Find program/app causing 1014 warnings

Topic

New Reply

Hi…I’m getting a 1014 DNS error for “instagram.com”.  However, I have no app that I know of that needs instagram and I am not a member and never use it and I don’t recall ever visiting, but possible.  Meanwhile every day or two, I get the instagram 1014 error.  How do I find the executable/program/app that is making the query.  I tried Process Monitor, but I didn’t find any reference to instagram even though I was actively using ProMon when the latest 1014 hit.

I don’t need to resolve the DNS query, I need to know what app is querying instagram and causing the 1014.  I done a lot searching and so far no joy.  Would SysMon?  I’ve got wireshark, but I found it very confusing.  What about Debug Logging?

I searched the forum and the recommendations were for resolving not identifying the app.

Thanks for any advice…

Reply | Quote

Replies

Download and run Autoruns (as Administrator), or run it online, and then search for “Instagram” or similar.  If found, disable or delete.  It may find nothing, but is worth a try.

Windows 10 Pro 64 bit 20H2

1 user thanked author for this post.

daleno1

Reply | Quote

Wireshark is the right tool, but you need to be experienced to use it fully.
You can do the basics, which may get you the answer you require.

Open Wireshark and set a filter for outgoing DNS packets.
Set it to log the data, saving a couple of days worth.
When you get a DNS error, check the Wireshark log for the corresponding time.

cheers, Paul

1 user thanked author for this post.

daleno1

Reply | Quote

I had fiddled with Wireshark, but was not being very successful.  Thanks for the help.

Reply | Quote

[Alex5723]

Do you have any Facebook related software : Facebook, WhatsApp, Oculus, Messenger, Reels..) ?

• This reply was modified 4 years, 7 months ago by Alex5723.

Reply | Quote

Hi…no I don’t have any of these apps.  I did try to eliminate apps, so I disabled the couple I have and that didn’t seem to make any difference.  But the question reminded me to double-check, so thanks.

Reply | Quote

When I need a tool to track ‘process to Internet endpoint’ I use Nir Sofer’s small, free and portable CurrPorts and its logging feature which logs all new connections.

1. Download and unzip CurrPorts to a folder. (Make sure you download the same ‘bitness’ version as your OS… usually x64 these days.)

2. Open a commandline or PowerShell prompt and enter ping instagram.com. (From where I am the result shows Pinging instagram.com [3.218.112.31] with 32 bytes of data. However, for many reasons that IP address could be different where you are.) Make a note of the IP address translation for instagram.com.

3. *Right*-click on the CurrPorts executable (cports.exe) and use ‘Run as administrator…’ from the context menu then accept the User Account Control (UAC) prompt.

4. When CurrPorts opens, choose Options from the menubar and select Hide Items With Loopback Address. This will reduce the number of results pointing back to your device itself.

5. Choose Open Log File from the File menu then accept the offer to create a log and immediately close the log. (The log – cports.log – is created in the same folder you ran cports.exe from.)

6. Select Log Changes from the File menu and check that a tick appears alongside the option:

7. Minimize CurrPorts and wait for the ‘1014 DNS error’ to occur again. When it does, maximize CurrPorts and choose Open Log File from the File menu. The time of the error should correspond to an entry in the CurrPorts log and should show the process which caused it.

Hope this helps.

3 users thanked author for this post.

Kirsty, daleno1, Alex5723

Reply | Quote

[daleno1]

This is very helpful…thanks.  This help and the others is the reason why AskWoody is my top go-to-place for PC advice, help and news.  You guys are terrific.

• This reply was modified 4 years, 6 months ago by daleno1.

Reply | Quote