Interested to hear what develops.

I was wrong! We did indeed have IIS enabled on our Windows 2000 Advanced Server. And the IIS was indeed infected with Code Red, actually Code Red II.

This caused the file server to overload the processor in the Cisco router. Our chief technical officer for the entire corporation (more than 1,000 radio stations, over 50,000 employees)logged onto our service remotely through a modem connected to the console port of the router and had our CE start disconnecting the router ports one at a time and all of a sudden processor activity went from 100% usage to 5% usage when the cable to the Windows 2000 server was disconnected. After that, we turned off the IIS service, reconnected the cable, and everybody was happy.

Jim, it looked like you (and some others here) called it exactly right. I, and my CE, owe you a big debt of gratitude.

tanstaafl.

"There Ain't No Such Thing As A Free Lunch"