Win 2k Advance serve workstation service fails to start

[dcb60]

I have a W2k Advanced server that was hacked. I have cleaned up all the trojans and updated all the patches. While I am sure I have missed some malware, my current difficulty is that the workstation service will not start. When attempting to start it, I get an error 5 access denined. It is set up to start as a system account. Any ideas on what to regedit or app to run to correct my problem? I am about to the point of low level format, but reloading everything will take days.