SYSHOST

[Toby Shirk]

On my webserver/SQL server i have a process called syshost
that is taking up about 50%+ of my processor. Does anyone
know what this might be? I have run virus Scan on the
computer, didn't help. Ran an adware removal tool...
Didn't help... The night before the syshost started
running like this, there was an FTP.exe process that was
taking 98% of the CPU. I restarted the server and it
removed the FTP.exe process but now the syshost is now
acting funny... Does anyone have any ideas on what this
might be?


Toby Shirk
MMPOG NEverwinter Nights
Creator of http://shadowsfallen.com

 

[Marin Marinov]

<snip>
I'll give it a shot :
http://securityresponse.symantec.com/avcenter/venc/data/w32.francette.wo
rm.html

Have you applied the patch for the DCOM RPC vulnerability? If you
haven't it's quite likely that your system will keep getting infected
after cleaning the virus.

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.