DarkMan

Last night our Exchange server was not responding for about an hour. Came in this morning and went through the event logs I had 7 events 7031 from the “service event manager” saying the following services had terminated unexpectedly IIS Admin, IMAP4, NNTP, POP3, SMTP and WWW. About an hour later an event was logged which said an IIS Kill command had been received from NT Authority/System, nothing was scheduled on the server, then a Stop command followed by an IIS Start command. All the services then seemed to start again.

Any ideas, been searching the net for answers and a few point to the Code Red virus, scanned server and it's not their (didn't think it would be as the server was patched a while ago)

Miles

I take that this is Exchange 2000. Which SP? Do you have any third party products like AV or Fax gateways installed? This from MS looks interesting.