General discussion

Locked

Antivirus & some other site not accessib

By FaisalMasood ·
I've win2000 with SP3. It also have AD, DNS, SQL 2000 & other things.

Im using it for long for my normal work. But for the past few weeks Im facing soe problem with it.

The problem is antivirus & soe other sites are not browsing when I connectto internet & try to access those sites. Instead as soon as I click Go button in IE, it checks those sites onloopback address 127.0.0.1

To identify I even reinstalled DNS but the problem was there. On further investigation I found that in the local DNS cache those sites are added for loopback address. I foun this using IPCONFIG /DISPLAYDNS command in command prompt.

see one entry for example:

antivirus.com.
---------------------------------------
Record Name . . . . . : antivirus.com
Record Type . . . . . : 1
Time To Live . . . . : 31530531
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . :
127.0.0.1

There are several entries like that.

Even flushing DNS cahce using IPCONFIG /FLUSHDNS didn't work.

May be there is some trojan / virus , but even Symantec AV & PestPatrol 4 shows no definite signs.

Any idea?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Antivirus & some other site not accessib

by F-Baer In reply to Antivirus & some other si ...

i don?t know, but it looks like trouble with the hosts file ..\system32\drivers\etc\..
delete it

Collapse -

Antivirus & some other site not accessib

by FaisalMasood In reply to Antivirus & some other si ...

That was my prime suspect too. But there is no suspicious entry in HOSTS file. There are few lines with comments, then only one enrty as usual:

127.0.0.1 localhost

The problem is still there. It looks like it has some thing to do with IE6 cache.

Any other idea

Collapse -

Antivirus & some other site not accessib

by Joseph Moore In reply to Antivirus & some other si ...

I take it this server has its own IP address configured for DNS servers (under Properties for the NIC)? And does the DNS on the server have any Forwarders configured to forward DNS queries it cannot answer?
I'm asking all this because it just mightbe a DNS lookup issue.
Try this: open a command prompt and run NSLOOKUP. Then just type in some of the domains that it resolved with 127.0.0.1.

If all is well, it should look like this:
H>nslookup
Default Server: MYDNS.MYDOMAIN.COM
Address: 192.168.1.1

> set type=a
> antivirus.com
Server: MYDNS.MYDOMAIN.COM
Address: 192.168.1.1

Non-authoritative answer:
Name: antivirus.com
Address: 65.200.215.213


Check out the DNS settings. It is in there.

Collapse -

Antivirus & some other site not accessib

by FaisalMasood In reply to Antivirus & some other si ...

I've one LAN card & one modem. DNS setting on Lan card is configured with the DNS server which is on the same PC eg 192.0.0.5

Earlier I wasn't using forwarder option in DNS consol options. So NSLOOKUP was definitely no resolving out sideIPs. But after adding the DNS forwarder entries (DNS server IPs of my ISP) NSLOOKUP can resolve all IP including antivirus.com as you stated.

But when I try to open Antivirus.com then the same preoblem comes.. it looks for 127.0.0.1. On looking into the IE DNS cache (using IPCONFIG/all) it still shows antivirus.com with 127.0.0.1

antivirus.com.
------------------------------------------------------
Record Name . . . . . : antivirus.com
Record Type . . . . . : 1
Time To Live . . . . : 31523387
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . :
127.0.0.1

Collapse -

Antivirus & some other site not accessib

by pctech In reply to Antivirus & some other si ...

This is just a guess, but you may have an active virus running already that is redirecting to keep you from gaining access to the anti virus sites. Since the redirection is back to your own system, loopback address, you never get to the anti virus site. ... Just a guess

Collapse -

Antivirus & some other site not accessib

by FaisalMasood In reply to Antivirus & some other si ...

It seems like a virus activity as my DNS & host file was fine.

Any way i've rebuild the system.

Collapse -

Antivirus & some other site not accessib

by FaisalMasood In reply to Antivirus & some other si ...

This question was closed by the author

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums