sruliwolff

Forum Replies Created

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • Avatar
    sruliwolff
    Member
    in reply to: DCDiag RReg Test Error – Wrong domain GUID #324238

    Re: DCDiag RReg Test Error – Wrong domain GUID

    I know it says there is a missing service record, thats why it says “Missing SRV record”. The question is why is it saying that when there is a domain GUID service record there already with a different GUID then it is looking for??

    The command dcdiag /v was run already thats how I got to see all the other records were “matching”

    As mentioned in the post “RReg entry in the DNS test”

    Any other thoughts??

    Avatar
    sruliwolff
    Member
    in reply to: Search Links Hijacked #324237

    Re: Search Links Hijacked

    Yep that was it!!!

    Thanks.

    Rootkit revealer found some files referencing tdss*.* which are noted as trojans in various sites.

    I then used Malwarebytes Anti-Malware to clear them and various rootkit registry settings.

    After that everything worked fine. I ran combofix just as an afterthought and it was more or less clean.

    Thanks a bunch.

    Sruli

    Avatar
    sruliwolff
    Member
    in reply to: Search Links Hijacked #324236

    Re: Search Links Hijacked

    All clean.

    The only entry is 127.0.0.1 localhost.

    Avatar
    sruliwolff
    Member
    in reply to: Windows XP THINKS it’s in Safe Mode #324235

    Re: Windows XP THINKS it’s in Safe Mode

    If you plan on trying to figure it out I can only give you one piece of advice:

    DON”T TRY TO DO A REPAIR.

    I had to format and reinstall the OS as I tried to do a repair and then in the second part of the repair after it copies the files and then reboots to finish the configuation it wouldn’t finish it as it says it could not run the repair in SAFE MODE.

    Every reboot after that tried to finish the repair and wouldn’t run in SAFE MODE even though it was booting into regular mode.

    Sruli

    Avatar
    sruliwolff
    Member
    in reply to: Windows XP THINKS it’s in Safe Mode #324234

    Re: Windows XP THINKS it’s in Safe Mode

    Tried booting into safe mode and then back into normal mode, but nothing changed.

    I then tried running a repair on Windows XP, but the second stage of the repair (after the copying it boots into windows and resetups all the drivers and windows files) wouldn’t continue because as before “windows repair cannot continue in safe mode”.

    I didn’t have time, so I backed up the data, reinstalled and restored the data.

    Either way, it’s a very interesting issue and one I had not encountered in the number of years working in this field.

    If anyone comes across it and finds a fix I’d be interesteed to know.

    I think it was a registry entry that was corrupt somewhere telling the winlogon and services that it was in Safe Mode when it really wasn’t.

    Thanks for trying.

    Sruli

    Avatar
    sruliwolff
    Member
    in reply to: Windows XP THINKS it’s in Safe Mode #324233

    Re: Windows XP THINKS it’s in Safe Mode

    The only thing in the event viewer is the event of the services trying to start at the bootup and some COM errors with the following error:

    The COM+ Event System detected a bad return code during its internal processing

    Sruli

Viewing 6 posts - 1 through 6 (of 6 total)