03-21-2013 03:02 AM
System log fills with messages like "Failed to resolve domain name:defrxpwgklm.capco.com after trying all attempts to name server(s): 8.8.4.4 194.25.0.68". DNS without dnsproxy is working. Can i restart the dnsproxy to fix this issue?
The messages are appearing after some threats of type "Suspicious DNS Query".
03-29-2013 02:43 PM
I wouldnt be suprised if defrxpwgklm.capco.com is a malware url, I have seen similar design of the subdomain part which previously have been classified as malware-related.
Also currently it doesnt seem to resolve at all:
;; QUESTION SECTION:
;defrxpwgklm.capco.com. IN ANY
;; AUTHORITY SECTION:
capco.com. 3600 IN SOA ns1.netnames.net. hostmaster.net
names.net. 2013032800 10800 1800 3600000 21600
05-17-2016 01:11 AM
Old thread, but as it is still visible - from description it seems to be matching scenario described in following KB article:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
