I have two machines within my network with similar configurations.. Windows 2000 Server SP4 with latest updates from Microsoft Updates. They are both behind dedicated (which means each server has its own Firewall) Watchguard Firebox III. Only 3389 (terminal services) web ftp, and the like are open. Services such as 445, 135-139 and the common virii spreading/Trojan spreading ports are not open on these servers. Tonight on two separate occasions I have had to reboot these servers after having them both run flawlessly for months without having to reboot them except for update purposes. Now, having to reboot one of them, I could see. Having to reboot two of them.. that's a little strange.. Anyone hear of anything new going around? I haven't heard of anything on regular sec focus yet. These servers aren't connected to a DC or anything. No need to reply if you haven't noticed anything unusual. Thanks, -Drew