computers on domain getting net logon error and network connections are missing

I've had 6 people on our domain get "unable to log you on because the netlogon service is not running on this machine.  On all the machines both the LAN and Wireless Nic appear in hardware manager but the connections are missing.  System restore seems to be disabled on them all and the fixes found in other EE searches don't work.  I'm worried that this is some type of virus that isn't being picked up.  So far I haven't found anything of the type on the machines.
gilmanschoolAsked:
Who is Participating?
 
B HConnect With a Mentor Commented:
do you by chance have mcafee installed?  mcafee pushed out an update which detects the REAL "svchost.exe" as a virus, and promptly kills it... along with your network access

http://vil.nai.com/vil/5958_false.htm
0
 
dexITCommented:
I just replied to a post similar to this, have you tried removing them from the domain and re-adding them?
0
 
acl-puzzCommented:
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
acl-puzzCommented:
and how about if you manually start this service on these machines and then try logins?
0
 
rsoly777Commented:
just out of curiosity have you tried to re-install the Network adapters? Delete them in the hardware manager then refresh the manager and tell it to look for new hardware. See if it picks up the NIC correctly. Have you checked for viruses? It wouldn't hurt to check anywways.
0
 
gilmanschoolAuthor Commented:
dexIT:  I did not but I just attempted too, those options are greyed out.

acl-puzz, I'm not sure which part of that link you are referring to but that is one of the pages I had looked at.  I also noticed that while I can get into event viewer, i can't open any events.
0
 
gilmanschoolAuthor Commented:
I did remove and reinstall them with the same results.  NICs were picked up just fine.   Did a full virus/malware scan and haven't found anything.

A manual attempt at starting the service returns "Could not start the net logon service on local computer.  Error 1068:  The dependency service or group failed to start.
0
 
gilmanschoolAuthor Commented:
I do have mcafee installed.  I'll take a look and see if thats what is going on.
0
 
dexITCommented:
0
 
B HCommented:
yep, that's exactly what's going on...
0
 
dexITCommented:
and finally, if it doesn't find anything. I would suggest using the XP CD to repair both machines.
0
 
B HCommented:
here's a better link, with potential fixes:
http://isc.sans.org/diary.html?storyid=8656

mcafee's support site is offline, effectively ddos'd with millions of angry users
0
 
johnb6767Commented:
To fix a missing NetLogon service (in addition to the svchost problem), just uninstall Client for Microsoft Networks in the Properties of the NIC itself, reboot, and reinstall it.... After the second reboot, the services are restored.....
0
 
gilmanschoolAuthor Commented:
Just a side note, still messing with all these fixes but Mcafee posted a note yesterday saying the support portal would be down until sunday for maintenance.
0
 
B HCommented:
"for maintenance" yeah :)

if i broke 5 million computers, my support site would be down for maintenance too haha
0
 
rsoly777Commented:
Just got this from Microsoft around noon:
Hi Everyone:

 

If you use McAfee be aware!

 

Do not download the 5958 DAT file. Reports are coming in where this is causing major issues. Info from the community can be found:

http://community.mcafee.com/thread/24056?start=15&tstart=0 

 

Most recent info I have is this:  https://kc.mcafee.com/corporate/index?page=content&id=KB68780

0
 
gilmanschoolAuthor Commented:
john6767:  I can't get into the properties of the nic because it doesn't show up under the network settings.
0
 
johnb6767Commented:
Ah......

Find "netmscli.inf" in c:\windows\INF and Right Click it>Install.....
0
 
gilmanschoolAuthor Commented:
Mcafee released a patch, which did bring back the network connections but not able to get an IP address.  System Restore has been enabled so that was the easiest fix.  Here is a link to their "fix"

http://download.nai.com/products/mcafee-avert/tools/SDAT5958_EM.exe?elq_mid=2373&elq_cid=136096
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.