473,320 Members | 1,839 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Sevices get stopped unexpectedly

Hello friends,
I am not sure if i am posting to the correct group but if anyone has an
idea about this and the possible solution or the link to that solution then
please let me know
We have out website running on Windows 2000 - IIS 5.0. Everything was
working fine but since last few days my IIS Services get stopped
unexpectedly.
When i check in even viewer i see the message saying

a) "The World Wide Web Service got terminated unexpectedly. It has been done
__ time(s)"
b) "The ISIS Admin Service got terminated unexpectedly. It has been done __
time(s)"
c) "The Simple Mail Transport Protocol got terminated unexpectedly. It has
been done __ time(s)"

After i restart those services again, everything starts working fine. But
then again in a day or two its stops unexpectedly.
I have read about this at number of place. At few places it says that the
computer is infected with the code Red worm.
I installed the patch for Code Red II from the microsoft website last week
and after installing i restarted the computer. For 3-4 days i had no problem
so i thought that the issue was resolved and that the worm must be causing
the problems, but again today the services were stopped.

Can anyone give me an idea about what wrong is going on and what should i do
to resolve this issue.

Thanks
Jul 19 '05 #1
4 2316
Do you get any events in the event log? Like Event ID 5, or Event ID 36?

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/


"Niel" <na*******@vippowernet.com> wrote in message
news:ez**************@tk2msftngp13.phx.gbl...
Hello friends,
I am not sure if i am posting to the correct group but if anyone has an
idea about this and the possible solution or the link to that solution then please let me know
We have out website running on Windows 2000 - IIS 5.0. Everything was
working fine but since last few days my IIS Services get stopped
unexpectedly.
When i check in even viewer i see the message saying

a) "The World Wide Web Service got terminated unexpectedly. It has been done __ time(s)"
b) "The ISIS Admin Service got terminated unexpectedly. It has been done __ time(s)"
c) "The Simple Mail Transport Protocol got terminated unexpectedly. It has been done __ time(s)"

After i restart those services again, everything starts working fine. But
then again in a day or two its stops unexpectedly.
I have read about this at number of place. At few places it says that the
computer is infected with the code Red worm.
I installed the patch for Code Red II from the microsoft website last week and after installing i restarted the computer. For 3-4 days i had no problem so i thought that the issue was resolved and that the worm must be causing
the problems, but again today the services were stopped.

Can anyone give me an idea about what wrong is going on and what should i do to resolve this issue.

Thanks

Jul 19 '05 #2
Did you clean the virus from the server ? The MS patch will only insure you
don't get it again.

"Niel" <na*******@vippowernet.com> wrote in message
news:ez**************@tk2msftngp13.phx.gbl...
Hello friends,
I am not sure if i am posting to the correct group but if anyone has an
idea about this and the possible solution or the link to that solution then please let me know
We have out website running on Windows 2000 - IIS 5.0. Everything was
working fine but since last few days my IIS Services get stopped
unexpectedly.
When i check in even viewer i see the message saying

a) "The World Wide Web Service got terminated unexpectedly. It has been done __ time(s)"
b) "The ISIS Admin Service got terminated unexpectedly. It has been done __ time(s)"
c) "The Simple Mail Transport Protocol got terminated unexpectedly. It has been done __ time(s)"

After i restart those services again, everything starts working fine. But
then again in a day or two its stops unexpectedly.
I have read about this at number of place. At few places it says that the
computer is infected with the code Red worm.
I installed the patch for Code Red II from the microsoft website last week and after installing i restarted the computer. For 3-4 days i had no problem so i thought that the issue was resolved and that the worm must be causing
the problems, but again today the services were stopped.

Can anyone give me an idea about what wrong is going on and what should i do to resolve this issue.

Thanks

Jul 19 '05 #3
Yes I hope I have cleaned the virus,
I again download both the patches Code Red Worm patch and Code Red Worm II
patch.
I couldn't install the first patch as it said that I already had a higher
version of service pack and so the patch won't run.
Howerver I could install and run the 2nd patch i.e Code Red Worm II patch
and have restrated it again.
After I restrarted a text file was created on desktop which is as follows

-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~

Cleaning up Code Red Worm

If the system was internet-exposed, you should re-install system

To disable IIS, invoke with -disable option

This application does NOT apply the patch

See
http://www.microsoft.com/technet/tre...hnet/security/
bulletin/MS01-033.asp

Shutting down IIS

IIS Service stopped

Removing files created by worm

No files left by worm found

Removing virtual roots from the registry that may have been left by worm

This does not unmap virtual roots from the IIS metabase

/Scripts removed

/msadc removed

System File protection enabled

IIS Service could not be restarted

Metabase successfully backed up to CodeRedCleanup_Backup

Searching for virtual roots left by the worm in IIS

Cannot get access permissions for /LM/W3SVC/1/Root/PBSData/ - err = 51201

No virtual roots left by worm found

-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~

I guess this pretty much explains that now all the files (if any) created by
worm have been removed.
If not then tell if there is still some problem and what next should I do.

Thanks

"Mike Florio" <mi**@micro-point.com> wrote in message
news:vv************@corp.supernews.com...
Did you clean the virus from the server ? The MS patch will only insure you don't get it again.

"Niel" <na*******@vippowernet.com> wrote in message
news:ez**************@tk2msftngp13.phx.gbl...
Hello friends,
I am not sure if i am posting to the correct group but if anyone has an idea about this and the possible solution or the link to that solution then
please let me know
We have out website running on Windows 2000 - IIS 5.0. Everything was
working fine but since last few days my IIS Services get stopped
unexpectedly.
When i check in even viewer i see the message saying

a) "The World Wide Web Service got terminated unexpectedly. It has been

done
__ time(s)"
b) "The ISIS Admin Service got terminated unexpectedly. It has been done __
time(s)"
c) "The Simple Mail Transport Protocol got terminated unexpectedly. It has
been done __ time(s)"

After i restart those services again, everything starts working fine.

But then again in a day or two its stops unexpectedly.
I have read about this at number of place. At few places it says that the computer is infected with the code Red worm.
I installed the patch for Code Red II from the microsoft website last

week
and after installing i restarted the computer. For 3-4 days i had no

problem
so i thought that the issue was resolved and that the worm must be causing the problems, but again today the services were stopped.

Can anyone give me an idea about what wrong is going on and what should

i do
to resolve this issue.

Thanks


Jul 19 '05 #4
The event id that i get i "7031" and event type is "Error" while event
category is "None"

"Aaron Bertrand - MVP" <aa***@TRASHaspfaq.com> wrote in message
news:u5**************@TK2MSFTNGP10.phx.gbl...
Do you get any events in the event log? Like Event ID 5, or Event ID 36?

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/


"Niel" <na*******@vippowernet.com> wrote in message
news:ez**************@tk2msftngp13.phx.gbl...
Hello friends,
I am not sure if i am posting to the correct group but if anyone has an idea about this and the possible solution or the link to that solution then
please let me know
We have out website running on Windows 2000 - IIS 5.0. Everything was
working fine but since last few days my IIS Services get stopped
unexpectedly.
When i check in even viewer i see the message saying

a) "The World Wide Web Service got terminated unexpectedly. It has been

done
__ time(s)"
b) "The ISIS Admin Service got terminated unexpectedly. It has been done __
time(s)"
c) "The Simple Mail Transport Protocol got terminated unexpectedly. It has
been done __ time(s)"

After i restart those services again, everything starts working fine.

But then again in a day or two its stops unexpectedly.
I have read about this at number of place. At few places it says that the computer is infected with the code Red worm.
I installed the patch for Code Red II from the microsoft website last

week
and after installing i restarted the computer. For 3-4 days i had no

problem
so i thought that the issue was resolved and that the worm must be causing the problems, but again today the services were stopped.

Can anyone give me an idea about what wrong is going on and what should

i do
to resolve this issue.

Thanks


Jul 19 '05 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
by: Matt Sollars | last post by:
Hi all. I'm having a nasty problem. A client's website was originally written with classic ASP. They requested a new portion of the site that was deemed a perfect candidate for ASP.NET. So, .NET...
2
by: John A Grandy | last post by:
Has anyone unexpectedly encountered the following error for an ASP.NET application that was working fine? ...
2
by: Lokanathan | last post by:
Currently we are experiencing a unique problem with regard to the ASP .net service. Intermittently the ASP .Net service gets stopped (error message displayed in the webpage is "Server Application...
1
by: Ken Varn | last post by:
On a few occasions, IIS has thrown up a pop-up error message box stating that aspnet_wp generated an error. The browser interface comes back with a web page that indicates Server Application...
3
by: Ramesh Dodamani | last post by:
Environment: XP Pro, VS.Net 2003, .Net 1.1.4322 with SP1 & KB Hotfix 886903 P4 2.2GHz, 1 GB RAM My system was working fine till a few weeks back when I started seeing the following errors. ...
1
by: ImSoLost | last post by:
My asp.net web application dies after an hour of processing (it's a long database parsing process) and the web page becomes a "Page could not be displayed" webpage. I looked in my event logs and...
1
by: Paul Wasowicz | last post by:
Configuration: Windows 2000 Server SP4 ..Net Framework 1.1 SP1 Microsoft Site Server 3.0 Problem: the following error messages start showing up in the EVENT LOG on the server every once in a...
0
by: Woodwinds | last post by:
I have a web application run under ASP.NET v1.1.4322 when I run that web application I got error that show on application log "aspnet_wp.exe stopped unexpectedly" I re installed visual...
5
by: Jon Paal | last post by:
anybody know what causes this error message reported by visual studio just in tiime debugger ? I get it when trying to populate a simple gridview from a datareader. Running locally, the code...
0
by: DolphinDB | last post by:
The formulas of 101 quantitative trading alphas used by WorldQuant were presented in the paper 101 Formulaic Alphas. However, some formulas are complex, leading to challenges in calculation. Take...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.