Many established connections from "dnscache"

[Bilgot the Heartless]

Few days ago i noticed in netstat that i had 17 established connections. I found out they were from "dnscache service". I didn't have them before. I turned svchost process that belongs to this service and all established connections disappeared. But next day i had already 3 of them. About 3 days later i had already 6. Next thing i did was disabling "DNS client service" i could do that only by regedit. I turned it off but next day i had about 3 established connections not from dns service but from "NlaSvc" i mean i could also turn it off but i don't think it is good idea to just disabling everything. I turned dns cache on again and now i don't know what to do. When i type "netstat" i see these connections are from "lan domain" so i think it is something like i am connecting with myself? Could someone explain me what is going on and how can i do something with this.

[Muppet among Puppets]

Why are you worried about dns cache, dns service and nla service?
If its not a virus, its part of your os that is usefull for, well, if your computer connects to networks or the internet

[Bilgot the Heartless]

Originally posted by Muppet among Puppets:

Why are you worried about dns cache, dns service and nla service?
If its not a virus, its part of your os that is usefull for, well, if your computer connects to networks or the internet

I would not care if it was from the beginning. This problem just appeared and i am curious why. If i can do something with that i would like to know how. Also if it is not a something bad like virus i still want to know what is going on even just for improving my knowledge about Windows.

[Muppet among Puppets]

Then read about what these 3 things do and are.
Their function requires connections.

[Bilgot the Heartless]

I know what DNScache does but i don't understand why they started to multiply. Why i had over 17 of them and why i didn't have them before. I don't say i should do something with them really quickly becasue they are dangerous or something like that. But it's just weird that they appeared for no reason and they will not turn off without restarting this service. Maybe problem is that this service is bugged for me and it can not turn off itself and instead of starting connection when it is needed, everytime when it must be started it begins new connection without closing previous but this is only my theory. I have to say i don't know that much about Networks and this is why i am asking.

[Muppet among Puppets]

What kind of connections were those?
To where?

Would you have a "problem" if you did not check netstat?

[Bilgot the Heartless]

They are TCP connections and when i type "netstat" foreign adresses of them are lan:domain.

And i probably would not have a problem if i did not check it so you can say why should i care but also sick person with some disease wouldn't care if he did not know about it but if he knows he cares. I hope you understand me.

[Muppet among Puppets]

Even if someone explains here to you what the original function does,
he could not be sure if it was malicious in disguise.

So, i recommend you read about your questions which you find by using tools.
At least before you disable things.

As a number, 17 legitimate connections are not a problem in itself.
I used a firewall on paranoid mode. I did not worry by numbers.

Maybe you should use a real firewall, and see what really happens. Not the windows one as is, and not default setting of userfriendly firewalls.

Or you just make sure to not get malware, and you wont have to worry about problems of connections.