got a weird question and I'm not sure if I should even post this on here but I couldn't think of anywhere better to ask. Lately, I've been getting some internet speed issues. I closed literally every proccess on my computer that sends packets out regularly, including windows updater, everything. When I ran a wireshark scan I've noticed repeating pattern of packets being sent and received and I'm worried it's some kind of a bot.(90% I'm alright, just wanted your opinion, better be safe than sorry): I don't have stackoverflow reputation so here's a direct link: http://i.imgur.com/5nJbi1K.png?1
That first IP at least is owned by a Russian telecom:
canonical name broadband-46-18-200-212.clients.kubtel.ru. aliases
Queried whois.ripn.net with "kubtel.ru"...
And considering that many IP addresses are being checked for ICMP in less than 3 seconds, I would say that your assumption about malware on the system is justified.
The address 22.214.171.124 was the first in that list to reply back, but only after it rejected your machine's ICMP probe. Once it knew you were alive and beaconing out, it attempted to connect back to you via TCP 1900, usually reserved for UPnP.
The fact that any of those other hosts are getting through with TCP and UDP to your host inside your LAN is pretty telling about your router's configuration. Do you really allow all communications inbound? DMZ or port forward? The other explanation is that these are continuations of connections started before your capture that your PC initiated.
I would consider this asset compromised, and perform an immediate reimage/reinstall.