| Event Id | 2 |
| Source | IISCTLS |
| Description | IIS stop command received from user DOMAIN\username. The logged data is the status code. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. |
| Event Information | As per a newsgroup post: Due to virus infection this problem may occur. It will display numerous events in eventlog and same time you will get some similar events tellling you that the service was being issued a start command. Once after cleaning those virus this will stop. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.