Click here to get back home

Weird Processes on my Windows 2003 Servers

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Weird Processes on my Windows 2003 Servers Amanda 07-16-2006
Get Chitika Premium
Posted by Amanda on July 16, 2006, 9:43 am
Please log in for more thread options
I was troubleshooting an unrelated problem and came across a process that is
running on my 3 servers. The executable was located in the C:\Windows\Temp
directory and had the following names. It was different on each computer.

IPFB78.EXE
LDEFBA.EXE
CVE3A0.EXE

If I end the process the file disappears out of the C:\Windows\Temp
directory. I am running up to date Trend Micro and the scan comes clean. I
also ran an Ad-Aware scan and everything looked good too.

Has anyone seen anything like this. It doesn't seem to be affescting the
performance of my servers but leaves an uneasy feeling for me.



Posted by karl levinson, mvp on July 16, 2006, 1:35 pm
Please log in for more thread options

>I was troubleshooting an unrelated problem and came across a process that
>is running on my 3 servers. The executable was located in the
>C:\Windows\Temp directory and had the following names. It was different on
>each computer.
>
> IPFB78.EXE
> LDEFBA.EXE
> CVE3A0.EXE

I replied to your identical post in microsoft.public.security.virus. This
way of multi-posting / cross-posting is frowned upon, as people answering
questions here don't see that others may already have answered your question
over there. The preferred method is, if you feel it necessary to send a
message to multiple relevant newsgroups, to address and send one single
message to those newsgroups at once.

--
kind regards,
Karl Levinson, CISSP, CCSA, MCSE [MS MVP]
--------------------------------
Microsoft Security FAQ:
http://securityadmin.info



Similar ThreadsPosted
Power Users & Servers - Windows 2000 & 2003 Differences December 7, 2006, 9:32 am
NTLM Auth (weird) January 23, 2008, 4:15 pm
Weird Behaviour Accessing MS CA Web Site August 4, 2008, 4:44 pm
Weird problem with an ASP.NET application and Session Variables that mess up July 7, 2005, 10:34 am
ASP.NET Performance Counters don't work monitoring several remote 2003 servers. February 1, 2007, 12:46 pm
Upgrade Windows 2000 Certificate servers June 30, 2005, 10:13 am
Remote monitoring of NT services in Windows Servers. April 20, 2006, 7:08 am
Granting Rights to Processes in Task Manager May 3, 2006, 8:15 am
Allow non-Administrator to view and terminate processes for all users July 21, 2006, 5:56 pm
Windows 2000 Domain, Windows 2003 Enterprise CA July 15, 2005, 2:07 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap