0

I originally noticed this on my router firewall, so I installed Zone Alarm in order to look more closely, and now I can see it in the ZA logs. I have run virus scans from Kaspersky, Trend Micro, & Windows Defender, and the scans all come up clean. I have looked in my program files, my add-ons, and didn't see anything strange. I disabled unnecessary services and tasks, with no change. Does anyone have any ideas on how I can get this off my computer?

Any help would be appreciated. Here is a link to a pic of my firewall log. http://imgur.com/voNAxWw Cheers, K

Kera Katera
  • 29
  • 2
  • 3
    [You probably shouldn't be using multiple antivirus programs](https://blog.kaspersky.com/multiple-antivirus-programs-bad-idea/2670/). – Amani Kilumanga Sep 12 '16 at 07:44

3 Answers3

7

Those UDP packets all seem to go to a public DNS server. Considering the destination port is 53, it is highly likely you are doing DNS queries and not something malicious.

Lucas Kauffman
  • 54,169
  • 17
  • 112
  • 196
  • Hi, thank you for the answer. So it is normal for several of these to happen every second, even when I'm not using my computer? – Kera Katera Sep 12 '16 at 02:14
  • 1
    @KeraKatera Modern OSes, both Windows and Mac, have services running in the background that perform a variety of tasks, like searching for updates. If you ran an anti-virus scan and it came up clean, it is unlikely that you have a virus. – h4ckNinja Sep 12 '16 at 02:48
2

I backed up my files, re-formatted my hard drive and re-installed Windows 10 and the problem disappeared. I no longer have hundreds of dns requests every minute. Thanks.

Kera Katera
  • 29
  • 2
0

It is not normal, that it happens every second, and malicious traffic can be hidden inside DNS queries.

But because the target is known public DNS server (as mentioned above) it is more likely to be a misconfiguration or some other error than malicious traffic. This is more likely, because it disappeared after you re-installed your os.

V.Hedman
  • 29
  • 1
  • 1
  • 4