IIS stop command received from user DOMAIN\username. The logged data is the status code. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Event Information
As per a newsgroup post: Due to virus infection this problem may occur. It will display numerous events in eventlog and same time you will get some similar events tellling you that the service was being issued a start command. Once after cleaning those virus this will stop.