Event viewer
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 18/03/2004
Time: 06:20:49
User: N/A
Computer: LONSERVER
Description:
The IIS Admin Service service terminated unexpectedly. It has done this 19 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.

then Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 18/03/2004
Time: 06:20:49
User: N/A
Computer: LONSERVER
Description:
The World Wide Web Publishing Service service terminated unexpectedly. It has done this 19 time(s). The following corrective action will be taken in 0 milliseconds: No action.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

then it shows much the same message for the following services in the order below
IMAP
NNTP
POP3
Routing engine
SMTP
WWW

these services then all then restart, but sometimes the IMAP and POP3 service will not restart

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Quote Originally Posted by Richard
Does the event viewer show anything?

I know you said you check for viruses and worms, but have you installed the MSBlaster patch