Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Inetinfo.exe taking up loads of CPU Usage

Status
Not open for further replies.

captaincrunch00

IS-IT--Management
Mar 8, 2004
582
US
Hi there guys, I'm hoping someone can point me in the right direction here.

I'm baffled as to what this process is and why it all of a sudden started killing my server.

Well, I know the process has to do with IIS, I can stop IIS and it will stop the task and then everything is working just fine.

I've stopped the websites that IIS is hosting as I read on a different message board, but that task is still taking anywhere from 30-99% of the CPU Usage.

I am in the process of stopping random exchange services to find out which one it is that is killing it.

I am thinking it's the SMTP service, when that is stopped the task dies down to 0 or 1% usage.

Where do I begin troubleshooting this thing?

A full virus scan came up empty with Symantec 10.2 and the latest definitions and everything.

I'm praying one of you knows where to begin.

Thanks
 
Okay, well, everything I googled said that it was a runaway service, not a single thing mentioned it may be a huge chunk of spam trying to get delivered to nonexistant addresses.

Turns out there were over 3000 messages in the DSN Queue trying to get delivered to an address that didnt exist. As I was watching, we went from 3000 messages in the queue to 3500 before I could freeze the connection. That was about 500 messages in about 15 seconds.

I found the SMTP link of the site spamming us and froze it. Then I deleted all the junk in the queue which knocked the CPU Usage down to 1% instead of ~80%

I contacted the company spamming, they found the problem and stopped the spamming.

I blocked the company from ever sending me messages again... Who would want them as an IT Consultant when their server does that?

So it wasnt any patching problem, just a chunk of spam.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top