svchost cpu usage

[Ozone]

I have little problem with svchost cpu usage after installing rehips

I just run process explorer and I noticed that svchost.exe (DcomLaunch) is using around 10 % CPU, after some testing I figured it started after I've installed rehips, so is this normal

cpu is i7-3610qm
security software: HMP.A (free - no anti-exploit), MBAE free, avast, wfc, sandboxie

ok tried to add rehips folder to exception (avast), still no change,
so I've tried to disable avast shields and reboot
And noticed that rehips gui won't start (forgot to check autostart after reinstall), svchost uses only 0.01 % CPU,
but after running HIPSGui64.exe, it will again use around 10 % even with avast disabled

[aDVll]

For logs click advanced mode. A log tab will show, click on that and then click on the save button.

Btw i assume you don't isolate browsers or anything with both rehips and sandboxie together right?

[Ozone]

nope I have to edit initial rules for chrome to be able to use it with sandboxie,
for firefox I use rehips when I need to

also each time I run rehips the log will be clean and it will show only
"time"  Connected to Local Server
"time"  Standard Mode activated

so should I wait more time to have more info, because right now there are only logs about how I saved log

btw
sandboxie is free so no forced folder or files

[aDVll]

nope I have to edit initial rules for chrome to be able to use it with sandboxie,
for firefox I use rehips when I need to

also each time I run rehips the log will be clean and it will show only
"time"  Connected to Local Server
"time"  Standard Mode activated

so should I wait more time to have more info, because right now there are only logs about how I saved log

btw
sandboxie is free so no forced folder or files

yeah wait a bit until you see the cpu usage happening for afew minutes.

Also not sure what you mean edited rules for chrome. What exactly did you change?

[Ozone]

it was set to run isolated so I have to change it to allow

[aDVll]

it was set to run isolated so I have to change it to allow

Ok then try running the browser not sandboxed and see if the cpu is the same.

[Ozone]

it's same even if I don't run anything, and log show nothing but process explorer still show that svchost has 10 % cpu usage
to be sure if it's not caused by process explorer I tried process hacker and skins in rainmeter but still same

[aDVll]

it's same even if I don't run anything, and log show nothing but process explorer still show that svchost has 10 % cpu usage
to be sure if it's not caused by process explorer I tried process hacker and skins in rainmeter but still same

Post the logs anw someone might see something useful.

[Ozone]

here is log

[aDVll]

here is log

I see dll host launching and terminating again and again. I believe it's sandboxie so any change you remove it or disable service and gui and see how that goes?

[Ozone]

disabled and process terminated but still same

[aDVll]

disabled and process terminated but still same

Does the ddl show up in the logs again and again?

[Ozone]

yeah
dllhost.exe allowed and after few s terminated

[aDVll]

yeah
dllhost.exe allowed and after few s terminated

To confirm can you enable lockdown mode and then exit rehips? After that check cpu usage.

[Ozone]

cpu usage is 0.01
but as I said if HIPSGui64.exe is not running cpu usage is 0.01