Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Why is Explorer so busy with TcpIP DHCP settings?


  • Please log in to reply
No replies to this topic

#1 Walking Through

Walking Through

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boston
  • Local time:10:46 AM

Posted 26 May 2011 - 10:18 PM

Hello -

For months now the disk drive has been ..twitching.. every few seconds. Of late things have gotten worse with the "twitch" now going on for minutes during boot and holding things up left and right.

I've run MalwareBytes, GMER, Panda, TrendMicro's HouseCall, SuperANTISpyware, Spybot, Ad-Aware.. and all say the system is clean.

I download SysInternal's Process Monitor and look to see what's going on. And I find this (please excuse the block paste):

10:57:42.1962222 PM Explorer.EXE 1404 RegOpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F} SUCCESS Desired Access: Read
10:57:42.1962664 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\EnableDHCP SUCCESS Type: REG_DWORD, Length: 4, Data: 1
10:57:42.1962862 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\LeaseObtainedTime SUCCESS Type: REG_DWORD, Length: 4, Data: 1306452768
10:57:42.1963063 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\LeaseTerminatesTime SUCCESS Type: REG_DWORD, Length: 4, Data: 1306536938
10:57:42.1963270 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\DhcpServer SUCCESS Type: REG_SZ, Length: 24, Data: 192.168.1.1
10:57:42.1963477 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\DhcpServer SUCCESS Type: REG_SZ, Length: 24, Data: 192.168.1.1
10:57:42.1963784 PM Explorer.EXE 1404 RegCloseKey HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F} SUCCESS
10:57:42.1964348 PM Explorer.EXE 1404 RegOpenKey HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F} SUCCESS Desired Access: Query Value
10:57:42.1964742 PM Explorer.EXE 1404 RegQueryValue HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F}\AddressType SUCCESS Type: REG_DWORD, Length: 4, Data: 0
10:57:42.1965044 PM Explorer.EXE 1404 RegCloseKey HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{B0174417-F531-45B7-8B61-965F8C99909F} SUCCESS

Every few seconds this block of information is repeated. The only thing that changes is the time.

Why is Explorer so interested in DHCP? It opens, it reads, it closes... time after time after time.

It looks like the DHCP link is timing out?

Suggestions for fixing this would be appreciated.

BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users