I'm nearly sure that RUBotted from Trend Micro is reading some of the incoming traffic from LiveUpdate as a detected DNS query of a malicious domain. It's not happening every time that an update come through but 4 to 6 times a day.
I have of cause scanned with a ton of programs to make sure that I don't have malware. Norton Internet Security 2010 included. And so was Trend Micro's House Call online scanner. Twice, even. Both 6.5 and 7 - the new beta. Nothing found.
Are there any reports to support this or am I just all wrong? 
I like to find out what's up here.
RUBotted is a fine thing - I like it. Freeware is great. RUBottet is still in beta so I guess it's excused.
Message Edited by ePost on 09-28-2009 12:57 AM