Bet you can't help me! - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 12-16-2002, 04:53 PM   #1 (permalink)
Newb Techie
 
Join Date: Nov 2002
Posts: 24
Default Bet you can't help me!

Catchy topic got you didn't it? Well guys/gals here is my pain. I have been working to get spyware and such off my computer. I have tried AdAware and Spyware Remover, both in safe mode and regular. I was looking to clean up my taskmanager and noticed I was running 4 svchost, so I go to massive soft and look it up. So then I use their way to look at your svchost files and what they are up, too (In the Open box, type CMD, and then press ENTER. Type Tasklist /SVC, and then press ENTER.) This listed the different programs using these services (svchost). Then I wanted to figure out what dnsclient was, so back to massive soft and sure enough there is a way to look inside of dnsclient (start->run type ipconfig /displaydns). Here is were the crap hit the fan. I have to have this runnig because I use a cable modem and it needs this service to change ip address, but there is a bunch of ad and BS in this file running with it! Check some of it out:

www.radiate.com
----------------------------------------
Record Name . . . . . : www.radiate.com
Record Type . . . . . : 1
Time To Live . . . . : 603955
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1


www.adserver.com
----------------------------------------
Record Name . . . . . : www.adserver.com
Record Type . . . . . : 1
Time To Live . . . . : 603955
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1


s12.sitemeter.com
----------------------------------------
Record Name . . . . . : s12.sitemeter.com
Record Type . . . . . : 1
Time To Live . . . . : 603955
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1

And this is just a small part of it!! Now according to massive soft I could get delete the entries in this file by typing ipconfig /flushdns at the command line (or run). THIS IS A LIE!! I tried it over and over again no result they are still there! So I thought maybee I can find something in the .reg file to get rid of these others I found this key:
(HKLM\currentcontrolset\services\dnscache

It does not help! There is no seperation you could use against these BS ads! I guess that leads me to my questions:

Does anybody know how to get rid of these entries in the dnsclient?
Or, does anybody know an ad removing program that will get rid of these?

specs: amd 1700+ athlon
Windows XP Pro SP1 (and I keep it up to date on the windows update in the help center)

I think that is all that would need to be known for this problem.
__________________

mcgl0re1 is offline  
Old 12-17-2002, 12:40 AM   #2 (permalink)
Monster Techie
 
sPlAtOiD's Avatar
 
Join Date: Nov 2002
Posts: 1,748
Default Hi This might help you

http://www.speedguide.net Go to this site and on the left column of the page theres 2 winXP tweak links the one that says more winXp tweaks has some info on ipconfig /flushdns and they have a patch for the regestry not to cache the ip addresses.Not sure if it will help but I have win XP pro and I dont have any problem with hidden files after I applied the patch.Hope it helps Pat S.
__________________

sPlAtOiD is offline  
Old 12-17-2002, 05:10 PM   #3 (permalink)
Newb Techie
 
Join Date: Nov 2002
Posts: 24
Default

Thank you for the idea. I went their and that is for negative cache entries. These come back because something is putting them there. any more idea.

ps I used the hacks anyway, and nice site. thanks
mcgl0re1 is offline  
Old 12-17-2002, 08:15 PM   #4 (permalink)
Monster Techie
 
sPlAtOiD's Avatar
 
Join Date: Nov 2002
Posts: 1,748
Default Hi again

This isnt really what you expected but I also thought svchost was a bad thing but it is nesessary I have about 15 svchost running on my computer and have no problem.Check out this article.http://support.microsoft.com/default...;en-us;q250320
sPlAtOiD is offline  
Old 12-18-2002, 12:44 PM   #5 (permalink)
Junior Techie
 
Join Date: Oct 2002
Posts: 90
Default

Scan the file with ADaware, and if not, the flushdns should work, funny that it isnt. Try running netstat and check if those ad connections do exist, and then I would try to ask your ISP for an IP change. Watch what you download, as you found out firsthand, lots of software has hidden extras.
ikellen is offline  
Old 12-27-2002, 12:50 AM   #6 (permalink)
Newb Techie
 
Join Date: Nov 2002
Posts: 24
Default

Ok I had already said that I ran adaware, thanks anyway. I found the guilty program through some painstaking messures and erased it, so problem solved! Thank for your help guys.
__________________

mcgl0re1 is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 02:51 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.