Dwm.exe Download
Mette Florida
I've scoured the web, but I'm sick of reading "scan your computer for viruses" and "upgrade your RAM" on answers to similar questions to this. I understand that dwm.exe is for (simply put) caching bitmaps for things like Aero-peek and similar, but as far as I have read it shouldn't be using vast amounts of memory.
My colleague and I both have 4GB of RAM, Core 2 Duo, blah, blah -- essentially they're pretty capable. His dwm.exe is running at around 30mb, mine is currently running at about half a gig, though it does fluctuate quite a lot. This is the same while running the exact same applications (currently Zend studio, FireFox (with firemin - low memory usage), Outlook). Every so often I will get a notification asking me if I want to switch to Aero Basic because it's using too much memory, and sometimes it will just switch itself to basic and let me know why.
One thing to add is this seems to have started after a robbery on Monday, where two of my monitors were stolen, and I had to temporarily use a couple of alternative monitors. I am now using brand new monitors but the problem is the same. All drivers installed and working seemingly fine.
The DWM.EXE process will consume a lot of memory when you have multiple screens and the system performance is set to the default of Let Windows choose what's best for my computer. To change this:
Another speed up tip is to hold the windows key and press r, type msconfig and press enter, click on boot tab > advanced options then check mark number of processors then click the down arrow and select max number of cores 2 is duo 4 is quad hit ok.
Check mark boot log and OS boot information, then in the right click make all boot changes permanent and make sure nothing else is open and hit apply then restart.
Most Microsoft windows computers only use one core by default boot settings.This works on windows 8 and 8.1 for sure. I haven't tried it on anything before that.
Good luck :)
i had this problem for a while and nothing really seemed to work.but i found out that after clearing my C drive, the memory usage went down.try to move unwanted programes from c to e/d drives.hope this helps you!
Hello would someone please help me I am so confused with these files I would like to know whether they are viruses, I have run a scan with malwarebytes and avast and nothing was found. I have 4 different conhost.exe (2 of these were modified on the same date and time however the other 2 are random dates and times) There is also 2 conhost.exe.mui files which were made on the same date and time . I have 2 different csrss.exe (saved in different places and created on the same date and time) but 4 different csrss.exe.mui (saved in 4 different places and made and that the same date of time). I have 3 different dwm.exe saved in different places two are the same made on the same day and same size but one is a different size and made on a different day. I also have 2 dwm.exe.mui files which were made on the exact same day and time but are saved in different places. When I was testing whether they were viruses I run conhost.exe as adminstrator as that is what it asks when you click on it and it said it was made by microsoft corporation (I did not click ok to runnning it though) I then done it to another conhost.exe file and it said publisher unknown so I am sure it is a virus but I need confirmation from someone who has more knowledge than me as I will end up blowing my computer up Some of the conhost.exe csrss.exe and dwm.exe were made on the same date as eachother.
Windows was installed January last year. I have been experiencing low fps in my games at times and these sometimes do use quite a bit of memory or cpu but I dont think it is because of this because my brother has the exact same PC and he has the exact same files as me maybe they were on there when I got the PC built by the company.
Actually I can't find any malware in your logfiles. Svchost.exe is a process from Microsoft Windows that allows programs to run their processes through svchost.exe. That's completely legit. Beside that, all those copies of conhost.exe, dwm.exe and csrss.exe are also legit copies. If you don't have problems like advertisements, pop-ups, ransomware etc, it's not always malware that's the cause of it.
OK thank you so much blackbird that gives a piece of mind I have disabled the window update program in svchost.exe and my memory is a bit better but it is still at 50% i see RzMaelstromVADStreamingService.exe which is legit as it downloaded with razor surround for my razor kraken headset but why is it eating a lot of memory however I have 8GB of RAM and adding everything together doesn't add up to this do you have any idea of what to do?
I looked it up for you and I came across several issues with this file as the main source. Razer itself answers here that this file shouldn't take so much CPU and they advise to contact their support center by visiting this page. Maybe this information is useful to you too?
OK will check that out now and yes I have Avast free version but upgrading soon as I really love it but do you have any idea why 5.4GB of my 8GB memory is being used just with this webpage open teamspeak and control panel?
Therefor I want you to post those questions in our General PC Help subforum. I'm sure they can assist you there with every question you might have about Windows and those drivers. Please include a link in that topic to this topic, so they know you've been assisted in the malware removal forums.
Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.
You opened the Task Manager and found something called "Desktop Window Manager." Is it malware? Is it supposed to be there? If it is supposed to be there, what exactly does it do? Here's everything you need to know.
Desktop Window Manager (dwm.exe) is a compositing window manager that renders all those pretty effects in Windows: transparent windows, live taskbar thumbnails, Flip3D, and even high resolution monitor support.
Instead of applications drawing their displays directly to your screen, applications write the picture of their window to a specific place in memory. Windows then creates one "composite" view of all the windows on the screen before sending it to your monitor. Because Windows is compositing and displaying the contents of each window, it can add effects like transparency and window animations when layering the windows for display.
Desktop Window Manager should use fairly minimal resources. On this example system, there are a half-dozen active apps running, including Chrome, which has got more than a dozen tabs open. Even then, Desktop Windows Manager is using a little less than 1% CPU and less than 100 MB RAM. That's a pretty typical load. You should rarely see it creep much higher than that, and even if it does spike higher on occasion, it should settle back down quickly. There have occasionally been bugs that cause high RAM usage. Because the Desktop Window Manager does perform graphics-related jobs, you'll also frequently see it using the GPU. Values in the 0.1-3% range are completely normal, and intermittent spikes a bit higher are basically normal, too.
If you try to end the Desktop WIndow Manager process Windows will display an extremely ominous warning: "Ending this process will cause Windows to become unstable or shut down, causing you to lose any data hasn't been saved. Are you sure you want to continue?"
So, we went ahead and ended it anyway. The desktop flickered once, the process instantly restarted itself, no applications crashed, and nothing caught on fire. Generally speaking you should exercise caution ending Windows processes, however this is one that can pretty safely be killed (to force a restart) without concern.
The Desktop Window Manager process itself is an official Windows component. While it's possible that a virus has replaced the real process with an executable of its own, it's very unlikely. If you'd like to be sure, you can check out the underlying file location of the process. In Task Manager, right-click the Desktop Window Manager process and choose the "Open File Location" option.
That said, if you still want a little more peace of mind, you can always scan for viruses using your preferred virus scanner. You can also copy the executable and run it through an online service like VirusTotal. Better safe than sorry!
So I am helping my parents remove a virus from their computer. I, while computer literate, do not have a lot of expierence dealing with viruses. According to the AVG logs the virus was dectect on their computer and several files were removed including:
There virus scan was setup weekly and the next week it detected and removed the same files. The virus had set their LAN settings to proxy so when the virus was deleted this time, their internet stopped working, and that is when I got a phone call...
Anyway, I ran AVG and it removed several of these files again. I ran mbam and it also detected some additional files (not sure if they were all from the virus, who knows how long since they had checked for spyware, etc.)
I suspect that there are still some additional registry entries from the virus, as I noticed when I look at start-up items there is still a entry for dwm.exe (it is currently unchecked, and the file it references was deleted). The location is listed under SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Windows. I checked in that folder of the registry but I guess I'm not exactly sure what I'm looking for. Not sure if it is excessively important, but it's atleast unpleasent to still have the virus file on my startup programs list.
I disabled AVG as per the your instructions. I ran GMER and have included the log below (it indicates some AVG processes still running, but I triple checked the instructions to make sure I disable everything it said to). I could not get Combofix to run as it stated that it would not run unless AVG had been uninstalled.