Computing.Net > Forums > Networking > Weird dns...

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Weird dns...

Reply to Message Icon

Name: gometro33
Date: September 29, 2004 at 12:03:30 Pacific
OS: XP SP2
CPU/Ram: 3Ghz 1GB PC3200
Comment:

I was messing around with ipconfig and found the extension /displaydns. Being curious i typed it in and found long list of websites (that i've never been to) including cocktailcash.com and a lot of porn sites. This is what one looked like:

cocktailcash.com
-----------
Record Name . . . . . : cocktailcash.com
Record Type . . . . . : 1
Time To Live . . . . : 602903
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1

I'm not sure what any of this means. But I saw the 127.0.0.1 IP address, which I'm pretty sure is the localhost address. I have been having problems with a few websites, including this one, and when i press back it will attempt to load a page (for this site its something like versiontracker) then i'll press again and it will try to another page. then i press it once more and it will say "connecting to 127.0.0.1" in the bottom left of the browser. usually by the 4th time i'll be able to actually go back.

i was wondering if these two things were linked at all. I have cookies disabled and i allow only the sites i add to the list (computing.net is on the allow list) so i was thinking that could be the problem.

to recap:
-what are all those sites?
-are those sites causing the problem?

(BTW, all of the sites have the same A (Host)Record of 127.0.0.1)

thanks a bunch and sorry if this is really confusing.

Intel P4 3.0GHz
Gigabyte 8KNXP
Radeon 9800Pro 410/370
1GB Corsair XMS PC3200
80GB WesternDigital HDD
Plextor DVD R/RW
LiteOn 52x32x52 CD R/RW



Sponsored Link
Ads by Google

Response Number 1
Name: pmkdatabase
Date: September 30, 2004 at 04:16:54 Pacific
Reply:

I think you understand that some process on your computer has been doing DNS lookups for these sites. That has got to be a trojan. So the problem is not those sites so much as an infection.

Get and update good antivirus software immediately. Disabling cookies is good, but not the solution. Also have a look at your hosts file (do a search - location varies). All that should be in there is a line like this, except for comnented out lines beginning with #
127.0.0.1 localhost

A while back, maybe 2 weeks, someone posted a URL for a site devoted to killing trojans - might have been in the virus forum - have a look

Peter
(Alert me if you want a reply)


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Networking Forum Home


Sponsored links

Ads by Google


Results for: Weird dns...

Weird problem with DNS but machine www.computing.net/answers/networking/weird-problem-with-dns-but-machine-/30949.html

Wireless does not resolve DNS www.computing.net/answers/networking/wireless-does-not-resolve-dns/10499.html

Internet browsing issues (DNS) www.computing.net/answers/networking/internet-browsing-issues-dns/32386.html