HI - one of client's server Windows 2003 svc pack 2 (stand alone - No AD) is missing the Local Users and Groups option in the Computer Management window. I suspect the machine is compromised. I preformed a scan and found Vundo and Browser Hijacker malware. I removed and rebooted, but now when I try to access services, the window screen is blank using the Extended tab. If I select the Standard tab, I can see the services, but cannot access or start services or select properties. I also noted in the C:\Documents and Settings folder, there are new user folders and one is called Devil$. There is a total of 20 folders with various names. Can someone provide me some suggestions to regain control of the machine? Mostly like, we will have to format and reinstall, but I need to do a back up of client data and this problem will not let me add an external USB drive. I would normally pull the drive, but this is a RAID system. Thanks for a quick response.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
When I run lusrmgr.msc I get a security warning stating "the snap in below, referenced in this document, has been restricted by policy. Local Users and Groups." When I click ok the window will reference a CLSID: {5D6179C8-17EC-11D1-9AA9-0
Is there a way to correct this using Group Policy Object editor? When I attempt to access, my windows in the right pane are blank under Extended, but I can see the Standard. However, I don't have access to any of the options.
Further updates
1) Ran Windows 2003 Repair to system. I was able to access the Users and Local Groups. Found several users with Admin and Remote access. Deleted these users.
2) New Issue when launching IE6.0 error "the requested lookup key was not found in any active activation content" Could not repair IE6.0 or apply service packs. So Installed IE 7.0. Now IE7.0 will not lauch. I click on the short cut and nothing happens. Reinstalled - nothing happens. I still think there is some infection or hack still on the system.
Try running Malware Bytes:
www.malwarebytes.org
Business Accounts
Answer for Membership
by: DigicoPosted on 2009-05-28 at 10:19:23ID: 24495577
When you are not on a domain controler you local user can be manage in administrative tool / computer management / system tools / local users and groups