Damaged Windows Server 2019

Question

Over a year ago we had a few servers hit by a Crypto virus. We have recovered all the critical servers and all are running their software. One host hit was a Windows Server 2019 Enterprise Host. All VM are running and I can RDP into the server and do anything I need to, but it has a few "quirks" Examples:

1. I get no video out put on the physical console.
2. No results anytime I use the Cortana Search bar.

I have tried various things, like running "sfc /Scannow" and "DISM /Online /Cleanup-Image /RestoreHealth /Source:repairSource\install.wim." These have not resolved the issue.

Any suggestions? This is a critical server and I would like to be able to use the console and search functions again.

Thank you.

Answer 1

• get this when trying to run the DISM command above:

Deployment Image Servicing and Management tool
Version: 10.0.17763.1697

Error: 3

An error occurred. The directory in the temporary folder C:\Users\ADMINI~1\AppData\Local\Temp\2\ could not be created.
Ensure that the path to the temporary folder exists and that you have Read/Write permissions on the folder.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

*

Answer 2

The simplest / cleaner solution is to copy off the VHDs, rebuild host from scratch, patch fully, add hyper-v role, import virtual machines.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

I don't see an alternative. How can you know what damage was done and even if its been completely cleared. Better solution is to stand up a new one and migrate the virtual machines assuming they were not affected. Another option is to start a case here with product support.
https://support.serviceshub.microsoft.com/supportforbusiness

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

Hi,

If you would like to get better help, it's recommended to open a case with MS.

Below is the link to open a case with MS:

https://support.microsoft.com/en-us/gp/customer-service-phone-numbers

Thanks for your time!
Best Regards,
Anne

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

Any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--