Event ID - 2

Event Id2
DescriptionIIS stop command received from user DOMAIN\username. The logged data is the status code. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Event InformationAs per a newsgroup post:
Due to virus infection this problem may occur. It will display numerous events in eventlog and same time you will get some similar events tellling you that the service was being issued a start command. Once after cleaning those virus this will stop.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.