server stopped dns

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi wonder if anyone can help, my server seems to have stopped DNS and WINS
since the weekend, I came into today and the server had been rebooted. It can
connect to the internet as can all the pc's on the network but will not share
any resources such as printers or shared folders. you cannot browse the
network from network neighbourhood. You can print directly from the server to
any printer but not from any other pc. I have run Virus checks on it and it
is as usual clean with no problems.

I have checked the event viewer and there is one error that had continuelly
popped up over the weekend which must be the problem MrxSMB. I have searched
the microsoft website for ways to resolve the problem but have found no
answers can someone please help me.
 
terryhunt9999 said:
Hi wonder if anyone can help, my server seems to have stopped DNS and WINS
since the weekend, I came into today and the server had been rebooted. It can
connect to the internet as can all the pc's on the network but will not share
any resources such as printers or shared folders. you cannot browse the
network from network neighbourhood. You can print directly from the server to
any printer but not from any other pc. I have run Virus checks on it and it
is as usual clean with no problems.

I have checked the event viewer and there is one error that had continuelly
popped up over the weekend which must be the problem MrxSMB. I have searched
the microsoft website for ways to resolve the problem but have found no
answers can someone please help me.
Click to expand...

checked more and it now looks as if it is not DNS but WINS that is the
problem. The WINS service is started but when you go into the WINS section in
administrative tools it says it is unable to find the WINS server.
 
terryhunt9999 said:
checked more and it now looks as if it is not DNS but WINS that is the
problem. The WINS service is started but when you go into the WINS section in
administrative tools it says it is unable to find the WINS server.
Click to expand...


It is definately the WIN server, I reboot the server and The WIN service
runs fine for about 10 minutes and then fails.It says it is unable to connect
to the server, but it is the server. I have looked in the event viewer and
there are no errors related to WINS. As I said the only unusual error/warning
message is the MrxSMB.
 
Try restarting the Remote Registry Service. Have you recently changed the
IP address for the server? The server must point to itself for WINS.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
 
Hi Doug,

The IP address for the server has not been changed, and the server is
redirected to itself for WINS.

I tried what you suggested, restarting the Remore Registry Service but this
has not done anything. I have also installed the patch for WINS KB870763
which also had no effect. Have you any other ideas as I have been working on
this all day with out any progress

terry
 
I found out what the problem was.

the server did an automatic windows update over the weekend and dowmloaded a
virus into the winserv32.exe(used for the automatic updates) this virus
stopped you going into regedit and stopped the WINS Server. moved the file
out of System32 deleted it and replaced it with an uncorrupt version and now
everything is ok.

My virus software never picked it up yesterday, after updating the
definitions last night it was able to see the virus this morning. It must be
a new virus related to the windows updates as the server is set to update the
virus definitions daily.

hope this information helps anyone who might be experiencing the same
problems.
 
If the file is indeed WINSERV32.EXE then you have a worm loose on your
network:

http://www.sophos.com/virusinfo/analyses/w32agobotaga.html

but if you instead meant WINSRV32.EXE it was probably self-inflicted:

http://www.liutilities.com/products/wintaskspro/processlibrary/winsrv32/
http://www.securemost.com/articles/trou_3_surf.htm

In either case Windows Updates had nothing to do with it.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
 
Back
Top