Unknown Windows Process

From: Patrick Webster (webster_p@DeMorgan.com.au)
Date: 02/06/03

  • Next message: M K: "Customising user rights on win2k Pro" 
    From: Patrick Webster <webster_p@DeMorgan.com.au>
To: focus-ms@securityfocus.com
Date: Thu, 6 Feb 2003 15:10:11 +1100

    Has anyone seen this before? Output from a 'top.exe' on a Windows 2000 Pro
    workstation with SP3 etc.

      % Pid Tid Pri Key Start Address ImageName
    ___________________________________________________________________
      99% 00000000 1 16384 0 14:19:20.968 No Name Found
       1% 000000A8 14824 1593344 1560576 0:00:42.453 CSRSS.EXE

    Process was not listed in 'tlist.exe' anywhere. Reboot fixed the CPU load,
    but I still don't know what "No Name Found" is.

    Thanks,

    Patrick Webster
    Systems Administrator

    DeMorgan Information Security Services

    Freecall: 1800 DE MO RG (33 66 74)
    Tel: +61299290377
    Fax: +61299290917
    Mob: +61403421390

    Address: Level 2, 41 McLaren St
    North Sydney, NSW, 2060, Australia

    Visit us at: www.demorgan.com.au

    ----------------------------------------------------

    This correspondence is for the named person's use only. It may contain confidential or legally privileged information or both.
    No confidentiality or privilege is waived or lost by any mistransmission. If you receive this correspondence in error, please immediately delete it from your system and notify the sender. You must not disclose, copy or rely on any part of this correspondence if you are not the intended recipient.

    Any views expressed in this message are those of the individual sender, except where the sender expressly, and with authority, states them to be the views of DeMorgan.
    This e-mail has been checked for known Viruses. It is the responsibility of the receiver to check their system for infected files and any such file is deemed not to be the responsibility of DeMorgan.

    ---------------------------------------------------------

    Relevant Pages

    • RE: Numerous TCP port 445 scans on 3/2/03
      ... Any views expressed in this message are those of the individual sender, except where the sender expressly, and with authority, states them to be the views of DeMorgan. ... It is the responsibility of the receiver to check their system for infected files and any such file is deemed not to be the responsibility of DeMorgan. ...
      (Incidents)
    • NSLOOKUP.EXE
      ... Any views expressed in this message are those of the individual sender, except where the sender expressly, and with authority, states them to be the views of DeMorgan. ... It is the responsibility of the receiver to check their system for infected files and any such file is deemed not to be the responsibility of DeMorgan. ...
      (Vuln-Dev)
    • RE: NSLOOKUP.EXE
      ... Any views expressed in this message are those of the individual sender, except where the sender expressly, and with authority, states them to be the views of DeMorgan. ... It is the responsibility of the receiver to check their system for infected files and any such file is deemed not to be the responsibility of DeMorgan. ...
      (Vuln-Dev)