Unexpected System Shutdown

Discussion in 'Security Software' started by Nick, Aug 26, 2003.

  1. Nick

    Nick Guest

    Recently the W2K server -well patched- had two unexpected
    system shutdowns. The only trace is the entry in the
    System event log with Event ID:6008.

    It could not be power related; the other machines sharing
    from the same power source did not reboot.

    Could it be a hidden worm, or a new attack? I know you
    could shutdown local area network machines remotely. Maybe
    the command can be sent over IP to any unauthorized
    network?

    Thanks.
     
    Nick, Aug 26, 2003
    #1
    1. Advertisements

  2.  
    rezamirvahabi, Aug 26, 2003
    #2
    1. Advertisements

  3. Nick

    Nick Guest

    I have reinstalled MS03-026 patch, updated DAT file from
    McAfee, scaned it and could not find any virus.

    Still, the system will reboot by itself once a day.
    Randomly.

    Firewall installed. From the traffice log could not find
    any special traffice/activity before the machine reboot.

    Highly think it is a undiscovered virus or attack.

    Thanks.
     
    Nick, Aug 30, 2003
    #3
  4. I think your problem is more likely hardware, given that a/v raises no
    alarms, and you have a firewall in place.

    How about the event logs---anything related to the reboots there?

     
    Bill Sanderson, Aug 30, 2003
    #4
  5. Nick

    Nick Guest

    Later on I found the problem is not related to any virus
    or attack. It is because of the memory upgrade did a
    couple weeks ago. Somehow the new memory are not 100%
    stable. Replace with the old memory and the upexpected
    reboot never happened.

    Thanks all.
     
    Nick, Sep 9, 2003
    #5
  6. Thanks for letting us know how it came out. I have a large stick of ram
    I've never put in a new server. It is properly specc'd, and I read all the
    vendors instructions about ram placement order, etc. When in place, the
    (system) vendors newest ram test passes it with flying colors, even with the
    most in-depth test choices. However, Windows 2000 install blue-screens
    consistently with the ram in place.

     
    Bill Sanderson, Sep 12, 2003
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.