Any luck? I am now running into this same issue. Have you figured out what is causing this? In my situation, the DNS servers are valid, but my firewall policy is preventing the user from proper resolution. I'm not inclined to think that it is malware because it using valid DNS server IP addresses.