Windows Security, Windows Update and DNS Problems

Question

Windows Security, Windows Update and DNS Problems

Anonymous

C:\Windows\System32>tracert microsoft.com

Tracing route to microsoft.com [20.236.44.162]

over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms FILESERVER [192.168.123.1]

2 8 ms 9 ms 12 ms 100.92.120.130

3 10 ms 8 ms 9 ms po-310-321-rur201.tumwater.wa.seattle.comcast.net [24.153.86.181]

4 9 ms 9 ms 9 ms po-2-rur202.tumwater.wa.seattle.comcast.net [24.124.128.42]

5 10 ms 9 ms 11 ms po-200-xar02.tumwater.wa.seattle.comcast.net [69.139.161.185]

6 17 ms 21 ms 25 ms be-306-arsc1.seattle.wa.seattle.comcast.net [69.139.161.65]

7 14 ms * * be-36141-cs04.seattle.wa.ibone.comcast.net [68.86.93.13]

8 17 ms 13 ms 14 ms be-2411-pe11.seattle.wa.ibone.comcast.net [96.110.32.238]

9 * * * Request timed out.

10 15 ms 25 ms 17 ms ae27-0.icr01.mwh01.ntwk.msn.net [104.44.53.187]

11 * * * Request timed out.

12 * * * Request timed out.

13 * * * Request timed out.

14 * * * Request timed out.

15 * * * Request timed out.

16 20 ms 15 ms 16 ms 20.236.44.162

Trace complete.

Does this look right?

Event Viewer Logs

The device driver for the Trusted Platform Module (TPM) encountered a non-recoverable error in the TPM hardware, which prevents TPM services (such as data encryption) from being used. For further help, please contact the computer manufacturer.

I am also getting "Ntfs (Ntfs)" errors

The default transaction resource manager on volume \?\Volume{510d4583-4d38-4139-86eb-7aeb3c74e54f} encountered a non-retryable error and could not start. The data contains the error code.

-	System

			-	Provider	<br>	---	---	<br><br>				[ Name]	Ntfs	<br>	---	---	---	---	---

			-	EventID	137	<br>	---	---	---	<br><br>				[ Qualifiers]	49156	<br>	---	---	---	---	---

				Version	0	<br>	---	---	---

				Level	2	<br>	---	---	---

				Task	2	<br>	---	---	---

				Opcode	0	<br>	---	---	---

				Keywords	0x80000000000000	<br>	---	---	---

			-	TimeCreated	<br>	---	---	<br><br>				[ SystemTime]	2024-07-08T11:15:48.1382859Z	<br>	---	---	---	---	---

				EventRecordID	1727	<br>	---	---	---

				Correlation	<br>	---	---

			-	Execution	<br>	---	---	<br><br><br>				[ ProcessID]	4	<br>	---	---	---	---	---	<br><br><br><br>				[ ThreadID]	348	<br>	---	---	---	---	---

				Channel	System	<br>	---	---	---

				Computer	DESKTOP-HSTOKHC	<br>	---	---	---

				Security	<br>	---	---

-	EventData

			\?\Volume{510d4583-4d38-4139-86eb-7aeb3c74e54f}

			1C0004000200300002000000890004C0000000007F0000C0000000000000000000000000000000007F0000C0

Binary data:

In Words

0000: 0004001C 00300002 00000002 C0040089
0010: 00000000 C000007F 00000000 00000000
0020: 00000000 00000000 C000007F

In Bytes

0000: 1C 00 04 00 02 00 30 00 ......0.
0008: 02 00 00 00 89 00 04 C0 ......À
0010: 00 00 00 00 7F 00 00 C0 ......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 7F 00 00 C0 ..À

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

3 answers

Answer 1

Thank you for the information you provided.

I read the problem analysis you provided, which is very detailed. You are a real technology geek!

As you said, the only way to solve this problem seems to be to reinstall the system.

At the same time, I suggest you report this problem to Microsoft. Our developers will further investigate this problem, and I will also submit this problem for you through internal channels. In addition, you can also submit your problem through the Feedback Center (if it is convenient, please provide as much content as possible, including pictures, videos, etc.) For detailed steps, please refer to the following link

Send feedback to Microsoft with the Feedback Hub app - Microsoft Support

Best regards

Brian - Microsoft Community Support Specialist

Answer 2

The problem has been on going for years. I've traced the problem back to UEFI/EFI and GPT (1990s) and infiltration of Microsoft itself. I'm not sure if it was authorized, but it seems to involve Spyware (SIC). Looking back on it, Windows logo would appear on different monitors (I have 3) depending on which drive/partition Windows was booting from.

Windows (appears to) be operating normally, except for fake network devices appearing, and errors in Event Manager. I can tell it's thoroughly infected. It's trying to download possibly fake TPM drivers from probably fake Windows Update Servers. It failed to do illegal and unauthorized changes to the drives.

Symptoms are unable to fix problems. Unable to load Restore Points. Unable to Reset PC. Unable to Boot into Safe Mode. It usually involves reinstalling to fix problems.

UEFI/EFI and GPT, GUID made it easier for malware to completely take over the PC. I had to flash BIOS for more Legacy BIO Support.

UEFI/EFI Partition, GPT/Partition, GUID need to be permanently abandoned. It's a sanctuary for Spyware/malware.

More proof of infected system. Services.

Services with _<alphanumerics> are probably imposters (or whatever you want to call them). The ones that are helping infect the system without _ are probably the ones that may need work on.

Answer 3

Hello, Tae Song

Welcome to the Microsoft Community

Thanks for your feedback. I read the information you provided.

Before I give you any suggestions, please tell me this information, which will help me better understand your problem.

From the trace log, a node did not reply to your Ping packet, so you did not successfully get the route to microsoft.com. I noticed that you are Pinging Microsoft's server, why do you do this? Do you have any other needs?
I noticed that you also encountered TPM errors and Ntfs errors, are you aware of any recent changes on the PC before this problem?

I look forward to your reply

Best regards

Brian - Microsoft Community Support Specialist

Share via

Windows Security, Windows Update and DNS Problems

3 answers