Processes question - unknown process?

Question

Hi all,
I am wondering if anyone here could tell what anything about "IUSR_NMPR" It shows up as a USER NAME under task manager and usually runs "mediaserver.exe" and "remote UI Service"
It seems like a legitimate process tome but I run into the problem that it frequently bogs up my CPU Usage up to %100 often times. However, after terminating the process manually, it shows up again though that taking up much CPU Usage.

Any info about this would be great.

Answer 1

mediaserver.exe file information
The process belongs to the software D-Link Media Server by Mediabolic.

Description: File mediaserver.exe is located in a subfolder of "C:\Program Files". Known file sizes on Windows XP are 28672 bytes (20% of all occurrence), 253952 bytes, 233472 bytes, 483328 bytes, 376832 bytes.
There is no description of the program. The program has no visible window. File mediaserver.exe is not a Windows system file. The application uses ports to connect to LAN or Internet. Therefore the technical security rating is 70% dangerous.


Important: Some malware camouflage themselves as mediaserver.exe, particularly if they are located in c:\windows or c:\windows\system32 folder.


'm willing to bet that you have the viral version, hence the jump to 100% cpu usage.

If possible, delete the file. If it wont let you manually delete it, run a spyware/adware killing program along with a full antiviral scan.

Answer 2

IUSR_NMPR is the anonymous user assigned to public internet services running on your computer. Such as media server, IIS, ftp, etc.

It is a valid user account and the NMPR portion of the name is your computer name. The IUSR stands for Internet User.