Identical queries that get repeated every few minutes can also be an indication of DNS command and control activity, because infected computers will periodically check for new commands. There are ...