I had this happen yesterday. One of the problems is Nav uses some .dlls
and the mmc.exe which gets infected right away. If you try to play with
NAV after being hit you may have some errors related to not being able
to load the mmc console and what not. I went and used the free tools
from trend and then was able to proceed.
-----Original Message-----
From: Miley, Dan [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 1:28 PM
To: NT System Admin Issues
Subject: RE: NAV service for Exchange not starting
I wonder why a worm infection would not allow a virus scanner to run...
hmmmmmmmmmmm
Dan
-----Original Message-----
From: Kevin Miller [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 1:03 PM
To: NT System Admin Issues
Subject: RE: NAV service for Exchange not starting
reformat. : >
Kevinm WLKMMAS, UCC+WCA
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
All spelling and Factual errors are the fault of Bob Barker
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This space has been rented by:
Http://www.tiggercam.co.uk <http://www.tiggercam.co.uk/> For all your
tigger needs You 2 can rent this space if you need it.
-----Original Message-----
From: Terry Manolakos [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 9:44 AM
To: NT System Admin Issues
Subject: NAV service for Exchange not starting
Exchange srvr (ever since the virus attacked it....now cleaned but with
these residual side-effects) in Services, the NAV service for exchange
is not starting. The startup is automatic.....when I try starting it I
get: "Could not start the NAV for Microsoft Exchange service. Error
2182: The requested service has already started"(present status).....I
had repaired this server's infected files and checked the registry
settings instructed from a document relating to error 2182 and another
found in my Event Viewer
error # 2140 "NAV service for Exchange not starting" the event viewer
contradicts the Services error.
To give you the whole picture I add these facts:
1. this exchange server was infected with the nimb..virus and was
scanned; some repaired files, some quarantened files....replaced and now
is clean.
2. Event ID# 7000 "The NAV for microsoft exchange service failed to
start due to : The system can not find the file specified" (Which now
is resolved because that file was quarantened and replaced/cleaned
one...now ok. (this event occurred sept 18th)
3.symantec knowledge_base error for 2140 "Service could not start NAV
for exchange..." points me to registry keys to check for editing
ServerAddress name and IP but these have been checked and are
correct...rule that out.
4.this exchange mail server is working fine (no hiccups yet other than
the NAV failing to start) The NAV had been working well on this
exchange server and it stops viruses from entering the mailboxes and
spreading....but right now, this NAV service is down since the virus
attacked it via the IIS....which is now clean.
I know many SysAdmins are still cleaning up the pieces right now,
tending to their own networks as I am, but for those who are out there,
not infected and may have the solution to this... I greatly appreciate
and thank you in advance for any advice on this matter. THANKS
Terry Manolakos
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
This e-mail may be privileged and/or confidential, and the sender does
not waive any related rights and obligations. Any distribution, use or
copying of this e-mail or the information it contains by other than an
intended recipient is unauthorized. If you received this e-mail in
error, please advise me (by return e-mail or otherwise) immediately.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
