sqlservr.exe doesn't stop

[est...@att.net]

I noticed that my computer leaks my internet connection I ran my virus
checking software but it didn't show me anything.
But what I noticed was ...
I have SQL SERVER 2000 Developer installed on my computer. SQLSERVR.EXE
take all available processor time without me asking it to do it. I can not
stop it through Service Manager and if I do it just "stopping" for ever and
won't let me restart again. (I can't work on it). I tries to stop the
process through Task Manager but it did not let me do that. I restarted my
computer but as soon as I tried to access SQL Server I had the same problem.
Did I get some kind of virus?
Can anyone help?
Thanks.

[Vincent Lozupone]

From Services or Serice Manage -set all SQL services to
manual, then start machine. Make sure that you SP2
installed then apply 039 patch or SP3.

>.
>

[est...@att.net]

It is getting more interesting. When I am on - line sqlservr.exe does not
take cpu time but I still can not stop the server
Thaks.
Shimon
"shim...@talamus.com" <est...@att.net> wrote in message
news:#x8Nf#OxCHA.2196@TK2MSFTNGP10...

[Hari]

Have you tried stopping sql server from the command prompt using:

net stop mssqlserver

or

net stop mssql$instancename

Have you applied the latest security path or SP3?

Can you try disconnecting the box from the network and do troubleshooting to
make sure you are not getting affected by the worm?

"shim...@talamus.com" <est...@att.net> wrote in message

news:OgPJ5HPxCHA.1712@TK2MSFTNGP10...

[Steve Kass]

Ending the process from Windows Task Manager worked for me...

SK

[tomlee]

I have same problem on my computer from last night.My CPU
processor has been taken 100% by SQLSERVR.EXE, can't stop
this service and no any related error log was found.
1. I have reinstalled my SQL2K, but no useful.
2. If set SQL to manully start,everything OK before SQL
starting.
3. I believe this is a new worm, but Norton Antivirus
cann't report it.
4. SQL SP3 was installed on my computer.
How to resolve it? please give me a suggest.

>.
>

[est...@att.net]

Did you notice that you internat connection is been used even if you do not
do eanything with it?
Shimon
"tomlee" <tom_...@msn.com> wrote in message
news:069401c2c511$30d693c0$d4f82ecf@TK2MSFTNGXA11...

[est...@att.net]

I found that MS found new attack "Slammer"
May that what it is.
If anybody is sure about this please confirm.

Shimon
"shim...@talamus.com" <est...@att.net> wrote in message
news:#x8Nf#OxCHA.2196@TK2MSFTNGP10...

[tomlee]

No,but I got a lot of error logs indicate someone try to
log on to my local domain and failed. I don't think they
are related. yesterday I heared a news about a worm is
currently spreading in the wild to effect those server
with SQL. Do you that is the reason? Did you read this:
http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/security/
virus/alerts/slammer.asp
Tell me what are you thinking?
Tom

>.
>

[est...@att.net]

I think that I got rid of it. I did read the info that you showed me. I
really think that this is result of "Slammer" but it is not so important
anymore. I do not have the problem. So I can go back to work... I guess till
next attack
Thanks, Shimon.

"tomlee" <tom_...@msn.com> wrote in message

news:020c01c2c59f$fda2c4d0$d6f82ecf@TK2MSFTNGXA13...

[Alvin Zhao[MSFT]]

Hi Shimon,

There is a virus attack called slammer these days. At approximately 9:30 PM
PST Friday January 24th, Microsoft became aware of an Internet attack
causing a dramatic increase in network traffic worldwide. Microsoft
immediately began investigating the issue and learned of a virus targeting
SQL Server 2000 and MSDE 2000 machines not updated with the most current
security patches.

The "Slammer" worm is an Internet worm targeting un-patched SQL Server 2000
and MSDE 2000 systems resulting in a high volume of network traffic on both
the Internet and private internal networks. This virus does not appear to
attack the data of infected systems, but has had a wide impact on
performance and availability. Typical home users' machines, however, are
not affected. We are working around the clock to ensure our affected
customers are protected. When the machine is attacked by the slammer, Your
network would be overloaded.

We strongly encourage SQL Server 2000 and MSDE 2000 customers who have
systems that have not been updated to immediately install the latest patch
(MS02-061) or SP 3 to correct this vulnerability. Customers that have any
ongoing issues should visit http://www.microsoft.com/security, contact the
Microsoft Anti-Virus hot line at 1-866-PCSAFETY, Microsoft product support
or your anti-virus vendor. Microsoft's support for virus-related issues
is, of course, always free. Methods for contacting support can be found at
http: www.support.microsoft.com.

Sincerely,

Alvin Zhao
Microsoft Support

This posting is provided "AS IS" with no warranties, and confers no rights.