Computing.Net > Forums > Windows Server 2003 > Sever rebooting no virus

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Sever rebooting no virus

Reply to Message Icon

Name: jeffpoulsen
Date: June 10, 2005 at 02:11:51 Pacific
OS: Win 2003 Server
CPU/Ram: 2.4 ghz/ 1gig
Comment:

I have scanned for the sasser worm with 2 tools and found no virus. But recently I have had a problem with the server becoming slow and rebooting. Upon logon I receive the message that there were errors. They seem to change but almost always there is one " C\:temp\WER2.tmp.dir00\lsass.exe.mdmp " Another " C:\temp\WER1.tmp.dir00\sysdata.xml " etc. Also errors with "kerberos.dll" , "kernel32.dll" and "appcompat.txt". I seems like a virus to me but I am unable to find one. I have scanned for viruses and spyware but have found nothing. I am unable to logon at this time to get more detailed logs of processes as the system is rebooting. I will update these later. But does anyone have any idea of what's going on here? Thanks, jeff



Sponsored Link
Ads by Google

Response Number 1
Name: tach18k
Date: June 11, 2005 at 09:20:30 Pacific
Reply:

I have seen my 2003 std svr reboot only once. I had a pending update waiting for a reboot. It seems it waited till 4am then restarted and was waiting for me to log in. did you have a pending update waiting for reboot. Is your auto update running, dont let it r8un in auto mode.


0

Response Number 2
Name: spirit
Date: June 11, 2005 at 23:18:54 Pacific
Reply:

Servers need regular defragmentation which lends more stability against crashes and boot problems. Try defragging your system, see if it helps the issue. Even otherwise its a good idea to make it a part of system maintenance.


0

Response Number 3
Name: jeffpoulsen
Date: June 17, 2005 at 04:33:29 Pacific
Reply:

I have not solved the problem yet, however I have come across a few items that I tweaked that have helped to limit the reboots to once every day or two. This machine came from Dell with only a 12 gig partition for C: It was almost full so I increased the size of the C: partition. Also I increased the page files. This has helped. Now I have been studing the event logs and have found I need to check the Domain Controller setup. I had set it up a long time ago but it seems pehaps someone has made changes to the system. ?? I also have found out something very very strange, I checked MS for updates and found there are NO updates available. Also there was NO update history. I'm sure I updated when I worked on the system some time ago. I usually do. But I intend to call Microsoft today to find out if this is true. The OS Windows 2003 Server Standard Edition version is 5.2.379 SP 0.0 I have never heard of NO updates for any OS. I will try to defrag as soon as I can be at the machine when there is no "work" being done.


0

Response Number 4
Name: advancepc
Date: June 18, 2005 at 06:18:54 Pacific
Reply:

Try run (HijackThis).See the log detail.From the log you'ill see an unwanted applications that might hook up in system.Kill them/fix them/delete them(Of course you have confirm them).This is the thing that reboot ur pc.Recently i am facing the similiar problem.And i just do this to solved it.

advancepc


0

Response Number 5
Name: costi60
Date: June 30, 2005 at 10:49:54 Pacific
Reply:

Use this link:http://support.microsoft.com/default.aspx?scid=kb;en-us;898767
Also you can get help from Dell using your service tag.

Costi


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon

Group Policy Error Acces ... Admin Tools



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Sever rebooting no virus

services.exe mem usage goes up quic www.computing.net/answers/windows-2003/servicesexe-mem-usage-goes-up-quic/3548.html

No drag, no copy paste, no delete. www.computing.net/answers/windows-2003/no-drag-no-copy-paste-no-delete/914.html

Installed Updates, TCP/IP lost! www.computing.net/answers/windows-2003/installed-updates-tcpip-lost/5704.html