DNS hacked/hijacked by the "Delude.B" trojan

From: Jonathan de Boyne Pollard (J.deBoynePollard_at_Tesco.NET)
Date: 10/03/03

  • Next message: Jonathan de Boyne Pollard: "DNS hacked/hijacked by the "Delude.B" trojan" 
    Date: Fri, 03 Oct 2003 19:04:12 +0100

    JF> When I try pinging Google, I get [207.44.194.56]. But when I
    JF> use NSLOOKUP to find www.google.com, it gives the me correct
    JF> IP address, 216.239.41.99.

    <URL:http://homepages.tesco.net./~J.deBoynePollard/FGA/nslookup-results-different-to-ping.html>

    JF> I've tried running ipconfig /flushdns [...] no affect [sic].

    <URL:news:3F7D536B.82068D14@Tesco.NET>

    JF> DNS problems on my machine originally began yesterday, [...]

    That was the day that you ran the trojan on your machine.

  • Next message: Jonathan de Boyne Pollard: "DNS hacked/hijacked by the "Delude.B" trojan"

    Relevant Pages

    • DNS hacked/hijacked by the "Delude.B" trojan
      ... JF> When I try pinging Google, ... JF> use NSLOOKUP to find www.google.com, ... JF> DNS problems on my machine originally began yesterday, ... That was the day that you ran the trojan on your machine. ...
      (microsoft.public.win2000.security)
    • Need help with a DNS problem
      ... A few months ago I posted the enclosed message and was given the fix to turn off ipv6 support, ... Recently the DNS problems I described have come back... ... The new FC2 system is also running dhclient and fails to get addresses for only ... names, but nslookup will fail. ...
      (Fedora)