piotrmikula108
asked on
Multiple CMD.EXE without process file on SQL server 2003
My SQL server just came to halt when users started  complaining that their application run slow, I remote to it and found hundreds of CMD.exe's Rebooted the server and it's better but in Task Manager (pic attached) I can still see blank CMD.exe and there is more and more of them. I'm running a virus scan on it right now but what else could that be if not a virus?
ASKER
no viruses found and my "DBA" has no idea where this could be coming from.
any other ideas where to look?
Thank you so much
any other ideas where to look?
Thank you so much
Just run a profiler trace so that you can find
* Which application is establishing connections to your server
* what exactly they are doing in that connection
This would help you identify the reason for the multiple connections..
* Which application is establishing connections to your server
* what exactly they are doing in that connection
This would help you identify the reason for the multiple connections..
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If it is not Virus, then many users are trying to connect to your server using SQLCMD mode..
Find out the reason why they are using SQLCMD, Check the credentials involved and verify it out..
Also find out the reason why they are spanning for a longer period of time..