computers on domain getting net logon error and network connections are missing

I've had 6 people on our domain get "unable to log you on because the netlogon service is not running on this machine.  On all the machines both the LAN and Wireless Nic appear in hardware manager but the connections are missing.  System restore seems to be disabled on them all and the fixes found in other EE searches don't work.  I'm worried that this is some type of virus that isn't being picked up.  So far I haven't found anything of the type on the machines.
gilmanschoolAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dexITCommented:
I just replied to a post similar to this, have you tried removing them from the domain and re-adding them?
0
acl-puzzCommented:
0
acl-puzzCommented:
and how about if you manually start this service on these machines and then try logins?
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

rsoly777Commented:
just out of curiosity have you tried to re-install the Network adapters? Delete them in the hardware manager then refresh the manager and tell it to look for new hardware. See if it picks up the NIC correctly. Have you checked for viruses? It wouldn't hurt to check anywways.
0
gilmanschoolAuthor Commented:
dexIT:  I did not but I just attempted too, those options are greyed out.

acl-puzz, I'm not sure which part of that link you are referring to but that is one of the pages I had looked at.  I also noticed that while I can get into event viewer, i can't open any events.
0
gilmanschoolAuthor Commented:
I did remove and reinstall them with the same results.  NICs were picked up just fine.   Did a full virus/malware scan and haven't found anything.

A manual attempt at starting the service returns "Could not start the net logon service on local computer.  Error 1068:  The dependency service or group failed to start.
0
B HCommented:
do you by chance have mcafee installed?  mcafee pushed out an update which detects the REAL "svchost.exe" as a virus, and promptly kills it... along with your network access

http://vil.nai.com/vil/5958_false.htm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gilmanschoolAuthor Commented:
I do have mcafee installed.  I'll take a look and see if thats what is going on.
0
dexITCommented:
0
B HCommented:
yep, that's exactly what's going on...
0
dexITCommented:
and finally, if it doesn't find anything. I would suggest using the XP CD to repair both machines.
0
B HCommented:
here's a better link, with potential fixes:
http://isc.sans.org/diary.html?storyid=8656

mcafee's support site is offline, effectively ddos'd with millions of angry users
0
johnb6767Commented:
To fix a missing NetLogon service (in addition to the svchost problem), just uninstall Client for Microsoft Networks in the Properties of the NIC itself, reboot, and reinstall it.... After the second reboot, the services are restored.....
0
gilmanschoolAuthor Commented:
Just a side note, still messing with all these fixes but Mcafee posted a note yesterday saying the support portal would be down until sunday for maintenance.
0
B HCommented:
"for maintenance" yeah :)

if i broke 5 million computers, my support site would be down for maintenance too haha
0
rsoly777Commented:
Just got this from Microsoft around noon:
Hi Everyone:

 

If you use McAfee be aware!

 

Do not download the 5958 DAT file. Reports are coming in where this is causing major issues. Info from the community can be found:

http://community.mcafee.com/thread/24056?start=15&tstart=0 

 

Most recent info I have is this:  https://kc.mcafee.com/corporate/index?page=content&id=KB68780

0
gilmanschoolAuthor Commented:
john6767:  I can't get into the properties of the nic because it doesn't show up under the network settings.
0
johnb6767Commented:
Ah......

Find "netmscli.inf" in c:\windows\INF and Right Click it>Install.....
0
gilmanschoolAuthor Commented:
Mcafee released a patch, which did bring back the network connections but not able to get an IP address.  System Restore has been enabled so that was the easiest fix.  Here is a link to their "fix"

http://download.nai.com/products/mcafee-avert/tools/SDAT5958_EM.exe?elq_mid=2373&elq_cid=136096
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.