DNS Resolver Cache

  • Thread starter Thread starter Anthony Hoar
  • Start date Start date
A

Anthony Hoar

I have a single computer, Windows XP, that cannot load
www.google.com.

It turns out that it has a bunch of records in its DNS
Cache with TTL values set at 604550.

The DNS resource records point to several different
search engines and IP Address that do not exist.

Ipconfig /flushdns will not flush the records.

Disabling the DNS client does not resolve the problem.
It still will not get the proper record from our DNS
server.

Releasing and Renewing its IPconfig did not fix the
matter either.

Is their a file that I can delete that will rid those
records from the DNS Cache on the local machine?
 
It turns out that the machine was infected with some sort
of Trojan.Qhost virus.

I used Norton's Manual removal procedure to fix the issue.

The Automated tool would not recognize the virus or fix
its destructive payloads.
 
Yes, this is the QHOSTS trojan. Good to hear that Norton removed it.

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
 
Back
Top