just read the post. Thanks for the advice. try it on monday. out of town for weekend.
Main Topics
Browse All TopicsHello All!
Just recently took ALL the steps to clean our network after a conficker worm attack. Everything is clean and no more conficker worm is present. But it has done something to my domain controller. I could not remote desktop into the DC after the attack. The error was that the RPC service is unavailable or cannot be started. So i manually tried to start it. No dice. Said that it could not be started because the dependancy service or group failed to start. So i look at the dependancies for RPC. It is workstation, and that too has not started either. So manually tried to start it. Again no dice. Said same thing about dependancies. This time the dependancy for worksation is the alerter service. So I go to alerter service and try to start. This time it would not start because it could not find the file specified.
So I look at the properties for alerter service and find that the path to executable is :
C:\WINDOWS\system32\BrcSer
So when i go to this path there is no executable file of that description.
First question is:
Is this a legit path for the alerter service? What should the executable for the alerter service be?
Second question:
Is the alerter service a normal dependancy for workstation? Did something get hosed up with the conficker attack here? If someone could please shed some light on this it would be greatly appreciated. Everything else is back to normal with the exception of a few users that cannot get to shared drives. But i am assuming this might have something to do with the rpc service not running.
Thanks in advance!!!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: 1stITMANPosted on 2009-08-28 at 16:43:36ID: 25212406
Looks as though there is Rogue Reg key in the dependency for the Alerter Service.
e.com/OS/ M icrosoft_O perating_S ystems/Ser ver/SBS_Sm all_Busine ss_Server/ Q_23434834 .html
If you have another Server export the Reg key
Have a look here
http://www.experts-exchang