Win 2000 Server error
Discussion
Mmm. Anyone ? Just started yesterday. Had a look around for an answer but cant find anything complusive. It's in the System log.
The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.
The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.
**MIGHT** not be the same, but a few clients had some unprotected Windows 2000 servers compromised about 6 months back.
an FTPD was installed on them on the sly, along with a service which HID them and their PIDS from Task Manager, as well as hiding several files..
The Main service it was faking was
WMI Performance Adaptor. It was living in the System32WBEM folder.
there were 3-4 files in there with a very recent 'modified date'
i would suggest you check it out, if you find some suspicious looking files in there, stop the WMI Performance Adaptor and anything sounding like it in services, then delete those files.
Hopefully this isnt what you have tho
J
an FTPD was installed on them on the sly, along with a service which HID them and their PIDS from Task Manager, as well as hiding several files..
The Main service it was faking was
WMI Performance Adaptor. It was living in the System32WBEM folder.
there were 3-4 files in there with a very recent 'modified date'
i would suggest you check it out, if you find some suspicious looking files in there, stop the WMI Performance Adaptor and anything sounding like it in services, then delete those files.
Hopefully this isnt what you have tho
J
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff