Windows Server

moobs · Guest

Hi, I posted this problem early in December and I had some advice from Jim
Behning which I appreciate, though it did not solve the issue. Just
reposting because it is still an issue and wondered there are more ideas out
there?
--------
Running SBS2K - fully Serviced Packed
<30 2K Users (also fully Service Packed Up)
Using McAfee TVD (Virus Scan 7.0 + EPO) + latest Updates.
--------
Recently I have been having a problem where the following processes are
duplicated in the task manager, even after a reboot:

CSRSS.exe, DLLHOST.exe, hpwebjetd.exe, WINLOGON.exe

Also, net.exe, net1.exe are replicating themselves anything up to 15 times
and multiple CMD.exe windows open/close many times. Obviuosly this drains
valuble resources.
--------
I have completed a full Virus Scan of the network (including the server),
ran AdawareSE & Spybot (latest updates) and nothing shows up. I have used
HijackThis to check what processes are running, checked the registry to see
what runs on startup, and I have googled the problem to no avail. This
problem has been seen before but no concrete solution appears to be out
there.

Am I missing something really obvious?

kind regards,

moobs

Jim Behning · Guest

Run The Cleaner from Moosoft. I have never run that program on a
server but it works on a workstation. It has cleaned stuff that
Search and Destroy and Adaware did not clean.

Some AV products are sort of lame. I have seen some people complain
about McAfee products. They were great in 1993. Even the good ones
don't do so good with some trojans. I have had good luck clenaing up
junk on workstations running Avast boot time scan on workstations.

Note that you need to be real sure you have great backup stuff with at
lteast 2 different ways to recover your Exchange databases, your user
and company files and any other important stuff. If things go to toast
using clean up tools you need to be ready to reload the whole server
install.

I look in the registry for junk run lines. I look for junk stuff
listed under hklm software and hkcu software. I look in the os folder
and in the system32 folder for recent junk files. Recent means anythng
in the last x months. However long the problem has been going on. On
workstations it is usually best to give up after 2 hours and reload
the operating system. Some would say that it is too late for your
server and it needs to be fixed from scratch.

"moobs" <gbyrne7@removemehotmail.com> wrote:

	Windows Server Forum Index -> Small Business Server 2000	All times are GMT
Page 1 of 1