full-disclosure - Windows hosts file changing.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200310221010.h9MAAE619121@storage.mshome.net>
From: gui at goddessmoon.org (Poof)
Subject: Windows hosts file changing.

Hate to say...

But no filesharing software is installed on this computer. And only legal
software is installed.

So... Nice try? =p

Also, AdAware is installed. Along with an up to date virus scanner. Plus all
email is scanned before it enters. (Up to date too).

AdAware was run BEFORE the hosts file changed. Without any spyware found.
And -AFTER- it was changed. Without any mention of any spyware (It was
updated both times)

So... Hrm? =/

> -----Original Message-----
> From: V.O. [mailto:vosipov@....com.au]
> Sent: Wednesday, October 22, 2003 3:06 AM
> To: Kevin Gerry; Full-Disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Windows hosts file changing.
> 
> spyware... brought in by kazaa or something similar :)
> 
> http://www.google.com.au/search?q=66.40.16.131+thumbnailpost.com&ie=UTF-
> 8&oe=UTF-8&hl=en&btnG=Google+Search&meta=
> 
> check this -
> http://miataru.computing.net/security/wwwboard/forum/6491.html
> 
> dont download illegal files :)))
> and install a virus scanner, or at least AdAware
> 
> ----- Original Message -----
> From: "Kevin Gerry" <poof1@....net>
> To: <Full-Disclosure@...ts.netsys.com>
> Sent: Wednesday, October 22, 2003 6:01 PM
> Subject: [Full-Disclosure] Windows hosts file changing.
> 
> 
> > Does -ANYBODY- know how it occurs?
> >
> > I've had this happen to a couple boxes of mine now...
> >
> > New one:
> > --
> > 127.0.0.1 localhost
> > 66.40.16.131 livesexlist.com
> > 66.40.16.131 lanasbigboobs.com
> > 66.40.16.131 thumbnailpost.com
> > 66.40.16.131 adult-series.com
> > 66.40.16.131 www.livesexlist.com
> > 66.40.16.131 www.lanasbigboobs.com
> > 66.40.16.131 www.thumbnailpost.com
> > 66.40.16.131 www.adult-series.com
> > --
> >
> > Any idea how the search site is replacing that? =/ It's starting to piss
> me
> > off =/ I had some custom information in there that's now overwritten
> (Not
> > backed up)
> >
> > Thanks =/
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
> >