• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

Windows 2000 server reboots on startup, after being hacked via vnc

hello,

I was in work yesterday, and noticed one of the servers pointers were moving.   Any way to cut a long story short i think i got hacked via vnc.  So i killed off the vnc session, ran a virus scan and found a virus on it, with the file SFC.dll.  I then rebooted the server, and after that the server will not boot.

I also noticed from task manager that sfc.dll was linked with WINLOGON.EXE.

On boot up it gets to the first screen.... runs along nicely with that, and just when it is going to go to the logon screen, it reboots.

I tried last known good hardware, safe mode, and command prompt.  All still reboots.  I am worried cos if i keep letting it reboot its going to corrupt the O/S even more.

Any ideas how to fix the problem?

Kind Regards,

Phil
0
bigspoon1980
Asked:
bigspoon1980
  • 2
1 Solution
 
SysExpertCommented:
DO a repair install, and run a few online scans in addition.

I hope this helps !
0
 
bigspoon1980Author Commented:
If i do a repair install, does this mean i will have to reinstall all the apps.. like microsoft sql, etc..
0
 
bigspoon1980Author Commented:
sorted it....

the hacker managed to rename the sfc.dll  which was causing the rebooting before winlogon.

I managed to get the dll from another windows 2000 server and copy it to the broken server using the recovery console.

thanks for other ideas.  

phil
0
 
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now