We have a windows 2003 server whose CPU is intermittently being used up by this unknown program which also runs the java on the machine- has anyone seen this program before - Google has nothing, live search points to a russian bank website which has an office document on it(which I actually linked up to by a laptop to see if it became infected with the executable, which it did not).
It also seems to interact with a program called Awatch Satellite (that is not the same as your ad-watch file). Again can find no information on that.
Secondly can we run Ad-Aware on a server of this type?
I will likely upload the suspected files for a review. In the meantime I have added the hijack this file Thanks in Advance.
Full Version: CNCServer.exe
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive HijackThis Logs
QUOTE(steve11554 @ Oct 21 2008, 12:52 PM) 
We have a windows 2003 server whose CPU is intermittently being used up by this unknown program which also runs the java on the machine- has anyone seen this program before - Google has nothing, live search points to a russian bank website which has an office document on it(which I actually linked up to by a laptop to see if it became infected with the executable, which it did not).
It also seems to interact with a program called Awatch Satellite (that is not the same as your ad-watch file). Again can find no information on that.
Secondly can we run Ad-Aware on a server of this type?
I will likely upload the suspected files for a review. In the meantime I have added the hijack this file Thanks in Advance.
It also seems to interact with a program called Awatch Satellite (that is not the same as your ad-watch file). Again can find no information on that.
Secondly can we run Ad-Aware on a server of this type?
I will likely upload the suspected files for a review. In the meantime I have added the hijack this file Thanks in Advance.
Please go to UploadMalware to upload a suspicious file for analysis.
- Enter your username from this forum in the Comments Or Further Info: box
- Copy and paste the link to this thread in the Topic Where File Was Requested: box
- Browse for this filename: C:\Program Files\cncsat\CNCServer.exe
- In the comments, please mention that I asked you to upload this file
- Click on Send File
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.