Link to home
Start Free TrialLog in
Avatar of BUCKBERG
BUCKBERG

asked on

XP DNS

i have 2 computers side by side hooked to the same router.  one computer works fine(win 7).  the other(xp) will have issues with SOME websites but not others(google.com)  when I ping in a command prompt www.google.com I get "pinging httP://arnoldhero.com 92.242.140..1 request time out).  If I ping google.com I get the proper results.  When I do a tracert I get the same results on both computers and when I do a nslookup I get the same results. When I try to reach www.google.com in a browser I get an error.  I am able to resolve www.yahoo.com just fine.  I have checked hosts and lmhosts and saw no error.  When I do an ipconfig I do see "mode" is unknown.  Help! I am at a loss
Avatar of Aaron Feledy
Aaron Feledy
Flag of United States of America image

Sounds like some sort of malware to me. Try downloading Malwarebytes and running a scan.
Avatar of Perago
Perago

Are your DNS server settings the same as on the Windows 7 machine?  If not, change them to the same as the Windows 7 machine and see if that fixes it.  You can find the DNS settings by typing 'ipconfig /all' in the command prompt.

Have to tried to flush the DNS Cache yet?  - 'ipconfig /flushdns'

If you go into Control Panel - Internet Options - Connections - LAN Settings is there a proxy server selected.  If so, change it back to Auto Detect Settings.  If you change it to Auto Detect and it keeps going back to 'Use a proxy server' then you likely have some sort of malicious software infection.

Those are just a couple of suggestions, let me know.
Also try

  netsh int ip reset %temp%\resetlog.txt
Avatar of Alan
Hi,

It could also be due to something in your HOSTS file.

On XP, look under:

"C:\WINDOWS\system32\drivers\etc\HOSTS"

note that the file has no extension.

Open it using a text editor (notepad for example), and do a search for google (say), and see if there is an entry there.  If so, that is the cause of what you are seeing, but the most likely cause of that entry is malware.

If you do have malware, you can try getting rid of it, but my advice is to wipe the machine entirely and re-install WinXP.  Once you have malware on a machine there is no way to ever be totally sure you've gotten rid of it all.

HTH,

Alan.
Malwarebytes like Arrow suggested sounds right. Host files need to be checked as well. The last thing you should do is reset all your browser settings depending on which version of browser you have. I would assume I.E. 8 in which the internet tools, properties and advanced tab will have a reset for your advanced features as well as reset browser. I would also clean up all your cached files and as well.
The asker already said that hosts file had been checked.
Avatar of BUCKBERG

ASKER

I have done all of the above.  Strange.  If I stop the DNS client service, all is well.  I have flushed and reflushed.  If I turn the service back on, same problem.  Some sites just do not work.
Can you post the results of the commmand

   ipconfig /all

?
I would download and use Trend Micro HijackThis to see what's loading and check the network settings from the registry perspective.  Sounds like a system service is being hijacked.
ASKER CERTIFIED SOLUTION
Avatar of JeremiahDonahue
JeremiahDonahue
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial