Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 10 subscribers
  • Views 12441 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

mincli.exe making the Win Server 2008R2 cpu high

Riyad

Hello everybody,

Process name: mincli.exe

OS is Windows Server 2008R2 which is used as a application server where Sophos Server Protection Advance is there. But then also mincli.exe can make the CPU uses very high. why can't Sophos Server Protection Advance is unable to detect and delete it?

 

Thanks in Advance



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to jak

    hello  

    Thank you for your reply. 

    Those Servers which are inside AD they have those problem with mincli.exe. This mincli.exe resides on AD user profile and make the CPU usage very high. Previously cpu.exe was doing so. If those servers disconnect from internet connection then the cpu usage become alright.

    Is this mincli.exe are doing this act from AD?

    why Sophos Serer Protection Advance can't detect this as a problem?

    from Sophos Server Protection Advance Firewall policy can it be done by blocking the file name? 

     

    Thanks in Advance

  • 0 in reply to Riyad

    Can you send the file to Sophos Labs?  I can't tell by the filename what it is.  You can't block an exe with a given name/path with Sophos unless it is detected as something first.

    You can block a file with name/checksum/path with Microsoft Software Restriction Policies but I feel getting a same to Sophos Labs for analysis is worth doing for any file such as cpu.exe, mincli.exe.  You could send them to virustotal.com as a quick check as well.

  • +1 in reply to jak

    Hello   

    Thanks for your so rapid response. 

    Ok i will send those to Sophos lab or virusvault.

Unfiltered HTML