Skip to main content

high cpu explorer and dllhost

Thread needs solution

Hi,

I have a new install of true image 2017 on win 7 and right after installing I'll see explorer.exe spike to very high cpu, as well as dllhost. It happens mostly when idle, then goes back down shortly after coming back. Sometimes it's high when active, but mostly when idle.

I tried re-install and it did the same thing. Anyone know about this or should I just get a refund?

Thanks!

0 Users found this helpful

Welcome to these User Forums.

When you installed ATIH 2017 did you do so from an Administrator level user account?  This is required for ATIH to work correctly and there have been issues when it has been installed without sufficient privileges / authority.

Yes it was. I don't think I did a run as, but the account does have admin rights. I left procexp running and it almost looks like it is started when I come back to unlock my screen. I captured the command line as well of the dllhost:

C:\Windows\SysWOW64\DllHost.exe /Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}

But why should acronis do anything if it's not time for a backup. That of course has me wondering what is coded in the background that it would even start something up.

The fact that the DllHost.exe is running in the SysWOW64 folder is suspicious, you might have a Trojan.

Have a read of this link, it may help

https://superuser.com/questions/833914/how-to-determine-what-is-running…

unlikely since multiple malware scans are clean, but never impossible. dllhost does live in syswos64 normally. It's the 32 bit version not normally called by a process. In this case, it began the day I installed acronis and the processid switch:

/Processid:{1EF75F33-893B-4E8F-9655-C3D602BA4897}

Is the registry value for acronis tray agent. So either malware was specifically trying to mimic acronis (unlikely) or it was really started by the tray agent. That and the problem goes away when I uninstall TI2017 makes me question what TI is doing.

Recommend that you open a support ticket with Acronis.