Hello all,

Our IIS server keeps stopping.
We think we have been hacked.
We installed blackice to monitor IP address.
We've gotten a ton from Russia, France, Ukranie etc.
I'm new with IIS, what can i do to fix this?
Or at least stop the service from stopping?
We have users that use the OWA.

thanks in advance

anthony

Re: IIS server keeps shutting down by Bryan

Bryan
Thu Jul 10 09:15:44 CDT 2003

"anthony" <amorales@speakeasy.net> wrote in message
news:0bc701c346e7$8b2c6cc0$a501280a@phx.gbl...
> Our IIS server keeps stopping.
> We think we have been hacked.
> We installed blackice to monitor IP address.
> We've gotten a ton from Russia, France, Ukranie etc.
> I'm new with IIS, what can i do to fix this?
> Or at least stop the service from stopping?

The first thing I would suggest is making sure you have all of the
latest security patches installed.

Then try running a virus scan of the PC to make sure there's nothing odd
going on there.

Then make sure you have the IIS, FTP, SMTP and Web Publishing Services
set to automatically restart in case of a failure.

I'm working through a similar problem with Microsoft Support right now.
If I glean any new tricks or tips, I'll pass them on.


Bryan

Try EasyImage Lite to optimize your photos for e-mail and the web!
www.chameleon-systems.com





Re: IIS server keeps shutting down by paul_lynch67

paul_lynch67
Thu Jul 10 12:22:41 CDT 2003

Anthony,

It could be either of these problems.

IIS Shuts Down and Restarts for No Apparent Reason
http://support.microsoft.com/?id=273877

MS03-007: Unchecked Buffer in Windows Component May Cause Web Server
Compromise
http://support.microsoft.com/?id=815021

Make sure you are up to date with security patches from Microsoft.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/default.asp

Regards,

Paul Lynch
MCSE

"anthony" <amorales@speakeasy.net> wrote in message news:<0bc701c346e7$8b2c6cc0$a501280a@phx.gbl>...
> Hello all,
>
> Our IIS server keeps stopping.
> We think we have been hacked.
> We installed blackice to monitor IP address.
> We've gotten a ton from Russia, France, Ukranie etc.
> I'm new with IIS, what can i do to fix this?
> Or at least stop the service from stopping?
> We have users that use the OWA.
>
> thanks in advance
>
> anthony