full-disclosure - Blaster Side Affect?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3E71BE64C6ECD8449CD5A236F700FA96814554@odcexch.wei.owhc.net>
From: mbassett at omaha.com (Bassett, Mark)
Subject: Blaster Side Affect?

We are having major dns issues here also, things are all resolving to
64.62.159.128   
Which  happens to be owned by

Search results for: 64.62.159.128 

Hurricane Electric HURRICANE-4 (NET-64-62-128-0-1)
                                  64.62.128.0 - 64.62.255.255
Vicajo Consultants dba Onefusion.com HURRICANE-CE0848-341
(NET-64-62-159-0-1)
                                  64.62.159.0 - 64.62.159.255

# ARIN WHOIS database, last updated 2003-08-17 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.



-----Original Message-----
From: Richard Spiers [mailto:dksaarth@...x.za.net] 
Sent: Monday, August 18, 2003 10:32 AM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Blaster Side Affect?


Yeah, can't give details because i'll only be able to look at the
machine
sometime next week, but I've had a friend phone me and complain that his
windows 2000 server is now having trouble with DNS names.

----- Original Message ----- 
From: "henry j. mason" <hmason@...inet.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Monday, August 18, 2003 3:22 PM
Subject: Re: [Full-Disclosure] Blaster Side Affect?


> about 1.5 weeks before the worm appeared, my windows 2000
> machine stopped resolving DNS names. a reboot would solve
> the problem, then after an hour it would stop working again.
> networking was fine otherwise - resolving hosts via the
> hosts file worked and you could reach machines by numeric
> ip address. restarting the DNS client service did nothing.
> in fact, i never found a solution, and ended up installing
> windows on new hardware and moving my files over.
>
> what a waste of time.
>
> i have no idea if this is related to the worm or just a bug
> in windows (god forbid). but since your symptoms appear to
> be similar i thought i would mention it.
>
> if this is your problem, and you find a fix, i'd really like
> to know about it...
>
> regards,
> henry
>
>
> Adam wrote:
>
> > My apologies if this is a stupid question.  I haven't seen this
mentioned on
> > the list yet and I haven't heard about until today when some
customers
> > called. It seems that after they get the worm ( which I have been
telling
> > the to update since July...go figure ) and remove it. They can no
longer
get
> > to any websites.  Checked all the settings and they are good. They
can
ping
> > outside there network and get email through outlook. Just can't
browse
any
> > websites?  Anyone heard of this or why it is happening?  Or how to
fix
it.
> > Any help would be greatly appreciated.
> >
> >
> >
> > Adam Richards
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


************************************************************
Omaha World-Herald Company computer systems are for business use only.
This e-mail was scanned by MailSweeper
************************************************************