<div>
I tend to start with Process Explorer in cases like these. &nbsp;You want to look on at the cmd processes threads, figure out which is hogging processor time, and check its stack. &nbsp;There are some links to pages on the Process Explorer download page explain how to do this more thoroughly.
</div>


I tend to start with Process Explorer in cases like these.  You want to look on at the cmd processes threads, figure out which is hogging processor time, and check its stack.  There are some links to pages on the Process Explorer download page explain how to do this more thoroughly.

<div>
I agree with mkosbie but would recommend trying below:<br />
<br />
1. Try going into msconfig&gt;startup and remove it if you can see.<br />
<br />
2. Maybe it has been affected, get yourself a good AV:<br />
<br />
<a href="http://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Searchhttp://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Search" rel="ugc">http://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Searchhttp://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Search</a>
</div>


I agree with mkosbie but would recommend trying below:

1. Try going into msconfig>startup and remove it if you can see.

2. Maybe it has been affected, get yourself a good AV:

http://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Searchhttp://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Search [http://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Searchhttp://www.google.co.uk/search?client=firefox-a&rls=org.mozilla%3Aen-GB%3Aofficial&channel=s&hl=en&q=attrib.exe&meta=&btnG=Google+Search]

<div>
I had Vipre AV on it along with SpyBot, MalwareBytes, Spyware Blaster. All 4 scanneed OK. I ran HouseCall from Trend and it caught BKDR_PCCLIEN, cleaned and removed it. Machine seems to be operating normally now,,, at least since last night.<br />
&nbsp;I'll let it run a while to make sure.<br />

</div>


I had Vipre AV on it along with SpyBot, MalwareBytes, Spyware Blaster. All 4 scanneed OK. I ran HouseCall from Trend and it caught BKDR_PCCLIEN, cleaned and removed it. Machine seems to be operating normally now,,, at least since last night.
 I'll let it run a while to make sure.


<div>
<div class="content wysiwyg-content">
Small Business Server 2003 R2. Machine runs normally for a few hours then goes to 100% CPU with cmd.exe and attrib.exe being the culprits. 
</div>
</div>


Small Business Server 2003 R2. Machine runs normally for a few hours then goes to 100% CPU with cmd.exe and attrib.exe being the culprits. 

cmd.exe using 100% cpu

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).