DNS Unknown Query results

Question

I have been seeing in the windlows logs there is an unknown process received DNS Unknow query for machine. Can we explain why there

An unknown process received DNS Unknown query results for 0._teamviewer._tcp.local

Can explain this pls?

.Carol.fg. · Answer

Hi @OBlessed , Thanks for your first post in our Community! I checked your question internally with our support teams, and _teamviewer._tcp.local is a service discovery record that allows TeamViewer to detect other TeamViewer devices on the same local network. The leading 0. is part of the service enumeration mechanism defined by DNS‑SD and is normal behavior. On Windows, the DNS query is often logged as coming from an “unknown process”, but even though it says “unknown,” the query itself is expected and legitimate. This does not indicate malware or unauthorized activity, as long as TeamViewer is installed with LAN discovery enabled (default in many setups). If you don’t need LAN, you can disable it following the steps below: * 1. Open TeamViewer, and go to Settings. * 2. On the Device field, click Network. * 3. On the Incoming LAN connection, select Deny. After this, the _teamviewer._tcp.local queries should stop. * * 💡If you have a license that supports having and managing a company, you can also apply this change via the Incoming LAN connections policy: Policy rules * As a customer, if the behavior you're seeing doesn't match what was described above, we would encourage you to open a support ticket for further investigation. Let us know if this info helped you and if our Community could assist you any further. Best, Carol