PPRuNe Forums - View Single Post - Virus or Malware?
View Single Post
Old 27th Oct 2009, 22:34
  #4 (permalink)  
mocoman
Location, Location, Location
 
Join Date: Oct 2003
Location: If it moves, watch it like a hawk: If it doesn't, hit it with a hammer until it does...
Age: 61
Posts: 142
Likes: 0
Received 0 Likes on 0 Posts
maybe the OP meant:

the destination IP is 192.168.2.1:53

port 53/tcp Domain Name Server
port 53/udp Domain Name Server

That might make sense if the software is trying to resolve a hostname for communication with the outside world and your PC is on a network where the local DNS server has the IP address 192.168.2.1

As others said, malware and/or viruses (as well as legitimate programs) are not immune to programming errors so maybe it was coded to look for a specific IP address to find a DNS server rather than querying the properties of the network connection to ascertain who it should talk to for hostname-IP resolution.

Although, IIRC all Belkin routers and cable/ISDN modems default to 192.168.2.1 on the private/internal network interface if not re-configured by the enduser.

Last edited by mocoman; 27th Oct 2009 at 22:45.
mocoman is offline