The server is Windows 2003+sql Server 2000. Viewing the application log on the server found the following error description:
Simple view, a lot of service has stopped, try to start the Server service, soon, about 1hour, that is, automatically stop. By analyzing the system log, focus on the following error:
Event Type: Information
Event Source: Application Error
Event Type: (100)
Event id:1004
Date: 2009-5-14
Event: 14:09:51
Users: N/A
Computer: XXXXX
Describe:
Error application Svchost.exe, version 5.2.3790.3959, error module Kernel32.dll, version 5.2.3790.3959, error address 0x0006beb8.
Data:
0000:41 6c Applicat
0008:69 6f 6e 6c ion Fail
0010:75-Ure Svc
0018:68 6f GHz 2e host.exe
0020:20 2e 2e 33 37 39 5.2.379
0028:30 2e 0.3959 I
6b 0030:6e 6e kernel 6c n
0038:33 2e 6c 6c 32.dll 5
0040:2E 2e (2e) 2.3790 km.
0048:33-3959 at
0050:6f (offset 0)
0058:30-006beb8
Error application Svchost.exe, version 5.2.3790.3959, error module Kernel32.dll, version 5.2.3790.3959, error address 0x0006beb8.
Google search, learned that the solution is:
http://down.111cn.net/down/soft/server/2012/1128/24717.html Patch, restart computer
The reason for this failure:
The server has a Windows ms08-067 RPC security vulnerability, at the same time the local area network Trojan virus, impact on the server, resulting in some services on the server automatically stop