Those are Google's... was that SW _FROM_ The Goog??
-sc
From: listsad...@lists.myitforum.com
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jimmy Tran
Sent: Thursday, April 24, 2014 9:12 AM
To: ntsysadm@lists.myitforum.com
Subject: [NTSysADM] RE: DNS server settings getting changed
That software would be per-client. Its a DNS hijacking trojan.
It seems odd that these systems are getting your Domain DNS. Would those
servers be providing resolution to systems that would otherwise not? Would
someone want to use your Domain DNS over what you are configuring?
--
Espi
On
...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On
Behalf Of Micheal Espinola Jr
Sent: Thursday, April 24, 2014 9:25 AM
To: ntsysadm
Subject: Re: [NTSysADM] RE: DNS server settings getting changed
That software would be per-client. Its a DNS hijacking trojan.
It seems odd
, April 24, 2014 9:41 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: DNS server settings getting changed
No reason I can think of. Even if they resolved, they wouldn't be accessible.
While I did consider malware, the fact that it reverts to our internal servers,
and that those were
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: DNS server settings getting changed
Well at this point I'd add DHCP to another server (if you have one available)
configure it identically and disable it on the current server to eliminate some
possibilities. I'm sure you have other fish to fry
Sent: Thursday, April 24, 2014 9:51 AM
To: ntsysadm@lists.myitforum.commailto:ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: DNS server settings getting changed
Well at this point I'd add DHCP to another server (if you have one available)
configure it identically and disable
...@lists.myitforum.com [
mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On
Behalf Of *Melvin Backus
*Sent:* Thursday, April 24, 2014 9:41 AM
*To:* ntsysadm@lists.myitforum.com
*Subject:* RE: [NTSysADM] RE: DNS server settings getting changed
No reason I can think of. Even
: [NTSysADM] RE: DNS server settings getting changed
Any chance your Juniper is flaky? Tried rebooting it?
--
richard
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com
[mailto:listsad...@lists.myitforum.com] On Behalf Of Melvin Backus
Sent: Thursday, April 24, 2014 9:00 AM
...@lists.myitforum.com] On
Behalf Of Richard McClary
Sent: Thursday, April 24, 2014 10:06 AM
To: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: DNS server settings getting changed
Any chance your Juniper is flaky? Tried rebooting it?
--
richard
From: listsad...@lists.myitforum.commailto:listsad
:25 AM
*To:* ntsysadm
*Subject:* Re: [NTSysADM] RE: DNS server settings getting changed
That software would be per-client. Its a DNS hijacking trojan.
It seems odd that these systems are getting your Domain DNS. Would those
servers be providing resolution to systems that would otherwise
*To:* NTSysADM@lists.myITforum.com
*Subject:* Re: [NTSysADM] RE: DNS server settings getting changed
Network location profiles...I'm just sayin :) 2 minutes to delete and
recreate, 30 minutes to wait for results.
On Thu, Apr 24, 2014 at 9:00 AM, Melvin Backus melvin.bac...@byers.com
wrote
To: NTSysADM@lists.myITforum.com
Subject: Re: [NTSysADM] RE: DNS server settings getting changed
Network connections in control panel. You will have to unplug ethernet if
wired and turn off wireless if wifi. DELETE the profile. This will not remove
from domain.
On Thu, Apr 24, 2014 at 9:58 AM
...@lists.myitforum.com] On
Behalf Of Charles F Sullivan
Sent: Thursday, April 24, 2014 11:12 AM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: DNS server settings getting changed
I would at least run rsop.msc on one of the affected machines to make sure, as
this still sounds to me like
...@lists.myitforum.com [mailto:
listsad...@lists.myitforum.com] *On Behalf Of *Charles F Sullivan
*Sent:* Thursday, April 24, 2014 11:12 AM
*To:* ntsysadm@lists.myitforum.com
*Subject:* Re: [NTSysADM] RE: DNS server settings getting changed
I would at least run rsop.msc on one of the affected
@lists.myitforum.comDate: Thu, 24 Apr 2014 16:34:33
To: ntsysadm@lists.myitforum.comntsysadm@lists.myitforum.com
Reply-to: ntsysadm@lists.myitforum.com
Subject: RE: [NTSysADM] RE: DNS server settings getting changed
OK, regmon says it's svchost, so now I've just got to track down which service
that instance
[mailto:listsad...@lists.myitforum.com] On
Behalf Of Andrew S. Baker
Sent: Thursday, April 24, 2014 12:24 PM
To: ntsysadm
Subject: Re: [NTSysADM] RE: DNS server settings getting changed
You're now left with wireshark and/or Process Monitor for troubleshooting.
ASB
http://XeeMe.com/AndrewBakerhttp
.
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On
Behalf Of Rankin, James R
Sent: Thursday, April 24, 2014 12:38 PM
To: ntsysadm@lists.myitforum.com
Subject: Re: [NTSysADM] RE: DNS server settings getting changed
Could it be some sort of Scheduled Task causing
*Sent:* Thursday, April 24, 2014 10:07 AM
*To:* NTSysADM@lists.myITforum.com
*Subject:* Re: [NTSysADM] RE: DNS server settings getting changed
Network location profiles...I'm just sayin :) 2 minutes to delete and
recreate, 30 minutes to wait for results.
On Thu, Apr 24, 2014 at 9:00 AM
18 matches
Mail list logo
