mincli.exe making the Win Server 2008R2 cpu high

here is the screenshot

Is it some form of crypto miner?

I think you should send a sample to SophosLabs to see what they say:

https://secure2.sophos.com/en-us/support/submit-a-sample.aspx

Regards,

Jak

hello jak  

Thank you for your reply. 

Those Servers which are inside AD they have those problem with mincli.exe. This mincli.exe resides on AD user profile and make the CPU usage very high. Previously cpu.exe was doing so. If those servers disconnect from internet connection then the cpu usage become alright.

Is this mincli.exe are doing this act from AD?

why Sophos Serer Protection Advance can't detect this as a problem?

from Sophos Server Protection Advance Firewall policy can it be done by blocking the file name? 

Thanks in Advance

Riyad

Can you send the file to Sophos Labs?  I can't tell by the filename what it is.  You can't block an exe with a given name/path with Sophos unless it is detected as something first.

You can block a file with name/checksum/path with Microsoft Software Restriction Policies but I feel getting a same to Sophos Labs for analysis is worth doing for any file such as cpu.exe, mincli.exe.  You could send them to virustotal.com as a quick check as well.

Hello jak   

Thanks for your so rapid response. 

Ok i will send those to Sophos lab or virusvault.