|
|||||||
|
|
|
 |
|
|
Strumenti |
10-07-2008, 09:34
|
#1 |
|
Junior Member
Iscritto dal: Jul 2008
Messaggi: 2
|
Shut down continuo di lama blade ibm
Ciao a tutti, ho un problema molto urgente con una lama di un ibm blade con windows 2003 srv r2.
Da diversi giorni si spegne da solo dopo un tot di tempo (in genere alle 22/23 la sera e tre volte in mattinata a distanza di un'ora), l'assistenza ibm è già intervenuta cambiando la scheda madre, le ram e la cpu, ma senza risultato. Ho provato a fare tante scansioni antivirus (il srv comunque ha già sophos in dotazione), ma senza risultato. Il server è sotto ups e non dà nessuna segnalazione di temperatura (la sala ced è sui 18 gradi comunque). Capirete che con 100 utenti collegati (il srv in questione gestisce cartelle di rete e posta), me la stò passando un po' male. Allego la scansione che ho fatto con hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9.27.52, on 10/07/2008 Platform: Windows 2003 SP2 (WinNT 5.02.3790) MSIE: Internet Explorer v6.00 SP2 (6.00.3790.3959) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\Backup Exec\RAWS\beremote.exe C:\WINDOWS\system32\Dfssvc.exe C:\WINDOWS\System32\dns.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\IBMIASRW.EXE C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\WINDOWS\System32\ismserv.exe C:\Lotus\Domino\nservice.exe C:\WINDOWS\system32\ntfrs.exe C:\Lotus\Domino\nSERVER.EXE C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe C:\Program Files\Sophos\AutoUpdate\ALsvc.exe C:\Program Files\Sophos\Remote Management System\RouterNT.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\VMware\VMware Server\vmware-authd.exe C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe C:\WINDOWS\system32\vmnat.exe C:\WINDOWS\System32\wins.exe C:\WINDOWS\system32\nfsclnt.exe C:\WINDOWS\system32\Dfsr.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\vmnetdhcp.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\mapsvc.exe C:\WINDOWS\system32\nfssvc.exe C:\Lotus\Domino\nevent.EXE C:\Program Files\VMware\VMware Server\vmserverdWin32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\VMware\VMware Server\bin\vmware-vmx.exe C:\Lotus\Domino\nUpdate.EXE C:\Lotus\Domino\nReplica.EXE C:\Lotus\Domino\nRouter.EXE C:\Lotus\Domino\nAMgr.EXE C:\Lotus\Domino\nAdminP.EXE C:\Lotus\Domino\nCalConn.EXE C:\Lotus\Domino\nSched.EXE C:\Lotus\Domino\namgr.EXE C:\Lotus\Domino\nmtc.EXE C:\Lotus\Domino\nCldbdir.EXE C:\Lotus\Domino\nClrepl.EXE c:\windows\system32\inetsrv\w3wp.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Symantec\Backup Exec\RAWS\vxmon.exe C:\Program Files\Sophos\AutoUpdate\ALMon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\administrator.HUTCHINSON_Y2K\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/softAdmin.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdoclc.dll/softAdmin.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 10.32.12.201:8009 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 10.*;*.corp.local;*.enxo.org;*.hutchinson.*;<local> O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O4 - HKCU\..\Run: [VxBeMon] "C:\Program Files\Symantec\Backup Exec\RAWS\vxmon.exe" O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user') O4 - Global Startup: AutoUpdate Monitor.lnk = C:\Program Files\Sophos\AutoUpdate\ALMon.exe O15 - ESC Trusted Zone: http://groups.google.it O15 - ESC Trusted Zone: http://www.google.it O15 - ESC Trusted Zone: http://h20000.www2.hp.com O15 - ESC Trusted Zone: http://h20180.www2.hp.com O15 - ESC Trusted Zone: http://welcome.hp.com O15 - ESC Trusted Zone: http://www.hp.com O15 - ESC Trusted Zone: http://www.ibm.com O15 - ESC Trusted Zone: http://www-03.ibm.com O15 - ESC Trusted Zone: http://www-1.ibm.com O15 - ESC Trusted Zone: http://www-304.ibm.com O15 - ESC Trusted Zone: http://www.sinfo.it O15 - ESC Trusted IP range: http://10.35.178.16 O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/h...ivex/hcImpl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows...b?1188391592727 O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} (Domino Web Access 7 Control) - http://www.sinfo.it/dwa7W.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Hutchinson.y2k O17 - HKLM\Software\..\Telephony: DomainName = Hutchinson.y2k O17 - HKLM\System\CCS\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: Domain = rivo.hut.chem.corp.local O17 - HKLM\System\CCS\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: NameServer = 10.35.178.15,10.35.178.10 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Hutchinson.y2k O17 - HKLM\System\CS1\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: Domain = rivo.hut.chem.corp.local O17 - HKLM\System\CS1\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: NameServer = 10.35.178.15,10.35.178.10 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Hutchinson.y2k O17 - HKLM\System\CS2\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: Domain = rivo.hut.chem.corp.local O17 - HKLM\System\CS2\Services\Tcpip\..\{2335F7D0-E36A-4E64-828C-57D2C7AB6CD0}: NameServer = 10.35.178.15,10.35.178.10 O20 - AppInit_DLLs: C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Backup Exec Remote Agent for Windows Systems (BackupExecAgentAccelerator) - Symantec Corporation - C:\Program Files\Symantec\Backup Exec\RAWS\beremote.exe O23 - Service: IBM Automatic Server Restart Service for IPMI (ibms6asr) - IBM Corporation - C:\WINDOWS\system32\IBMIASRW.EXE O23 - Service: Lotus Domino Server (ARIVOSMM02) - IBM Corp - C:\Lotus\Domino\nservice.exe O23 - Service: Crea report sullo stato di Sophos Anti-Virus (SAVAdminService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe O23 - Service: Sophos Agent - Sophos Plc - C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe O23 - Service: Sophos Message Router - Sophos Plc - C:\Program Files\Sophos\Remote Management System\RouterNT.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe O23 - Service: VMware Registration Service (vmserverdWin32) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmserverdWin32.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe -- End of file - 7957 bytes Potete aiutarmi a capire il problema? Grazie a tutti. Carlo |
|
|
|
10-07-2008, 17:00
|
#2 |
|
Senior Member
Iscritto dal: May 2003
Città: venezia
Messaggi: 18956
|
Piu che un problema software verrebbe da pensare che si tratti di un problema hardware , alcune parti sono gia state sostituite quindi le puoi escludere , controlla eventualmente ups e l' alimentatore .
|
|
|
|
|
22-07-2008, 13:39
|
#3 |
|
Member
Iscritto dal: Aug 2000
Messaggi: 224
|
Spero che tu abbia già risolto, altrimenti:
1] Consiglio vivamente di porre in manuale il servizio "IBM Automatic Server Restart Service" (e facci sapere) 2] Scarica il IBM UpdateXpress CD e fagli aggiornare tutto quello che puoi (anche dell'Hypervisor del Blade) In bocca al lupo PAP400 P.S.: sicuro che non ci siano bugcheck ? |
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 23:50.
