What about running in safe mode and then trying to scan for viruses? .. or even boot up with a antivirus CD?
Main Topics
Browse All TopicsI am running a Windows 2000 server with Exchange 2000. Halfway through the day I noticed received and error message "outlook is retrieving data from the Microsoft Exchange server"......
I checked on the server and noticed several strange things. I could not get it to shutdown through start shutdown or the control alt delete shutdown. The screen would turn gray and then go back to normal. I was unable to brose the internet, but able to ping both inside and outside networks by ip and domain name. I was unable to right click on my network places and go to properties. I was unable to get into add remove programs. When I went in to services i noticed that several services were stuck in the "starting mode". I tried running iisreset and it just sat there. I tried installing the newest virus definitions and it locked up. I tried to scan the computer for viruses but was unable to do so. I rebooted the computer and this time all of the services look like they started up okay except for mail security for microsoft exchange.... which is stuck on "starting".
I don't see anything in the event logs that are any different from teh mesages i normally get.
Any ideas?
Thanks!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Use "msconfig" to prevent suspicous software from automatically starting up when booting. You may have to copy msconfig from a windows XP pc to your server.
download and install spybot search and destroy (if you can with your system. Maybe you need to install another browser, like firefox (might allow you to browse the internet). When installation starts select teatimer to run and also let spybot get it's newest updates. Then let it scan your system for malware and you can then let it remove what it has found. You may have to reboot for it to be able to remove everything. After that also download and install lavasoft's AdAware, let it update itself, then let it do a thourogh scan, selct the "badies" and remove them, like in spybot.
f you still have problems after that on your system, download the latest version of HijackThis:
http://www.hijackthis.de/d
run it and save the log. Paste the log to the following website:
http://www.hijackthis.de/e
Click the "analyze" button and you will have an analysis of your log.
Now paste the analyzed log here, so we can help further (provided you don't get enough info from the log yourself).
I tried booting with the antivirus cd and disks to no avail. Everytime i would specify where the virus definitions were it wouldn't find them.
I was able to share the hard drives of the server, and I am currently running a norton scan from a different computer on the network.
I was able to boot in safe mode an everything worked much better. I tried playing around with removing different services from starting up, like exchange and mail security, etc. But whenever i booted up normally i had the same problems.
I also noticed that installer hangs whenever i try to install something.
If i try to stop a service it locks up. If i try to start a service it locks up.
I also ran eseutil on the exchange database and it repaired some corruption, but this didn't fix the problem.
I booted from the Win2000 server cd and ran the fast repair, and it still acts the same.
Hijack this locks up when i try to run it.
Any other ideas?
Thanks!
Run a memtest86 (http://memtest86.com). Maybe you have bad ram? Otherwise try to do all from safe mode with networking. maybeyou can install things from there. also run msconfig in this mode.
I tried booting into safe mode with networking.... same problem. Couldn't surf the internet. I ended up downloading mem test on a desktop and making the disk. I tried the disk in the server and it wouldn't boot from it. I tried the disk in my desktop and it worked fine. I then copied the install files to the server, made a new disk for the mem test program. The server still won't boot from the new mem test floppy made on the server. I tested the server with my norton emergency floppy disks and it would boot from them.
I have also done a repair install of win2000 server. Same problems.
Any other ideas?
Thanks!
I was able to fix this problem finally. I noticed that the computer seemed normal in safe mode. When I booted into safe mode with networking it was locking up. I ended up disabling all services except those absolutely necessary. Then I started putting them back on one at a time. It turns out the culprit was a Symantec Mail Security For Microsoft Exchange service. I then repaired my exchange databases and everything is back running smoothly. Thanks for all of your suggestions.
No comment has been added to this question in more than 21 days, so it is now classified as
abandoned..
I will leave the following recommendation for this question in the Cleanup topic area:
[PAQ - Refund]
Any objections should be posted here in the next 4 days. After that time, the question will
be closed.
Carrzkiss
EE Cleanup Volunteer
Business Accounts
Answer for Membership
by: kak268Posted on 2005-01-03 at 13:35:30ID: 12947441
I also unplugged the server from teh network and it still acted strange (no internet browing, not being able to get into control panel, etc). I also checked all the processes that were running to make sure they were legitimate....