Re: auto-started services not running -QUESTION

I'd make the viruses the priority here. You need to take whatever steps
necessary to get all the malware out of the network.

None of those errors look significant unless you're getting them more than
very occasionally.


"lfheb" <lfheb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:38650D77-B2F9-4D89-B970-38D963EB31BD@xxxxxxxxxxxxxxxx
Dave,

Thanks for the response and advice...

I can't recall if I chose the option to reinstall monitoring features...
nonetheless, I will run it again and pay closer attention.
The other alerts I am receiving are:
6702 - DNS server has updatd it's own host records.
1002 - Application Hang mmc.exe, version 5.2.3790.0, hang module
user32dll,
version 5.2.3790.245, hang address 0x00032074
1000 - Application Errorfaulting application spoolsv.exe, version
5.2.3790.346, faulting module ntdll.dll, version 5.2.3790.0, fault address
0x00006b0f
1111 - TermServDevices. Driver Amyuni Document Converter 2.50 required for
Quicken PDF Printer Converter is unknown. Contact the administrator to
install the driver before you log in again
8003 - MRxSmb. The master browser has received a server announcement from
the computer "computer name" that believes that it is the master browser
for
the domain on transport NetBT_Tcpip_{AEE8515E-4CC3-481. The master browser
is
stopping or an election is being forced.

The above are the other errors; as well as three viruses on my clients'
machines.


Thanks,
luke
--
lfheb


"Dave Nickason [SBS MVP]" wrote:

When you re-ran the wizard, did you select the option to "reinstall
monitoring features?" If not, I'd try that one. If it's still not
working
normally, the only other thing I could suggest would be to call MS
support
and let them sort it out.

It's completely normal for the Performance Logs and Alerts service to
start
and stop as it's needed - what are they suspicious of? Do you have any
other symptoms going on besides the alert?


"lfheb" <lfheb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6C9519B3-F1A6-4C53-A03D-25D6B604EFF3@xxxxxxxxxxxxxxxx
Dave,
I reran the wizard to configure alerts and I'm still receiving the same
error! My superiors are very suspicous; and are getting concerned. I
need
some sort fo fix.

THanks,
Luke
--
lfheb


"Dave Nickason [SBS MVP]" wrote:

Event log should be checked. I'm not sure why that entry started
appearing.
If I had to guess, my guess would be that the performance logs service
is
generally running when the report is generated, but in your case it's
not
for some reason. What I'd do is to re-run the wizard to configure
monitoring and see if that fixes it.


"lfheb" <lfheb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D0A0F5FD-FD41-4067-B462-3FA53EC28D20@xxxxxxxxxxxxxxxx
the event log is checked under the services tab, on change alert
notifications... I do not know if it has always been checked or
what...
this
still does not explain why I am receiving these all of a sudden.
--
lfheb


"Dave Nickason [SBS MVP]" wrote:

Performance logs and alerts service is set to automatic startup,
but
it
only
actually runs when it's got something to do. It's normal for it to
be
stopped most of the time.

If you go into Monitoring on the Server Mgmt Console and click
Change
Alert
Notifications, on the Services tab, does it appear there with the
box
checked? If so, clear the check box, which should stop monitoring
for
that
service, thereby stopping the needless alerts.


"lfheb" <lfheb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BED8203E-2AEF-4360-B407-58FC0CD6150D@xxxxxxxxxxxxxxxx
TO the experts out there in the world, here is a simple
question...
Why am I receiving the following in my Server Performace Report:
Auto-Started Services Not Running
Service Name
Performance Logs and Alerts
Total auto-started services not running:1
In normal conditions, these services should be running. For
details,
it
is
recommended that you review errors in the Event log related to
the
service.

*when I check in Services, I see that performance logs and alerts
is
stopped; and when I attempt to start it, it starts and stops
suddenly...
is
this being caused by a hack??????
*Why am I receiving this alert, yet still receiving the server
performance
report????
*If this is ignorable, why am I receiving this alert to begin
with????

Thank you Obi Wan,

Luke
LEAP Engineering
--
lfheb











.