[Spyware] Hijacker res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm security-look.cc

Tech-Archive recommends: Fix windows errors by optimizing your registry

tutankhamon_at_hotmail.com
Date: 12/26/04

Next message: tmbgeorge_at_verizon.net: "text disappears on IE 6"

Previous message: Leef: "Short IE 6.0 downloads, does not get the whole file"
Messages sorted by: [ date ] [ thread ]

Date: 25 Dec 2004 22:18:23 -0800

I seem to have been hit by some spyware crap, the guys using the
following London Address:
******************************************************************
Checking server [whois.nic.cc]
Final results obtained from whois.www.tv.

Checking server [whois.www.tv]
Results:
security-look.cc

Registrant:
Anchor Group Ltd. (admin@ehttp.cc)

68-70 North End Road West Kensington
London, W14 9EP
UK
+1-775-599-8336

Domain Name: security-look.cc

Admin Contact:
Anchor Group Ltd. (admin@security-look.cc)

68-70 North End Road West Kensington
London, NONE W14 9EP
UK
+1-775-599-8336

Technical Contact:
Anchor Group Ltd. (admin@security-look.cc)

68-70 North End Road West Kensington
London, NONE W14 9EP
UK
+1-775-599-8336

Billing Contact:
Anchor Group Ltd. (admin@ehttp.cc)

68-70 North End Road West Kensington
London, W14 9EP
UK
+1-775-599-8336
********************************************************

Seems that they are running their own whois servers in there too...

*************************************************************

Checking server [whois.crsnic.net]

Checking server [whois.joker.com]
Results:
domain: joker.com
status: lock
owner: Siegfried Langenbach
email: admin@joker.com
address: Rathausufer 16
city: Duesseldorf
state: NRW
postal-code: 40213
country: DE
admin-c: admin@joker.com#1
tech-c: admin@joker.com#1
billing-c: hostmaster@joker.com#0
reseller-1: CSL Computer Service Langenbach GmbH
reseller-2: Duesseldorf, Germany
reseller-3: Visit www.joker.com to get Domains
nserver: ns.nrw.net 194.176.0.14
nserver: ns2.csl-gmbh.net 194.245.101.58
registrar: JORE-1
created: 1994-11-27 00:00:00 UTC NSI
modified: 2004-10-28 09:44:46 UTC JORE-1
expires: 2007-08-03 11:02:10 UTC
source: joker.com

Record created on Apr 28 2004.
Record expires on Apr 28 2005.
Domain servers:
ns1.ideasforhost.com
ns2.ideasforhost.com
******************************************************************
Anybody here live in London?? :D

Next message: tmbgeorge_at_verizon.net: "text disappears on IE 6"

Previous message: Leef: "Short IE 6.0 downloads, does not get the whole file"
Messages sorted by: [ date ] [ thread ]

Relevant Pages

Re: DFS Setup queries
... DC1.MF.COM in London. ... S1.MF.COM in Cambridge FS (file server) ... London, Cambridge, and Edinburgh. ...
(microsoft.public.windows.server.active_directory)
Re: Extend Exchange server to remote offices
... Have users in NY get the same Recipient Policy as the London users, ... you can place the NY Exchange server in a different Routing ... if you're in the same Routing Group and have a SMTP ...
(microsoft.public.exchange.admin)
RE: Separate User Profiles per Locations
... Al alternative is to use a hybrid profile solution like our User Profile ... Microsoft MVP - Terminal Server ... If I have a single global AD domain and I have a TS Server in London and NY, ... can I split configure this so when a user logs onto the TS his ...
(microsoft.public.windows.terminal_services)
Re: How to connect 2 Exchange 2003 servers at different sites?
... One Exchange 2003 Server is located in Sydney and we have just set the ... other one up in London. ... Both sites have 2Mb DSL connection to the Internet. ... DC and Exchange 2003 server, max number of user in London will be 10. ...
(microsoft.public.exchange.setup)