DNS request blocked by a hacker

[forecoms]

I have a Windows 98 PC and the DNS request are being blocked somehow. I had the same problem with XP pro a couple of weeks ago. I fixed the problem by reinstalling the OS.

I have re-established the TCP/IP as it was corrupted by a hacker and can now ping outside IPs but cannot resolve any domain name. The problem arrose when I removed spyware and ICQ. It appears a third party installed their own access to the system because the usage all of a sudden rose sharply for no apparent reason.

Fortunately I have time to ask the question this time before reinstalling the system from new.

Any help would be greatfully appreciated.

Alan White

 

[GlenJohnson]

Could we get more details? How do you know dns is being blocked?

Glen A. Johnson
Johnson Computer Consulting
MCP W2K
glen@johnsoncomputers.us

http://www.johnsoncomputers.us

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

"Once the game is over, the king and the pawn return to the same box."

 

[forecoms]

Glen,
Thanks for your quick reply.

I can ping an outside IP address but cannot ping or resolve a web address.

However I have since found where the problem is and a possible fix.

Here is the info I received today.
"There are some known problems associated with certain types of software known as Layered Service Provider (LSP) programs ... programs which insert themselves into the Windows TCP/IP handler like links in a chain. ("Spyware" and "browser hijackers" are often LSP programs.)

TCP/IP handler problems may lay dormant and waiting to strike for months, not becoming apparent until another program which uses Winsock is installed ... then the link breaks, and the system cannot access the Internet. Uninstalling the new program will not repair the chain ... the broken link stays broken.

TCP/IP handler problems have become so common in recent months that several utilities have been written to repair the damage ... but in rare cases the only solution is to re-install the operating system."

I will let you know how it goes.

Regards
Alan White

 

[GlenJohnson]

Ouch Good luck and keep in touch. (How long has this been going on. This is the week of the worm!)

Glen A. Johnson
Johnson Computer Consulting
MCP W2K
glen@nellsgiftbox.com

http://www.johnsoncomputers.us

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

"Once the game is over, the king and the pawn return to the same box."