Unexpected System Shutdown

Discussion in 'Security Software' started by Nick, Aug 26, 2003.

  1. Nick

    Nick Guest

    Recently the W2K server -well patched- had two unexpected
    system shutdowns. The only trace is the entry in the
    System event log with Event ID:6008.

    It could not be power related; the other machines sharing
    from the same power source did not reboot.

    Could it be a hidden worm, or a new attack? I know you
    could shutdown local area network machines remotely. Maybe
    the command can be sent over IP to any unauthorized

    Nick, Aug 26, 2003
    1. Advertisements

    rezamirvahabi, Aug 26, 2003
    1. Advertisements

  3. Nick

    Nick Guest

    I have reinstalled MS03-026 patch, updated DAT file from
    McAfee, scaned it and could not find any virus.

    Still, the system will reboot by itself once a day.

    Firewall installed. From the traffice log could not find
    any special traffice/activity before the machine reboot.

    Highly think it is a undiscovered virus or attack.

    Nick, Aug 30, 2003
  4. I think your problem is more likely hardware, given that a/v raises no
    alarms, and you have a firewall in place.

    How about the event logs---anything related to the reboots there?

    Bill Sanderson, Aug 30, 2003
  5. Nick

    Nick Guest

    Later on I found the problem is not related to any virus
    or attack. It is because of the memory upgrade did a
    couple weeks ago. Somehow the new memory are not 100%
    stable. Replace with the old memory and the upexpected
    reboot never happened.

    Thanks all.
    Nick, Sep 9, 2003
  6. Thanks for letting us know how it came out. I have a large stick of ram
    I've never put in a new server. It is properly specc'd, and I read all the
    vendors instructions about ram placement order, etc. When in place, the
    (system) vendors newest ram test passes it with flying colors, even with the
    most in-depth test choices. However, Windows 2000 install blue-screens
    consistently with the ram in place.

    Bill Sanderson, Sep 12, 2003
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.