I have an NT 4 server as my PDC and it runs exchange 5.5 and DNS, I recently got hacked, the attacker got access to the registry and deleted keys that were obviously required, I found the system at the login prompt the next morning.
The system would startup and you could log in but DNS, Exchange, server, workstation services would not start.
I found those registry keys that I needed and got the critical services going.
Now when I go to the user manager I get "service name not found". That's the same error I had with the other services before I restored those keys. I think it has something to do with the service control manager, but, I see an instance of that in processes. I'm wondering if anyone knows which service keys I need to restore to get access to that. I know I've come a long way to getting this going, but, I can't find anything on the internet about the services on to start and any help would be appreciated.
Thank you in advance. Dale
The system would startup and you could log in but DNS, Exchange, server, workstation services would not start.
I found those registry keys that I needed and got the critical services going.
Now when I go to the user manager I get "service name not found". That's the same error I had with the other services before I restored those keys. I think it has something to do with the service control manager, but, I see an instance of that in processes. I'm wondering if anyone knows which service keys I need to restore to get access to that. I know I've come a long way to getting this going, but, I can't find anything on the internet about the services on to start and any help would be appreciated.
Thank you in advance. Dale
