Full Disclosure mailing list archives
Re: Windows hosts file changing.
From: "Joshua Levitsky" <jlevitsk () joshie com>
Date: Wed, 22 Oct 2003 07:08:01 -0400
----- Original Message ----- From: "Kevin Gerry" <poof1 () cox net> Sent: Wednesday, October 22, 2003 4:01 AM Subject: [Full-disclosure] Windows hosts file changing.
Does -ANYBODY- know how it occurs? I've had this happen to a couple boxes of mine now... New one: -- 127.0.0.1 localhost 66.40.16.131 livesexlist.com 66.40.16.131 lanasbigboobs.com 66.40.16.131 thumbnailpost.com
Perhaps a variant of the QHosts virus which just exploits an IE vulnerability. Perhaps not even a "virus" per say. (It's kind of sketchy anyways to call Qhosts a virus.) Perhaps a user got an email and clicked on the URL and it sent them to a site that took advantage of their IE not being patched. http://securityresponse.symantec.com/avcenter/venc/data/trojan.qhosts.html http://vil.nai.com/vil/content/v_100719.htm The MS03-040 patch addresses this type of attack on a system. -Josh -- Joshua Levitsky, MCSE, CISSP System Engineer Time Inc. Information Technology [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Windows hosts file changing. Kevin Gerry (Oct 22)
- Re: Windows hosts file changing. V.O. (Oct 22)
- RE: Windows hosts file changing. Poof (Oct 22)
- Re: Windows hosts file changing. gregh (Oct 22)
- RE: Windows hosts file changing. Poof (Oct 22)
- Re: Windows hosts file changing. gregh (Oct 22)
- RE: Windows hosts file changing. Poof (Oct 22)
- Re: Windows hosts file changing. V.O. (Oct 22)
- Re: Windows hosts file changing. Daniel (Oct 22)
- RE: Windows hosts file changing. Poof (Oct 22)
- Re: Windows hosts file changing. Joshua Levitsky (Oct 22)
- Re: Windows hosts file changing. David Gianndrea (Oct 22)
- Re: Windows hosts file changing. Brian Eckman (Oct 22)
- Re: Windows hosts file changing. Exibar (Oct 22)
- Re: Windows hosts file changing. Brian Eckman (Oct 22)
- Re: Windows hosts file changing. Mike Tancsa (Oct 22)
- RE: Windows hosts file changing. Austin Ehlers (Oct 22)
- RE: Windows hosts file changing. Poof (Oct 22)
- Re: Windows hosts file changing. Joe Stewart (Oct 22)
- <Possible follow-ups>
- RE: Windows hosts file changing. Bjørnar Bjørgum Larsen (Oct 22)
- Re: Windows hosts file changing. V.O. (Oct 22)