theyortiscool it sure sounds to me like someone is using the remote shutdown utility. one comes with nt utils pack, systernals has one and one can easily be made using WMI. If it was a problem with the system i dont think it wouldn't give you that message. change all your passwords including that of the administrator account then check your firewall settings. make sure port 135 isn't allowed in. this is the RPC port the shutdown util uses.