problem at a client site today > sbs2k has been running fine for 6 months
hardware is HP Compaq ML350, dual p4 ht CPU's, 1.25gb memory, 3x RAID1
arrays
today mail not processing and server running very slowly
we came in and found virus messages about zafi.b viruses > symantec
corporate edition has been picking these up and we check definitions are up
to date each morning.
when scanning we found viruses in messages in the SMTP badmail queue
initially we thought zafi.b was our problem
however found nothing in the registry as we were expecting.
so since then we have found the following .....
server runs incredibly slow. cannot use it basically
restart in safe mode and it works fine
disable various services and discovered that SMTP service when disabled and
system rebooted fixes the problem
so now thinking the SMTP queue has somehow corrupted and need to get this
fixed
have tried disabling Exchange services
removing SMTP and NNTP service > didn't remove all of IIS > should we ?
then reinstalling them
running SMTPREINSTALL.exe tool to get IIS(smtp) and Exchange talking again
(extend SMTP service with extra verbs)
but on reboot the same problem has reappeared
How do you fix the SMTP service / IIS / Exchange delivery issues on SBS2000
?
We are planning next step of >
Check all backups from 2 days ago
Remove all AV software to ensure no viruses have taken over them > just in
case
By the way server is now disconnected from everything else to avoid
reinfection or prpogation to other machines
Remove IIS totally (including SMTP and NNTP)
Delete IIS metabase if it still exists > metabase.bin
Reinstall IIS
Apply Win2k SP4
Reboot
Reinstall exchange > exchange 2k documents talk of this but we are wary of
how and what will occur when doing this in SBS2000
Reinstall Exch SP3
Reboot
Voila OR perhaps Voi NON
Thanks for your help
regards
Jeremy