I think I know what happed to corrupt dns. Im thinking that sysadmin did copy samba/dns/private when samba was running. And when something broken restore to that version. I know that at Backup wiki there is a info about not doing backup of running samba, but mayby adding "why" not to do that would open some eyes. Thanks