Windows NT Server Keeps Restarting

Any help is appreciated, and I am new to this site so sorry in advance if I don't give enough info.

Our office has 8 computers running Windows 98Sed. The server is Windows NT. I just recently took on the job of keeping it all running smoothly, but I do not believe that there are any microsoft updates applied to the server. I apply most all of the updates to the laptops. We have Norton Corporate Ed software which I update weekly.

We have cable modem with a local company and a Netgear router with a built in firewall. For no reason that I can see, the server has begun (12/9) to restart itself over and over. It will not stop. It was suggested that it is a worm, but I don't know where to begin to fix the problem

Help!?

Jessica

 

The first step is defining the error or message that comes up before it reboots

 

Jessica,

Welcome to the exciting world of Majorgeeks, and IT management. Here is what I would do if I was you.

1.) Pray to god that you guys have backups set up just in case.
2.) He is right, you need to watch the server and see if you can see what happens right before it restarts.
3.) Is it restarting immediatlly? Or does it wait a little bit?
4.) What changes were made the the server recentlly? Software, moves, etc?


There is more but we will worry about those when you get this issue resolved. Stick around you can learn a lot, and we can get your office running really smooth.

 

Thanks for helping

The server screen gles blank right before restart - no pop messages, or anything. I am gonna list the items in task manager if anything sounds fishy let me know please.

System idle process
System
Smss.exe
Csrss.exe
Winlogon.exe
Services.exe
Lsass.exe
Pds.exe
Spoolss.exe
Xfr.exe
RpaSs.exe
Msdtc.exe
Nddeagnt.exe
Alert server.exe
Ups.exe
Explorer.exe
Awhost32.exe
PROMon.exe
Loadwc.exe
Vptray.exe
Benser.exe
Nsvr.exe
Cisvc.exe
Defwatch.exe


After I log on the logon screen reads:

System error 85 has occurred.
The local device name is already in use

I am then logged into the server, norton corporate and pc anywhere autostart. The server is on about 2 mins and then restarts. It has restarted all day long.

We have a good backup. The last 30 days are on seperate backup tapes.

 

the system 85 error message
http://support.microsoft.com/default.aspx?kbid=271183

 

Kodo is on the ball, start there and let us know what happens.

 

Heres the status thus far:

I had a user logging into the network w/no virus protection on laptop. Installed NAV Corp Ed - scanned hard drive - found 17 different virus's on system - quarentined all but 4 of them....

Found fix tools for 1st w32.Welchia worm. After removal I scanned w/NAV and the software quartined the rest. Began looking for info on these virus's in relation to win NT server issue thought maybe it was like the blaster. After 7 hours of research - my boss approved a company to look for me.

1. They discovered NAV software on sever was not working
2. They changed server settings - automatic restart instead of blue screen w/error message was set ??? changed to get the message.
3. Message indcated hard ware failure - advised we would need to reinstall win nt or reinstall network controller drivers, start over w/new server, or install windows 2003 on same server. My boss is thinking over the situation should know what office is going to do early tomorrow.

PS we tried the reinstallation of the network controller drivers - but that did not fix the problem. Also, a new software for virus protection was installed... inocculate was the name of it - it seems to be working although no virus's were detected on server.

Thank you to everyone who helped and gave great info to me - I look forward to posts in the future