Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 260
  • Last Modified:

Multiple CMD.EXE without process file on SQL server 2003

My SQL server just came to halt when users started  complaining that their application run slow, I remote to it and found hundreds of CMD.exe's Rebooted the server and it's better but in Task Manager (pic attached) I can still see blank CMD.exe and there is more and more of them. I'm running a virus scan on it right now but what else could that be if not a virus?
0
piotrmikula108
Asked:
piotrmikula108
  • 2
  • 2
1 Solution
 
Raja Jegan RSQL Server DBA & ArchitectCommented:
>> I'm running a virus scan on it right now but what else could that be if not a virus?

If it is not Virus, then many users are trying to connect to your server using SQLCMD mode..
Find out the reason why they are using SQLCMD, Check the credentials involved and verify it out..
Also find out the reason why they are spanning for a longer period of time..
0
 
piotrmikula108Author Commented:
no viruses found and my "DBA" has no idea where this could be coming from.

any other ideas where to look?

Thank you so much
0
 
Raja Jegan RSQL Server DBA & ArchitectCommented:
Just run a profiler trace so that you can find

* Which application is establishing connections to your server
* what exactly they are doing in that connection

This would help you identify the reason for the multiple connections..
0
 
piotrmikula108Author Commented:
we found by using Sysinternals procexplorer it was one of our remote management and access tool that had the be renistalled

thank you anyway
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now