English | Deutsch

Is dllhost.exe safe?

Dllhost.exe is a executable file (a program) within Windows. The filename extension .exe denotes an executable file. You should only run executable files from publishers you trust, because executable files can potentially change your computer settings or harm your computer. The free file information forum can help you determine if dllhost.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or to an application you can trust.

Dllhost.exe file information

The process known as COM Surrogate belongs to software Microsoft Windows Operating System or COM+ System Applications or Panasonic Document Management or WINS Client or cito or Windows Host Services or TestAOL7Extract by Microsoft (www.microsoft.com) or Noco or apatia chi or Tybee Software.

Description: The original dllhost.exe from Microsoft is an important part of Windows, but often causes problems. The file dllhost.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 5,120 bytes (73% of all occurrences), 7,168 bytes and 13 more variants. http://www.file.net/process/dllhost.exe.html 
The dllhost.exe file is a Windows system file. The program has no visible window. It is a Microsoft signed file. Therefore the technical security rating is 3% dangerous; however you should also read the users reviews.

Recommended: Identify dllhost.exe related errors

Viruses with the same file name

Is dllhost.exe a virus? No, it is not. The true dllhost.exe file is a safe Microsoft Windows system process, called "COM Surrogate". However, writers of malware programs, such as viruses, worms, and trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are such as WORM_INJECT.OB or WORM_VB.IAX (detected by TrendMicro), and W32.SillyFDC or W32.Fontra (detected by Symantec).
To ensure that no rogue dllhost.exe is running on your PC, click here to run a Free Malware Scan.

How to recognize suspicious variants? If dllhost.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 66% dangerous. The file size is 417,792 bytes (67% of all occurrences), 393,216 bytes and 5 more variants. There is no information about the author of the file. It is not a Windows core file. The program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The program has no visible window. Dllhost.exe is able to monitor applications and manipulate other programs.

If dllhost.exe is located in a subfolder of C:\Windows, the security rating is 18% dangerous. The file size is 7,168 bytes (76% of all occurrences), 58,325 bytes and 13 more variants. The program is not visible. It is a trustworthy file from Microsoft. Dllhost.exe is able to hide itself and monitor applications.

If dllhost.exe is located in the folder C:\Windows, the security rating is 75% dangerous. The file size is 762,368 bytes (38% of all occurrences), 956,928 bytes and 7 more variants.

If dllhost.exe is located in a subfolder of C:\Windows\System32, the security rating is 81% dangerous. The file size is 10,240 bytes (63% of all occurrences), 114,688 bytes, 370,688 bytes or 13,312 bytes.

If dllhost.exe is located in a subfolder of "C:\Program Files", the security rating is 48% dangerous. The file size is 393,216 bytes (20% of all occurrences), 624,128 bytes and 6 more variants.

If dllhost.exe is located in a subfolder of "C:\Program Files\Common Files", the security rating is 58% dangerous. The file size is 656,384 bytes.

External information from Paul Collins:

  • "Gilat SOM Enumerator" must run at start up. For Gilat Communications internet satellite systems - associated with SkyBlaster modem. Required if you have this system

Important: Some malware disguises itself as dllhost.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the dllhost.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

there is a virus that act as dllhost.exe, the genuine file should be in the System32 folder. Start Task Manger and open the proerties of the file if the location is not other than C:\Windows\System32 it is virus. To get rid of it, remember the virus file location from the properties start windows on SafeMode and locate and delete the file. Possilbe location of the virus file could be 'C:\Users\ ur name \AppData\Roaming\Microsoft\Windows\Temp'. After deleting the file restart the system normal and the virus should be gone.
Why does dllhost.exe Com surrogate consumes memory untill crash. It happens when I highlight or view a folder containing video files, Even if I close the folder or select a different folder the memory keeps getting consumed. It seems to happen mostly with 3D Video files but it has done the same with 2D files. So it seems to be a problem with the windows thumb nail system dealing with these files. By the way trying to delete or move the file or folder while the Com Surrogate is consuming memory Delete can not complete the task. What I have been doing is finding offending file selecting Delete, then go to task manager stopping Com Surrogate, then the file will delete. Fix "MS are aware of problems with certain chipset/driver combinations and the KB2670838 update They are also aware of problems with the IE10 install They are working on both issues, and will update as and when they are satisfied that they have solved the problems. The recommendation in the meantime is that if the update doesn't install first time, make sure it's uninstalled, and then hide it - Windows Update will unhide it when it is updated." So Uninstall IE10 and KB2670838 update, hide them from auto updating when thy pop back up to be updated the problem should be fixed. Proof that MS knows that IE10 has problems on some hardware platforms is here. http://technet.microsoft.com/en-us/ie/jj898509.aspx
  Korbin   (further information)
take all of my RAM eats up system resources
  Joe P  
I don't know why people are talking about CPU and CPU. Actually In my computer, It is using a lot of memory(RAM). It hangs explorer. I didnot find it dangerous. But this is totally unusable. It doesn't matter if you terminate it and your comuter can run without running this process. And Yes of course, I want to remove this process.
  Suresh chaudhari  
I have a bunch of these files running at the same time on my computer at the same time, it is also eating lots of CPU power and memory.
Even i stopped Com+ services its running with domain id@win2008R2 server, Its loads 100% cpu
It keeps showing up and then staying for a few seconds and it then disappears from my Windows Task Manager in the processes section. It seems strange I have nothing that uses it.
DLLHOST.EXE WAS EATING 25% MY CPU. The Process Explorer showed that this was MFC thread processing thumbnails. I realized that video file on my desktop is in wrong codecs/defective and windows is trying to make thumbnail for it. Every time I showed desktop, this thread started and eat CPU. Deleting the file, fixed it. Check your desktop! Is there any video/image file that is corrupted? WIN 7 cannot handle its thumbnail creation and uses a lot of CPU.
More comments can be found here:
    (further information)

Rating chart

Summary: Average user rating of dllhost.exe: based on 248 votes with 9 reviews.
99 users think dllhost.exe is essential for Windows or an installed application. 12 users think it's probably harmless. 47 users think it's neither essential nor dangerous. 30 users suspect danger. 60 users think dllhost.exe is dangerous and recommend removing it. 29 users don't grade dllhost.exe ("not sure about it").

Do you have additional information?
What do you know about dllhost.exe: 
How do you rate it: 
Link for more info's: 
Your Name: 

Dllhost scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes

dllhost.exe [all]