Re: NS.exe is using all CPU power

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Arne And (kjellhoy_at_start.no)
Date: 11/30/04


Date: Tue, 30 Nov 2004 04:39:49 +0100

Hi

Yes, it worked. And it was the W32.Gaobot worm that took all the CPU
(ns.exe)

Thanx. It took some time to clean 2 server. But what i dont understand, is
that both are running antivirus, and they are fully patched and with the
lates SP. How can Gaobot infect my 2 servers then, when it uses the network
to spread????
Must send a harsh e-mail to my antivirus provider, to hear what they have to
say.

I allso found the source, and tomorrow am gonna beat up that mother*****
that put his laptop on my LAN without asking me at first. AAAAHHHHHHH. I
have been working for allmost 24 houers now, and am just going through with
one last viruscheck.

Anyway.

Thanx Dave. You saved my day.

-Regards

-AA-

"David H. Lipman" <DLipman~nospam~@Verizon.Net> skrev i melding
news:%23nfeIDa1EHA.1740@TK2MSFTNGP15.phx.gbl...
> 1) Download the following three items...
>
> Trend Sysclean Package
> http://www.trendmicro.com/download/dcs.asp
>
> Latest Trend signature files.
> http://www.trendmicro.com/download/pattern.asp
>
> Adaware SE (free personal version v1.05)
> http://www.lavasoftusa.com/
>
> Create a directory.
> On drive "C:\"
> (e.g., "c:\New Folder")
> or the desktop
> (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
>
> Download SYSCLEAN.COM and place it in that directory.
> Download the Trend Pattern File by obtaining the ZIP file.
> For example; lpt265.zip
>
> Extract the contents of the ZIP file and place the contents in the same
directory as
> SYSCLEAN.COM.
>
> 2) Update Adaware with the latest definitions.
> 3) If you are using WinME or WinXP, disable System Restore
> http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> 4) Reboot your PC into Safe Mode
> 5) Using both the Trend Sysclean utility and Adaware, perform a Full
Scan of your
> platform and clean/delete any infectors/parasites found.
> (a few cycles may be needed)
> 6) Restart your PC and perform a "final" Full Scan of your platform
using both the
> Trend Sysclean utility and Adaware
> 7) If you are using WinME or WinXP,Re-enable System Restore and
re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
600MB),
> 8) Reboot your PC.
> 9) If you are using WinME or WinXP, create a new Restore point
>
> * * * Please report back your results * * *
>
> Dave
>
>
>
>
>
> "Arne And" <kjellhoy@start.no> wrote in message
news:cocr8n$fvt$1@troll.powertech.no...
> | Hi
> |
> | Got a Win2000 domain with 4 win2000 server running. (all with sp4 and
fully
> | patched)
> |
> | One of my server is very slow. Everything is taking loong time to do, if
am
> | gonna see the taskmanager.
> |
> | In Taskmanger I see that NS service is taking allmost all of my cpu
power.
> | (the server is running a 2 CPU with 1.3 GM RAM)
> |
> | When I stop the NS service the CPU drops to normal (a few %) but if I
start
> | it again the CPU go`s in 100%.
> |
> | Why is this, and how can I fix it?
> |
> | It worked fine for a few days ago, and I havent dont any changes with
it.
> |
> | Am allso running Norman Antivirus for a few years, and that has worked
fine.
> |
> | -regards
> |
> | -AA-
> |
> |
>
>



Relevant Pages

  • Re: Help! system restore...
    ... Post in an appropriate News Group for WinME or WinXP as this has NOTHING to do with "Server ... | system restore has only two bold dates, one the 15th and one the 17th July, going back to ...
    (microsoft.public.windows.server.scripting)
  • Performance Problems.. Server hardware smoked by $500 box?
    ... webserver with a separate db/file server sitting behind it. ... Now granted the development machine has the most Mhz, ... CPU: Intel Pentium III Origin = ... Ubench CPU: 25713 ...
    (freebsd-performance)
  • Performance Problems.. Server hardware smoked by $500 box?
    ... webserver with a separate db/file server sitting behind it. ... Now granted the development machine has the most Mhz, ... CPU: Intel Pentium III Origin = ... Ubench CPU: 25713 ...
    (freebsd-questions)
  • Re: Chat server : Threading in select call
    ... on the same CPU. ... the server continues to make forward progress on ... For example, in the typical case, the server handles each request as ... any server where there is tight integration between connections (one ...
    (comp.unix.programmer)
  • Re: Dell PowerEdge 2450 & Win2k3 server
    ... The other thing you can do is try to run just one CPU and see if one of the ... Enterprise server sp1. ... I get this error after the windows setup process. ... Tried installing with the PERC and also tried installing using the ...
    (microsoft.public.windows.server.general)