nothing happens. I have waited a couple of minutes thinking it was working in the background but it wasn't.

[TwinHeadedEagle]

No problem, skip it.

[WastedUte]

Here's the fixlog.

Fixlog.txt

[TwinHeadedEagle]

Good. How is your PC behaving now?

[WastedUte]

CPU usage around 5%, memory around 62%.  2 IE windows open. I still see dllhost.exe in task manager. Killed it twice and after about a minute it snuck back in there.

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

[WastedUte]

_{Here are the latest files. My concerns are these:}

 

_{1. dllhost.exe (COM surrogate) still pops up in task manager}

_{2. that Conduit Engine you asked me to delete - which I am unable to delet}

_{3. my laptop, on reboot, hangs which causes me to press F1 to allow it to complete the boot process.}

 

 

 

 

FRST.txt

Addition.txt

[TwinHeadedEagle]

PC seems clean, I think your problems are related to hardware malfunctions, probably dust, cables or malfunctioned hard drive, based on the errors below:

 

 

 

Error: (01/11/2015 05:44:10 PM) (Source: atapi) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Ide\IdePort0.

 

Error: (01/11/2015 05:44:10 PM) (Source: atapi) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Ide\IdePort0.

 

Error: (01/11/2015 05:44:10 PM) (Source: atapi) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Ide\IdePort0.

 

Error: (01/11/2015 05:44:10 PM) (Source: atapi) (EventID: 11) (User: )

Description: The driver detected a controller error on \Device\Ide\IdePort0.

 

You should take it to the repair shop and ask for check.

[WastedUte]

Ok. Will do. I will keep an eye on it and if any more problems arise, I will open a new topic. Thanks for your help.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!