| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <200310221011.00364.jstewart@lurhq.com> From: jstewart at lurhq.com (Joe Stewart) Subject: Windows hosts file changing. On Wednesday 22 October 2003 4:01 am, Kevin Gerry wrote: > Does -ANYBODY- know how it occurs? This isn't Qhosts. It's a variant of the CoolWebSearch browser hijacker. Browsing the contact.htm page on the IP address given quickly reveals this site and CoolWebSearch are running the same scam under different names. The site's webmaster even has a link to the CWS removal tool and a "Don't blame me for trojaning you, blame Microsoft" message. More info on CoolWebSearch: http://www.spywareinfo.com/~merijn/cwschronicles.html -Joe -- Joe Stewart, GCIH Senior Security Researcher LURHQ http://www.lurhq.com/
Powered by blists - more mailing lists