- If you visit Task Manager, you will see one or more COM Surrogate processes running on your Windows computer. These processes have the file name dllhost.exe and are part of the Windows operating system. You will see it in Windows 10, Windows 8, Windows 7 and earlier versions of Windows.
- What is COM Surrogate (dllhost.exe)?
- How to know the COM object stored in a COM Surrogate?
- Is it possible to disable COM Surrogate?
- Is COM Surrogate a virus?
- How to fix COM Surrogate has stopped working
If you visit Task Manager, you will see one or more COM Surrogate processes running on your Windows computer. These processes have the file name dllhost.exe and are part of the Windows operating system. You will see it in Windows 10, Windows 8, Windows 7 and earlier versions of Windows.
What is COM Surrogate (dllhost.exe)?
COM stands for Component Object Model, an interface introduced by Microsoft in 1993 that allows developers to create “COM objects” in a variety of programming languages. Basically, these COM objects plug into other applications and extend them.
For example, the Windows file manager uses COM objects to create thumbnails of images and other files when it opens a folder. COM objects handle image, video and other files to create thumbnails. This allows File Explorer to be expanded with support for new video codecs.
However, this can lead to problems. If the COM object crashes, it will remove its stored procedure. Sometimes COM object creation thumbnails crash and drag the entire Windwos Explore process along with it.
To resolve this problem, Microsoft created the COM Surrogate process. The COM Surrogate process runs a COM object outside the original process that requested it. If the COM object crashes, it will only remove the COM Surrogate process and the initial storage will fail. For example, Windows Explorer (now called File Explorer) launches a COM Surrogate process whenever it needs to create thumbnail images. The COM Surrogate COM object host executes the job, if the COM object crashes, only COM Surrogate is affected and the original File Explorer process continues.
And COM Surrogate is named “dllhost.exe” because the COM object it stores is a .dll file.
How to know the COM object stored in a COM Surrogate?
The standard Windows Task Manager does not provide any information about the COM object or DLL file that COM Surrogate is storing. If you want to know about this information, you should use the Microsoft Process Explorer tool, download it and hover over the dllhost.exe process in Process Explorer to see the COM Object or DLL file stored.
You can see the screenshot below, here is the dllhost.exe process that is hosting the CortanaMapiHelper.dll object.
Is it possible to disable COM Surrogate?
You can not disable the COM Surrogate process as it is an essential part of Windows. It is actually a container process that is used to launch COM objects that other processes want to run. For example, Windows Explorer (or File Exlorer) regularly creates a COM Surrogate process to create thumbnails when opening a folder. Other programs can also create their own COM Surrogate process. All dllhost.exe processes on the system are started by other programs to perform the task that the program wants.
Is COM Surrogate a virus?
COM Surrogate is not a virus, and is a normal part of Windows. However, the malware can use it. For example, malware Trojan.Poweliks uses the dllhost.exe process to perform the task with its malicious intent. If you see a large number of dllhost.exe processes running and they use a significant amount of CPU, that means the COM Surrogate process is being exploited by viruses or other malware.
If you are concerned that malware is using the dllhost.exe process or COM Surrogate, you should scan the system with antivirus software to find and remove it from the system. And If the antivirus software you use does not find malware but you still suspect can run with another program for reference.
How to fix COM Surrogate has stopped working
Method 1 – Update Codecs
Obviously since it is a video / image issue, we thought it might be something with the current settings of the codecs installed. This particular client likes to copy and extract tools, so he has ffdshow installed some other codecs. We manually update all codecs for their latest versions including ffdshow, the Windows 7 Codec Pack and others. You can download the latest version of the Windows 7 Codec Pack here.
If you have DivX or Nero installed on your pc, go ahead and update to the latest version too. In some cases, you may have to uninstall a program and then reinstall it later.
Method 2 – Kaspersky Antivirus
There is a known problem with Kaspersky antivirus that this problem occurs. If you are using Kaspersky, you need to make sure that you update the real Kaspersky software, not just the virus definitions. You can also check to see if this is really causing the problem by disabling the program completely and seeing if the problem goes away.
Method 3 – Command
There are some commands you can try to run in Windows to see if it fixes the problem. You have to run them at the command prompt. Click on Start, type cmd and then right-click and select Run as Administrator. Now type the following commands, press Enter after each one:
That would re-register a few dlls with Windows and be able to fix the COM errors instead. If not, read it!
Method 4 – Check disk for errors
If you see this problem only on a particular drive as an external USB device, then it might be that there are some bad sectors on the hard drive. It is a good idea to run chkdsk to make sure the drives are performing well. You can read my previous posts on how to use the chkdsk utility.
Method 5 – Disable DEP for dllhost.exe
A fix that has been mentioned many times is adding dllhost.exe to the exclusion list for DEP (Data Execution Protection). You can read my previous posts on how to turn off DEP in Windows. On the last step in that article, click Add and then add the following .exe file in Windows 7 32-bit:
For 64-bit Windows 7, you must exclude the dllhost.exe file at this path:
Method 6 – Display / Printer Driver
This may be a bit difficult, but if you have just updated a driver for your monitor or even some other hardware on your computer, try to return the driver for the session. previous version. It is usually more so with display controls than anything else. In some cases, updating to the latest version of the display driver can also fix this problem, so you’ll have to play around with either the driver upgrade or the roll back. drivers.
To rollback the display control, go to Device Manager, expand Display Adapters and then right-click on the display device and select Uninstall. You will see a pop up window when you need to check out the driver software for this device.
In that light, you should also check your printer driver and update all of them if updates are available.
Hopefully, one of these methods will fix the COM Surrogate bugs in Windows 7. If not, write a review here and let us know your specs and what you have tried and us. will try to help. Enjoy!