Possible security breach, need help identifying

[jcthomas]

Running a W2k3 server with remotely anywhere installed for the past few saturday's the system has been shutting down unexpectingly at the same time 8:30am. The event log is filled with errors and warnings, a few key ones are:

Event log reads:
Remote access warning Event 20169 unable to contact DHCP server

ACPI BIOS attempting to read Illegal IO port address (0x71) which lies 0x70-0x71 protected address range.

Microsoft Fax warning system is looking for a usable fax

I checked the RemotelyAnywhere logs for the saturdays and they also are reading as if the program started.

Any ideas greatly appreciated on what I can do to solve this.

 

[Stevehewitt]

ACPI BIOS attempting to read Illegal IO port address (0x71) which lies 0x70-0x71 protected address range."

Looks like a hardware issue to me.

From those errors - nothing looks suspicious to me. More technical failures than security issues. What's in the security event logs?




Steve.

"They have the internet on computers now!" - Homer Simpson