dns cache problem!

Hi all. I'm having a problem with a WinXP Home PC that I can't figure out. This machine was, at one time, infected with the W32.gaobot virus. I have cleaned it off (both manually and with Norton AV), but there is a lingering effect that I cannot get rid of. The gaobot virus normally loads the hosts file with a number of entries that point popular antivirus sites to the localhost address (!27.0.0.1). Something, however, seems to have gone a step further. The hosts file is empty, but my DNS cache is populated with these entries, and is *keeping* them there. Despite numerous reboots, ipconfig /flushdns, these entries still remain. Is there some way they could have been locked in there? Is there a file somewhere that pre-loads entries permanently into the cache?

Does anyone have any suggestions?

 

During the cleanout process, did you disable system restore and empty ALL temps, TIF's, recycle bin and flush DNS?

 

Probably should have also mentioned deleting everything in the prefetch folder.

 

What Dave said.

And just in case you got hit with a smart variant, take a look in your LMHosts file as well.