EventID 7000 query with Hyper V File Server

Question

Issue with a hyper V file server the past week, its completely frozen (can log onto it)

There is only file server resources associated with it yet both file and print services have been inaccessible

I see an event ID 7000 shortly beforehand saying KDService failed to start due to following error The system cannot find the file specified

I did a malware search and it shows up a PUM.Optional Homepage control Issue (which is a registry change)

Whats best way to troubleshoot this to see where original error came from? A reboot solves it just looking to see what else can be done?

I see KDService can relate to malware, its odd as there are no printers on that server

https://www.freefixer.com/library/file/kdservice.exe-151772/

Answer 1

Hi，

Please try the following methods:

1. Please try to do a clean-boot of the file server, check if the issue still exists in clean mode.
2. Please try to uninstall the anti-virus application completely, then restart the System, check if it could work.
3. If after uninstalling the anti-virus application, the issue still exists, pleae open CMD, then run sfc /scannow to check if there's any corrupted or missing system files.
4. If the above still not work, it's recommended to do in-place upgrade and keep personal files to repair the system.
5. If still not work, it's recommended to open a case with MS to do further troubleshooting. Below is the link to open a case with MS:
   https://support.microsoft.com/en-us/gp/customer-service-phone-numbers

Thanks for your time!
Best Regards,
Anne

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi Anne when you say clean mode are you referring to safe mode?

https://www.windowscentral.com/how-clean-boot-windows-10

Thinking you are, thanks for this will check it out