Re: Systems all over the network are rebooting spontaneously at the same time!

anonymous_at_discussions.microsoft.com
Date: 03/11/04 

Date: Thu, 11 Mar 2004 01:25:42 -0800

I've tried that al well.
The strange thing is that is are not allways the same
machines which are restarting. Just random workstations
and servers.
Time interval seems to be about 9 hours between the
restarts.
It looks like something in the network is sending a
broadcast to restart machines across the network.
I've scanned some machines with stinger, mcafee, and
symantec but all with no result.

>-----Original Message-----
>
>THis still sounds like one or more viruses. Take a
machine offline,
>format and reinstall the OS, all patches and all virus
software and
>definitions - take it elsewhere to do this if necessary.
Do not
>connect it to your network until it is totally patched up
and virus
>checked.Then scan each offending machines *and* all other
machines.
>
>Cheers,
>
>Cliff
>
>On Wed, 10 Mar 2004 07:32:48 -0800, "Ben"
><anonymous@discussions.microsoft.com> wrote:
>
>>As from yesterday several computers(6) and a few servers
>>(3) across the entire network got the error code 128 on %
>>\systemroot%\system32\services.exe and started to shut
>>down after 60 seconds.
>>We tried to find what caused the problem but noting
showed
>>up.
>>Last night the same thing happened only on larger scale.
>>Now 13 servers were rebooted with the same error
message.
>>Again nothing showed up in event logs or firewall
traffic
>>logs.
>>This afternoon the same thing happened but again more
>>bigger as before. About 70 computers and a lot of
servers
>>all over our network and different subnets started to
>>reboot after the services.exe error message.
>>
>>We cannot find anything that causes this very strange
>>problem.
>>
>>We are sure that none of the affected pc's are infected
by
>>any know virus (Blaster etc).
>>All machines are running windows 2000 SP4.
>>No strange services are running and no tasks are
scheduled.
>>No strange events are shown, only the unexpected
shutdown
>>occurred message.
>>No strange network traffic can be found in the firewall
>>logs. (no broadcast from a certain pc for shutdown or
>>something).
>>
>>Does anyone know what is happening over here?
>>
>>Thank you very much in advance.
>
>.
>

Relevant Pages

  • Re: How to access I/O port directly in VC6.0?
    ... As soon as you have standalone machines, ... Their "security" as far as servers was a joke; ... discovered the internal wireless network was completely unencrypted. ...
    (microsoft.public.vc.mfc)
  • Re: Counter Strike blocker?
    ... I wouldn't try and disturb the traffic, just locate the machines and catch ... As to the kids installing the game, like I said in my previous post, all ... > of network computing basics, Windows networks, AD and so on, so they know ... > My first thought was to create an application that scans for CS servers. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Active Directory Setup Advice
    ... You would not want separate domains just to have the same names for servers. ... seen as on the same network it will be like one big network. ... Under one domain all machines have to be unique in naming scheme. ... sub domains you can have same names under different domain. ...
    (microsoft.public.windows.server.active_directory)
  • Loss of Connectivity
    ... We have a Windows network with 2000 and 2003 servers, are hosting websites ... We can access the network from WEB2, ... from some machines on the network, ...
    (microsoft.public.windows.server.networking)
  • Loss of Connectivity
    ... We have a Windows network with 2000 and 2003 servers, are hosting websites ... We can access the network from WEB2, ... from some machines on the network, ...
    (microsoft.public.windows.server.active_directory)