SP1, Services, Reboots
- From: neil.weller@xxxxxxxxx
- Date: 8 Dec 2005 08:40:47 -0800
Hi,
I have a 2 Windows 2003 Servers in different domains.
They both run a .Net Service that is restarted every 24 hours. This
has been the case for about 6 months with no probs. A week ago SP1 and
all of the latest patches required by MBSA were installed.
Since then, when this particular service restarted by a vbscript that
is scheduled, the server shutsdown.
We get a message saying that :
This shutdown was initiated by NT Authority\System. Shutdown will
being in x seconds. Shutdown message: The system process
'C:\Windows\system32\services.exe' terminated unexpectedly with status
code -1073741819. The system will now shutdown and restart...
In addition we have an entry in the Application log:
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 08/12/2005
Time: 11:30:08
User: N/A
Computer: EDFASYGEN01
Description:
Faulting application services.exe, version 5.2.3790.1830, faulting
module msvcrt.dll, version 7.0.3790.1830, fault address 0x000376b4.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 65 72 ure ser
0018: 76 69 63 65 73 2e 65 78 vices.ex
0020: 65 20 35 2e 32 2e 33 37 e 5.2.37
0028: 39 30 2e 31 38 33 30 20 90.1830
0030: 69 6e 20 6d 73 76 63 72 in msvcr
0038: 74 2e 64 6c 6c 20 37 2e t.dll 7.
0040: 30 2e 33 37 39 30 2e 31 0.3790.1
0048: 38 33 30 20 61 74 20 6f 830 at o
0050: 66 66 73 65 74 20 30 30 ffset 00
0058: 30 33 37 36 62 34 0376b4
As I said, this has only started since SP1 and the other patches were
applied.
Now, to preempt some questions:
Searching on google, msdn and technet I have found loads of suggestions
of the sasser worm or viruses but these all seemed to refer to Win
2000, in addition I have performed a full scan on both boxes using
Symantec Corporate Edition with the latest definitions.
The reason the service restarts every day is that there is a problem
with the code that means that it stops processing even though the main
thread is active. This will be fixed eventually, the restart is a work
around. Rewriting is out of my hands, even though I know it needs it.
I suspect that the problem lies with SP1, none of the other patches
seem likely.
If anyone can help with this then I would be exceptionally thankful. I
have been looking into this for a week now and seem to be getting
nowhere.
Regards,
Neil
.
- Follow-Ups:
- Re: SP1, Services, Reboots
- From: Mel
- Re: SP1, Services, Reboots
- Prev by Date: Event ID: 10
- Next by Date: Re: Error getting event logs from remote servers
- Previous by thread: Event ID: 10
- Next by thread: Re: SP1, Services, Reboots
- Index(es):
Relevant Pages
|
