DNS Client Service

  • Thread starter Thread starter Jorge Salinas
  • Start date Start date
J

Jorge Salinas

I have Windows 2000 Pro installed on my standalone
computer, and recently I have noticed that I cannot flush
the cached entries. When I run "ipconfig /flushdns", I
receive a message that the all entries have been cleared.
However, when I run "ipconfig /displaydns", all the cached
entries are still there.

I have tried rebooting before flushing my DNS cache
entries, however I get the same results. Also, the cashed
entries look similiar. i.e. google.xxx (google remains
the same but xxx is different for each of the google
entries)

By the way, I am current with my Window 2000 Pro patches.

All help will be greatly appreciated.

Thank You,
Jorge Salinas
 
In
Jorge Salinas said:
I have Windows 2000 Pro installed on my standalone
computer, and recently I have noticed that I cannot flush
the cached entries. When I run "ipconfig /flushdns", I
receive a message that the all entries have been cleared.
However, when I run "ipconfig /displaydns", all the cached
entries are still there.

I have tried rebooting before flushing my DNS cache
entries, however I get the same results. Also, the cashed
entries look similiar. i.e. google.xxx (google remains
the same but xxx is different for each of the google
entries)

By the way, I am current with my Window 2000 Pro patches.

All help will be greatly appreciated.

Thank You,
Jorge Salinas
Click to expand...

This is most likely the Qhosts trojan, which Hijacks the Hosts file with its
own entries.
http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html

http://securityresponse.symantec.com/avcenter/venc/data/trojan.bootconf.html
 
Kevin,

The URLs that you provided me are very helpful. You
definitely hit the nail on the head.

By the way, I happend to get infected with this virus by
attempting to connect to google's website. I recall
getting IE popup informing me that the google server was
down and instructed me to click on a redirect button to
move onto another server. I feel like a fool because I
know better. The strange thing is that I have Nortons
Antivirus software with current virus definitions, yet it
missed it.

Thank you for your help,
Jorge Salinas
 
Back
Top