high cpu explorer and dllhost
Hi,
I have a new install of true image 2017 on win 7 and right after installing I'll see explorer.exe spike to very high cpu, as well as dllhost. It happens mostly when idle, then goes back down shortly after coming back. Sometimes it's high when active, but mostly when idle.
I tried re-install and it did the same thing. Anyone know about this or should I just get a refund?
Thanks!


- Log in to post comments

Yes it was. I don't think I did a run as, but the account does have admin rights. I left procexp running and it almost looks like it is started when I come back to unlock my screen. I captured the command line as well of the dllhost:
C:\Windows\SysWOW64\DllHost.exe /Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}
But why should acronis do anything if it's not time for a backup. That of course has me wondering what is coded in the background that it would even start something up.
- Log in to post comments

The fact that the DllHost.exe is running in the SysWOW64 folder is suspicious, you might have a Trojan.
Have a read of this link, it may help
https://superuser.com/questions/833914/how-to-determine-what-is-running…
- Log in to post comments

unlikely since multiple malware scans are clean, but never impossible. dllhost does live in syswos64 normally. It's the 32 bit version not normally called by a process. In this case, it began the day I installed acronis and the processid switch:
/Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}
Is the registry value for acronis tray agent. So either malware was specifically trying to mimic acronis (unlikely) or it was really started by the tray agent. That and the problem goes away when I uninstall TI2017 makes me question what TI is doing.
- Log in to post comments

Recommend that you open a support ticket with Acronis.
- Log in to post comments