Re: Perfmon

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In microsoft.public.win2000.registry =?Utf-8?B?UmljaA==?= wrote:

> Ok here is our situation.
>
> A windows 2003 server was infected by a virus, the virus created
> instances of perfHmon, (not perfmon) and added registry settings
> for it to be launched as a service.
>
> One of our junior technicians thought it a great idea to remove
> these entries from the registry.. but in doind so he also

That would be *former* junior technician now?

> removed all entries regarding "perfmon", which is the
> performance monitor in windows.
>
> Does anyone know what entries need to be made in the registry in
> oreder for this legit service to run?
> And can one replace the perfmon.exe file from another windows
> 2003 server installation, without huge detriment to the server.

I suspect much more than that will be required.

> I am also afraid to restart the system incase it wont boot
> properly back into windows... or will this solve the problem, by
> recreating the instances of perfmon?
>
> No backups are avaliable for use in restoring the registry.

Ouch! I'm sure that situation will be rectified in the future.

> Help in this regard would be unbelievable appreciated.

I do not have a definitive recomendation. Possibly doing a "repair
install" would be a solution, but I cannot guaranty that method
will work.
There are several other regular posters I expect will have some
feedback on this topic if you can wait a bit.
.

Relevant Pages

  • Re: event ID29 time provider not available
    ... I understand that when you boot Windows Server 2003 you received an error ... This issue may occur if the Network Load Balancing service is referenced as ... Start Registry Editor. ... "NLB Failed to Start" Error Message on Windows 2000 If NLB Is Not Installed ...
    (microsoft.public.windows.server.general)
  • RE: Microsoft RPC DCOM exploit descriptions
    ... variant below, ... The services can be viewed in the Services Console in Windows ... the "Computer Browser" and "Server" services are no ... Delete the Registry Value: ...
    (Bugtraq)
  • RE: DSL & Dialup Not Working Under W2K
    ... After a remote client establishes a connection by using Dial-Up Networking, ... A "cannot find server or DNS" error occurs. ... Windows 2000 LAN clients cannot map a network drive to the server. ... If you use Registry Editor incorrectly, ...
    (microsoft.public.win2000.networking)
  • RE: No access to Shared Printer
    ... Windows NT and Windows 2000 Print Browsing Architecture ... This article contains information about modifying the registry. ... How Shared Printers Are Found ... Windows NT print server. ...
    (microsoft.public.win2000.printing)
  • Re: Perfmon
    ... Search of my registry for perfmon. ... Windows Product Activation ... Folder Redirection ...
    (microsoft.public.windowsxp.perform_maintain)