General discussion

Locked

IIS 5.0 Services shutting down

By gary_it ·
I have a multihomed win2k WebSrvr that has one nic for the DSL connection and one for the internal network. I have been a constant victim of hacks. Now... I have installed patches, win2k sp2, and did some reg hacks to hackproof my server but for some reason whenever the DSL connection is enabled my IIS services (www,ftp) shut down. IIS itself shuts down and leaves the win2kserver running with no problems except for all websrvcs are stopped!! If I only keep the intranet connection open and disable the Internet Nic I don't have any problems. Does anyone know what's going on? I've put in a lot of hours and still can't figure it out.

Event Type: Error
Event Source: W3SVC
Event Category: None
Event I 105
Date: 9/4/2001
Time: 12:36:31 PM
User: N/A
Computer: WEBSRVR
Description:
The server was unable to register the administration tool discovery information. The administration tool may not be able to see this server. The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: c6 04 00 00 ?...

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

IIS 5.0 Services shutting down

by cfrush In reply to IIS 5.0 Services shutting ...

I forget, can I post this just as a comment? Really don't see how... Anyway, found this right away on knowlege base: http://support.microsoft.com/support/kb/articles/Q254/5/25.ASP and apparently it has to do with plain old connectivity. So, can youping out on that nic? Try disabling and re-enabling the interface? (Try that first, for both nics and in both orders when you re-enable. Just right click and say enable\disable) Re-install the card?

Collapse -

IIS 5.0 Services shutting down

by gary_it In reply to IIS 5.0 Services shutting ...

That is a good answer but didn't solve the problem. I'm not sure what it is, but that and Code Red weren't the problem. I think it's a nuisance hacker.

Much Thanks Though.

Collapse -

IIS 5.0 Services shutting down

by flda In reply to IIS 5.0 Services shutting ...

This seems like the same symptoms I was having when infected with Code Red II. In the later versions of Code Red a Trojan is installed. Regardless of the server being patched. Check out http://www.sarc.com/avcenter/venc/data/codered.v3.html to see where it hides.

Collapse -

IIS 5.0 Services shutting down

by gary_it In reply to IIS 5.0 Services shutting ...

That is a good answer but didn't solve the problem. I'm not sure what it is, but I wasn't infected at all. I think it's a nuisance hacker.

Collapse -

IIS 5.0 Services shutting down

by Bojidar Alexandrov In reply to IIS 5.0 Services shutting ...

We have same problem with our NT4 Web Server - The Code Red worm causes it to crash every 5 minutes. Ensure that all security patches are applied.
Run also this tool to clean up the server.

http://www.microsoft.com/technet/itsolutions/security/tools/redfix.asp

Collapse -

IIS 5.0 Services shutting down

by gary_it In reply to IIS 5.0 Services shutting ...

That is a good answer but didn't solve the problem. I'm not sure what it is, but I wasn't infected at all. I think it's a nuisance hacker.

Collapse -

IIS 5.0 Services shutting down

by gary_it In reply to IIS 5.0 Services shutting ...

This question was closed by the author

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums