Re: [newbie] trojan horses

[stephen]

I have the same type of attack on a different ip
here are the details

IP: 209.86.142.68
DNS: user-38ld3i4.dialup.mindspring.com
Node: BOXOFWIRES
Group: STUDENTS
MAC: 44455354

back orifice ping


- Original Message -
From: "A V Flinsch" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 10, 2000 8:07 PM
Subject: Re: [newbie] trojan horses


> On Tue, 10 Oct 2000, you wrote:
> > I went to http://boxnetwork.net on mistake--there was a black page with
a
> > hand with an eye on it, and no links. Do you happen to know what that
> > page is?
>
> [alex@homer alex]$ ping boxnetwork.net
> PING boxnetwork.net (194.1.129.227): 56 data bytes
> 64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=1069.5 ms
>
> [alex@homer alex]$ ping www.boxnetwork.net
> PING www.boxnetwork.net (194.1.129.227): 56 data bytes
> 64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=740.2 ms
>
> Same machine, just that thye have Apache set up to return a different page
for
> boxnetwork.net, than is returned for www.boxnetwork.net
>
>  --
> Alex
> (Go easy on me, I'm a COBOL programmer in real life)
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.198 / Virus Database: 95 - Release Date: 10/4/00

Re: [newbie] trojan horses

[A V Flinsch]

On Tue, 10 Oct 2000, you wrote:
> I went to http://boxnetwork.net on mistake--there was a black page with a
> hand with an eye on it, and no links. Do you happen to know what that
> page is?

[alex@homer alex]$ ping boxnetwork.net 
PING boxnetwork.net (194.1.129.227): 56 data bytes 
64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=1069.5 ms   

[alex@homer alex]$ ping www.boxnetwork.net
PING www.boxnetwork.net (194.1.129.227): 56 data bytes 
64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=740.2 ms

Same machine, just that thye have Apache set up to return a different page for
boxnetwork.net, than is returned for www.boxnetwork.net 

 -- 
Alex
(Go easy on me, I'm a COBOL programmer in real life)

Re: [newbie] trojan horses

[KRITZBERG DAVID OWEN]

I went to http://boxnetwork.net on mistake--there was a black page with a
hand with an eye on it, and no links. Do you happen to know what that
page is?

-
David Owen Kritzberg (david.kritzberg-at-colorado.edu)
Department of Economics, University of Colorado at Boulder
Campus Box 256, Boulder CO 80309-0256
Tel: 303-492-7709 Fax: 303-492-8960
On Sun, 8 Oct 2000 [EMAIL PROTECTED] wrote:

> In a message dated 08-Oct-00 19:30:16 Central Daylight Time, 
> [EMAIL PROTECTED] writes:
> 
> << 
>  I tried http://www.hackerwhacker.com and I found 2 or 3 ports open that
>  *could* be trojans.  ANy way to verify? >>
> check for utilitys via the box network
> http://www.boxnetwork.net/
> 

Re: [newbie] trojan horses

[Mwinold]

In a message dated 08-Oct-00 19:30:16 Central Daylight Time, 
[EMAIL PROTECTED] writes:

<< 
 I tried http://www.hackerwhacker.com and I found 2 or 3 ports open that
 *could* be trojans.  ANy way to verify? >>
check for utilitys via the box network
http://www.boxnetwork.net/

[newbie] trojan horses

[Paul R]

Anybody know of a way to check for trojan horses?

I tried http://www.hackerwhacker.com and I found 2 or 3 ports open that
*could* be trojans.  ANy way to verify?

-Paul R

__
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com