Re: Networking Issues



Ok, I have made some progress, but I am still facing internet drop
outs. I have no idea how frequent, or for how long these are occuring.

I noticed in Routing and Remote Access that there was an entry under
"IP Routing" > "NAT/Basic Firewall" from a dial-up modem we used (in
desperation) after an outage with our ISP. I deleted this and ran
CEICW again and it succeeded, but some emails are still going to our
POP accounts.

What can I do to help me pin point the source of the problem? Is there
any logging I could do both on the server and another machine (win xp)
connected directly to the router to determine if the problem is after
the router (i.e. caused by the router, the modem or our ISP?)

Would it be easiest to just buy a new NIC and hope for the best?


Thanks,

Chris

On 13 Aug, 11:07, chrisbeedie <chris.bee...@xxxxxxxxx> wrote:
Larry,

Thank you for your response.

I ran a scan with NOD32, which came up clean (other than bits of spam
that had already been quarantined). Malware Bytes found two,
serauth1.dll and serauth2.dll. No one seems to be very sure about
these files, many stating that they are false positives. For the time
being I left them.

The PCASp50.sys problem seems to be related to the fact i am no longer
using the Linksys NIC. Given that the driver itself is missing am I
best to get a copy of the driver and put it in the folder it is
expecting it, or delete the entry that is trying to start it from the
registry?

I have had a look at the link you sent through for the MSDTC error,
but will have to wait until the weekend before I can try any of them.
Is it likely that this is even related?

What is the best way for me to track down why our internet connection
keeps dropping? At the moment I am still unclear which link in the
chain is causing it (ISP, modem, router,networkcard, software).

As the ICWLog states the problem to be with "clearing static routes"
could the connection be dropping any time the server tries routing
something down an old static route that no longer exists? Is there a
way to manuallly clear static routes?

Thanks again,

Chris

On 8 Aug, 17:13, "Larry Struckmeyer [SBS-MVP]" <lstruckme...@mis-

wizards.com> wrote:
Hi Chris:

The PCASp50 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

That one appears to be a piece of malware.  Do a through scan with your
existing AV along with Malware Bytes and see if you turn up anything.

For this one:

Event Type: Warning
Event Source: MSDTC
Event Category: SVC
Event ID: 53258

look at the link below and see if it helps.

http://www.eventid.net/display.asp?eventid=53258&eventno=4493&source=...

After you did the fixes you did are you still failing the CEICW?

Any other events or messages that look "not normal"

--
Larry
Please post the resolution to your
issue so that others may benefit.

Get a Health Check for SBS at:www.sbsbpa.com

"chrisbeedie" <chris.bee...@xxxxxxxxx> wrote in message

news:a6ab7a7e-62b5-4487-b37f-899b569e9557@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I was wondering if anyone could please help with some networking
troubles on SBS 2003 R2.

The server (Dell Poweredge 1800) has been running fine for 2 years,
but after installing some updates (including WSUS 3) and rebooting,
the server got confused about one of thenetworkcards installed and
was reporting limited or no connectivity. It showed in device manager
that the internet facing card (we have two NICs, one for LAN and one
for Internet) was an "ADM" branded card, when infact it was (and had
previously been recognised as) a Linksys.

I tried to run CEICW, but it failed at thenetworkstage. I needed to
get this fixed quickly, so I salvaged a Netgear NIC from another
machine and replaced the Linksys card with it.

I tried to run CEICW again, but it errored at the same part.
Thankfully i managed to set everything up manually and it appeared to
be working OK. Looking at the ICWlog it appears to fail at this stage:

Error 0x80070389 returned from call to Clearing all static routes().
Error 0x80070389 returned from call to CNetCommit::Common().
Error 0x80070389 returned from call to CNetCommit::Commit().

Following another post, I have deleted the ghost entries for the
Linksys, and the ADM card from device manager,disabled routing and
remote access, and tried CEICW again, but still no joy.

Further to this, a couple of days ago I noticed that several emails
were being routed to our backup mail server (just some POP3 accounts
with our ISP). It appears as if we are losing connection
intermittently. I'm not sure if this is related to the problems above,
a faultynetworkcard, orissueswith our ISP. How is best to go about
diagnosing this?

I can see in event viewer this entry:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 08/08/2009
Time: 14:00:21
User: N/A
Computer: ITSERVER
Description:
The PCASp50 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center athttp://go.microsoft..com/fwlink/events.asp.

And this one (not sure if it is related, but confused as to why it it
thinks it needs to do a promo/demo):

Event Type: Warning
Event Source: MSDTC
Event Category: SVC
Event ID: 53258
Date: 08/08/2009
Time: 13:59:43
User: N/A
Computer: ITSERVER
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS
DTC will continue to function and will use the existing security
settings. Error Specifics: d:\nt\com\complus\dtc\dtc\adme\uiname.cpp:
9351, Pid: 1324
No Callstack,
 CmdLine: C:\WINDOWS\system32\msdtc.exe

For more information, see Help and Support Center athttp://go.microsoft..com/fwlink/events.asp.
Data:
0000: 05 00 07 80               ...?

Any help would be greatly appreciated.

Thanks,

Chris

.



Relevant Pages

  • Re: explorer.exe freezes
    ... I think the thing to do here is replace my card for starters. ... early versions of USB were much slower than USB 2. ... I've had this card for about 3 years, before the USB connection ... slowest way to connect to the internet. ...
    (microsoft.public.windowsxp.general)
  • Re: Service Pack 2
    ... with servers on the Internet: ... The server is not functioning correctly or has been temporarily ... The TCP/IP configuration for your dial-up connection to your ISP is ...
    (microsoft.public.windowsxp.basics)
  • Re: WARCRAFT III HELP ME NOW!
    ... it always says "Your internet connection has been ... HOW TO IMPROVE YOUR CONNECTION: ... Advanced Users should Reinstall ICS and Networking Components: ... Once done power off, unplug, reinstall the card, and create a new connection. ...
    (microsoft.public.games)
  • Re: explorer.exe freezes
    ... I've had this card for about 3 years, before the USB connection version was ... a laptop with a pc/mcia wireless broadband card for Internet access. ...
    (microsoft.public.windowsxp.general)
  • Re: Dell axim X51V issues
    ... > card unless soft reset with card OUT then card placed in. ... > to acess the internet ... ... > accept that it was NOT going to get that connection). ... >> for the Bluetooth, apparently Microsoft did not include good Bluetooth ...
    (microsoft.public.pocketpc)

Quantcast