Security Incidents: Solved !! "Girlnextdoor_" TCP Ports 1025/1028

[Salomao Barguil <barguil () yahoo com>]

Hi Folks,

Thanks for everybody help in this matter.

It was the HOSTS file on the local Win2k desktop :
-------------------------------------------
# This is a sample HOSTS file used by Microsoft TCP/IP
for Windows.
127.0.0.1       localhost
0.0.0.0         Girlnextdoor_
-------------------------------------------

I removed the second line "Girlnextdoor_" and it was
replaced by the local host name in the netstat -a
command.

And Yes, I had already run all the basic tools, like
Foundstone Fport/Vision, SpyBot adware search &
destroy....etc, nothing unusual shows up.

Thanks again,
nice teamwork !

Sal.



__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/

----------------------------------------------------------------------------

<Pre>Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre>
<A href="http://www.securityfocus.com/stillsecure";> http://www.securityfocus.com/stillsecure </A>