nttech
asked on
SBS 2003 does not let me logon
Hi guys,
I have a couple of question. I have restarted my sbs2003 server. and now users are not longer able to log in. the server pop up a message.. One or more services are not running.....
I went to services and the only services that is not running is the manager center, in the description for this service, I can read
"On domain controllers this service enables users to log on to the network using the Kerberos authentication protocol. If this service is stopped on a domain controller, users will be unable to log on to the network. If this service is disabled, any services that explicitly depend on it will fail to start".
when I start the services I got a error 32: the services can not access the file because it is being used by another process.
I appreciate your help.
Before spending to much time chasing the error, you may want to try another restart and see if the issue is persistant.
ASKER
I restarted the computer, still having the manager center services is down.
the services name is: oypokernx.
display name: Manager center
the services name is: oypokernx.
display name: Manager center
In the event viewer click the copy button and paste the error here.
Oh yea, why did you reboot?
What changes have been made since the last reboot?
What changes have been made since the last reboot?
None of the services you mention are on the SBS services list at:
http://support.microsoft.com/kb/829623
http://support.microsoft.com/kb/829623
Sounds like it might be related to your previous question:
https://www.experts-exchange.com/questions/26846882/Exchange-is-popping-up-asking-for-crediantials.html
Exchange is popping up asking for crediantials
https://www.experts-exchange.com/questions/26846882/Exchange-is-popping-up-asking-for-crediantials.html
Exchange is popping up asking for crediantials
ASKER
ASKER
AustinComputerLabs this is a different computer. the other is a windows 2008 standard.
Can you see any reference for oypokernx if you search the registry using regedit?
ASKER
yes I can.
local machine, software, microsoft, windowsnt, currenversion, svchost and then netsvcs
local machine, software, microsoft, windowsnt, currenversion, svchost and then netsvcs
ASKER
also I found another register in the following path
local machine, system, controset001, enum, root, legacy oypokernx.
I can't delete this key.... I think I could be a virus.
suggestions
local machine, system, controset001, enum, root, legacy oypokernx.
I can't delete this key.... I think I could be a virus.
suggestions
Run CCleaner on the box, ensuring you back up the registry first!
As a precaution make sure any essential data is also backed up.
As a precaution make sure any essential data is also backed up.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Restart
Login Safe Mode
Restart Again
Login Safe Mode
Restart Again
Not a SBS 2003 service and the fact it has poker in the name I would assume its an infection of some sort. Run 'Autoruns' and take a look through and disable the entry relating to this. Make sure you have a backup / registry backup before making any changes.
ASKER
I was infented by conficker. I have followed your instrucion and it was removed successful.
Many thanks
Many thanks