Hi,
I was hoping to get a list of provable details about registry keys randomly changing. If you have or fine some web sites or links, that would be very helpful.
Our software is a client server set up (Data on server only and Applications on WS).
We updated our software at a client’s location and the server installed\updated just fine and had no issues like this. However, all (9) workstation were pointing to an old server that was on the network, that was no longer there. It was stated that it was removed for about a year. I found multiple registry keys in HKCU and HKLM that were pointing to the old server (by Host name) that was removed instead of the new server. Our software would have only edited them to point to the correct location of where the network was telling to. We run a program (.exe) on the server (can only have one on a network at a time) that tells the network where the data is. This program was running and it was working correctly on the server at this time.
I turned off DEP\UAC and rebooted before the updates was done. Anti-Virus was not an issues at the time.
From my research, that Mal-ware, Trojan, old DNS records, Host files or even an Server alias could have caused these types of issues. I looking for a professional take on this.
Thanks you for your time.
Tony P