Security Incidents mailing list archives
Hosts File "Girlnextdoor_"
From: Salomao Barguil <barguil () yahoo com>
Date: Tue, 11 Mar 2003 22:32:06 -0800 (PST)
I have no idea how the HOSTS file was "updated", there is no unknown application on this PC (Today), to the best of my knwoledge. It might have been some old app, there was installed and then removed...but I have no clue ! Sorry ! As I explained before, I did all the basic to search for unknown apps/services/ports/traffic in this PC, and everything seems to be fine. I will be monitoring this PC and keep you posted if the HOSTS file get "updated" again. Sal. --- "Levinson, Karl" <LevinsonK () STARS-SMI com>
I would guess that this would be the result of some anti-adware or anti-spam program the computer user had installed. This resembles an attempt to break connectivity with certain banned hostnames by resolving them to an invalid IP address. I seem to remember at least one other person reporting this problem in a newsgroup this year. -----Original Message----- From: Nikunj Virani [mailto:nikunj () netsurf co in] Sent: Friday, March 07, 2003 11:57 PM To: Salomao Barguil; incidents () securityfocus com Subject: [despammed] Re: Solved !! "Girlnextdoor_" TCP Ports 1025/1028 Its strange but i would surely like to know how the name "Girlnextdoor_" came into your hosts file. Was it some application that did that ? Regards, Nikunj ----- Original Message ----- From: "Salomao Barguil" <barguil () yahoo com> To: <incidents () securityfocus com> Sent: Friday, March 07, 2003 9:35 AM Subject: Solved !! "Girlnextdoor_" TCP Ports 1025/1028Hi Folks, Thanks for everybody help in this matter. It was the HOSTS file on the local Win2k desktop : ------------------------------------------- # This is a sample HOSTS file used by MicrosoftTCP/IPfor Windows. 127.0.0.1 localhost 0.0.0.0 Girlnextdoor_
__________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com ---------------------------------------------------------------------------- <Pre>Lose another weekend managing your IDS? Take back your personal time. 15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>
Current thread:
- RE: Re: Solved !! "Girlnextdoor_" TCP Ports 1025/1028 Levinson, Karl (Mar 11)
- Hosts File "Girlnextdoor_" Salomao Barguil (Mar 12)