Can anyone tell me what happened to the server ?

[sjacct]

Can anyone tell me what happened to the server ?

- one NT4 server (PDC)
- around 15 workstations, w2k prof/NT4 workstation/w98

After restoring some data to \\server\C:\TEMP folder
from ARCserver backup tape, C:\TEMP folder cannot be
opened anymore.

used "chkdsk" command and rebooted the server. During
booting, million of error message. After booting,

on server
- error message "ntrscan.exe cannot be found"
keeps poping up every a couple of seconds
- CPU usage reachs 70-99% all the time
- cannot open "Server Manager"
- C:\ cannot be accessed
- network browser service still running
- no virus found
- it seems server lost many functions

network:
- nobody can use network printers anymore
- workstations can still login to domain
- workstations can still access internet

- tried to install a BDC, but cannot login to
domain, "cannot find domain controller"

Any idea ?

 

[soy4soy]

Just curious, did you really restore to EXACTLY:

\\server\C:\TEMP

?

Not familiar with any recent version of ARCServer, but that syntax looks "off", though I might be pointing out a red herring here.

I would expect to see something more like:

\\server\C$\TEMP

or

\\server\C\TEMP

 

[justcurious]

Are you running Trend Micro Office Scan on that server? Try disabling it. If things get better, then uninstall and reinstall it.

Also, check out their website for FAQs on this topic.

 

[sjacct]

Thank you, everyone,

It's clear now. Let me share the experience with
everyone. There are two seperate incidents here.
1. restored ARCserve data has security issue, this
is why it cannot be opened in the first place.
It is not virus issue. In the beginning I thought
it was caused by virus.
2. According to Event Log, we found,
10/15/03, about 11pm, message "The device, \Device\Harddisk0 \Partition1, is not ready
for access yet."

88 seconds later, another message "The device,
\Device\Harddisk0\Partition1, has a bad block."

10/20/03, we boot server after chkdsk (we didn't
know partition1 went wrong.). After that, C:\ was
not accessible anymore. Because boot partition
is secord partition (D:\), the server still
runs, but lots of function lost.

Now, we are building another server to replace
first degraded server.

Thanks,