w3wp.exe, 60 - 100% CPU Usage and many rundll32.exe processes

rated by 0 users
Answered (Verified) This post has 1 verified answer | 3 Replies | 2 Followers

Top 25 Contributor
Male
2 Posts
shawahneh posted on 05-26-2009 1:29 AM

I have W3wp.exe that use 60 - 100% CPU Usage and it make the server very slow, How can I fix this problem?

and I have many rundll32.exe processe runing, what is this problem?

 

Answered (Verified) Verified Answer

Top 10 Contributor
Male
29 Posts
Answered (Verified) Anas Ghanem replied on 05-31-2009 4:00 PM
Verified by shawahneh

Hi ,

I just noticed that the mentioned rundll32 processes is running as a scheduled tasks.

Please , go to control panel , and selece "Scheduled Tasks" , you will find a lot of rundll32 Scheduled Tasks , delete them and restart.

Are you still seeing  those  processes ?

 

Regards,

Anas Ghanem

Moderator on Microsoft ASP.NET forums

 Read my blog

All Replies

Top 10 Contributor
Male
29 Posts

Hi and welcome to Paldev.

Based on the mentioned image, i think there is a backdoor or a virus on the server.

Please run a virus scanner and see if it can find anything.

Also check the start up services and programs.To do that, click start->run and type msconfig , then  go to start up tab and look for the suspicious programs.

 

awaiting your reply.

Regards,

Anas Ghanem

Moderator on Microsoft ASP.NET forums

 Read my blog

Top 10 Contributor
Male
29 Posts
Answered (Verified) Anas Ghanem replied on 05-31-2009 4:00 PM
Verified by shawahneh

Hi ,

I just noticed that the mentioned rundll32 processes is running as a scheduled tasks.

Please , go to control panel , and selece "Scheduled Tasks" , you will find a lot of rundll32 Scheduled Tasks , delete them and restart.

Are you still seeing  those  processes ?

 

Regards,

Anas Ghanem

Moderator on Microsoft ASP.NET forums

 Read my blog

Top 25 Contributor
Male
2 Posts

thanks,

it's work now ;-)

but why I found many rundll32 scheduled Tasks???

thanks A. Ganaem

Page 1 of 1 (4 items) | RSS
© 2002-2009 PalDev.Net. All Rights Reserved.
Powered by Community Server (Non-Commercial Edition), by Telligent Systems