full-disclosure - Navian Call Home

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: simon at snosoft.com (ATD)
Subject: Navian Call Home

Bob, 
	Try searching the contents of all files on your system for that
telephone number (executable files too). Its been a while since I've
used a windows based computer, but if I remember correctly there is a
feature in the search facility that allows you to search the contents of
files. When you compile source code certain strings remain intact, so
this all file search might help you find the source of the problem. I'd
be interested in knowing what the source of the problem is when you
resolve it. If you need any further help I'd be happy to help you out. 




On Sun, 2003-01-19 at 05:26, Bob Crockett wrote:
> Well, folks, here's another question which is way low 
> tech to y'all, but baffles the heck out of me.
> 
> I had been noticing some "odd" behavior on my dial-up 
> connection, and then while connecting a network card I 
> noticed a dial up connection that I did not set up.  It 
> has an 877 (toll free) number, and is labeled "Navian".
> 
> I found this connection last night, and deleted it.  I 
> also googled Naviant and found out that they're a 
> massive direct marketing company.  Apparently they must 
> _REALLY_ value my privacy (or what they might find out 
> about me that I thought was private) because the dial 
> up connection that I deleted last night has returned! 
> I found it again tonight.  So, somehow Naviant has 
> apparently placed an .exe file on my computer and I am 
> pissed!!!  Searching my computer for "Naviant" only 
> brings up the notes I typed and filed under that name 
> or containing that word.
> 
> Any ideas?  Any help much appreciated.  I use Norton 
> firewall and am puzzled as to how this deed was done to 
> me. Thanks in advance!
> 
> Bob crockett
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 

ATD <simon@...soft.com>
Secure Network Operations, Inc. 
http://www.snosoft.com/documents/SNOsoft-corporate-outline.pdf
---------------------------------------------------------------------
Key fingerprint = BEDD 0FAD 4CE2 6399 551F  86F5 B036 A540 D47C EC101
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030119/7ef94290/attachment.bin