Re: Systems all over the network are rebooting spontaneously at the same time!

From: Steven Ung (steven_at_nodomainname.com)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 14:39:14 +0800

"Ben" <anonymous@discussions.microsoft.com> wrote in message
news:a4f301c406b4$f16ae150$a401280a@phx.gbl...
> As from yesterday several computers(6) and a few servers
> (3) across the entire network got the error code 128 on %
> \systemroot%\system32\services.exe and started to shut
> down after 60 seconds.
> We tried to find what caused the problem but noting showed
> up.
> Last night the same thing happened only on larger scale.
> Now 13 servers were rebooted with the same error message.
> Again nothing showed up in event logs or firewall traffic
> logs.
> This afternoon the same thing happened but again more
> bigger as before. About 70 computers and a lot of servers
> all over our network and different subnets started to
> reboot after the services.exe error message.
>
> We cannot find anything that causes this very strange
> problem.
>
> We are sure that none of the affected pc's are infected by
> any know virus (Blaster etc).
> All machines are running windows 2000 SP4.
> No strange services are running and no tasks are scheduled.
> No strange events are shown, only the unexpected shutdown
> occurred message.
> No strange network traffic can be found in the firewall
> logs. (no broadcast from a certain pc for shutdown or
> something).
>
> Does anyone know what is happening over here?
>
> Thank you very much in advance.

Some of the PCs on our network shows the same symptoms. I tried all
Anti-virus known to man to scan the infected computer (scaned using NAV,
Housecall etc), but none shows that the PC is infected.

1. Task manager shows 100% CPU Utilization and there are no weird services
running.
2. Automatically shuts down Windows, DOS applications, or REGEDIT after a
few seconds.
3. Rapidly transfer data to/from network, causing the PC to lose connection
to the network, and worst locking the the entire network segment.
4. When Win2000 startup, we can observe 3 DOS like windows executing, but
unable to read what it is executing.

I'm really stumped!

(Ps. Sorry, my English sucks as it is not my first language) 

-- 
Steven Ung
"The source of all greatness lies within you" - Anonymous

Relevant Pages

  • Re: Systems all over the network are rebooting spontaneously at the same time!
    ... >> Now 13 servers were rebooted with the same error message. ... >> Again nothing showed up in event logs or firewall traffic ... >> No strange services are running and no tasks are scheduled. ... >> No strange network traffic can be found in the firewall ...
    (microsoft.public.win2000.general)
  • Spontaneously reboots all over LAN
    ... across the entire network got the error code 128 on % ... Now 13 servers were rebooted with the same error message. ... Again nothing showed up in event logs or firewall traffic ... No strange services are running and no tasks are scheduled. ...
    (microsoft.public.win2000.general)
  • Various restarts all over LAN at the same time
    ... across the entire network got the error code 128 on % ... Now 13 servers were rebooted with the same error message. ... Again nothing showed up in event logs or firewall traffic ... No strange services are running and no tasks are scheduled. ...
    (microsoft.public.win2000.networking)
  • spontaneously reboots across network
    ... across the entire network got the error code 128 on % ... Now 13 servers were rebooted with the same error message. ... Again nothing showed up in event logs or firewall traffic ... No strange services are running and no tasks are scheduled. ...
    (microsoft.public.win2000.general)
  • Systems all over the network are rebooting spontaneously at the same time!
    ... across the entire network got the error code 128 on % ... Now 13 servers were rebooted with the same error message. ... Again nothing showed up in event logs or firewall traffic ... No strange services are running and no tasks are scheduled. ...
    (microsoft.public.win2000.networking)
Loading