Re: Need Advice on Spyware Removal for Debian

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Kevin
Date:  
To: plug-discuss
Subject: Re: Need Advice on Spyware Removal for Debian
On Mon, 2004-11-29 at 13:03, Mark Phillips wrote:
> I am getting a strange redirect page when I
> surf the net with Cox.


Maybe DNS trickery. Please cat your /etc/resolv.conf and /etc/hosts for
us. Also, check a couple of the problematic domain names with dig or
nslookup. Then, take the IP addresses they resolve to and look them up
with whois. This will tell you if the name resolution mechanism is
compromised, outside of the browser.

mullet@flattop$ dig +short cox.net
68.1.17.9

mullet@flattop$ whois 68.1.17.9
Cox Communications Inc. COX-ATLANTA (NET-68-0-0-0-1)
68.0.0.0 - 68.15.255.255
Cox Communications Inc. NETBLK-ATRDC-68-1-0-0 (NET-68-1-0-0-1)
68.1.0.0 - 68.1.127.255




---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss