A tech question about clearing a DNS cache on windows (odd)

Post by **tnf** » Tue Jul 12, 2005 10:11 pm

So I've noticed something weird going on when trying to flush the DNS cache.

I go to the command promp at do the typical -

ipconfig /flushdns

And I get the message that says the DNS cache has been successfully cleared.

Then I immediately do a -
ipconfig /displaydns

And I'm still getting a bunch of DNS entries...
Here's a typical one....I lot of them look like shit related to some fucking pop ups that came up when the wife used explorer instead of firefox..

casino-onlines.net
----------------------------------------
Record Name . . . . . : casino-onlines.net
Record Type . . . . . : 1
Time To Live . . . . : 581370
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1

So these entries appear to be local....and the TTL value goes down a bit each time you do a displaydns....

but there must be some way to get rid of all this shit. If it isn't stored in the registry, where the hell could it be? Obviously, I've cleared every browser setting there is...and I've rebooted the wireless router (not that this would have made a difference.)

It's not a big deal other than the fact that it is annoying the piss out of me because I am flushing the fucking DNS cache, and it says flushed, but it isn't flushed...

help?

Post by **Dave** » Tue Jul 12, 2005 10:20 pm

well, that site is pointing to your localhost entry, so maybe it's part of an ad blocking thing. A lot of people hardcode sites in the \windows\system32\etc\hosts file (I think that's where it is) so advertising sites point to their machine instead of the internet server.

Post by **tnf** » Tue Jul 12, 2005 10:23 pm

So you mean those sites are there because they are being blocked?

Post by **Dave** » Tue Jul 12, 2005 10:24 pm

possibly... you might want to find the hosts file and see if they're written in there

Post by **tnf** » Tue Jul 12, 2005 10:27 pm

Found them...its all in the hosts file under this:
# Start of entries inserted by Spybot - Search & Destroy

Its my work laptop...they must have all that hardcore shiite inserted there.

Thanks Dave.
I was baffled, because I don't use this machine for my porn addiction.

Post by **bitWISE** » Tue Jul 12, 2005 10:31 pm

Cool. I actually never bothered learning how to flush local DNS records.

Post by **Underpants?** » Tue Jul 12, 2005 10:49 pm

with all the dns poisoning / domain hijacking going on lately, that's a pretty smart and practical idea tnf... out of curiosity, where'd you hear about doing this, it's not a very mainstream practice, afaik.

Post by **tnf** » Tue Jul 12, 2005 10:53 pm

Flushing my DNS cache? That's somethign I've done for years...and I stumbled across the idea by accident while looking at the options for the ipconfig command.

For the spybot shit - it was already installed on my machine from work like that.

Post by **Denz** » Tue Jul 12, 2005 11:01 pm

won't renewip clear it?
I don't know just a guess

Post by **Denz** » Tue Jul 12, 2005 11:02 pm

Oh, so I had to read the thread first before posting,,, hummmm... what a novel idea.

Post by **tnf** » Tue Jul 12, 2005 11:02 pm

Yea, I'm not freaked over it. I just didn't know that it did that until Dave directed me to checking out the hosts file. My machines just don't see porn (save the occassional link from here or the hotmail link I click out of morbid curiosity...) and my work laptop sees absolutely none. So I was really perplexed when I saw those DNS entries - at first I figured they may have been from a pop up or some hotmail link or whatever...but when they wouldn't go away after a flushdns I was frustrated.

But now I know.

Post by **tnf** » Tue Jul 12, 2005 11:03 pm

Denz wrote:won't renewip clear it?
I don't know just a guess

nope.

you should read threads then post.

er wait...

so should i.