Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 Ultimate - Reocurring Corruption of the DNS Cache


  • Please log in to reply
6 replies to this topic

#1 DShuck

DShuck

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 30 May 2013 - 08:44 PM

Hi:

 

      I began seeing the intermittent corrupted DNS cache in Windows 7 Ultimate starting about 6 days ago.   The problem initially presented itself in as slow or no response to web searches or webpage stalls.  From there it progressed to network connectivity issues and loss of web navigation. 

 

      A quick ping check revealed that name resolution was not working but IP ping was working with no "loss" and as you would expect tracert using IP address (not name) worked flawlessly.   I have a Windows 8 Notebook, an Android Tablet and a Android based smartphone that I have tried on the same network node, subnet, gateway and name servers, the only machine that fails is the Windows 7 machine. 

 

      The problem can be temporarily repaired by using Windows Network Diagnostics program, but the problems returns, sometimes immediately and sometimes in 20 or 30 minutes but it always returns.   I have run deep scans with Windows Security Essentials, Windows Defender, MalwareBytes Anti-Malware and Norton Internet Security and nothing unusual shows up.  I have also run several other anti-viral apps and again nothing has been identified.  I am starting to suspect a bug in one of the recent Windows Updates, since nothing other than "Updates" had been added to the PC in question prior to the problem starting.

 

       I have run sfc/scannow with no errors identified. I have reset the IP Stack with Netsh and flushed the DNS cache but none of this has made any real difference, the problem still persists.

 

       So that being said, I am looking for help.  Has anyone else experienced this problem and is there a fix or an answer??? 

 

Thanks!

 



BC AdBot (Login to Remove)

 


#2 smax013

smax013

  • BC Advisor
  • 2,329 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:27 PM

Posted 01 June 2013 - 05:58 AM

I am starting to suspect a bug in one of the recent Windows Updates, since nothing other than "Updates" had been added to the PC in question prior to the problem starting.


If you want to test that theory, you could try going back to the restore point that Windows Update should have made when installing the update. In theory, this would remove the updates (I believe). If it is a bug with the update, then things should be fine after reverting to the restore point.

#3 DShuck

DShuck
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 01 June 2013 - 07:35 PM

Hi

 

   I have already tried that but unfortunately the oldest restore point is not old enough to fix it, for some reason the oldest restore point was two weeks ago.  I am not sure why that is but that is what I am stuck with.



#4 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 AM

Posted 02 June 2013 - 02:41 AM

Download SecurityCheck.exe from Here

. Run SecurityCheck and follow the instruction from inside the code box.
. When the scan is finished, a notepad will automatically open as check.txt
   Please copy and paste the contents here on your next reply.
 

Download MiniToolBox and open/run the program.
When open, checkmark or select all options then click Go.
A notepad will open then copy-paste the report on your next reply.

 

Download then run Farbar Service Scanner and checkmark all boxes.
Click Scan and then a Notepad text will open. Copy-Paste the report on your next reply.


Tekken
 


#5 smax013

smax013

  • BC Advisor
  • 2,329 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:27 PM

Posted 02 June 2013 - 07:37 AM

Hi
 
   I have already tried that but unfortunately the oldest restore point is not old enough to fix it, for some reason the oldest restore point was two weeks ago.  I am not sure why that is but that is what I am stuck with.


Then the other option is to look at the Windows Update History. When you are there should be a part at the top of the page that says "To remove an update, see Installed Updates". When you click on the "link" for Installed Updates, you will get a list of updates that have been installed including when they were installed (you may have to expand the window to see that column). You could then uninstall the recently installed updates.

#6 DShuck

DShuck
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 02 June 2013 - 10:06 PM

Download SecurityCheck.exe from Here

. Run SecurityCheck and follow the instruction from inside the code box.
. When the scan is finished, a notepad will automatically open as check.txt
   Please copy and paste the contents here on your next reply.
 

Download MiniToolBox and open/run the program.
When open, checkmark or select all options then click Go.
A notepad will open then copy-paste the report on your next reply.

 

Download then run Farbar Service Scanner and checkmark all boxes.
Click Scan and then a Notepad text will open. Copy-Paste the report on your next reply.

Hi

 

     I have attached copies of each of the three scan report that were generated by the applications listed above.  I have tried to cut and paste them in but it crashed the "Post", it is evidentially too long.

 

Thanks!

Doug

Attached Files



#7 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 AM

Posted 03 June 2013 - 02:42 AM

Copy pasted attached files :

 

Results of screen317's Security Check version 0.99.64  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Java 7 Update 21  
 Adobe Flash Player 11.7.700.202  
 Adobe Reader XI  
 Mozilla Firefox (21.0)
 Mozilla Thunderbird (17.0.5)
 Google Chrome 26.0.1410.64  
 Google Chrome 27.0.1453.94  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

 

Farbar Service Scanner Version: 31-05-2013 01
Ran by Nick (administrator) on 02-06-2013 at 17:25:24
Running from "F:\NetworkDiagnostics"
Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Attempt to access Yahoo IP returned error. Yahoo IP is offline
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

 

Everything looks fine so far.  Is the problem on wired or wireless? Tried them both already? Let's try looking something else including the updates being suggested by smax013.

Try downloading Speccy and then install the program.  To post and publish a snapshot of your PC.
. In the Menu bar, click File -> Publish Snapshot
. Click Yes > then Copy to Clipboard
. On your next reply, right-click on a empty space and click Paste on reply box then click Post.

 

Download MiniToolBox and open/run the program.
When open, checkmark or select all options then click Go.
A notepad will open then copy-paste the report on your next reply.
 


Tekken
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users