Discussion Locked

132.tmp

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Win2K Server running our website. The last couple of days it's bogging down tremendously, to the tune of the processor being hogged by a process called "132.tmp". It runs constantly, demanding anywhere from 50% to 98% of the processor capability.

Sounds like a denial of service attack, but I don't find anything easily identifiable as a virus, worm, etc. However, I'm a little out of my league here (my web guy quit a couple of weeks ago, and I'm in the process of hiring another).

Does anyone know if this is a normal process that is for some reason getting out of control? Or if it is clearly a piece of malware I need to stomp on?

For reference, it's a Compaq Proliant ML350 with 2-1.0 Ghz processors,. (Oh, yeah... only one of the processors is running, and I'm not sure if that's a licensing issue, a hardware failure, or some other symptom of this or another unrelated problem).

Any help is greatly appreciated!

2 replies

by bfilmfan

You have spyware, specifically IGetNet.

I'd recommend that you scan those servers with Trend or AdAware.

by gprinsloo

First things first. What do your eventlogs report regarding the applications and security. There if nothing is showen you need to enable auditing to track the opening/accessing of the "123.tmp"

This discussion is closed to new replies.