system information

[topo]

system tools-system information-internet settings-connectivity. scrolled down
to name server addresses primary dns 85.255.xxx.xx secondary dns
85.255.xxx.xx went to control panel-network connections-tcp/ip
properties. both ip and dns server addresses obtain auto checked. advanced
tcp/ip settings dns server addresses are blank. i was hijacked 3 yrs ago.
the good folks at hijackthis helped me clean my machine. i have xp,sp2,ie6,
dsl. my machine is clean and working great. i don't understand how these
addresses are showing up in system information . these addresses were the
rouge varmits that were causing all the redirects. how do i remove these
from system info. thanks

 

[Steve Winograd]

system tools-system information-internet settings-connectivity. scrolled down
to name server addresses primary dns 85.255.xxx.xx secondary dns
85.255.xxx.xx went to control panel-network connections-tcp/ip
properties. both ip and dns server addresses obtain auto checked. advanced
tcp/ip settings dns server addresses are blank. i was hijacked 3 yrs ago.
the good folks at hijackthis helped me clean my machine. i have xp,sp2,ie6,
dsl. my machine is clean and working great. i don't understand how these
addresses are showing up in system information . these addresses were the
rouge varmits that were causing all the redirects. how do i remove these
from system info. thanks

Check the DNS server settings in the TCP/IP properties of all of the
computer's network connections. I suspect that the rogue addresses
are coming from an unused dial-up connection.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[topo]

yes they were there. went to tcp/ip advanced dns -clicked removed-clicked
ok-back to general tab to make sure obtain set to auto-closed out- and
rebooted. did this 3 times, but addresses keep showing up. can't get rid of
them. what am i'm doing wrong. thanks.

 

[Jack \(MVP-Networking\).]

Hi
Are you sure that it is Not your ISP server?
In any case if you have broadband and you are connected directly to the
Modem, then it time to get a Cable/DSL Router.
Even you have have only one computer a Router insolate you from sitting
directly on the Internet, it keep the DNS and external IP away from your
computer and provides an Incoming NAT firewall in hardware.
Jack (MVP-Networking).

 

[Steve Winograd]

yes they were there. went to tcp/ip advanced dns -clicked removed-clicked
ok-back to general tab to make sure obtain set to auto-closed out- and
rebooted. did this 3 times, but addresses keep showing up. can't get rid of
them. what am i'm doing wrong. thanks.

Look up the DNS address and see who it belongs to.

A virus or spyware infection could be changing the DNS settings. I
think it's time for another cleaning.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[topo]

dns address belongs to varmits in the ukraine. i have run scans with
nav2007(realtime), a2,avg-as, lavasoft2007,superantispyware-all clean. ran
hijackthis scan-no 017 entries where this address would show up. like you
said, this is an unused dailup so it doesn't effect my machine. it must be a
registry entry but i have no idea where to look. thanks.

 

[topo]

steve, thank you for your help. i finally got rid of it. i had to click the
ok button on each of the 3 steps. i wasn't doing it on the last step.
advanced-remove-ok, network- obtain ip and dns auto-ok, tcp/ip-ok. thanks
again.

 

[Steve Winograd]

steve, thank you for your help. i finally got rid of it. i had to click the
ok button on each of the 3 steps. i wasn't doing it on the last step.
advanced-remove-ok, network- obtain ip and dns auto-ok, tcp/ip-ok. thanks
again.

You're welcome. Thanks for letting us know the solution!
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com