[SOLVED] Windows Server 2016 Task Manager and Update Issue

[fuesting]

Here's the output from the commands above.

 

[Maxstar]

Hmm, error 0xc0000005! My first thought is the executable is blocked for some reason? Firewall / Policy settings?!

# for hex 0xc0000005 / decimal -1073741819
  ISCSI_ERR_SETUP_NETWORK_NODE                                   iscsilog.h
# Failed to setup initiator portal. Error status is given in the dump data.
  STATUS_ACCESS_VIOLATION                                        ntstatus.h
# The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
# as an HRESULT: Severity: FAILURE (1), FACILITY_NULL (0x0), Code 0x5
  ERROR_ACCESS_DENIED                                            winerror.h
# Access is denied.

 

[fuesting]

I disabled the Windows firewall. I have no custom firewalling done at my L3 gateway device. I've never ran into a communications issue before, with this server or anything on my network (except for Pulseway). I tried ESET on another Windows desktop and found the same behavior. Inspected my firewall logs and it was indeed proactively shutting this communication down as suspected Malware activity. Ubiquiti product for future reference. I allowed the traffic and it's now scanning. Thanks for your patience.

This is associated with potential Trojan activity which may be harmful for your network.
Detection Category

Malware
SignatureET MALWARE Suspicious User-Agent (WindowsNT) With No Separating Space

 

[Maxstar]

(...) Inspected my firewall logs and it was indeed proactively shutting this communication down as suspected Malware activity.

This is a well-known problem with security tools on (hardened) networks with managed firewalls.

Let me know the result of the scan, if it come back clean I would suggest to install the latest update(s) as mentioned in post #12!

 

[fuesting]

No detections found thank god. The potentially unwanted programs were additional apps stored in backups from my kids PC's and friends. Some SuperMicro java stuff, but nothing major.

I'm going to attempt Windows updates now.

 

[Maxstar]

Great, please let me know the result after attempting to update. If it fails attach a new copy of the CBS logs.

 

[fuesting]

Windows Updates appear to have worked fine. No more updates available. No obvious issues. Task Manager working. No infections. I think we can call this one complete. Thank you very much for all the help. I have made a small donation and will consider future ones too. You guys are great. Thank you much!

 

[Maxstar]

Hi,

You're welcome. Glad to hear everything works well again, and thanks for your donation to Sysnative.
I will mark this thread as solved.