Off topic: EXPLORER.EXE 100% CPU
This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
Not sure about Scanmail having the file locked but have you tried del or attrib from a DOS prompt? Allan -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
Try logging out and back in and then deleting. Tom -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
If you try to delete it from DOS, it still is locked but it doesn't take EXPLORER.EXE up to 100% utilization. -Original Message- From: Allan Johnson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:27 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU Not sure about Scanmail having the file locked but have you tried del or attrib from a DOS prompt? Allan -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
why dont you stop the services for trend and then delete the file. After all that just start up the services again. -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:41 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU If you try to delete it from DOS, it still is locked but it doesn't take EXPLORER.EXE up to 100% utilization. -Original Message- From: Allan Johnson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:27 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU Not sure about Scanmail having the file locked but have you tried del or attrib from a DOS prompt? Allan -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
err, stop scanmail services and try. Will be just your luck the latest melissa will come out during that 5 minute window. What version of scanmail? Did it move the file based on infection or attachment blocking? You say the mp3 file is listed as a shortcut, it has a .lnk extension or just the mp3 extension? Adding mp2;mp3 to your attachment blocking list may be a good idea, especially if the file is locked for some reason by scanmail scanning the attachment. See past thread Attachment Nazi Mrs. Jennifer Baker had the bomb (read atom) list of attachments to stop. -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:41 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU If you try to delete it from DOS, it still is locked but it doesn't take EXPLORER.EXE up to 100% utilization. -Original Message- From: Allan Johnson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:27 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU Not sure about Scanmail having the file locked but have you tried del or attrib from a DOS prompt? Allan -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Off topic: EXPLORER.EXE 100% CPU
I'm going to during non-prime time. It took me a couple of days to track down why this was occuring. -Original Message- From: Tener, Richard [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:50 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU why dont you stop the services for trend and then delete the file. After all that just start up the services again. -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:41 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU If you try to delete it from DOS, it still is locked but it doesn't take EXPLORER.EXE up to 100% utilization. -Original Message- From: Allan Johnson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 12:27 PM To: Exchange Discussions Subject: RE: Off topic: EXPLORER.EXE 100% CPU Not sure about Scanmail having the file locked but have you tried del or attrib from a DOS prompt? Allan -Original Message- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 11:23 AM To: Exchange Discussions Subject: Off topic: EXPLORER.EXE 100% CPU This is going to be a little off topic, but I thought I would post it in case someone ran into it as well. I have ScanMail moving infected files. One of the files that was moved into the \VIRUS area was a FUN.MP3 that is listed as a short cut. I cannot delete due to a sharing violation (believe ScanMail still has locked). Once you try to delete or look at the attributes, your NT workstation jumps up to 100% CPU utilization for EXPLORER. Even disconnecting the mapped drive does not clear EXPLORER.EXE and the only way to get your workstation back is to reboot. I duplicated this on 3 NT workstations. Two running NT 4.0 sp6a one running sp5. Took me 3 days to determine what was causing my workstation to go crazy. I sure won't clear the areas from the server console. I can just see me killing the box! Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
