Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Windows 2000 server reboots on startup, after being hacked via vnc

Posted on 2006-11-26
5
144 Views
Last Modified: 2010-05-18
hello,

I was in work yesterday, and noticed one of the servers pointers were moving.   Any way to cut a long story short i think i got hacked via vnc.  So i killed off the vnc session, ran a virus scan and found a virus on it, with the file SFC.dll.  I then rebooted the server, and after that the server will not boot.

I also noticed from task manager that sfc.dll was linked with WINLOGON.EXE.

On boot up it gets to the first screen.... runs along nicely with that, and just when it is going to go to the logon screen, it reboots.

I tried last known good hardware, safe mode, and command prompt.  All still reboots.  I am worried cos if i keep letting it reboot its going to corrupt the O/S even more.

Any ideas how to fix the problem?

Kind Regards,

Phil
0
Comment
Question by:bigspoon1980
  • 2
5 Comments
 
LVL 63

Expert Comment

by:SysExpert
ID: 18016481
DO a repair install, and run a few online scans in addition.

I hope this helps !
0
 

Author Comment

by:bigspoon1980
ID: 18017806
If i do a repair install, does this mean i will have to reinstall all the apps.. like microsoft sql, etc..
0
 

Author Comment

by:bigspoon1980
ID: 18018634
sorted it....

the hacker managed to rename the sfc.dll  which was causing the rebooting before winlogon.

I managed to get the dll from another windows 2000 server and copy it to the broken server using the recovery console.

thanks for other ideas.  

phil
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 18715554
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article describes how to reset your Windows 10 password when you've forgotten it.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question