Local Users And Groups option missing in Server 2003

HI - one of client's server Windows 2003 svc pack 2 (stand alone - No AD)  is missing the Local Users and Groups option in the Computer Management window.  I suspect the machine is compromised.  I preformed a scan and found Vundo and Browser Hijacker malware.  I removed and rebooted, but now when I try to access services, the window screen is blank using the Extended tab.  If I select the Standard tab, I can see the services, but cannot access or start services or select properties.  I also noted in the C:\Documents and Settings folder, there are new user folders and one is called Devil$.  There is a total of 20 folders with various names.  Can someone provide me some suggestions to regain control of the machine?  Mostly like, we will have to format and reinstall, but I need to do a back up of client data and this problem will not let me add an external USB drive.  I would normally pull the drive, but this is a RAID system.  Thanks for a quick response.
Scott HuffmanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DigicoCommented:
When you are not on a domain controler you local user can be manage in administrative tool / computer management / system tools / local users and groups
0
Scott HuffmanAuthor Commented:
When I run lusrmgr.msc I get a security warning stating "the snap in below, referenced in this document, has been restricted by policy. Local Users and Groups." When I click ok the window will reference a CLSID: {5D6179C8-17EC-11D1-9AA9-00C04FD8EF93}.
Is there a way to correct this using Group Policy Object editor?  When I attempt to access, my windows in the right pane are blank under Extended, but I can see the Standard.  However, I don't have access to any of the options.
0
Scott HuffmanAuthor Commented:
Digico - I already know how to access Local Users - I'm saying when I go to the Computer Management it's not there.
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

DigicoCommented:
0
Scott HuffmanAuthor Commented:
Digico - this helped, but my other issues still remain.  I can't load services such as RPC, still can't access the Extended Window option for Services.  I can't add external USB drives to back up data and you can imagine I need to do this before we format and reinstall.
0
DigicoCommented:
Is the user your connected with still an local admin?
0
Scott HuffmanAuthor Commented:
Digico the problem is I can't see the settings or account permission levels.  I'm loggined in as the Admin account.  I suspect some security settings were configured to restrict access or regain access to the machine.
0
Scott HuffmanAuthor Commented:
Further updates
1) Ran Windows 2003 Repair to system.  I was able to access the Users and Local Groups.  Found several users with Admin and Remote access.  Deleted these users.
2) New Issue when launching IE6.0 error "the requested lookup key was not found in any active activation content"  Could not repair IE6.0 or apply service packs.  So Installed IE 7.0.  Now IE7.0 will not lauch.  I click on the short cut and nothing happens.  Reinstalled - nothing happens.  I still think there is some infection or hack still on the system.
0
Netman66Commented:
Try running Malware Bytes:

www.malwarebytes.org

0
Scott HuffmanAuthor Commented:
I already ran Malware Bytes
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Steve BinkCommented:
If you boot into safe mode, can you access the drives in order to backup data?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.