mark.coleman

OK, this all started yesterday, uninstalled AV to put full version on (NOD32)

Ran a full virus sweep, found a few and removed them, now the whole server seems screwed. Ran spyware with webroot spysweeper, Scan Spyware, etc.

Cannot ping anything - destination host unreachable, can only ping localhost
SQL, Terminal Services and Exchange 2003 services will not start.
NIC connection icon in taskbar show no activity
cannot get onto the Net.
active directory cannot find DC.

I'm baffled and a stones throw away from FDISK.

Help me before the server is thrown out of my window.

Mark

SJ_Skyline

A few of the symptoms you have described could be caused by a bad network card. IP is clearly running if you can ping 127.0.0.1 but you can't get out of the machine. Check the NW cable on another PC and try out another NW card in your server.

This doesn't help with Exchange/SQL I know but its a start.

warrenm2

clearly your networking is trashed, are all the settings still in the properties?

mark.coleman

I have two NIC cards, I disabled one when I started getting the problem and assigned similar settings to the other, still the same. All the settings are still there, I've tried removing them from the system properties, but to no avail. I'm wondering if a virus has screwed something.

Puff The Magic Wagon!

iTrader: (2)

If you do lob it out the window, gimme a call beforehand & I'll get round with some m8s & a blanket to catch it

HHxx

I'm with Puff and a blanket waiting to play catch

Did you remove any spyware? Some spyware actually hook the networking stuff.

You could try this for starters, it may or may not work for you...

AudiMan

Defo sounds like some spyware is still on there, (had a very similar problem with a laptop recently), sorry to say but the quickest and easiest way to sort it is to splat and start again, then the first thing to put back on is the AV software, auto updates and firewall. I'd never be confident the machine was ok until doing this.

Ian..

Foot_Tapper

what does ipconfig/all report ?
Have a look at hosts file, has any spyware put a load of entries in it ?
I have seen a pc that wouldnt do anything and found that something had put loads of entries in hosts file...pointing everything to 127.0.0.1