Thread: shtml.exe
View Single Post
  #4 (permalink)  
Old 07-03-2009, 02:51 AM
Metro2 Metro2 is offline
Registered User
 
Join Date: May 2006
Posts: 185
Metro2 is on a distinguished road
Quote:
Originally Posted by claven177 View Post
I also found shtml.exe eat more %CPU.
/usr/local/frontpage/version5.0/exes/_vti_bin/shtml.exe
almost 90-100 % CPU.

How to resove this problem?
I don't mean to jump to conclusions, but if you shell in and run top and see a user accessing that during a load spike, there's a good chance their FrontPage installation has been compromised.

I just had to suspend a customer account because one of his FP user logins was comprised and some hacker script started publishing thousands of porn html pages into one of their folders, and made load on the server skyrocket.

I really wish FrontPage never existed, and I have too many customers who use it so I can't get rid of it on my servers. Ugh...
Reply With Quote