ipconfig /renew takes 90 seconds

[tim]

I have a dell laptop c610 windows 2k SP4. Whne I try to do
an IPconfig /renew it takes about 90 seconds. Other
computers on the network renew in a couple of seconds. I
have run spybot and norton av and found nothing. It is the
same problem if I use the internal truemobile 1150 wi-fi,
the internal nic or the nic in the docking station.
It also is taking a long time to discover proxy setting
whene I start my browser.
I have flushed the dns cache and it has made no difference.
Anyone have any ideas?

 

[Kevin D. Goodknecht [MVP]]

In tim <[email protected]> posted a
question
Then Kevin replied below:

I have a dell laptop c610 windows 2k SP4. Whne I try to do
an IPconfig /renew it takes about 90 seconds. Other
computers on the network renew in a couple of seconds. I
have run spybot and norton av and found nothing. It is the
same problem if I use the internal truemobile 1150 wi-fi,
the internal nic or the nic in the docking station.
It also is taking a long time to discover proxy setting
whene I start my browser.
I have flushed the dns cache and it has made no difference.
Anyone have any ideas?

Run ipconfig /displaydns to see what is in the cache, could be hosts file
was hijacked.

 

[tim]

-----Original Message-----
In tim

Kevin,
Thanks for steering me in the right direction. If does not
appear the hosts file was hijacked, it was just too big. I
had downloaded the hosts file from spybot (and it was
305k.) The "ipconfig /displaydns |more" command showed all
entries were pointing to 127.0.0.1. There were a lot (I am
guessing over 100)of entries there with time to live of
31534281. When I replaced the hosts file with the sample
file from windows, things got a LOT faster.
One question: the second listing in /displaydns is
1.0.0.127.in-addr-app ?
what is this? it looks like the local hosts backwards?
Thanks...

 

[Kevin D. Goodknecht [MVP]]

In

Kevin,
Thanks for steering me in the right direction. If does not
appear the hosts file was hijacked, it was just too big. I
had downloaded the hosts file from spybot (and it was
305k.) The "ipconfig /displaydns |more" command showed all
entries were pointing to 127.0.0.1. There were a lot (I am
guessing over 100)of entries there with time to live of
31534281. When I replaced the hosts file with the sample
file from windows, things got a LOT faster.
One question: the second listing in /displaydns is
1.0.0.127.in-addr-app ?
what is this? it looks like the local hosts backwards?
Thanks...

It is the reverse lookup for localhost