dllhost infected after update

wings515

Distinguished
Aug 24, 2011
25
0
18,530
As stated on other posts dllhost.exe shows being infected by Avast as malware. Running a full scan on Avast and Malwarebytes does not find anything.
I reformatted the drive and did a clean 64 install from a CD. Did the initial updates and watched the dllhost size in Task manager/ Processes. It is listed as dllhost.exe*32 at around 2.5M
I installed all the updates except the .NET and malicious software removal tool. All was good. then updated the rest of the files. During all updates Avast was running. After the last set of updates the virus reappeared. Chatted with MS and they suggested running sfc /scannow. The system32 scan did not find anything. I changed to sysWOW64 and tried to run sfc /scannow and go an error message 'Windows Resource Protection could not start the repair service'.
Next MS wanted $ and since this is not my laptop (Compaq CQ56) I was not going to pay without approval.
So I am at a stop. Just as a thought, could the Restore Image be infected also so it re-infects the working OS even after a format of the OS drive?
Any help would be great.
Regards
 


The more likely cause is Avast presenting a false positive. If you've only installed updates and your copy of Windows is legitimate there's no possible way to get a virus.
 

wings515

Distinguished
Aug 24, 2011
25
0
18,530


 

wings515

Distinguished
Aug 24, 2011
25
0
18,530
One reason I don't think it is a False Positive has to do with the increasing size of the file from around 4M to over 120M while the CPU usages is banging around 90-100% with nothing being done. No IE or other apps, just Avast running. If I suspend Avast for 1 hour, dllhost.exe*32 still increases in size. The CPU use kills any speed when trying to anything else.