Firedaemon service possibly a virus?
Posted on 2003-10-21
I am running an Exchange 5.5 server sp4. The server has slowed quite a bit recently so I started looking into event logs etc... I have a process "winsys" that dies & restarts every couple of seconds. It looks like "firedaemon" is running this service. Firedaemon is also running drvisys, printer, runbatch, system, & winserv. I looked that the properties of Firedaemon.exe & it was created a couple of months ago. I did not alter the file or install it. The other strange thing is normally firedaemon is installed as a program. (c:\programs\firedaemon) I found the exe in c:\winnt\java\etc\etc\firedaemon.exe. Does anyone have any ideas??
Thanks in advance!!!