Re: browser redirection to forward.domainname.at

From: Michael Gargan (michael@adest.com)
Date: 02/26/02 

From: "Michael Gargan" <michael@adest.com>
To: <Matthew.van.Eerde@hbinc.com>, <focus-ms@securityfocus.com>
Date: Tue, 26 Feb 2002 17:18:45 -0000

I think you will find that if you check your connection settings IE is
trying to use 212.69.172.16:80 as a proxy server.. Take that out and the
problem shouldn't be there anymore..

As for how it got there.... That I don't know.. Maybe someone was trying to
use a proxy server to get access to sites you don't allow?

Hope this helps..

Michael

----- Original Message -----
From: <Matthew.van.Eerde@hbinc.com>
To: <focus-ms@securityfocus.com>
Cc: <focus-virus@securityfocus.com>
Sent: Tuesday, February 26, 2002 4:29 PM
Subject: browser redirection to forward.domainname.at

> A strange problem is surfacing on our network. Users will type in a
website
> they have been to before, and they will be forwarded to
>
> http://forward.domainname.at/http://212.69.172.16/forward.php
> and then to
> http://212.69.172.16/forward.php
>
> Have we been hit by a virus? Or is there some name resolution hack on the
> internet?
>
> Typing in the ip address of a site
> http://216.168.252.86 for http://www.verisign.com for example
> goes to the correct site. nslookup prompts from the command line yeild
the
> correct IP address.
>
> Workstations are Windows 2000 Professional SP2 with IE 6.
>
> Matthew van Eerde
> Software Engineer
>

Relevant Pages

  • Re: Page not found or slow loading HTTPS sites
    ... What ISA connection settings are ... We are running SBS2003 SP1 with ISA ... have problems logging into any sites with HTTPS in the url (secured ... The ISA firewall seems to make my IE settings connect to proxy server. ...
    (microsoft.public.windows.server.sbs)
  • Re: 80072ee2 when sync via USB - ok with wireless
    ... Try clearing your proxy setting under your connection settings> connections ... network connects to the Internet is selected and that the This network uses ... a proxy server to connect to the internet box is unchecked. ...
    (microsoft.public.pocketpc.activesync)
  • Re: Windows Live Messenger on the PPC wont connect
    ... I switched last week from PAYG to a contract. ... The former PAYG service ... used a proxy server in connection settings. ... The new settings don't rely on a proxy server any more. ...
    (microsoft.public.pocketpc)
  • Strange error message
    ... I just installed MSN Messenger 5 for Windows NT4. ... I need to change the connection settings since I'm using a ... proxy server, ...
    (microsoft.public.windowsxp.messenger)
  • [Full-Disclosure] search engine proxy
    ... either google or yahoo as a proxy server by typing in something in the ...
    (Full-Disclosure)