MS Sql server 2005 login failed problem

[mac_sak]

Hi to all,

In my server , ms msql server 2005 installed  and everything fine before few days, but now I have some new problem.
the problem is after 9.30pm(approx...)  when login ms sql server using 'sa' , the result is login failed user 'sa'.

in my c: drive have 8GB free space,
the password is correct,
the service is in 'started' status in services,

after server restarted everything fine , login successfully and working. then after 9.30pm again login problem.

So, Whats the problem? How to solve this.
thanks
Sakthi.

[Allan]

No need to post the same question more than once. I deleted the duplicate thread.

[mac_sak]

please provide the link which is solved post. then u may delete.

[Rob Pomeroy]

Please post the failure event(s) from Application Log, System Log and/or Security Log.

[patio]

please provide the link which is solved post. then u may delete.

Quote of the Month Finalist...

[mac_sak]

thanks for your reply!

There is no event occur during ms sql server failure.

during night time(9.30pm approx..) when i try to connect sql server

below line found in event viewer.
Failure Audit  , Event ID : 18456 Login failed for user 'sa'. [CLIENT: 10.10.1.47]

But
The file E:\General\SysDrv32.exe contains W32/IRCBot.worm.c Virus.  The file was successfully deleted.
found in event viewer.

the following was occur during working time .
BACKUP LOG WITH TRUNCATE_ONLY or WITH NO_LOG is deprecated. The simple recovery model should be used to automatically truncate the transaction log.

[Rob Pomeroy]

The file E:\General\SysDrv32.exe contains W32/IRCBot.worm.c Virus.  The file was successfully deleted.

Uh-oh.  Please try posting in the malware forum.

[mac_sak]

I uninstall sql server 2005 and install 2008 R2 but the problem not solve. Finally i move the db to another machine. Now there is no problem regarding sa login failed.

But the previous machine have network related problem. in task manager "wlcollector.exe" make end process everything  is fine. wlcollector.exe occupy the tcp port after certain time.

[Rob Pomeroy]

Uh-oh.  Please try posting in the malware forum.