Solved

Masive Virus attack has left server inaccessible

Posted on 2006-07-21
5
198 Views
Last Modified: 2010-04-18
Hello all,
  I recently was asked to look into why a Windows Server Standard Edition 2003 would not complete the logon process.  After a few questions about leading up to this situation is I was told that they were infected by at least 75 downloader and trojan type viruses.  I was able to load Norton AV 10. and clean most of them however I got stuck with the userinit.exe failed to load.  I followed several papers pertaining to this fix yet none of them work.  The server would still boot to safe mode however,  was unable to clear userinit.exe issue.  Ran highjackthis and removed several definite issues but after the re-boot still not loading in full mode.  also, now safe mode does not load hangs after login.  Resturant is in a pickle.  I am extremly close to giving up and doing a complete format and rebuild.  Any ideas?
Thanks,
Matt
0
Comment
Question by:Claimtrust
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17158386
try performing a repair install straight off the disk, is replaces all your system files and gives you a clean install without data loss
0
 

Author Comment

by:Claimtrust
ID: 17158449
JAy Jay70,
Thanks for the info, I was already thinking that as well.  Going back tonight at 11:00 and will perfom this task.  Will post results.
0
 

Author Comment

by:Claimtrust
ID: 17160335
Ok All,
  It is now Saturday morning @ 11:00 I just woke up after 3 hours of sleep and after 7 straight hours of battling this Virus attack from you know were. I did  attempt to go with Jay Jay70's suggestion as I also thought of that however, the install could not even detect a previous version of windows installed.  My only choice was to do a complete format and re-instsall of both the 2003 Server OS and the resturant software.  Clients are happy and I was also able to keep there last 4 days of data that they were unable to print because of there issue.

No points are to be awarded and this question needs to be closed.
Thanks,
Claimtrust-Matt
0
 

Accepted Solution

by:
CetusMOD earned 0 total points
ID: 17631260
PAQed with points refunded (500)

CetusMOD
Community Support Moderator
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question