There is a version of services.exe that is Virus infected. Do a Google search on the file name. Simon -----Original Message----- From: tony [mailto:tonyw@xxxxxxxxxxxxxxxxxxx] Sent: Thu 26 May 2005 07:25 To: [ExchangeList] Subject: [exchangelist] Exchange 2000 system error 128 and services stopping[Scanned] http://www.MSExchange.org/ I gotta serious problem with my Exchange 2000 Server that maybe someone shed some light on. But first the specs...I am running a single Exchange 2000 Server with Exchange SP3 on Windows 2000 SP4 (All latest post SP4 hotfixes) on a DELL 2400 server running RAID 1, 1.5 Gb RAM 3rd Party Software running: MaxCompression email attachement compression software GFIMail Essentials Anti-SPAM Software Trendmicro Interscan Anti-virus software Now the problem: Part A Server ramdomly re-boots (on average once every 4 or 5 days) after the following msg appears on the screen: "c:\winnt\services.exe has encountered system error 128 and will restart in 60 seconds" Have scanned the machine for viruses and trojans but all clean. Part B Following services randomly stop ( on average once every 2-3 days) but all these services stop together. NNTP Exchange Routing Service SMTP WWW IIS Admin IMAP4 Has anyone got any ideas? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: simon.bound@xxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx