w2k server compromised

hey all

i just found one of the w2k servers to be infected and acting very strangely.
unfortunately it is a domain controller and it has all the users/computers lists.

how can i export these before reinstall in order to keep the exact same configuration (everything except passwords of course) ? i suppose this could be usefull to be done on a regular basis too...

TIA Received on Thu Jan 23 12:02:30 2003