Looks like just a hardware fault and a bios clock with the wrong time. Still suspect of it but can find nothing.
From: [email protected] [mailto:[email protected]] On Behalf Of Micheal Espinola Jr Sent: Wednesday, November 16, 2016 11:29 AM To: [email protected] Subject: Re: [NTSysADM] Time change on a member server Without a timezone change? I'd be suspect of malware. I've seen similar, but its been a few years. On Wed, Nov 16, 2016 at 7:18 AM David McSpadden <[email protected]<mailto:[email protected]>> wrote: Looked like 5 hours almost exactly. From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Micheal Espinola Jr Sent: Wednesday, November 16, 2016 9:46 AM To: [email protected]<mailto:[email protected]> Subject: Re: [NTSysADM] Time change on a member server I've never seen/heard that happen outside of other influences. How "off" was the time? -- Espi On Wed, Nov 16, 2016 at 6:13 AM, David McSpadden <[email protected]<mailto:[email protected]>> wrote: I have a server 2012 member server of a 2012 Domain that magically changed it’s time last night and had to be powered of and on this morning to correct the issue. Has anyone seen a server that shows the time source as the PDC in the domain but still magically changes it’s own time? We have 24 other member servers in this domain that did not exhibit this same function last night? Any direction would be greatly appreciated. David McSpadden System Administrator Indiana Members Credit Union P: 317.554.8190<tel:317.554.8190> [Description: Description: imcu email icon]<http://imcu.com/> [Description: Description: facebook email icon] <https://www.facebook.com/IndianaMembersCU> [Description: Description: twitter email icon] <https://twitter.com/IndMembersCU> [Description: Description: email logo] [http://www.amuletsolutions.com/images/mcp.gif]<http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0ahUKEwjFztf-tePJAhXK5iYKHcPtAxEQjRwIBw&url=http://www.amuletsolutions.com/awards.aspx&bvm=bv.110151844,d.amc&psig=AFQjCNHkrx8CednTEOOq4zUxYyrRUGzUsg&ust=1450459757284499> This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email. This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email. -- -- Espi (via mobile) This e-mail and any files transmitted with it are property of Indiana Members Credit Union, are confidential, and are intended solely for the use of the individual or entity to whom this e-mail is addressed. If you are not one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing, or copying of this email is strictly prohibited. Please consider the environment before printing this email.
