Windows 2000 server reboots on startup, after being hacked via vnc
Posted on 2006-11-26
I was in work yesterday, and noticed one of the servers pointers were moving. Any way to cut a long story short i think i got hacked via vnc. So i killed off the vnc session, ran a virus scan and found a virus on it, with the file SFC.dll. I then rebooted the server, and after that the server will not boot.
I also noticed from task manager that sfc.dll was linked with WINLOGON.EXE.
On boot up it gets to the first screen.... runs along nicely with that, and just when it is going to go to the logon screen, it reboots.
I tried last known good hardware, safe mode, and command prompt. All still reboots. I am worried cos if i keep letting it reboot its going to corrupt the O/S even more.
Any ideas how to fix the problem?