delar

Members
  • Content count

    13
  • Joined

  • Last visited

About delar

  • Rank
    New Member
  1. My boss called in saying that she could not come to work because she hit a squirrel with her car and was too emotionally distraught to continue driving into work... I wish I was making this stuff up but apparently that's a valid reason for not coming to work when you are a manager...
  2. So if I need to edit my post I need to post 100 posts... /sigh I really don't want waste forum space on what amounts to post one, two, three... just so I can edit a post I made in error.
  3. It appears as if I do not have the ability to edit my post so could someone with that ability remove the attach.txt file I accidently included as an attachment?
  4. Adding the "dds.txt" "attach.txt" files to attachment. dds.txt
  5. Updated and ran Malwarebytes and it discovered 2 files: comres.dll (Trojan.Fake.MS) c:\winnt\ServicePackFiles\i386\comres.dll c:\winnt\system32\dllcache\comres.dll I updated and ran Malwarebytes and two other Windows XP 32 bit computers and all three of the computers are reporting the same file. Is this a false positive or do I have all three computers infected?
  6. Thanks for the help all. If I run into any more issues with this I'll post to this thread or if I find a way to keep them from appearing in the event log.
  7. Well Remote Desktop seems to be working properly which is what I was mostly worried about. If you suggest I ignore it then I will until something doesn't work.
  8. I tried contacting Microsoft for support but they wanted to charge me $99 to fix the issue. I saw that post from Jonathan Bond but The relevant status code was "Key not valid for use in specified state." My The relevant status code was "Object already exists". I wasn't sure if I could cause more harm then good messing around without knowing what I was doing... Which certificate do you suggest I delete using the MMC certificate tool?
  9. I'm irked by an event log entry mostly. I did a in-place windows upgrade, etc and still can't seem to get this from not appearing in the event log on each computer reboot.
  10. I rebooted the computer with a clean windows boot: msconfig In the System Configuration Utility dialog box, click Selective Startup on the General tab. Click to clear the Load Startup Items check box. Note The Use Original Boot.ini check box is unavailable. Click the Services tab. Click to select the Hide All Microsoft Services check box. Click Disable All, and then click OK. When you are prompted, click Restart. Still have the error on computer reboots.
  11. Any time the computer is reboot the error appears in the event log. Must be something windows is launching during startup.
  12. The computer is Windows 7 Professional 64-bit edition version 6.1 Build 7601 service pack 1. The computer is not in a domain environment. I believe this may be a security issue however I completed an in-place windows 7 upgrade to try and fix the problem but after all of the windows updates, etc the error remains and appears every time the computer is rebooted... I could use some help with the following error: Log Name: System Source: Microsoft-Windows-TerminalServices-RemoteConnectionManager Event ID: 1057 Task Category: None Level: Error Keywords: Classic User: N/A Description: The Terminal Server has failed to create a new self signed certificate to be used for Terminal Server authentication on SSL connections. The relevant status code was Object already exists. Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}" EventSourceName="TermService" I found {C76BAA63-AE81-421C-B425-340B4B24157F} in my registry in the: HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin -> OwningPublisher HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic -> OwningPublisher HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug -> OwningPublisher HKey_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> WINEVT -> Channels -> Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational -> OwningPublisher Microsoft-Windows-TerminalServices-RemoteConnectionManager %SystemRoot%\system32\termsrv.dll When I open as administrator a command prompt window and enter the follow: regsvr32 termsrv.dll I get the following message: RegSvr32 The module termsrv.dll was loaded but the entry-point DllRegisterServer was not found. Make sure that termsrv.dll is a valid DLL or OCX file and then try again. Not sure if this is a problem or if this behavior is expected... I ran sfc /scannow and check disk on the hard drive with both reporting no errors. I updated the security profile for: [Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security] In the right pane, double click "Require use of specific security layer for remote (RDP) connections", in the security layer list, select RDP. I modified the policy and there was no change in computer behavior. The error still appears each time the computer is reboot. === I found a semi-related webpage that at least lists the same Microsoft-Windows-TerminalServices-RemoteConnectionManager and 1057. However I'm running Windows 7 64-bit edition and I seriously doubt I have a lack of available memory issue. Event ID 1057 — Terminal Services Authentication and Encryption http://technet.microsoft.com/en-us/library/cc775192%28v=ws.10%29.aspx Physical Memory (MB) Total 24567 Cached 6337 Avaiable 21821 Free 15709 The relevant status code says that the "Object already exists" which I think is far more relevant then some memory issue. Do I have to delete some file or registry entry? Or is it a security issue? Google search have come up with nothing. Any suggestions would be very helpful!