Disappearing databases - HELP!

Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
Server, using MacAfee VirusScan Enterprise
Over the lunchtime, we seem to have lost several databases from a couple of
server groups on our server!
It appears no-one was working on the server at the time.
Does anyone know if there is a virus/worm which is capable of this?
Any ideas gratefully received ;-)
TIA
SteveCyberDwarf wrote:
> Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
> Server, using MacAfee VirusScan Enterprise
> Over the lunchtime, we seem to have lost several databases from a couple of
> server groups on our server!
> It appears no-one was working on the server at the time.
> Does anyone know if there is a virus/worm which is capable of this?
> Any ideas gratefully received ;-)
> TIA
> Steve
>
Do you have Internet sites talking to these databases, and are those
sites properly protected from SQL injection attacks? Have you checked
the SQL logs to see if there are clues there? The Windows event logs?
Tracy McKibben
MCDBA
http://www.realsqlguy.com|||Tracy
Thx for your rapid reply.
No, there are no connections to this server from the Net.
Am in the process of checking the logs
Regards
Steve|||SQL Server log shows no unusual activity at all!!
Doh!|||On Wed, 9 Aug 2006 16:14:37 +0100, "CyberDwarf"
<steve.ingle@.lineone.net> wrote:
in <eWTymY8uGHA.4756@.TK2MSFTNGP02.phx.gbl>
>Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
>Server, using MacAfee VirusScan Enterprise
>Over the lunchtime, we seem to have lost several databases from a couple of
>server groups on our server!
>It appears no-one was working on the server at the time.
>Does anyone know if there is a virus/worm which is capable of this?
>Any ideas gratefully received ;-)
>TIA
>Steve
>
I've seen System Restore wipe out databases.
Stefan Berglund|||Cyber
As you're desribing the issue, it looks like (very sad to say) that
someone who has/have permissions just droped the databases. I have
experience at our shop unfortunatly.
"CyberDwarf" <steve.ingle@.lineone.net> wrote in message
news:eWTymY8uGHA.4756@.TK2MSFTNGP02.phx.gbl...
> Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
> Server, using MacAfee VirusScan Enterprise
> Over the lunchtime, we seem to have lost several databases from a couple
> of server groups on our server!
> It appears no-one was working on the server at the time.
> Does anyone know if there is a virus/worm which is capable of this?
> Any ideas gratefully received ;-)
> TIA
> Steve
>

Disappearing databases - HELP!

Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
Server, using MacAfee VirusScan Enterprise
Over the lunchtime, we seem to have lost several databases from a couple of
server groups on our server!
It appears no-one was working on the server at the time.
Does anyone know if there is a virus/worm which is capable of this?
Any ideas gratefully received ;-)
TIA
SteveCyberDwarf wrote:
> Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
> Server, using MacAfee VirusScan Enterprise
> Over the lunchtime, we seem to have lost several databases from a couple o
f
> server groups on our server!
> It appears no-one was working on the server at the time.
> Does anyone know if there is a virus/worm which is capable of this?
> Any ideas gratefully received ;-)
> TIA
> Steve
>
Do you have Internet sites talking to these databases, and are those
sites properly protected from SQL injection attacks? Have you checked
the SQL logs to see if there are clues there? The Windows event logs?
Tracy McKibben
MCDBA
http://www.realsqlguy.com|||Tracy
Thx for your rapid reply.
No, there are no connections to this server from the Net.
Am in the process of checking the logs
Regards
Steve|||SQL Server log shows no unusual activity at all!!
Doh!|||On Wed, 9 Aug 2006 16:14:37 +0100, "CyberDwarf"
<steve.ingle@.lineone.net> wrote:
in <eWTymY8uGHA.4756@.TK2MSFTNGP02.phx.gbl>

>Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
>Server, using MacAfee VirusScan Enterprise
>Over the lunchtime, we seem to have lost several databases from a couple of
>server groups on our server!
>It appears no-one was working on the server at the time.
>Does anyone know if there is a virus/worm which is capable of this?
>Any ideas gratefully received ;-)
>TIA
>Steve
>
I've seen System Restore wipe out databases.
Stefan Berglund|||Cyber
As you're desribing the issue, it looks like (very sad to say) that
someone who has/have permissions just droped the databases. I have
experience at our shop unfortunatly.
"CyberDwarf" <steve.ingle@.lineone.net> wrote in message
news:eWTymY8uGHA.4756@.TK2MSFTNGP02.phx.gbl...
> Running SQL Server 2000 - patched up to date, behind firewall, on Win2003
> Server, using MacAfee VirusScan Enterprise
> Over the lunchtime, we seem to have lost several databases from a couple
> of server groups on our server!
> It appears no-one was working on the server at the time.
> Does anyone know if there is a virus/worm which is capable of this?
> Any ideas gratefully received ;-)
> TIA
> Steve
>

Disabling firewall only way to connect, was working

Well, I discovered my once-working web app is failing to connect to SQL Server.
I had the windows Firewall running and working with a non-standard port and
responding to subnet only.
Windows update is configure to auto install. At some point in late December
the machine was rebooted. Coincidentally, after that, the only way to make
the connection work was to completely disable the windows firewall. Not an
option.
Windows 2003 - With latest critical updates from MS
SQL Server 2005 SP1
SQL and IIS are on separate machines.
TCP is the only enabled protocol for SQL
VS.Net 2005, using System.Data.SqlClient
Connection string is: Data Source=nnn.nnn.nnn.nnn,9919;Initial
Catalog=dbname;User Id=yourname;Password=yourpassword
I have tried moving SQL back to PORT 1433, and added sqlsvrer.exe as an
acceptable application, but it did not work.
MS SQL Server Management Studio does not connect with firewall enabled.
I was able to connect our production web application to our development
database. I was not able to connect our development server's version to the
production database. Both production and development have the same firewall
settings and MS updates. So, I am guessing there is something very wrong with
our production SQL?
Not sure if this is related, but I have noticed a 10 or so second lag
between Remote Desktop access initiation and an answer. On our
web servers the answer is near instant. Once in, it works fine. We are on
a very large network.
Any ideas? Am I missing a port?
Nevermind. Fixed.
Removed and recreated firewall setting for SQL. Also, the default gateway
was not the same between machines. These had not been modified in over 6
months.
Seems to work now.
"Devin" wrote:

> Well, I discovered my once-working web app is failing to connect to SQL Server.
> I had the windows Firewall running and working with a non-standard port and
> responding to subnet only.
> Windows update is configure to auto install. At some point in late December
> the machine was rebooted. Coincidentally, after that, the only way to make
> the connection work was to completely disable the windows firewall. Not an
> option.
> Windows 2003 - With latest critical updates from MS
> SQL Server 2005 SP1
> SQL and IIS are on separate machines.
> TCP is the only enabled protocol for SQL
> VS.Net 2005, using System.Data.SqlClient
> Connection string is: Data Source=nnn.nnn.nnn.nnn,9919;Initial
> Catalog=dbname;User Id=yourname;Password=yourpassword
> I have tried moving SQL back to PORT 1433, and added sqlsvrer.exe as an
> acceptable application, but it did not work.
> MS SQL Server Management Studio does not connect with firewall enabled.
> I was able to connect our production web application to our development
> database. I was not able to connect our development server's version to the
> production database. Both production and development have the same firewall
> settings and MS updates. So, I am guessing there is something very wrong with
> our production SQL?
> Not sure if this is related, but I have noticed a 10 or so second lag
> between Remote Desktop access initiation and an answer. On our
> web servers the answer is near instant. Once in, it works fine. We are on
> a very large network.
> Any ideas? Am I missing a port?
>

Disabling firewall only way to connect, was working

Well, I discovered my once-working web app is failing to connect to SQL Serv
er.
I had the windows Firewall running and working with a non-standard port and
responding to subnet only.
Windows update is configure to auto install. At some point in late December
the machine was rebooted. Coincidentally, after that, the only way to make
the connection work was to completely disable the windows firewall. Not an
option.
Windows 2003 - With latest critical updates from MS
SQL Server 2005 SP1
SQL and IIS are on separate machines.
TCP is the only enabled protocol for SQL
VS.Net 2005, using System.Data.SqlClient
Connection string is: Data Source=nnn.nnn.nnn.nnn,9919;Initial
Catalog=dbname;User Id=yourname;Password=yourpassword
I have tried moving SQL back to PORT 1433, and added sqlsvrer.exe as an
acceptable application, but it did not work.
MS SQL Server Management Studio does not connect with firewall enabled.
I was able to connect our production web application to our development
database. I was not able to connect our development server's version to the
production database. Both production and development have the same firewall
settings and MS updates. So, I am guessing there is something very wrong wit
h
our production SQL?
Not sure if this is related, but I have noticed a 10 or so second lag
between Remote Desktop access initiation and an answer. On our
web servers the answer is near instant. Once in, it works fine. We are on
a very large network.
Any ideas? Am I missing a port?Nevermind. Fixed.
Removed and recreated firewall setting for SQL. Also, the default gateway
was not the same between machines. These had not been modified in over 6
months.
Seems to work now.
"Devin" wrote:

> Well, I discovered my once-working web app is failing to connect to SQL Se
rver.
> I had the windows Firewall running and working with a non-standard port an
d
> responding to subnet only.
> Windows update is configure to auto install. At some point in late Decembe
r
> the machine was rebooted. Coincidentally, after that, the only way to make
> the connection work was to completely disable the windows firewall. Not a
n
> option.
> Windows 2003 - With latest critical updates from MS
> SQL Server 2005 SP1
> SQL and IIS are on separate machines.
> TCP is the only enabled protocol for SQL
> VS.Net 2005, using System.Data.SqlClient
> Connection string is: Data Source=nnn.nnn.nnn.nnn,9919;Initial
> Catalog=dbname;User Id=yourname;Password=yourpassword
> I have tried moving SQL back to PORT 1433, and added sqlsvrer.exe as an
> acceptable application, but it did not work.
> MS SQL Server Management Studio does not connect with firewall enabled.
> I was able to connect our production web application to our development
> database. I was not able to connect our development server's version to t
he
> production database. Both production and development have the same firewa
ll
> settings and MS updates. So, I am guessing there is something very wrong w
ith
> our production SQL?
> Not sure if this is related, but I have noticed a 10 or so second lag
> between Remote Desktop access initiation and an answer. On our
> web servers the answer is near instant. Once in, it works fine. We are o
n
> a very large network.
> Any ideas? Am I missing a port?
>