RE: Exchange 2000 system error 128 and services stopping[Scanned]

There is a version of services.exe that is Virus infected. Do a Google
search on the file name.

Simon

-----Original Message-----
From: tony [mailto:tonyw@xxxxxxxxxxxxxxxxxxx] 
Sent: Thu 26 May 2005 07:25
To: [ExchangeList]
Subject: [exchangelist] Exchange 2000 system error 128 and services
stopping[Scanned]

http://www.MSExchange.org/

I gotta serious problem with my Exchange 2000 Server that maybe someone
shed some light on.
 
But first the specs...I am running a single Exchange 2000 Server with
Exchange SP3 on Windows 2000 SP4 (All latest post SP4 hotfixes) on a
DELL
2400 server running RAID 1, 1.5 Gb RAM
 
3rd Party Software running:
MaxCompression email attachement compression software
GFIMail Essentials Anti-SPAM Software
Trendmicro Interscan Anti-virus software
 
Now the problem:
 
Part A
 
Server ramdomly re-boots  (on average once every 4 or 5 days) after the
following msg appears on the screen:
"c:\winnt\services.exe has encountered system error 128 and will restart
in 60 seconds"
Have scanned the machine for viruses and trojans but all clean.
 
Part B
 
Following services randomly stop ( on average once every 2-3 days) but
all
these services stop together.
 
NNTP
Exchange Routing Service
SMTP
WWW
IIS Admin
IMAP4
Has anyone got any ideas?

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
simon.bound@xxxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

Other related posts: