I have definitely seen this behavior before. I have found that even safe
mode would not stop this though booting into last known good config may work
if it is related to a recent software installation. Your system is most
likely compromised and with windows that is always a really bad thing. I
would use a PE environment and see what you can find.

-----Original Message-----
From: ViersOnline [mailto:viers (at) free (dot) fr [email concealed]]
Sent: Thursday, January 24, 2008 11:03 AM
To: adrian_smith (at) live (dot) com [email concealed]
Cc: incidents (at) securityfocus (dot) com [email concealed]
Subject: Re: virus restarting machines

the one I know, having such a gross behavior is called windows update :)

adrian_smith (at) live (dot) com [email concealed] wrote:
> anyone has ever experienced this kind of problem, probably due to
virus/spyware, causing server and pc to reboot ( wondows2003)... i post the
message i've found in log:"The process GL_<random_number>.exe has initiated
the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the
following reason: No title for this reason could be foundReason Code:
0x0Shutdown Type: restart" thx
>
>
>

[ reply ]