up vote 0 down vote favorite
1
share [g+] share [fb]

using Windows-7 (64bit), Comodo firewall, ESET NOD32 Antivirus, machine about 1 year old ALSO USING OpenDNS so i have changed my DNS servers to 208.67.222.222 + 208.67.220.220 i keep noticing ODD outgoing connection requests ALWAYS to 67.215.65.132 PORT 41 what seems strange to me is the programs vary... here is a small list explorer.exe bubbles.scr agent.exe wmpnetwk.exe winrar.exe Nemo Aquarium 3D

now a WHOIS of the IP shows it to be in the OpenDNS range but WHY would these programs talk to a DNS server ??? Am i infected ??? i thought DNS was on port 53 -- why port 41 ??? i have done scans with MalwareBytes Anti-malware, NOD32, SuperAnti-Sypware etc... i seem clean...only some cookies (but who cares about cookies)

link|improve this question
Question closed as I answered, but here ya go as a comment: Are you sure it's Port 41, and not Protocol 41? Protocol 41 is IPv6. Check out forums.comodo.com/empty-t38465.0.html for info on it from Comodo's forums. – techie007 Mar 12 '11 at 21:42
feedback

closed as too localized by studiohack♦ Mar 12 '11 at 21:41

This question is unlikely to ever help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. See the FAQ for guidance on how to improve it.

1 Answer

up vote 0 down vote

OpenDNS is apparently doing the wildcard A record evil, where a request for a domain that isn't found is redirected to a page on hit-nxdomain.opendns.com with (probably) ads and such. (Web of Trust popped up a warning page when I tried to open it in a browser.)

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.