Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SQL Server does not start


  • Please log in to reply
5 replies to this topic

#1 occasus

occasus

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 July 2009 - 07:42 AM

First of all, thank you very much to the entire Community! I hope this place will help me further. I got a problem in a business, that's pretty sad.

On a machine we got UAC rootkit and Vundu virus and the popular (6 random letters).exe system process. The first 2 have been mostly eliminated but the 3rd wants to resist. So I read those articles:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
http://www.bleepingcomputer.com/startups/R....exe-23052.html

Unfortunately following the "Random 6 letter.exe" the problem was not solved, so I decided to run ComboFix, because it is a problem that I need to solve as soon as possible (someone wants to kill me)...

The actual problem is that right now a very important piece of my workstation is not-functional and there is much need to repair: the "SQL Server"...
Here follows the screenshot with both error messages I get at every startup:
Posted Image

I thank the Community very much for the help you will give me to solve this killing problem...
Thanks
occasus

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:35 PM

Posted 26 July 2009 - 07:38 PM

Please download
HERE, and download RootRepeal.zip to your Desktop.
Tutorial with images ,if needed >> L@@K.
Unzip that,(7-zip tool if needed) and then click RootRepeal.exe to open the scanner.
Next click on the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check all of the below and then click OK.

Drivers
Files
Processes
SSDT
Stealth Objects
Hidden Services


Now you'll be asked which drive to scan. Check C: and click OK again and the scan will start. Please be patient as the scan runs. When the scan has finished, click on Save Report.
Name the log RootRepeal.txt and save it to your Documents folder (it should automatically save it there).
Please copy and paste that into your next reply.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 occasus

occasus
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 27 July 2009 - 07:37 AM

Infinitely thanks garmanma for your kind repy. I did exactly what you wrote and here follows the report:
ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time:			2009/07/27 14:28
Program Version:		Version 1.3.2.0
Windows Version:		Windows XP SP3
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xF4855000	Size: 98304	File Visible: No	Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF8A85000	Size: 8192	File Visible: No	Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xF33D8000	Size: 49152	File Visible: No	Signed: -
Status: -

Hidden/Locked Files
-------------------
Path: C:\hiberfil.sys
Status: Locked to the Windows API!

==EOF==

I'm looking forward to another reply. :thumbsup:
Thanks in advance

#4 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:35 PM

Posted 27 July 2009 - 04:56 PM

I am going to run this issue by some fellow members more adept with servers

Please be patient
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#5 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:35 PM

Posted 28 July 2009 - 08:23 AM

A couple of observations from my colleagues:

looks like the SQL server services are not started so they are unable to connect.


SP3 moved some sort of file into protection(windows file) and caused a lot of grief with SQL Server where language packs didn't match


I don't know what to suggest other than uninstall SP3 and see if that helps

Edited by garmanma, 28 July 2009 - 08:23 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#6 occasus

occasus
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 04 August 2009 - 08:33 AM

Thank you a lot garmanma... Finally it looked like "something" corrupted the sql database. My friend just installed sql server agent over the actual one and now it seems to be working. Not a nice solution, anyway it works.

Thanks bie
occasus




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users