browser redirection to forward.domainname.at

From: Matthew.van.Eerde@hbinc.com
Date: 02/26/02 

From: Matthew.van.Eerde@hbinc.com
To: focus-ms@securityfocus.com
Date: Tue, 26 Feb 2002 08:29:21 -0800

A strange problem is surfacing on our network. Users will type in a website
they have been to before, and they will be forwarded to

http://forward.domainname.at/http://212.69.172.16/forward.php
and then to
http://212.69.172.16/forward.php

Have we been hit by a virus? Or is there some name resolution hack on the
internet?

Typing in the ip address of a site
http://216.168.252.86 for http://www.verisign.com for example
goes to the correct site. nslookup prompts from the command line yeild the
correct IP address.

Workstations are Windows 2000 Professional SP2 with IE 6.

Matthew van Eerde
Software Engineer

Relevant Pages

  • Re: Splitting Part of existing site off into smaller subnet range
    ... particular case before asking for the switch to be pulled in production ... It is hard to truly replicate the complex network etc. in a vm environment ... Every DC needs to be MOVED to the correct site, ... but only during their initial installation setup.) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Two VP Questions
    ... My guess is you went to a website starting with "THE". ... scammers. ... The correct site is just www.wizardofodds.com ... Prev by Date: ...
    (alt.vacation.las-vegas)