Windows Server 2003 Enterprise Login Loop

Ethan Wilson
Ethan Wilson used Ask the Experts™
on
Windows Server 2003 Enterprise - Recently had an infection WINLOCK SMS russian Ransom Trojan, could not even get to the Login Screen, Used USB Bootable Kapersky and AVG, cleaned infection, now when l attempt to login, it logs right back out. According to Microsoft KB, I needed to use Registry Network connect and modify the registry entries for Userinit and explorer.exe I did both and the issue persists. Any suggestions on how I can get in/fix the issue. I have user that can't RDP in.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
This normally happens when the profile is corrupted. Do you have another profile to login? That would confirm that a new profile needs to be created.

You can also try a repair installation in the worst case scenerio  (if some system files were damaged by your Trojan fix.)
http://decipherinfosys.wordpress.com/2007/02/16/effectively-repairing-windows-2003-server/
Commented:
can you log in with safe mode? Local Administrator?

Author

Commented:
The issue persists in safe mode, with alternative logins, and even with Local Administrator
Commented:
Honestly if this server is valuable and or critical to your company I would suggest you recover your data using other means, A live boot CD or something like Windows PE. The reason I say is you do not want to try and fix a server that has been compromised and keep using it as you are never 100% sure there isn't something on there that was injected that none of your scanners caught. At Microsoft we always had a standard policy to flatten and rebuild any server that had been compromised. Sure there are great tools out there for removal  but it is your companies data you should not be risking?
If it is not that important I would try the repair installation

Author

Commented:
The system was wiped and reinstalled.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial