Hi Andrew,
I downloaded the FileMon, that works nice but the exe
called ssdmbs.exe did not appear again and the server started too run perfectly
again, so I just shelved troubleshooting that in favour of configuring
black ice server instead, which also rocks btw once its
configured.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Thursday, October 05, 2006 11:46 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?
Sensitivity: Confidential
Hey, Craig.
Did you resolve this, and what was the
outcome?
Andrew 8)
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Tuesday, September 26, 2006 8:46 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?
Sensitivity: ConfidentialNever heard of ssdmbs.exe ...Search your filesystem for the file and see if the location or right-clicking on it gives you any insight.I like to use Process Explorer from sysinternals.com for stuff like this. It's like Task Manager but has all the features you wished it had, like right-clicking on the executable, getting properties and seeing the full path to that executable.I also like their Auto Run to tell me the start location of all the executables (like Startup, autoexec, HKLM...Run and far more).Of course their Rootkit Explorer is also good; I always find false positives in their "heuristic" type of tests like small differences in memory size allocations.RegMon and FileMon are invaluable for ferreting out what an executable is doing right now.All of these tools are free from SysInternals.com (soon to be free downloads from Microsoft.com)Andrew.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds
Sent: Tuesday, September 26, 2006 5:20 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] anyone know what ssdmbs.exe is?
Importance: High
Sensitivity: ConfidentialI have a process in my server taking up 80% cpu and its called ssdmbs.exe.Is this something to do with declude?I cant seem to end the process either, its says Access Denied.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
