19 Replies Latest reply on Mar 21, 2013 10:01 AM by david_mcknight

    Process "911.exe" in folder "coldfusion\SERVER-INF\temp\wwwroot-tmp"

    rici2002

      Hi All,

       

      Our couldfusion application stopped working a few times last week due to the process "911.exe" which costed 99% CPU. Once we kill that process, everything back to normal again. The problem is process "911.exe" should be in C: root, but we found it in "ColdFusion8\runtime\servers\coldfusion\SERVER-INF\temp\wwwroot-tmp\neotmp56746.tmp" and been recognized as a virus. We kill it, it will appear again and again. Does anyone have the similar problem? How can I fix it?

       

      I think this folder "temp\wwwroot-tmp" is used to store chached files, uploaded files. Does that mean someone uploaded some files with the virus?

       

      Thanks in advance.

       

      Wei