SERVER SPYWARE / Can't log into only DC, any/all help is greatlyappreciated!!!!!!!!!!!!!!!!!!!!!!!

  • Thread starter Thread starter Matt Anderson
  • Start date Start date
M

Matt Anderson

now every time I try to log in, it
goes to about to where you'd expect it to load the desktop and puts you
right back to the login screen. It even does this in safe mode. The
admin over-writes her tapes every 2 days!!!! so I can't even rebuild and
Click to expand...

Check permissions on the documents and settings folder. It's possible
somehow they are too strict.

Matt
MCT, MCSE
 
I have a client whose server was infected with both "Cool Web Search"
and "TV Media" Spyware. The server was barely functional. The local
Admin tried running Adaware on it and every time you click to Delete,
Adaware freezes (this seems to happen all the time w/ Adaware; any
thoughts on that too would be nice.) After rebooting in safe mode,
removing any noticeable links in the startup using an XP version of
"MSConfig" and running CWShredder on it to remove "Cool Web Search" the
server rebooted fine once...........now every time I try to log in, it
goes to about to where you'd expect it to load the desktop and puts you
right back to the login screen. It even does this in safe mode. The
admin over-writes her tapes every 2 days!!!! so I can't even rebuild and
restore a recent non-infected system state. I have access to ERD
Commander so I can boot and edit that way (have to try using the Dell
Perc 4 Raid driver and hope it works), but is there a way to manually
role back the registry or something? If I was to reinstall 2K server
from CD and over-wrote the existing install would that work to repair
any missing files or registry issues and would it hurt AD? Any/all help
is greatly appreciated.............thanks so much!!!
 
Thanks Matt,

I'll try to use ERD Commander to check, since that's the only way I even
have a chance of getting in.
 
rickiez said:
Thanks Matt,

I'll try to use ERD Commander to check, since that's the only way I even
have a chance of getting in.
Click to expand...
If the server is on map a drive to \\server\c$ and check NTFS permissions
that way.

Matt
MCT, MCSE
 
Back
Top