DOMAIN NAME is now SAMHAINS???

I think I got some sort of TROJAN or VIRUS, but Norton see no problems?

My DOMAIN NAME is now SAMHAINS? I can't seem to be able to change it?

Other 'odd' stuff happened as well.

Any clues?

Irv Spalten

 

What OS version are your DCs?

NT4 or AD style domain?

Does everything still work after the name change?

Does the new domain name really have the ??? in it? SAMHAINS???

When did you last pull down updates to your AV dat files?

Have you also tried a scan with an online scanner like Housecall?

 

Newt, I'm using HOUSECALL now.

I may not have used the correct name, DOMAIN NAME. It now looks like and ALIAS?

I'm running WINXP PRO SP 1.

NET NAME reports this...

============
c:\>net name

Name
-------------------------------------
SAMHAINS
IRV SPALTEN
The command completed successfully.
=============

and

==============
c:\>net config workstation
Computer name \\SAMHAINS
Full Computer name irv
User name Irv Spalten

Workstation active on
NetbiosSmb (000000000000)
NetBT_Tcpip_{FF4CB15B-3EAD-4B3D-91AC-40E5D9E527F7} (00B0D016812B)

Software version Windows 2002

Workstation domain HOME
Workstation Domain DNS Name (null)
Logon domain SAMHAINS

COM Open Timeout (sec) 0
COM Send Count (byte) 32
COM Send Timeout (msec) 250
The command completed successfully.
=========

It is the COMPUTER NAME and LOGON DOMAIN I can't seem to change?

I suspect SAM CLEAN did it, I got it today from a notice on INFOPACKETS GAZETTE :

-----
Bob's free Software Picks of the Day

Category: Windows
by Bob Helmer, Shell Extension City
http://www.shellcity.net


SamClean

Systems and Memory cleaner. Well its much more that that. Samclean will clean your system and memory of unwanted files and add free space to memory and disk. Delete temp, gid files and what have you, but it also tests your pentium chip for a known pentium flaw, speed up your computer with 15 registry tweaks and adds PC turbo. Samclean can be started by right clicking on Recycle bin.

http://www.samclean.cjb.net/
-------------

That link now doesn't work?

Any help changing the names back?

Irv

 

If you have system restore active and can find a restore point from before you ran the cleaner, see if that will put you back to normal.

If not, post back since there are some other things you can try but none as easy or safe.

And FWIW, there are lots of cleaners out there and some are disastrous for XP. Not familiar with the one you used but were it me, I'd stay away from it. Sounds to me like it tries to do too much including a couple things XP shouldn't need.

If you search the XP section for registry cleaners you will see several discussions of the topic and suggestions for apps that folks have found save & effective.

 

Newt,

RESTORE didn't restore, said there was no need. Tried a few points of up to 3 days before.

Did get it fixed up. Discovered what it 'did'. Searching the registry for 'samhains' located about 12 hits. Most were unique new keys or folders. However, a few were DUPLICATE KEYS name in the same folder, like the computer name and domain stuff where my original ones also were. This sort of explains WHY I couldn't change them via the normal methods. I guess Windows looks in the specific registry folder for a key it is going to update and does so, but doesn't check to see if there are others with that name as well. That is how the ALIAS happened I guess? Processing the registry I guess it uses the LAST ONE READ. That is why when I changed it and rebooted, it never changed. Updating only changed the first occurance and booting reads the entire folder, first the one I just changed and then the second key with the same name to set it to SAMHAINS. Funny, Norton WinDoctor didn't find anything wrong in the registry, guess it doesn't check for duplicate key names?

Anyway, deleting UNIQUE SAMHAINS folders and duplicate keys with that name got me back to where I was. Also found a NEW printer defined for my system, a LEXMARK Z3 residing on SAMHAINS. I have a router and a firewall, so I don't think anyone could get on my system. I can't see the SAMHAINS network machine on my network either?

I still have the SAM CLEAN install file (10MB's), but I don't feel like re-installing to see if it truely was that. No way to contact the maker of the program either, from the web site or in the program or associated files. Matter of fact, it wraps around a 1 button program that has another site, and that one does have a contact point.

Right now, I'm back to where I was. I'll not mess with it for now, may do it on the other machine I have to 'play' with sometime though, although the program was for XP only and I don't have XP on it...

Thanks anyway,
Irv