Hosts File "Girlnextdoor_"

From: Salomao Barguil (barguil@yahoo.com)
Date: 03/12/03

  • Next message: Douglas Brown: "Port 109 Mystery" 
    Date: Tue, 11 Mar 2003 22:32:06 -0800 (PST)
From: Salomao Barguil <barguil@yahoo.com>
To: "Levinson, Karl" <LevinsonK@STARS-SMI.com>, 'Nikunj Virani' <nikunj@netsurf.co.in>, incidents@securityfocus.com

    I have no idea how the HOSTS file was "updated", there
    is no unknown application on this PC (Today), to the
    best of my knwoledge.

    It might have been some old app, there was installed
    and then removed...but I have no clue ! Sorry !

    As I explained before, I did all the basic to search
    for unknown apps/services/ports/traffic in this PC,
    and everything seems to be fine.

    I will be monitoring this PC and keep you posted if
    the HOSTS file get "updated" again.

    Sal.
    --- "Levinson, Karl" <LevinsonK@STARS-SMI.com>
    > I would guess that this would be the result of some
    > anti-adware or anti-spam
    > program the computer user had installed. This
    > resembles an attempt to break
    > connectivity with certain banned hostnames by
    > resolving them to an invalid
    > IP address. I seem to remember at least one other
    > person reporting this
    > problem in a newsgroup this year.
    >
    >
    > -----Original Message-----
    > From: Nikunj Virani [mailto:nikunj@netsurf.co.in]
    > Sent: Friday, March 07, 2003 11:57 PM
    > To: Salomao Barguil; incidents@securityfocus.com
    > Subject: [despammed] Re: Solved !! "Girlnextdoor_"
    > TCP Ports 1025/1028
    >
    >
    > Its strange but i would surely like to know how the
    > name "Girlnextdoor_"
    > came into your hosts file. Was it some application
    > that did that ?
    >
    > Regards,
    > Nikunj
    > ----- Original Message -----
    > From: "Salomao Barguil" <barguil@yahoo.com>
    > To: <incidents@securityfocus.com>
    > Sent: Friday, March 07, 2003 9:35 AM
    > Subject: Solved !! "Girlnextdoor_" TCP Ports
    > 1025/1028
    >
    >
    > > Hi Folks,
    > >
    > > Thanks for everybody help in this matter.
    > >
    > > It was the HOSTS file on the local Win2k desktop :
    > > -------------------------------------------
    > > # This is a sample HOSTS file used by Microsoft
    > TCP/IP
    > > for Windows.
    > > 127.0.0.1 localhost
    > > 0.0.0.0 Girlnextdoor_
    >
    > >
    >

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Web Hosting - establish your business online
    http://webhosting.yahoo.com

    ----------------------------------------------------------------------------

    <Pre>Lose another weekend managing your IDS?
    Take back your personal time.
    15-day free trial of StillSecure Border Guard.</Pre>
    <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>

  • Next message: Douglas Brown: "Port 109 Mystery"

    Relevant Pages

    • Re: New Microsoft anti-malware
      ... grunch is both characteristic of Homo Sapiens, and a part of the Right of ... attempted redirect to a specific IP address, ... usually means an unknown Browser Helper Object or ActiveX entry in the ... Both examine the Hosts file, so probably saw it but didn't think it a ...
      (misc.news.internet.discuss)
    • "unknown" host
      ... I am running Solaris 9 for Intel on a Dell Optiplex GX115. ... My hostname is "unknown". ... my hosts file has 2 entries: ...
      (SunManagers)
    • Hosts file problem
      ... keep the hosts file for MVPS my problem using their file.What's the best ... describe it here or send it somewhere (address unknown). ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: new hosts file makes Yahoo messenger not work
      ... and now Yahoo messenger does not work. ... There is a whole section in the hosts file called YAHOO SERVERS, ... possibly lists all the site you trust and every site you might want to ...
      (microsoft.public.windowsxp.general)
    • Re: Fwd: Re: [SLE] Anyone else having Konqi crash in Yahoo mail?
      ... >> open mail in yahoo. ... If that is the case you need the hosts file you fine on google. ... used in both windows and linux to block such adds by redirecting them ...
      (SuSE)
    Loading