Wtf 2003

[mMiniImManN]

Anybody notice on Server 2003 that when you click to view the desktop in a save dialog or open dialog that it takes forever to view it?
Well I certainly have, I looked it up on my firewall, and it says that (for whatever app I'm using to save), that it's tring to access 2 ip address: 211.101.4.50 and 203.236.94.230. It tries to access the first one twice. Every single app that I use will try to connect to those, and it takes forever since the sites fail, and if i disable those ips for that program on with my firewall, then it goes to the desktop lickidy split........

Can anybody help me? There's nothing in the registry of these things either.
Is there a way to use the system to block any ip addresses?

TIA,
mMiniImManN

 

[RealBlackStuff]

the first number belongs to someone in Bejing/China, and the second number to someone in Seoul/Korea.
If you have no connections with these countries, it would look like a classic case of hijacking.

Download and install the following 4 programs, each in their own permanent directory:
Spybot S&D http://www.safer-networking.org , let it "immunise" your PC, takes only a few seconds.
Adaware Personal SE http://www.lavasoftusa.com
HijackThis http://www.tomcoyote.org/hjt/
CWshredder http://www.spywareinfo.com/~merijn/downloads.html

Before running any of the above, always make sure you have the latest program-versions,
and do an online-update in Adaware and Spybot for the latest definitions.

Reboot in Safe Mode (press F8 a few times upon booting).
If you have "BeginToSearch" etc. run CWShredder first and let it fix whatever it can.
If not, run Adaware, then Spybot. Let them each fix whatever they can.
Then reboot again in Safe Mode.

Now run Hijackthis with NO other programs open, but DON'T let it do anything yet.
Make sure you first read TomCoyote's instructions on HJT !!
Copy and paste the HJT report here in this thread. We may be able to help you further.


PS: you could enter those IPs in your Router if you have one, or in your Firewall-program. I'm not sure if that will help though.