Hi,
I am in the process of stabilizing an SBS 2003 environment, I have addressed a lot of issues with this system over the last few weeks. The server has been running well for the last week, no problems with anything, but I have been keeping a close eye on everything.
I was checking the startup entries today, and I noted a new entry for the following executable:
C:\Windows\conh\conhost.exe
The creation date was 4/29/2010, and this is the only file in the ‘conh’ folder. The file size is 572KB.
Task Manager indicates that the process is using 200,000K memory.
I googled, nothing about it and SBS 2003, but referred to as legitimate Win7 process on several pages. No reference anywhere to the “conh” folder.
No virus alerts from Forefront Server Security or Malwarebytes. Just seems a little fishy to me. Not familiar with any other Windows system process executable that has it’s own folder… could be wrong of course and I’m probably being hypervigilent, or missing something obvious, but I would appreciate any help or experience offered.
Thanks so much…