Forum Discussion
Com Surrogate Error
I've started evaluating some of the new security features in Windows 10, 1709 such as Network Protection and Attack Surface Reduction. Anytime one of the NP or ASR rules is triggered I get the toast notification window above the system tray as expected, however; I also get a popup stating "COM Surrogate has stopped working":
I see this corresponding information in the Application event log:
Faulting application name: DllHost.exe, version: 10.0.16299.15, time stamp: 0x5e7a01e6
Faulting module name: ntdll.dll, version: 10.0.16299.15, time stamp: 0x493793ea
Exception code: 0xc0000374
Fault offset: 0x00000000000f87bb
Faulting process id: 0x53c
Faulting application start time: 0x01d353e12537484f
Faulting application path: C:\WINDOWS\system32\DllHost.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: d4645448-e593-4f9f-ba25-55cc11ef6271
Faulting package full name:
Faulting package-relative application ID:
I can produce this error on multiple machines, and it happens every time one of the new rules is triggered. I did try adding dllhost.exe to the Data Execution Prevention exceptions, but that did not have any effect.
Has anyone else run into this or have any ideas what might be causing it to crash so consistently? Any help would be much appreciated.
1 Reply
- Anthony RussellCopper Contributor
We've started to evaluate this as well and we are also seeing the 'COM surrogate' issue.
Sorry... I don't have a solution yet, but i'm still looking into it. I will let you know if I find anything.