Security Incidents mailing list archives
RE: Re: Solved !! "Girlnextdoor_" TCP Ports 1025/1028
From: "Levinson, Karl" <LevinsonK () STARS-SMI com>
Date: Tue, 11 Mar 2003 16:25:57 -0500
I would guess that this would be the result of some anti-adware or anti-spam program the computer user had installed. This resembles an attempt to break connectivity with certain banned hostnames by resolving them to an invalid IP address. I seem to remember at least one other person reporting this problem in a newsgroup this year. -----Original Message----- From: Nikunj Virani [mailto:nikunj () netsurf co in] Sent: Friday, March 07, 2003 11:57 PM To: Salomao Barguil; incidents () securityfocus com Subject: [despammed] Re: Solved !! "Girlnextdoor_" TCP Ports 1025/1028 Its strange but i would surely like to know how the name "Girlnextdoor_" came into your hosts file. Was it some application that did that ? Regards, Nikunj ----- Original Message ----- From: "Salomao Barguil" <barguil () yahoo com> To: <incidents () securityfocus com> Sent: Friday, March 07, 2003 9:35 AM Subject: Solved !! "Girlnextdoor_" TCP Ports 1025/1028
Hi Folks, Thanks for everybody help in this matter. It was the HOSTS file on the local Win2k desktop : ------------------------------------------- # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 127.0.0.1 localhost 0.0.0.0 Girlnextdoor_
---------------------------------------------------------------------------- <Pre>Lose another weekend managing your IDS? Take back your personal time. 15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>
Current thread:
- RE: Re: Solved !! "Girlnextdoor_" TCP Ports 1025/1028 Levinson, Karl (Mar 11)
- Hosts File "Girlnextdoor_" Salomao Barguil (Mar 12)