I've got CA's AMO installed on the machine, and I've just disabled the two weekly tasks that it runs. I had a daily task that I installed which rebooted the machine at 6:55 daily, which I put in place after the fault started happening... that's been disabled. There is also a weekly batch file which deletes the temporary internet files. I've changed this so it runs daily, so I'll be able to see tomorrow if it's that at fault - but it doesn't appear so as the task seems to finish OK. I've just finished running a spyware checker (spykiller) and I've run an AV scan (no viral activity). All it came back with was a series of cookies and jpg images... so, I'm guessing that it's not going to be that then... Hmmmm. Jon Spriggs -- The presence of a "Fujitsu" address does not imply or assume that Fujitsu Services, Fujitsu or any other company containing the Fujitsu name uses or endorses this product. This email is purely a personal opinion. -----Original Message----- From: Jason Miller [mailto:JMiller@xxxxxxxxxxxxxxx] Sent: 25 August 2004 14:15 To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: Windows 2k Terminal Server - Accessing Internet Pr oblems Just a thought: Since this is happening routinely at a specific time on a specific day, I'd look into any type of automated tasks that could be running also. You never know what you may find. -----Original Message----- From: Arthur Reyes [mailto:artadmin@xxxxxxxxxxxxx] Sent: Wednesday, August 25, 2004 6:17 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Windows 2k Terminal Server - Accessing Internet Problems It does sound like spyware to me as well. What is running on server startup? As a stop gap/test, try using a hosts file to block external ad/spy sites. If it keeps your server up one day, using the hosts file may confirm this. I've been getting mine from here: http://www.accs-net.com/hosts/get_hosts.html But these sites are also nice linked. http://cexx.org/neuter.htm http://www.mvps.org/winhelp2002/hosts.htm <http://www.mvps.org/winhelp2002/hosts.htm> _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Spriggs Jon Sent: Wednesday, August 25, 2004 3:12 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Windows 2k Terminal Server - Accessing Internet Problems Hi, Can anyone help me? I have a Windows 2000 Advanced Server with Terminal Services where every Monday between 7am and 8am its preventing my users from accessing the internet. A reboot seems to solve it once it's happened, but a reboot an hour before (6am) doesn't stop it from happening. Short of running Snort on the server and some form of keylogger to see what all the users are doing (which I don't think they'd be happy about), I'm stumped as to what I can do next. Any suggestions? Jon Spriggs -- The presence of a "Fujitsu" address does not imply or assume that Fujitsu Services, Fujitsu or any other company containing the Fujitsu name uses or endorses this product. This email is purely a personal opinion.