Boot Server service on Windows Server 2008 Ent. Ed. DC won't start.

Posted on 2011-05-05
Last Modified: 2012-06-27
In troubleshooting a network issue this morning that is preventing users from logging on, we discovered that a service on one of our domain controllers isn't starting.
Domain Controller:
Windows Server 2008 Ent. Ed. SP1 64bit OS
This domain controller is not the FSMO role holder.
The name of the service is "Boot Server" and is set to start automatically. We are a bit concerned about this particular service for a number of reasons:
When looking at the properties of the service, the service name is listed as "scjmzywc". The description says: "This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users' data, and components registered to receive profile event notifications will not receive them." The path to executable is "C:\Windows\system32\svchost.exe -k netsvcs".

None of the other DCs has this service (we have a total of 3 DCs in the domain).

We are unable to find any information about this service anywhere online.
When attempting to start the service, we get an error: "Error 126: The specified module could not be found."
All of our DCs are protected by Sophos Antivirus, which hasn't reported any infections or suspicious behaviour.
Has anyone else come across this particular service on Windows servers? The closest we've come when searching for info is the User Profile Service which typically runs on client machines (Windows 7).
Question by:stedwardsitdept
    LVL 20

    Expert Comment

    by:Svet Paperov
    There is no such service on DC. I would say that your DC has been hacked and I suggest you to unplug it immediately from the network and try to clean it.  

    Accepted Solution

    That is something we are considering doing but in the meantime, I've run the following command from a command prompt to delete the service:

    C:\sc delete scjmzywc

    This successfully deleted the service.


    Author Closing Comment

    No comments ATT.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    With the higher take up rate of SAN’s, virtualisation etc, windows devices with more than one network interface are becoming more common.  As a general rule when a service that is installed on a Windows operating system is running, it only listens o…
    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now