IIS and Exchange Services Quit Unexpectedly

[jameshutchinson008]

Came into work monday morning to find a dead Exchange server. All the IIS and Exchange services had failed.

The event log confirmed this but gave no other information. I am running Windows 2000 SP2 Exchange 2000 SP3.

Any help will be muchly appreciated.

James

 

[jaksen112]

is it enterprise or standard? if standard is your DB larger than 16gb? 01110000

 

[N0ktar]

Trace the event log entries to the first error that caused the shut down of services and consult microsoft support site if necessary to find more information.
It may be OWA related since your IIS is down as well, exploit maybe? Check the IIS logs in /WINNT/System32 folder for any clues.

 

[jameshutchinson008]

That is jsut it there was no other events in the system log indicating a reasin for the services shutting down. I have looked through my firewall logs and there was no traffic coming or going at the time of failure 01.02 Sunday evening. I did look on Microsoft's web site, the only nearly simular summary sugested the code red worm but said these events would be logged every 5 minutes into the system log.

Any ideas.

Btw I am running standard Exchange (soon to be upgraded)with an 11.5 gig database.

 

[Xybertron]

"Exchange 2000 SP3" ?

Did the services 7031 in the System Log?

Need more details on "The event log confirmed this" Dan
Microsoft Exchange Support @ Microsoft

 

[jameshutchinson008]

The SMTP service had stopped, in the even log Event id 7031 IIS services terminated was logged. Also Imap4 service, pop service also terminated.

James

 

[Xybertron]

You might have Nimda. This is a good sign.

Check c:\inetpub\scripts

If you have TFTP files it is Nimda. Dan
Microsoft Exchange Support @ Microsoft

 

[jameshutchinson008]

Yes I do Dan (shite) Any tips to stop this kind of thing happening ?

How do I clean it ?

Thanks for your responce By the way.

james

 

[Xybertron]

We recommend a rebuild. You can download a free Nimda cleaner though.

Apply the Security hotfixes to stop it! Dan
Microsoft Exchange Support @ Microsoft

 

[jameshutchinson008]

Cheers Dan I have Implimented a front end server and patched it.

I meant servie pack 2 BTW.