The week before we were getting blue screens so turned off real-time virus protection on that machine.
Situation:
You installed a Symantec antivirus program, or another application that installs a kernel driver, under Windows NT/2000/XP. After the installation, the computer unexpectedly restarts or encounters a blue screen with a STOP message similar to:
STOP 0x0000007f (0x00000008, 0x00000000, 0x00000000, 0x00000000)
UNEXPECTED_KERNEL_MODE_TRAP
A common configuration for this situation is a Windows 2000 Server with Terminal Services in Remote Administration Mode with a combination of any of the following applications: Symantec AntiVirus Corporate Edition 8.0, St. Bernard Open File Manager, Quota Manager, Legato RepliStor, or other "filter drivers" that register with the Kernel Stack.
Nothing was in the event log that happened both times and that hasn't happened before the freezing. The first time it froze I tried last know good config and I'm going to run check disks on Monday and Tuesday. Any other ideas?