Re: Systems all over the network are rebooting spontaneously at the same time!
From: Enkidu (enkidu_at_xyzcliffpxyz.com)
Date: 03/12/04
- Next message: Torben A. Karlsen: "Network clients experience connection problems"
- Previous message: Andrew Chalk: "Re: Using W2K Workstation as a Terminal Server"
- In reply to: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Next in thread: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Reply: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 12 Mar 2004 19:58:02 +1300
On Thu, 11 Mar 2004 14:39:14 +0800, "Steven Ung"
<steven@nodomainname.com> wrote:
>"Ben" <anonymous@discussions.microsoft.com> wrote in message
>news:a4f301c406b4$f16ae150$a401280a@phx.gbl...
>> As from yesterday several computers(6) and a few servers
>> (3) across the entire network got the error code 128 on %
>> \systemroot%\system32\services.exe and started to shut
>> down after 60 seconds.
>> We tried to find what caused the problem but noting showed
>> up.
>> Last night the same thing happened only on larger scale.
>> Now 13 servers were rebooted with the same error message.
>> Again nothing showed up in event logs or firewall traffic
>> logs.
>> This afternoon the same thing happened but again more
>> bigger as before. About 70 computers and a lot of servers
>> all over our network and different subnets started to
>> reboot after the services.exe error message.
>>
>> We cannot find anything that causes this very strange
>> problem.
>>
>> We are sure that none of the affected pc's are infected by
>> any know virus (Blaster etc).
>> All machines are running windows 2000 SP4.
>> No strange services are running and no tasks are scheduled.
>> No strange events are shown, only the unexpected shutdown
>> occurred message.
>> No strange network traffic can be found in the firewall
>> logs. (no broadcast from a certain pc for shutdown or
>> something).
>>
>> Does anyone know what is happening over here?
>>
>> Thank you very much in advance.
>
>
>Some of the PCs on our network shows the same symptoms. I tried all
>Anti-virus known to man to scan the infected computer (scaned using NAV,
>Housecall etc), but none shows that the PC is infected.
>
>1. Task manager shows 100% CPU Utilization and there are no weird services
>running.
>2. Automatically shuts down Windows, DOS applications, or REGEDIT after a
>few seconds.
>3. Rapidly transfer data to/from network, causing the PC to lose connection
>to the network, and worst locking the the entire network segment.
>4. When Win2000 startup, we can observe 3 DOS like windows executing, but
>unable to read what it is executing.
>
>
>I'm really stumped!
>
>(Ps. Sorry, my English sucks as it is not my first language)
Stephen and Ben, it is important to scan from a known clean
installation. Some viruses disable and/or block anti-virus programs.
Something that affects a number of machines and progressively too,
seems to me to scream "virus"..... However, it could be coincidence.
Unlikely? Or a particular rollout of an application? You judge...
It's easy for me to make suggestions, I realise. You are the ones at
the coalface. Please don't take exception to my concentration on the
virus angle...
Cheers,
Cliff
- Next message: Torben A. Karlsen: "Network clients experience connection problems"
- Previous message: Andrew Chalk: "Re: Using W2K Workstation as a Terminal Server"
- In reply to: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Next in thread: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Reply: Steven Ung: "Re: Systems all over the network are rebooting spontaneously at the same time!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
