Approximately 10 minutes after I start SQL Server, some protocols such as HTTP and IRC are no longer available. When I try to open a webpage in IEX, I get a DNS error, however I can still ping the sites.
Any advice?Could you be experiencing MyDoom (http://support.microsoft.com/?kbid=836528) or Blaster (http://www.microsoft.com/security/incident/blast.mspx)? They could produce these kind of symptoms.
-PatP|||Pat,
no I don't think so, since:
-I don't have any other problems with my PC
-This started only with SQL server
-I have the latest security updates, and the extra Blaster fix
-I have a virus scanner that updates daily
Could it have something to do with the hosts file?|||Could it have something to do with the hosts file?While pretty much anything is possible, that seems unlikely to me. If that were the case, how would starting SQL Server enter into the picture (so that the sites worked before SQL starts, and fail while SQL is running)?
-PatP|||Hmm I thought because I get DNS erros...
I did the Blaster and Doom update again but no infection was found.
Anyone else any ideas what could be wrong? Or how to detect?
Edit: I checked my Event log and there is always 4 errors and 1 warning when this occurs:
Event Type: Error
Event Source: MSSQLSERVER
19012 :
SuperSocket Info: Bind failed on TCP port 1433.
Event Type: Warning
Event Source: MSSQLServer
SuperSocket-Information: (SpnRegister) : Error 1355.
But SQL Server is still working after this. I checked KB but didn't find anything.|||Just curious, but does netstat -a -n show anything relevant?
-PatP|||I`m not sure... I did some checks with that but couldn`t make to much sense
of it. Could you tell me what I`m looking for?
The problem persists... Now I am on a small network and after the said problem the whole network breaks down and I lose internet connection. I have to reboot all machines and sometimes repair the network connection Very strange indeed. I can confirm that this only happens when SQL server is started.
Other programs running:
Kaspersky AV
Webroot SypSweeper
Sometimes ICQ or mIRC
The usual XP services|||Are you absolutely certain that the machine isn't infected by Slammer (http://www.microsoft.com/technet/security/alerts/slammer.mspx)?
-PatP|||Pat I think that was it. I didn't know that my Antivirus Program may not have been aware of this exploit.
Thanks!|||De nada! Glad that you were finally able to isolate (and fix) the problem!
-PatPsql
No comments:
Post a Comment