I have issues on server 2003 R2, SP2. Normal authentication, No AD. it just happened in the last day or so. Turned the monitor on for the server and it was asking why it had shut down unexpectedly, . I keyed in unknown and proceeded to logon. After Logon, I saw the green "recently updated" icon in the sys tray and thought that was odd, because Windows always tells itself it restarting for updates did updates cause some issues??
I then noticed that the My Computer icon, Network Places icon and recycle icons are displayed with unknown file icons.(see attached thumbnail) Here are some other issues observed: When I right click the icons it sees them as folders, giving me only typical folder options. Can't open mmc.exe (see attached thumbnail) to see the event viewer to see what happened. I get a class not registered error. The All Programs won't display the programs list when I click on it. On a whim I tried installing malwarebytes, I get "regsvr32 failed with exit code 0x5" Research tells me "Access Denied" issues. Administrator tools link doesn't work either.
I right click the desktop then select add short cut, just to browse the computer another way or create a shortcut (see attached thumbnail)... the MS wizard opens, I click browse, and my only option is make new folder or cancel, clicking make new folder does nothing, it doesn't browse. There are so many things that don't work I don't even know where to start with what things that don't work to help in a diagnosis, Also I can see IE 8 open up in the task manager when I click on it and then immediately disappears from the process list without ever opening on the screen. Tried re-installing it and I get an immediate error after selecting run, install, and check install updates, then it errors "Internet Explorer installation did not complete"
I can install a program, for example Firefox from a flash drive, I select launch and get to the internet just fine. When I close it, I cannot run the program again because it never created a shortcut and I cannot browse the computer in anyway to find the .exe. Windows key+E, Win key +R doesn't work, right click the desktop and properties. I can't even browse from the task manager the machine freezes. I have been able to browse by using other applications like ClamAV. So I can have a look around but serious Windows apps will not run, eg. Mmc.exe
I can get to control panel, in details view lets say...but the first four items listed do not have identifiable icons, they are the Windows generic "I don't know what these are" icons and no text adjacent to them, the rest of the icons are there with text descriptions as normal. When I select add/remove it doesn't populate the list. So I can't look to see what updates have been installed. When I first logged on I was able to get add/remove to populate. In fact I removed software Yahoo Toolbar, Yahoo updater, Freeze.com, and some PC registry fixer that were not there a week ago. Ironically the owner has a Yahoo account and swears he hasn't downloaded anything. He also accesses the server from home with VNC
The odd part is all our Practice Management Applications are running fine, It only seems to be the OS side of the server.
A) can I run sfc /scan now on sever2003? And Should I run sfc? Will it affect any of our Applications installed? Reasoning is so many things are not accessible, reminds me of a desktop that has had a rootkit change permissions and settings.
Is it a windows update that may have caused this? If so how can I roll back? roll back to registry from say the 9th of Dec?
C) Raid Degraded?
The reason I even question the RAID condition is that the server will hang for a minute sometimes longer and eventually repaints the screen. For example when logging in, what icons are left on the desktop take way too long to display. Or I can click on something, with task manager up and see little if any CPU activity and then suddenly the machine appears to freeze and then catches up with the clicks. I've seen this in the PC desktop world when a drive has bad sectors or crosslinked files. They act really slow, not a lot if any CPU usage going on while it's waiting and then suddenly it's displayed.
Is there anything like combo fix that can run on servers?
thanks for any help!
Edited by hamluis, 28 December 2012 - 07:03 AM.
Moved from Win NT to Am I Infected - Hamluis.