Just a question ........NEWWWWS !!!!!

From: Bassam ALHUSSEIN (bhussein@scs-net.org)
Date: 02/23/02 

From: "Bassam ALHUSSEIN" <bhussein@scs-net.org>
To: <SECURITY-BASICS@securityfocus.com>
Date: Sat, 23 Feb 2002 17:32:00 +0200

Hi Again ........ thank you all for answering, but I've got some news ....
I didn't use fport ( which was a proposition of someone of you ), but I
tried to block this address by ZoneAlarm Pro that is installed and running.
ZApro gave me then an alert every 20 seconds, and said that Microsoft
outlook express
tried to connect to
www.myhost.com which resolves in the browser directly to weguardyou.com
....!!
the alert is :
" Your computer was prevented from connecting to a restricted site
(www.myhost.com).
User: Bassam ALHUSSEIN
Program: Microsoft Outlook Express .
Time: 23/02/2002 03:34:20 PM "

the problem is that I never visited that site before or downloaded something
from there ...!!!
softwares that I use at startup are : some Norton utilities and AV,
ZoneAlarmPro, and getright !!
I have had these alerts even when outlook is not running ...!!! So when I
passed on PROGRAMS SETTINGS in ZApro I found TWO outlooks !!!!
1) Outlook Express (which is the file msimn.exe)
2) Microsoft Outlook Express (which is support-http.exe ) and it is
this one that was trying to connect to myhost.com ..........but why ???????
( it exists even in the registry to run at the startup ..!! wow but with
name of http tunnel ??
    I remember ..http-tunnel is a program I used once to bypass my the proxy
server of my ISP that blocks free email sites ...!!! )

what do you think ??? should I still block the address and have the alerts
every 20 sec...
should I delete that key from the registry ??? Do you know if support-http
is really a program from microsoft ? ( cause it is in the system folder
and http-tunnel that I used is just one exe file on another hard drive ....)
I am lost .....help

I sent email to support@weguardyou.com but got no answer .....

Bisso

Relevant Pages

  • Just a question ........NEWWWWS !!!!!
    ... tried to block this address by ZoneAlarm Pro that is installed and running. ... ZApro gave me then an alert every 20 seconds, and said that Microsoft ... I have had these alerts even when outlook is not running ...!!! ...
    (Security-Basics)
  • RE: Just a question ........NEWWWWS !!!!!
    ... pass off as Outlook express. ... And see if itès a known spyware. ... event, remove this from your system, it is not in any way a Microsoft ot ... > then an alert every 20 seconds, ...
    (Security-Basics)
  • Re: OT - some useful info
    ... > bring you this newsletter each week, check out the Desktop Search Handbook ... Outlook Picture Viewer ... Licensing Microsoft fonts ... > used OfficeML formats - an XML version of the document formats. ...
    (microsoft.public.word.docmanagement)
  • RE: Monitoring & Reporting email display name
    ... the issue happens to the OAB in Outlook Client Side. ... Microsoft CSS Online Newsgroup Support ... The 'alerts' display as i need them to. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook XP POP issue with SBS2003 SP1
    ... Thanks for your updates. ... 318790 You receive the "0x80042108 Outlook is unable to connect to your ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)