we've got tight virus monitoring, so i've ruled that out.

i was actually wondering whether there might be some kind of client acting as a dns server. question is, i've got about 40 clients, spread out in four buildings. is there a way to probe for dns servers? i think that might be on the right track. the first time i noticed this happening was i think around the time a new guy started who's pretty computer proficient.