Question

DNS keeps setting itself to a foreign address/PC keeps rebooting

Asked by: WandaJHall

OK, this is a weird situation so I'm going to the experts...  As I can't pinpoint what is causing the problem, I've chosen this area since DNS is the issue....  sort of.   Here's the scenario:   A Windows XP SP2 machine in a home environment consisting of one Linksys router from Vonage, ISP from Optonline.   User calls me and says that he inadvertantly opened an email claiming to be an "e-card" and it went to a website, which he says he immediately shut down.  Since this incident, his computer keeps rebooting and the DNS settings keep changing from Obtain Automatically to use the following and the DNS IP address are random addresses that resolve back to ASIA.   At first thought....  virus/trojan... however, all virus scans (even with a clean disk(s)) are coming back clean.  A manual inspection is showing nothing...  The registry had those IP addresses listed for Name Server, which were all removed and the Local Area Connection/Internet Protocol settings were put back to "obtain automatically."  After a reboot, everything looks fine until the user accesses the Internet (Internet Explorer 6); then it again reverts back to the foreign DNS settings.  I've checked the hosts file, the router settings (set to obtain automatically from the ISP); have run hijackthis, which shows nothing amiss....   I'm now at a loss as to what else to look for.   Could the ISP and/or Vonage be causing this?   Something else I'm not thinking of???

Unfortunately, the user cannot provide any additional information on the email as he says he deleted it and can't recover it.

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2007-06-20 at 17:56:49ID22647588
Tags

virus

,

dns

Topics

Anti-Virus

,

Internet Protocols

,

Domain Name Service (DNS)

Participating Experts
3
Points
75
Comments
8

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Is this a trojan?
    When I go to download activeports from this website http://www.ntutility.com/freeware.html there is a review by an indivudual that claims this program installs a trojan horse? Can anyone verifiy this?
  2. Removal of trojan-spy
    Please help me remove trojan-spy.html.smitfraud.c from my computer before I go completely crazy. My antivirus software expired and I can't install the new version as long as this is infecting my computer. My hijackthis log analysis file is located at: http://www.hijackthis.d...
  3. Shorewall Incident
    We run shorewall as our production firewalls. We recently had an incident where restarting shorewall took a _very long time_ for a very minor change in the rules. Generally, it takes less than 30 seconds to load all the rules and apply them (we have a lot of rules), but th...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: giltjrPosted on 2007-06-20 at 19:14:32ID: 19330072

If you can manually change the registry or the networking properties and the stick after a re-boot, but then get changed after you launch IE, then I would say that you have a virus that is getting launched when you open IE.

 

by: r-kPosted on 2007-06-20 at 22:15:13ID: 19330732

Try this in IE:

Tools -> Internet Options -> General tab -> [browing history] Settings -> View Objects

and examine that list for anything that doesn't belong.

Also try the following:

(1) Download Autoruns from: http://www.microsoft.com/technet/sysinternals/utilities/Autoruns.mspx
(2) Run the program. It lists a bunch of things that start when Windows starts.
(3) From the menu bar, select Options, and uncheck "Include Empty Locations" and "check" "Hide Microsoft Entries"
    Important -> Then click the Refresh button in the toolbar.
(4) This will give you a shorter, more meaningful list.
(5) Examine that list and disable anything suspicious by un-checking it. Then reboot and see if it helped.
(6) If not, or if not sure, you can use the File -> Save as.. option in Autoruns to save the list to a text file and then cut and paste it here.

 

by: WandaJHallPosted on 2007-06-21 at 02:55:52ID: 19331649

r-k:  I've sent the instructions along and will report back when I get the results.   I'm not confident that it will find anything as the hijackthis report didn't really show any unusual browser objects; however, I could be wrong.   Maybe something legitimate has been compromised.

giltjr: As I said, a virus/trojan was my first thought, but I've run scans from sophos, trend micro, and symantic; as well as symantic's stand-alone tool for Troj/QHosts (which was my first guess as to what virus was present).  All of these have come back clean.  The PC rebooted twice during the Troj/QHosts scan and to be on the safe side, a new copy of used for each pass, rather than one that was already on the PC.    A manual check of the registry for evidence of virus is also coming back negative....     So if this is a virus, I'm lost as to how to detect which one it is so it can be cleaned up.

 

by: giltjrPosted on 2007-06-21 at 06:07:41ID: 19332668

Although it will generate a LOT of output, what you may need to do is run regmon when you start Internet Explorer and see what program modifies the registry entries.  You can get regmon from Microsoft.

 

by: WandaJHallPosted on 2007-06-21 at 16:34:43ID: 19337906

Here is the autorun report... I didn't see anything all that unusual, but just in case; I'll post it for you as well.   I did see one process that I looked up and it appears to come from a Sierra Racing game and was mentioned in relation to a PC randomly rebooting... the thread was talking about HyperThreading enabled on a P4 system causing it to randomly reboot (this may be the reason for the PC rebooting).  The process is papyjoy.sys.  

As for the RegMon....I completely and totally forgot all about that utility, so thanks!  I will run that as soon as I can pin the user down long enough to do it.

Here is the full AutoRun report:
HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup
HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Startup            
HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logon            
HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logon            
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit            
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell            
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell            
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell            
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell            
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman            
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run                  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run                  
+ avast!      avast! service GUI component      ALWIL Software      c:\program files\alwil software\avast4\ashdisp.exe
+ QuickTime Task      QuickTime Task      Apple Computer, Inc.      c:\program files\quicktime\qttask.exe
+ SunJavaUpdateSched      Java(TM) Platform SE binary      Sun Microsystems, Inc.      c:\program files\java\jre1.6.0_01\bin\jusched.exe
+ TkBellExe      RealNetworks Scheduler      RealNetworks, Inc.      c:\program files\common files\real\update_ob\realsched.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx                  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce                  
C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup                  
C:\Documents and Settings\xxxx yyyy\Start Menu\Programs\Startup                  
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load                  
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run                  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run                  
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run                  
+ msewso                  File not found: C:\WINDOWS\System32\msewso.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run                  
+ updateMgr      Adobe Update Manager      Adobe Systems Incorporated      c:\program files\adobe\acrobat 7.0\reader\adobeupdatemanager.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce                  
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce                  
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx                  
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run                  
HKLM\SOFTWARE\Classes\Protocols\Filter                  
HKLM\SOFTWARE\Classes\Protocols\Handler                  
+ belarc      Belarc VoilaX Control      Belarc, Inc.      c:\program files\belarc\advisor\system\bavoilax.dll
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components                  
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components                  
HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components                  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler                  
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad                  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad                  
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks                  
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved                  
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved                  
+ avast      avast! Shell Extension      ALWIL Software      c:\program files\alwil software\avast4\ashshell.dll
+ Display Panning CPL Extension                  File not found: deskpan.dll
+ HyperTerminal Icon Ext      HyperTerminal Applet Library      Hilgraeve, Inc.      c:\windows\system32\hticons.dll
+ iTunes      iTunes Mini Player DLL      Apple Computer, Inc.      c:\program files\itunes\itunesminiplayer.dll
+ My Media      Roxio AudioCentral Media Manager Shell Extension      Roxio, Inc.      c:\program files\roxio\easy cd creator 6\audiocentral\mediasx.dll
+ Roxio DragToDisc Shell Extension      DirectCD Shell Extention DLL      Roxio      c:\program files\roxio\easy cd creator 6\dragtodisc\shellex.dll
+ Shell Extensions for RealOne Player      RealPlayer Shell Extensions      RealNetworks, Inc.      c:\program files\real\realplayer\rpshell.dll
+ Yahoo! Mail      YMMAPI Module      Yahoo! Inc.      c:\program files\yahoo!\common\ymmapi.dll
HKCU\Software\Classes\Folder\Shellex\ColumnHandlers                  
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers                  
+ PDF Shell Extension      PDF Shell Extension      Adobe Systems, Inc.      c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
HKCU\Software\Microsoft\Ctf\LangBarAddin                  
HKLM\Software\Microsoft\Ctf\LangBarAddin                  
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects                  
+ Adobe PDF Reader Link Helper      Adobe Acrobat IE Helper Version 7.0 for ActiveX      Adobe Systems Incorporated      c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
+ SSVHelper Class      Java(TM) Platform SE binary      Sun Microsystems, Inc.      c:\program files\java\jre1.6.0_01\bin\ssv.dll
+ Yahoo! IE Services Button      Yahoo! IE Services      Yahoo! Inc.      c:\program files\yahoo!\common\yiesrvc.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks                  
HKLM\Software\Microsoft\Internet Explorer\Toolbar                  
+ AOL Toolbar      AOL IE Toolbar DLL (UNICODE)       America Online, Inc.      c:\program files\aol\aol toolbar 2.0\aoltb.dll
+ Updated! Toolbar            Andre Labaki      c:\program files\pop blocker\updated.dll
HKCU\Software\Microsoft\Internet Explorer\Explorer Bars                  
HKLM\Software\Microsoft\Internet Explorer\Explorer Bars                  
HKCU\Software\Microsoft\Internet Explorer\Extensions                  
HKLM\Software\Microsoft\Internet Explorer\Extensions                  
+ AIM      AOL Instant Messenger      America Online, Inc.      c:\program files\aim\aim.exe
+ PartyPoker.com      RunApp MFC Application            c:\program files\partygaming\partypoker\runapp.exe
Task Scheduler                  
HKLM\System\CurrentControlSet\Services                  
+ aswUpdSv      Provides automatic updating for the avast! antivirus.      ALWIL Software      c:\program files\alwil software\avast4\aswupdsv.exe
+ Ati HotKey Poller      ATI External Event Utility EXE Module      ATI Technologies Inc.      c:\windows\system32\ati2evxx.exe
+ avast! Antivirus      Manages and implements avast! antivirus services for this computer. This includes the resident protection, the virus chest and the scheduler.      ALWIL Software      c:\program files\alwil software\avast4\ashserv.exe
HKLM\System\CurrentControlSet\Services                  
+ ALCXSENS      Sensaura WDM 3D Audio Driver      Sensaura Ltd      c:\windows\system32\drivers\alcxsens.sys
+ ALCXWDM      Realtek AC'97 Audio Driver (WDM)      Realtek Semiconductor Corp.      c:\windows\system32\drivers\alcxwdm.sys
+ ati2mtag      ATI Radeon WindowsNT Miniport Driver      ATI Technologies Inc.      c:\windows\system32\drivers\ati2mtag.sys
+ BANTExt                  c:\windows\system32\drivers\bantext.sys
+ ctljystk      Creative Joyport Enabler      Creative Technology Ltd.      c:\windows\system32\drivers\ctljystk.sys
+ ctsfm2k      SoundFont(R) Manager (WDM)      Creative Technology Ltd      c:\windows\system32\drivers\ctsfm2k.sys
+ emu10k      Creative SB Live! Adapter Driver      Creative Technology Ltd.      c:\windows\system32\drivers\emu10k1m.sys
+ emu10k1      Creative SB Live! Interface Driver      Creative Technology Ltd.      c:\windows\system32\drivers\ctlfacem.sys
+ FINEPIX_PCC      USB PC Camera      FUJI PHOTO FILM CO.,LTD.      c:\windows\system32\drivers\v4cb0115.sys
+ GEARAspiWDM      CDRom Class Filter Driver      GEAR Software Inc.      c:\windows\system32\drivers\gearaspiwdm.sys
+ ossrv      Creative OS Services Driver (WDM)      Creative Technology Ltd.      c:\windows\system32\drivers\ctoss2k.sys
+ P17      WDM Audio Miniport      Creative Technology Ltd.      c:\windows\system32\drivers\p17.sys
+ papycpu2                  c:\windows\system32\drivers\papycpu2.sys
+ papyjoy                  c:\windows\system32\drivers\papyjoy.sys
+ Ptilink      Direct Parallel Link Driver      Parallel Technologies, Inc.      c:\windows\system32\drivers\ptilink.sys
+ rtl8029      NDIS 5.0 driver      Realtek Semiconductor Corporation      c:\windows\system32\drivers\rtl8029.sys
+ Secdrv      SafeDisc driver            c:\windows\system32\drivers\secdrv.sys
+ sfman      SoundFont(R) Manager      Creative Technology Ltd.      c:\windows\system32\drivers\sfmanm.sys
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute                  
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options                  
HKLM\Software\Microsoft\Command Processor\Autorun                  
HKCU\Software\Microsoft\Command Processor\Autorun                  
HKLM\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls                  
HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify                  
+ AtiExtEvent      ATI External Event Utility DLL Module      ATI Technologies Inc.      c:\windows\system32\ati2evxx.dll
+ NavLogon                  c:\windows\system32\navlogon.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL                  
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman                  
HKCU\Control Panel\Desktop\Scrnsave.exe                  
HKLM\System\CurrentControlSet\Control\BootVerificationProgram\ImageName                  
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9                  
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors                  
HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders                  
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages                  
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages                  
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages                  
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order

 

by: r-kPosted on 2007-06-21 at 17:45:43ID: 19338172

Yes, everything looks clean in this log.

You might consider running LSPfix

 http://www.cexx.org/lspfix.htm

It is not an automated clean-up program, but provides you with a list of LSP's and you can remove selectively. If unsure you can compare with a clean system or post back here.

 

by: masnrockPosted on 2007-06-26 at 08:16:26ID: 19364523

That's one approach.... another approach is to look at folders in C:\Program Files ... sometimes you'll find suspicious folders. Quite a few things take this approach now rather than some of the more traditional things that would be in the registry.

 

by: WandaJHallPosted on 2008-06-05 at 13:28:59ID: 21723612

We were never able to identify what actually occurred but we suspect it was possibly the remnants of a virus.   A complete reload of the system was performed.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...