D
Damien Drummond
Hi all,
I hope someone can help me...this has been going on now for a while but it
is noticeably effecting all network application to some degree.
The server is an SBS 2000 system with Exchange, SQL and ISA running on it
with 2 network cards. The internet travels from the ISA server through a
firewall and ADSL modem.
It did get infected with Welchia and this was removed by the Symantec
removal tool. But also around that time whenever the server restarted the
following events are logged....
Event Type: Warning
Event Source: NNTPSVC
Event Category: None
Event ID: 101
Date: 10/06/2004
Time: 7:36:54 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 101 ) in Source ( NNTPSVC ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: /,
/Internet Newsgroups, The parameter is incorrect. .
Data:
0000: 57 00 00 00 W...
Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5781
Date: 10/06/2004
Time: 7:36:57 AM
User: N/A
Computer: HL-SBS
Description:
Dynamic registration or deregistration of one or more DNS records failed
because no DNS servers are available.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: b4 05 00 00 ´...
Event Type: Error
Event Source: w32time
Event Category: None
Event ID: 62
Date: 10/06/2004
Time: 7:37:05 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 62 ) in Source ( w32time ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: , ,
this machine's local domain.
Data:
0000: e5 03 00 00 å...
Event Type: Warning
Event Source: w32time
Event Category: None
Event ID: 54
Date: 10/06/2004
Time: 7:37:05 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 54 ) in Source ( w32time ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: , ,
this machine's local domain.
Data:
0000: e5 03 00 00 å...
Event Type: Error
Event Source: Removable Storage Service
Event Category: None
Event ID: 17
Date: 10/06/2004
Time: 7:37:48 AM
User: N/A
Computer: HL-SBS
Description:
RSM cannot manage library Tape0. It encountered an unspecified error. This
can be caused by a number of problems including, but not limited to,
database corruption, failure communicating with the library, or insufficient
system resources.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7011
Date: 10/06/2004
Time: 7:40:39 AM
User: N/A
Computer: HL-SBS
Description:
Timeout (30000 milliseconds) waiting for a transaction response from the
Netman service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 10/06/2004
Time: 7:40:39 AM
User: N/A
Computer: HL-SBS
Description:
The Network Connections service failed to start due to the following error:
The service did not respond to the start or control request in a timely
fashion.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/06/2004
Time: 7:40:39 AM
User: S-1-5-21-220523388-1659004503-725345543-500
Computer: HL-SBS
Description:
DCOM got error "The service did not respond to the start or control request
in a timely fashion. " attempting to start the service netman with arguments
"" in order to run the server:
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7011
Date: 10/06/2004
Time: 7:41:09 AM
User: N/A
Computer: HL-SBS
Description:
Timeout (30000 milliseconds) waiting for a transaction response from the
EventSystem service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
And then it repeats itself again. The effect is that the users can access
the server straight after a reboot (albeit slowly), but the server cannot
access the network or the internet for about 5 minutes.
I have looked on the net and found similar problems which say to change the
order in which the services start, when I do that the server works fine, but
the network users can't access the server.
Can anyone help me this has become a thorn in my side I need to remove!!!!
Thanks
Damien
I hope someone can help me...this has been going on now for a while but it
is noticeably effecting all network application to some degree.
The server is an SBS 2000 system with Exchange, SQL and ISA running on it
with 2 network cards. The internet travels from the ISA server through a
firewall and ADSL modem.
It did get infected with Welchia and this was removed by the Symantec
removal tool. But also around that time whenever the server restarted the
following events are logged....
Event Type: Warning
Event Source: NNTPSVC
Event Category: None
Event ID: 101
Date: 10/06/2004
Time: 7:36:54 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 101 ) in Source ( NNTPSVC ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: /,
/Internet Newsgroups, The parameter is incorrect. .
Data:
0000: 57 00 00 00 W...
Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5781
Date: 10/06/2004
Time: 7:36:57 AM
User: N/A
Computer: HL-SBS
Description:
Dynamic registration or deregistration of one or more DNS records failed
because no DNS servers are available.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: b4 05 00 00 ´...
Event Type: Error
Event Source: w32time
Event Category: None
Event ID: 62
Date: 10/06/2004
Time: 7:37:05 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 62 ) in Source ( w32time ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: , ,
this machine's local domain.
Data:
0000: e5 03 00 00 å...
Event Type: Warning
Event Source: w32time
Event Category: None
Event ID: 54
Date: 10/06/2004
Time: 7:37:05 AM
User: N/A
Computer: HL-SBS
Description:
The description for Event ID ( 54 ) in Source ( w32time ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: , ,
this machine's local domain.
Data:
0000: e5 03 00 00 å...
Event Type: Error
Event Source: Removable Storage Service
Event Category: None
Event ID: 17
Date: 10/06/2004
Time: 7:37:48 AM
User: N/A
Computer: HL-SBS
Description:
RSM cannot manage library Tape0. It encountered an unspecified error. This
can be caused by a number of problems including, but not limited to,
database corruption, failure communicating with the library, or insufficient
system resources.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7011
Date: 10/06/2004
Time: 7:40:39 AM
User: N/A
Computer: HL-SBS
Description:
Timeout (30000 milliseconds) waiting for a transaction response from the
Netman service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 10/06/2004
Time: 7:40:39 AM
User: N/A
Computer: HL-SBS
Description:
The Network Connections service failed to start due to the following error:
The service did not respond to the start or control request in a timely
fashion.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 10/06/2004
Time: 7:40:39 AM
User: S-1-5-21-220523388-1659004503-725345543-500
Computer: HL-SBS
Description:
DCOM got error "The service did not respond to the start or control request
in a timely fashion. " attempting to start the service netman with arguments
"" in order to run the server:
{BA126AD1-2166-11D1-B1D0-00805FC1270E}
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7011
Date: 10/06/2004
Time: 7:41:09 AM
User: N/A
Computer: HL-SBS
Description:
Timeout (30000 milliseconds) waiting for a transaction response from the
EventSystem service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
And then it repeats itself again. The effect is that the users can access
the server straight after a reboot (albeit slowly), but the server cannot
access the network or the internet for about 5 minutes.
I have looked on the net and found similar problems which say to change the
order in which the services start, when I do that the server works fine, but
the network users can't access the server.
Can anyone help me this has become a thorn in my side I need to remove!!!!
Thanks
Damien