net1.exe --> please help!

[danysun]

Hi! I've a problem on the NT servers (SP6a): in a random time appears some black windows (like the command prompt) named net1.exe. I read that Net1.exe is the application for the NET ACCOUNT command, but why sometimes (around 1 run in a hour)appears this windows?!? I haven't any schedule batch... The "black windows" are running on every my NT servers...I think that is a consequence of an installation, but I don't know whitch is it!!! I've already reinstalled the last SP but it didn't have positive results...
What I can do to disable this apparitions?!?
Thanks in advance! Dany

 

[AllanBowker]

If there is one thing I have learned over the years and thats always check the simple things first.

Are you running any Anti-Virus software?
If not install some.
If you are, did you update it's virus signatures in the fast four weeks?

 

[danysun]

Yes, I've installed on every servers an antivirus software (Inoculate IT 4.53 built 736) and the signature is the last available (34.42): I check every evening if there is an update...

But do you know why I've this apparitions?!?

Thanks in advance!
Dany

 

[AllanBowker]

Sounds daft I know but what screen saver are you using?
Have you tried changing it?

I know, I know it sound stupid but there is a method in my madness.

It is possible to get this to happen via the screen saver module in windows.

For example I can get a command prompt window to open at the CTRL_ALT_DEL logon screen to access usermanager and add my own username/password to your server. This is done via the screen saver module of windows.

 

[danysun]

:-( there aren't screen saver installed...I don't use it on ther servers....

I think that normally the net1 application runs in backgroud but something have revived it....but what?!?

 

[AllanBowker]

There are issues with ghosted connections with the scheduler service. Have you used or are using this service?

If so have you stopped this service to see if your problem goes away? Maybe you could try this for other non-critical services.

You think that this maybe a consequence of an installation. Which software? What does it do? Can you uninstall it.

How long has this been a problem?

 

[tknorris]

You could temporarily remove or rename net1.exe to say net1.bak (make sure that you have a valid backup first). While this will only address the symptom, it may, however, expose the offending initial process or action causing this.

 

[danysun]

Net1.exe is an application used by ther NET ACCOUNTS command.
All computers NT (server, workstation, PDC, BDC) have in \winnt\system32 the application net1.exe (and is updated in SP).
There isn't a tool that call this application (is included into the NET command).

The last softwares that I have installed are:
Inoculate ver 4.53 (buid 736)
Arcserve 6.5 (build 622)
PCAnywhere
...and I can't uninstall it...

I read that net1 application is updated into SP6a but also if I reinstall the SP nothing change!