DNS problem

Hello,

I receive more packet for my computer (my firewall has a bad configuration) but the packets was ignored.

but a mechanism running (perhaps a malware) and when i receive a packet : my computer contact the server DNS and resolve name of the computer and a final packet of the computer send to me.

I have constated that's reccurent web site who contact me but he have a many web site. (one site all five second)

And when i launch my connexion, no web site is contacted.

an idea ?

Only if I could have understood your problem.

Can you try and make that a bit clearer...?

It sounds like you've got some malware installed.. perhaps Ad-aware or a virus scan is what you need.


Cheers,

No virus, no malware found.

In normal state, i receive an packet by an another computer, this packet is ignored.

In ambigous state, i receive a packet, it's not ignored because server dns is contacted to resolve the IP. And after, i receive a final packet who is ignored.

Normal state : blabla.com:5430 ----> Mycomputer:4445 it'terminated

Ambigous mode : blalbla.com:54300

---

> Mycomputer:2115
Mycomputer:dns ----> ServerDNS:dns query for bla...
ServerDNS:dns ----> MyComputer:dns resp IP to bla.


And it resolve name of all packet that i receive

:shock: Is that clear? :shock:

Got any original error messages/screenshots?

If you know ethereal that's clear !

I have change my firewall Norton antivirus for outpost.

I have block this external traffic

But i have a task system in my computer who make that.

I have a process system and a traffic netbios blocked in local by outpost.

Computer try to scan other computer.

If my IP is 83.155.170.81 computer who an IP in 83.155.*.* are scanned (port 3191, 4528, 3764....)

I suppose that a bot server is contacted and send more results.

Best attack or best scan ?!?!?

No virus found with Norton, No-adware found with spybot and Ad-aware