Timeout waiting for a transaction response from the IISADMIN service.

SBS 2000 with the latest service packs for exchange and the o/s.

My IIS is timing out. About once a day I receive this error

Timeout waiting for a transaction response from the IISADMIN service.

I have read and applied where possible the information here
http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21467429.html? and here http://support.microsoft.com/?kbid=831572 . I have obtained the hotfix from them and applied it.

When the error occurs, all IIS functions stop working. The error is then followed by a number of similar errors:

Timeout (30000 milliseconds) waiting for a transaction response from the IMAP4Svc service.
Timeout (30000 milliseconds) waiting for a transaction response from the MSFTPSVC service.
Timeout (30000 milliseconds) waiting for a transaction response from the NntpSvc service.
Timeout (30000 milliseconds) waiting for a transaction response from the POP3Svc service.
Timeout (30000 milliseconds) waiting for a transaction response from the RESvc service.

Etc Etc - It always starts with IISADMIN

There are a few things which happened prior to this happening, which may have caused the problem.

Firstly, I uninstalled ISA, wisely or not, it wasn't in use anyway. At the same time I reconfigured the pop3 connector and had some fun and games with the ISP putting the right mails inthe right mailbox. It is possible that the mess created at the time caused this 'This problem may occur if a message that has a corrupted time stamp is received by your Exchange 2000 computer. This problem occurs when the FILETIME attribute of the message is not valid.' (from the MSKB article).

Anyway, any ideas appreciated. Perhaps it is possible to patch IIS but I cannot find any information on this.
LVL 4
sloopethAsked:
Who is Participating?
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
sloopeth...

Thanks so much for posting that back.  It's always good to know what the resolution was.

Jeff
TechSoEasy
0
 
sloopethAuthor Commented:
I should add I receive the error about once a day it then repeats until I reboot or run an IISRESET, both of which cure the problem for about 10 hours.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Have you tried reapplying Service Pack 4 since you've removed ISA?  The removal of ISA could have broken some of the SP4 modifications... so it's wise to reapply it. (and couldn't hurt!)

Jeff
TechSoEasy
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
sloopethAuthor Commented:
Thanks for the reply Jeff. Yes I have reapplied SP4 already unfortunately.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
How about this hotfix?  http://support.microsoft.com/kb/819019

Jeff
TechSoEasy
0
 
sloopethAuthor Commented:
Hey thanks - despite my searching - I haven't come across that mskb before. I will give it a shot and get back to you.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I found it because I realized that when installing ISA you are often told to Disable Socket Pooling, but was wondering if there was a method to reenable it after uninstalling ISA.  This seemed to be the closest KB article about that... if it doesn't work, you may want to explore the Socket Pooling thing... or just reinstall IIS and Exchange -- which I haven't done on an SBS2K machine in quite some time.  It's fairly easy on SBS2k3 though.

Jeff
TechSoEasy
0
 
sloopethAuthor Commented:
Ok well it installed without a problem. I cannot reboot the machine until tonight so it may be a day or two before we know the outcome. I will keep you posted.
0
 
sloopethAuthor Commented:
ok it diesnt work. thanks for the thoughts. I have a few prime support requests left with ms so it might be time for them to help me. id wlecome any other ideas in the interim.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Before doing anything else... make sure that your "hosts" file hasn't been altered by anything you've done previously.

C:\%WINDOWS%\System32\Drivers\etc\hosts

Jeff
TechSoEasy
0
 
sloopethAuthor Commented:
well i do wonder about this server as it was inherited from somebody else. nothing suspect in the hosts file. I plan to visit the server owner today and explain the situation and get MS on the case. I will leave this question open so that if and when I get a solution from Microsoft I can post it here.
0
 
sloopethAuthor Commented:
small update we just found a rootkit on this server. (win32/hackdef) all investigations pending removal of the kit.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
oops.
0
 
sloopethAuthor Commented:
for anyone interested:

this problem does now appear to have been caused by the win32/hackdef rootkit. identified by safety.live.com and gratefully removed by unhackme from www.greatis.com.
0
 
sloopethAuthor Commented:
Jeff I'm going to accept your answer mainly because I feel that if the problem was not a virus, we would have got there anyway. It would also be good not to delete/close this question as while searching for help on the virus removal, i came across some other server 2000 users with the same infection.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Well, it was still evil, and glad you got rid of it!

Jeff
TechSoEasy
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.