Timeout waiting for a transaction response from the IISADMIN service.

SBS 2000 with the latest service packs for exchange and the o/s.

My IIS is timing out. About once a day I receive this error

Timeout waiting for a transaction response from the IISADMIN service.

I have read and applied where possible the information here
http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21467429.html? and here http://support.microsoft.com/?kbid=831572 . I have obtained the hotfix from them and applied it.

When the error occurs, all IIS functions stop working. The error is then followed by a number of similar errors:

Timeout (30000 milliseconds) waiting for a transaction response from the IMAP4Svc service.
Timeout (30000 milliseconds) waiting for a transaction response from the MSFTPSVC service.
Timeout (30000 milliseconds) waiting for a transaction response from the NntpSvc service.
Timeout (30000 milliseconds) waiting for a transaction response from the POP3Svc service.
Timeout (30000 milliseconds) waiting for a transaction response from the RESvc service.

Etc Etc - It always starts with IISADMIN

There are a few things which happened prior to this happening, which may have caused the problem.

Firstly, I uninstalled ISA, wisely or not, it wasn't in use anyway. At the same time I reconfigured the pop3 connector and had some fun and games with the ISP putting the right mails inthe right mailbox. It is possible that the mess created at the time caused this 'This problem may occur if a message that has a corrupted time stamp is received by your Exchange 2000 computer. This problem occurs when the FILETIME attribute of the message is not valid.' (from the MSKB article).

Anyway, any ideas appreciated. Perhaps it is possible to patch IIS but I cannot find any information on this.
LVL 4
sloopethAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

sloopethAuthor Commented:
I should add I receive the error about once a day it then repeats until I reboot or run an IISRESET, both of which cure the problem for about 10 hours.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Have you tried reapplying Service Pack 4 since you've removed ISA?  The removal of ISA could have broken some of the SP4 modifications... so it's wise to reapply it. (and couldn't hurt!)

Jeff
TechSoEasy
sloopethAuthor Commented:
Thanks for the reply Jeff. Yes I have reapplied SP4 already unfortunately.
JavaScript Best Practices

Save hours in development time and avoid common mistakes by learning the best practices to use for JavaScript.

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
How about this hotfix?  http://support.microsoft.com/kb/819019

Jeff
TechSoEasy
sloopethAuthor Commented:
Hey thanks - despite my searching - I haven't come across that mskb before. I will give it a shot and get back to you.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I found it because I realized that when installing ISA you are often told to Disable Socket Pooling, but was wondering if there was a method to reenable it after uninstalling ISA.  This seemed to be the closest KB article about that... if it doesn't work, you may want to explore the Socket Pooling thing... or just reinstall IIS and Exchange -- which I haven't done on an SBS2K machine in quite some time.  It's fairly easy on SBS2k3 though.

Jeff
TechSoEasy
sloopethAuthor Commented:
Ok well it installed without a problem. I cannot reboot the machine until tonight so it may be a day or two before we know the outcome. I will keep you posted.
sloopethAuthor Commented:
ok it diesnt work. thanks for the thoughts. I have a few prime support requests left with ms so it might be time for them to help me. id wlecome any other ideas in the interim.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Before doing anything else... make sure that your "hosts" file hasn't been altered by anything you've done previously.

C:\%WINDOWS%\System32\Drivers\etc\hosts

Jeff
TechSoEasy
sloopethAuthor Commented:
well i do wonder about this server as it was inherited from somebody else. nothing suspect in the hosts file. I plan to visit the server owner today and explain the situation and get MS on the case. I will leave this question open so that if and when I get a solution from Microsoft I can post it here.
sloopethAuthor Commented:
small update we just found a rootkit on this server. (win32/hackdef) all investigations pending removal of the kit.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
oops.
sloopethAuthor Commented:
for anyone interested:

this problem does now appear to have been caused by the win32/hackdef rootkit. identified by safety.live.com and gratefully removed by unhackme from www.greatis.com.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
sloopeth...

Thanks so much for posting that back.  It's always good to know what the resolution was.

Jeff
TechSoEasy

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sloopethAuthor Commented:
Jeff I'm going to accept your answer mainly because I feel that if the problem was not a virus, we would have got there anyway. It would also be good not to delete/close this question as while searching for help on the virus removal, i came across some other server 2000 users with the same infection.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Well, it was still evil, and glad you got rid of it!

Jeff
TechSoEasy
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.