ipconfig /flushDNS does not seem to flush everything

[Guest]

[Lazlo]

Hi, I'm back after a break from the pc.
Have now got a completely different PC than before, so I'm starting fresh again.
Fresh Install of XP Pro S3
Security Software that came with the PC
AVG 10
CCleaner
SpyBot


However,

I have learnt that I can do some of my own flushings by making simple BAT files, just so I can quickly klik from  the desktop. The PC over time gets slower and slower, (typical MS), it's simpler to save a standard and format and re-install the entire OS.
Crazy I know, but it's quicker to fix it that way rather than clean out  XP each time it slows to a grind.


But, there is one code I use to try to quicken things up before the "fix",

ipconfig /displaydns

The displays do not seem to go away, and I do not know why they are there.
If I reboot the pc, before logging on, these certain "connections" are always there.

My other BAT file is
ipconfig /flushdns

it does not flush these suspicious connections.
I have searched in registry, only some the same web addresses appear for example
 mythical-casino.ru came up in registry, I deleted it. Yet it still appears in the displaydns.
I have not gone to anything listed with my web browser.
No one else used this computer, and the pc is mainly for printing and hobby forums.
What is displayed by  ipconfig /displaydns does not add up why these "connections" are there, as I do not and have not gpne to those places.
Why then do they appear.
I have just finished a scan using Comodo-Cleaning-Essentials. Nothing came up, all clean.

Is the ipconfig /displaydns below normal or is there a problem I should be concerned about?


Here is exactly what seems suspicious:

C:\>ipconfig /displaydns

Windows IP Configuration

         ww w.xxokoriq.cn
         ----------------------------------------
         Record Name . . . . . : ww w.xxokoriq.cn
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w-download-antivirus.com
         ----------------------------------------
         Record Name . . . . . : ww w-download-antivirus.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         webslots2009.com
         ----------------------------------------
         Record Name . . . . . : webslots2009.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         virgiio.it
         ----------------------------------------
         Record Name . . . . . : virgiio.it
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.virdgilio.it
         ----------------------------------------
         Record Name . . . . . : ww w.virdgilio.it
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.tuttograatis.it
         ----------------------------------------
         Record Name . . . . . : ww w.tuttograatis.it
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.theworldaccordingtoash.com
         ----------------------------------------
         Record Name . . . . . : ww w.theworldaccordingtoash.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         stovescasino.com
         ----------------------------------------
         Record Name . . . . . : stovescasino.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         spywarebot-t.com
         ----------------------------------------
         Record Name . . . . . : spywarebot-t.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         spermatrix.com
         ----------------------------------------
         Record Name . . . . . : spermatrix.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         smart-antivirus2009buy.com
         ----------------------------------------
         Record Name . . . . . : smart-antivirus2009buy.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         sexmultis.info
         ----------------------------------------
         Record Name . . . . . : sexmultis.info
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.searchfromyourbrowser.net
         ----------------------------------------
         Record Name . . . . . : ww w.searchfromyourbrowser.net
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         rvporn3.info
         ----------------------------------------
         Record Name . . . . . : rvporn3.info
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.rosaoalice.it
         ----------------------------------------
         Record Name . . . . . : ww w.rosaoalice.it
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.ripuvat.cn
         ----------------------------------------
         Record Name . . . . . : ww w.ripuvat.cn
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.presuloxa.com
         ----------------------------------------
         Record Name . . . . . : ww w.presuloxa.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         popstar24.com
         ----------------------------------------
         Record Name . . . . . : popstar24.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.paraisotam.com
         ----------------------------------------
         Record Name . . . . . : ww w.paraisotam.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         paginegialler.it
         ----------------------------------------
         Record Name . . . . . : paginegialler.it
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         p2p-paradies.com
         ----------------------------------------
         Record Name . . . . . : p2p-paradies.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         onlylocalopportunities.com
         ----------------------------------------
         Record Name . . . . . : onlylocalopportunities.com
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.nicecodec.net
         ----------------------------------------
         Record Name . . . . . : ww w.nicecodec.net
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         mythical-casino.ru
         ----------------------------------------
         Record Name . . . . . : mythical-casino.ru
         Record Type . . . . . : 1
         Time To Live  . . . . : 602676
         Data Length . . . . . : 4
         Section . . . . . . . : Answer
         A (Host) Record . . . : 127.0.0.1


         ww w.mylimewirenetwork.com
         ----------------------------------------

Edited to make the links non clickable. Some look dubious at best!

[Matty_R]

I suspect these entries are something to do with Spybot S+D Hosts blocking via loopback (127.0.0.1). Possibly try stopping the DNS client through services.msc then running the Flush cmd.
It`s nothing to worry about as they all point to the loopback addresss thus you will not be able to reach them (allthough i doubt any are still live).
Spybots best days are behind it, there are better alternatives...

Matty

[Lazlo]

Thanks, I'll get back to tbhis issue later then.
I will then check out the alternatives, seeing this is not a major immediate threat then I'll get on with work.


Thank you.

[Radaghast]

As Matty suggests, these entries are probably being pre-loaded from your hosts file, which is how Windows behaves when the DNS client service is enabled.To check open the following file in a text editor:

%systemroot%\System32\Drivers\etc\hosts

If you don't want any entries remaining in the DNS resolver cache, you can disable the DNS Client service through services.msc. However, doing so will require the individual applications/processes have the ability to perform DNS queries independently, so your firewall rules may need to be adjusted.

[Tags:]