Solved

Can I reinstall Windows Server 2003 SP2 to resolve corrupted system files

Posted on 2015-01-05
7
263 Views
Last Modified: 2015-01-08
I have a Windows Server 2003 R2 with SP 2 which was infected with viruses.  After removal of viruses, several system functions are not working properly.  I am unable to browse to the network, connect to this server from other servers and  workstations, open Windows Firewall, open Network Connections, or install certain programs.  It also disabled several services that I have since enabled manually, but am still unable to do many functions.  Can I just reinstall SP2 to correct these errors?  I tried the reset TCP/IP by using NetShell and also the rundll32 setupapi... netrass.inf commands without success.  Thanks.
0
Comment
Question by:pwayte
7 Comments
 

Author Comment

by:pwayte
ID: 40531795
I forgot, I also attempted to run System File Check utility without success.  Thanks.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 40531803
First question is, whether you really want to trust that server any further. if you have a current backup, I'd vote for using that, instead. If you don't, you can try a repair installation as follows:

1 aquire a 2003 setup CD with SP2 already included. If not at hand, use nlite to produce it yourself
2 boot from that CD
3 select install
4 setup will not start the installation right away but look for present installations and offer to repair the current installation

Afterwards, all system files and security related settings are reset to SP2 level. You will have to reapply all post SP2 patches. if you need more help, google "2003 server inplace upgrade".
0
 
LVL 25

Expert Comment

by:Mohammed Khawaja
ID: 40531815
Also note that if you have System Restore Point enabled then why don't you just revert to a state prior to the infection.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 2

Expert Comment

by:Chach DalSanto
ID: 40531850
Both give good advice.  I've had success doing both.  

Afterwards, you should plan for reloading/replacing that install of the server.  Since the system has been seriously traumatized, you'll never be able to 100% trust it again.  It may have started working again, and thats a great short-term goal, but far more often than not as the weeks months and years roll on you'll have anomalous behavior from it.  

There are a couple ways you could do this:  You can transfer the workload, virtualize the server and run it somewhere else while you reload the physical box its on, etc. but the point is it's never going to be 100% right again and it's untrustworthy.

Just my $0.02 from experience.

Thx
0
 
LVL 46

Expert Comment

by:noxcho
ID: 40532074
0
 
LVL 91

Expert Comment

by:nobus
ID: 40533001
i would not even try to repair it, since the OS seems heavily corrupted
best go for backup + freh instalml here - it will save you time in the end

if you fear the same thing happening later - make an image of the disk after  everything is installed + updated
0
 

Author Closing Comment

by:pwayte
ID: 40538495
Thank you all for help.  I awarded the solution to McKnife because he gave me the answer to my question and also told me to not trust reinstall and do fresh install which I was trying to avoid at all costs and because he answered first.  All comments were excellent - thanks again.  I ended up doing complete re-install after all which will end up being best course of action as the system was really corrupted.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now