Buzz
COM stands for Component Object Model. Introduced by Microsoft in 1993, it allows developers to create COM objects using various programming languages. Essentially, these COM objects integrate into different applications and within the extensions of those applications.
For instance, the Windows File Manager utilizes COM objects to generate thumbnail images and other files when it opens a particular folder. COM objects handle images, videos, and other files to create thumbnail images. Additionally, COM enables File Explorer to extend support for new video codecs.
However, this can lead to some other issues. If COM hangs, the hosting process will be lost. At one point, thumbnail creation objects encountered issues, impacting the entire Windows Explorer process.
To address this issue, Microsoft introduced the COM Surrogate process. The COM Surrogate process runs an external COM object outside the original requesting process. If the COM object encounters an issue, only the COM Surrogate process is lost, and the original hosting process remains unaffected.
Can COM Surrogate (dllhost.exe) be disabled?
The COM Surrogate process is an essential component of the Windows operating system, so you cannot disable this process. Essentially, the COM Surrogate process is used to run COM objects that other processes require.
For example, Windows Explorer (also known as File Explorer) frequently creates COM Surrogate processes to generate thumbnail images when a user opens a folder. Other programs you use may also create their own COM Surrogate processes. All dllhost.exe processes on the system are initiated by another program to let the program know what it needs to do.
Is COM Surrogate (dllhost.exe) a virus?
COM Surrogate process itself is not a virus, it's a part of Windows. However, malicious software can exploit this process to disguise itself, avoiding detection by antivirus programs. A prime example is the malware Trojan.Poweliks which utilizes the COM Surrogate process (dllhost.exe) to execute unauthorized activities on users' computers.
If multiple dllhost.exe processes are running on the system and consuming significant CPU resources, it's highly likely that malicious software or viruses are utilizing the dllhost.exe process to perform illicit activities.
If you're concerned about malware exploiting the dllhost.exe or COM Surrogate process to carry out unauthorized activities, you can use antivirus software to scan, detect, and remove any malicious software present on the system. If your installed antivirus software doesn't detect any malware, but you still have suspicions, in such cases, you can download and install another antivirus program for further verification.
Above, Mytour has just explained to you whether COM Surrogate (dllhost.exe) is a virus and has provided additional information about the COM Surrogate (dllhost.exe) process. Readers can follow and refer to some of Mytour's articles for more information about some processes running on the Windows operating system, such as svhost.exe.
