|
Posted by Roger Abell [MVP] on December 26, 2005, 3:50 pm
Please log in for more thread options
Well, you have a core subsystem encountering a fault.
Your task is to determine why.
Is the system fully up-to-date on all service ?
What applications are installed the tie into the security,
login, etc. systems ?
Is or has the system been exposed to the external internet ?
What of interest is mentioned in the referenced shutdown
xml file ??
>I ppl.
> I have one problem with my wndows 2003 server.
> sometimes he restarted itself and i don't know the reason.
> i go to event viewer and have this:
> Event Type: Information
> Event Source: USER32
> Event Category: None
> Event ID: 1074
> Date: 12/26/2005
> Time: 2:11:17 AM
> User: NT AUTHORITY\SYSTEM
> Computer: DCFCV
> Description:
> The process winlogon.exe has initiated the restart of computer DCFCV on
> behalf of user for the following reason: No title for this reason could
> be
> found
> Reason Code: 0x50006
> Shutdown Type: restart
> Comment: The system process 'C:\WINDOWS\system32\lsass.exe' terminated
> unexpectedly with status code -1073741819. The system will now shut down
> and
> restart.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 06 00 05 00 43 00 3a 00 ....C.:.
> 0008: 5c 00 57 00 49 00 4e 00 \.W.I.N.
> 0010: 44 00 4f 00 57 00 53 00 D.O.W.S.
> 0018: 5c 00 73 00 79 00 73 00 \.s.y.s.
> 0020: 74 00 65 00 6d 00 33 00 t.e.m.3.
> 0028: 32 00 5c 00 4c 00 6f 00 2.\.L.o.
> 0030: 67 00 46 00 69 00 6c 00 g.F.i.l.
> 0038: 65 00 73 00 5c 00 53 00 e.s.\.S.
> 0040: 68 00 75 00 74 00 44 00 h.u.t.D.
> 0048: 6f 00 77 00 6e 00 5c 00 o.w.n.\.
> 0050: 53 00 68 00 75 00 74 00 S.h.u.t.
> 0058: 44 00 6f 00 77 00 6e 00 D.o.w.n.
> 0060: 5f 00 32 00 30 00 30 00 _.2.0.0.
> 0068: 35 00 31 00 32 00 32 00 5.1.2.2.
> 0070: 36 00 30 00 32 00 31 00 6.0.2.1.
> 0078: 31 00 31 00 31 00 2e 00 1.1.1...
> 0080: 78 00 6d 00 6c 00 00 00 x.m.l...
>
>
> What can be this problem ?
> i remember blaster or sasser but run the tools to this worms and nothing
> found.
>
> tks
>
| 
XML Sitemap