• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 364
  • Last Modified:

Boot Server service on Windows Server 2008 Ent. Ed. DC won't start.

In troubleshooting a network issue this morning that is preventing users from logging on, we discovered that a service on one of our domain controllers isn't starting.
Domain Controller:
Windows Server 2008 Ent. Ed. SP1 64bit OS
This domain controller is not the FSMO role holder.
The name of the service is "Boot Server" and is set to start automatically. We are a bit concerned about this particular service for a number of reasons:
When looking at the properties of the service, the service name is listed as "scjmzywc". The description says: "This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users' data, and components registered to receive profile event notifications will not receive them." The path to executable is "C:\Windows\system32\svchost.exe -k netsvcs".

None of the other DCs has this service (we have a total of 3 DCs in the domain).

We are unable to find any information about this service anywhere online.
When attempting to start the service, we get an error: "Error 126: The specified module could not be found."
All of our DCs are protected by Sophos Antivirus, which hasn't reported any infections or suspicious behaviour.
Has anyone else come across this particular service on Windows servers? The closest we've come when searching for info is the User Profile Service which typically runs on client machines (Windows 7).
0
stedwardsitdept
Asked:
stedwardsitdept
  • 2
1 Solution
 
Svet PaperovIT ManagerCommented:
There is no such service on DC. I would say that your DC has been hacked and I suggest you to unplug it immediately from the network and try to clean it.  
0
 
stedwardsitdeptAuthor Commented:
That is something we are considering doing but in the meantime, I've run the following command from a command prompt to delete the service:

C:\sc delete scjmzywc

This successfully deleted the service.

0
 
stedwardsitdeptAuthor Commented:
No comments ATT.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now