troubleshooting Question

SAM ERROR / CONFLICKER WORM

Avatar of idajagne
idajagne asked on
Anti-Virus AppsMicrosoft Server Apps
5 Comments1 Solution3088 ViewsLast Modified:
Dear Experts,

Recently, I found out that one of my systems  have detected a very dangerous worm (Conficker). Also, I have noticed that on almost all my server, the SERVER services keep stopping which is preventing my users to access network resources.

Currently, I have created a batch file using NET VIEW to query the devices and make sure I am aware of a drop in connectivity. However, patching the servers resolved the SERVER services issue.

But now I am having issue with my DC, please find the event log entry below:

EVENT ID: 12294
The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.

QUESTIONS:

1. How can I narrow down the client where it is trying to connect from and
2. The Conflicker worm - any ideas on how to resolve it.

Your help is greatly appreciated....
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 5 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 5 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros