RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?

2006-10-05 Thread Colbeck, Andrew 



Hey, Craig.

Did you resolve this, and what was the 
outcome?

Andrew 8)




  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
  AndrewSent: Tuesday, September 26, 2006 8:46 AMTo: 
  declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] anyone 
  know what ssdmbs.exe is?Sensitivity: 
  Confidential
  
  Never heard of ssdmbs.exe ...
  
  Search your filesystem for the file and see if the 
  location or right-clicking on it gives you any insight.
  
  I like to use Process Explorer from sysinternals.com for 
  stuff like this.It's like Task Manager but has all the features you 
  wished it had, like right-clicking on the executable, getting properties and 
  seeing the full path to that executable.
  
  I also like their Auto Run to tell me the start location 
  of all the executables (like Startup, autoexec, HKLM...Run and far 
  more).
  
  Of course their Rootkit Explorer is also good; I always 
  find false positives in their "heuristic" type of tests like small differences 
  in memory size allocations.
  
  RegMon and FileMon are invaluable for ferreting out what 
  an executable is doing right now.
  
  All of these tools are free from SysInternals.com (soon 
  to be free downloads from Microsoft.com)
  
  Andrew.
  
  
  


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Craig 
EdmondsSent: Tuesday, September 26, 2006 5:20 AMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] anyone 
    know what ssdmbs.exe is?Importance: HighSensitivity: 
Confidential

I have a process 
in my server taking up 80% cpu and its called 
ssdmbs.exe.

Is this 
something to do with declude?

I cant seem to 
end the process either, its says Access Denied.

Kindest RegardsCraig 
Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]

---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
archives can be foundat http://www.mail-archive.com. 
  ---This E-mail came from the Declude.JunkMail mailing 
  list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
  andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?

2006-10-05 Thread Craig Edmonds 



Hi Andrew,

I downloaded the FileMon, that works nice but the exe 
called ssdmbs.exe did not appear again and the server started too run perfectly 
again, so I just shelved troubleshooting thatin favour of configuring 
black ice server instead, which also rocks btw once its 
configured.

Kindest RegardsCraig Edmonds123 
Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]



From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: 
Thursday, October 05, 2006 11:46 PMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] anyone 
know what ssdmbs.exe is?Sensitivity: 
Confidential

Hey, Craig.

Did you resolve this, and what was the 
outcome?

Andrew 8)




  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
  AndrewSent: Tuesday, September 26, 2006 8:46 AMTo: 
  declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] anyone 
  know what ssdmbs.exe is?Sensitivity: 
  Confidential
  
  Never heard of ssdmbs.exe ...
  
  Search your filesystem for the file and see if the 
  location or right-clicking on it gives you any insight.
  
  I like to use Process Explorer from sysinternals.com for 
  stuff like this.It's like Task Manager but has all the features you 
  wished it had, like right-clicking on the executable, getting properties and 
  seeing the full path to that executable.
  
  I also like their Auto Run to tell me the start location 
  of all the executables (like Startup, autoexec, HKLM...Run and far 
  more).
  
  Of course their Rootkit Explorer is also good; I always 
  find false positives in their "heuristic" type of tests like small differences 
  in memory size allocations.
  
  RegMon and FileMon are invaluable for ferreting out what 
  an executable is doing right now.
  
  All of these tools are free from SysInternals.com (soon 
  to be free downloads from Microsoft.com)
  
  Andrew.
  
  
  


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Craig 
EdmondsSent: Tuesday, September 26, 2006 5:20 AMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] anyone 
    know what ssdmbs.exe is?Importance: HighSensitivity: 
Confidential

I have a process 
in my server taking up 80% cpu and its called 
ssdmbs.exe.

Is this 
something to do with declude?

I cant seem to 
end the process either, its says Access Denied.

Kindest RegardsCraig 
Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]

---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The 
archives can be foundat http://www.mail-archive.com. 
  ---This E-mail came from the Declude.JunkMail mailing 
  list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
  andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. ---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

[Declude.JunkMail] anyone know what ssdmbs.exe is?

2006-09-26 Thread Craig Edmonds 



I have a process in 
my server taking up 80% cpu and its called ssdmbs.exe.

Is this something to 
do with declude?

I cant seem to end 
the process either, its says Access Denied.

Kindest RegardsCraig Edmonds123 
Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]



---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?

2006-09-26 Thread Colbeck, Andrew 



Never heard of ssdmbs.exe ...

Search your filesystem for the file and see if the location 
or right-clicking on it gives you any insight.

I like to use Process Explorer from sysinternals.com for 
stuff like this.It's like Task Manager but has all the features you wished 
it had, like right-clicking on the executable, getting properties and seeing the 
full path to that executable.

I also like their Auto Run to tell me the start location of 
all the executables (like Startup, autoexec, HKLM...Run and far 
more).

Of course their Rootkit Explorer is also good; I always 
find false positives in their "heuristic" type of tests like small differences 
in memory size allocations.

RegMon and FileMon are invaluable for ferreting out what an 
executable is doing right now.

All of these tools are free from SysInternals.com (soon to 
be free downloads from Microsoft.com)

Andrew.



  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: 
  Tuesday, September 26, 2006 5:20 AMTo: 
  declude.junkmail@declude.comSubject: [Declude.JunkMail] anyone know 
  what ssdmbs.exe is?Importance: HighSensitivity: 
  Confidential
  
  I have a process 
  in my server taking up 80% cpu and its called ssdmbs.exe.
  
  Is this something 
  to do with declude?
  
  I cant seem to end 
  the process either, its says Access Denied.
  
  Kindest RegardsCraig 
  Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]
  
  ---This E-mail came from the Declude.JunkMail mailing 
  list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
  andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.