🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.freeware
Article #480

Re: Ulterior motive in 1-4a Rename's web site?

#480
From: Phred
Date: Thu, 11 Mar 2004 15:33
53 lines
3224 bytes
G'day mate,

I'm forwarding your response to aus.computers as I see you've trimmed 
newsgroups to a.c.f and there were a couple of blokes elsewhere who 
took an interest in this topic.  They might be interested in your 
comments too.

Thanks very much for your input.

In article <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net>, 
Art Iculos Libres <articulos@loslibres.com> wrote:
>On Wed, 10 Mar 2004 15:02:30 GMT, Phred wrote:
>> 
>> A recent article in alt.msdos.batch recommended the freeware program 
>> 1-4a Rename for major file renaming projects.  So I went to the URL
>> <http://www.1-4a.com/rename/> to have a squiz at the thing.
>> 
>> For some reason, when I first went there, and subsequently when I went 
>> "back", I got a warning message (presumably from Norton Internet 
>> Security Firewall) that "Microsoft Internet Explorer is attempting to 
>> access the Internet" (or something pretty close to that phrasing).
>> 
>> Now this was pretty obvious, as that's what I sent it off to do. :-)
>> 
>> However, I *don't* get this message when I browse any other sites.
>> In fact, until tonight, I hadn't seen that message since I set up the 
>> firewall 12 months ago.
>> 
>> So what's so bloody different about http://www.1-4a.com/rename/ ?
>> 
>> Is it some sort of scam?  (Just paranoid of course. ;-)
><snip>
>
>The only two things I see about this website:
>
>1) Using DNSKong and monitoring the AutoFilter window, I see
>    that it sends the browser off to "webcounter.goweb.de",
>   presumably a third-party page counter service; this can be confirmed by
>   looking at the webpage source which has an "href" to webcounter.goweb.de
>   and places the typical 1x1 pixel "image" on the page to do the "load"
>   counting.
>2) The page attempts to load an ActiveX object, but since I have MS IE set
>     to prompt on ActiveX, I declined the prompt to allow loading. The
>     ActiveX control appears to be a Flash animation.
>
>I added "goweb" to my DNSKong "named.txt" file and the page loads fine
>without it or the Flash animation. Not sure if any of this is related to
>your situation, but this is all I can provide after a cursory look.

Cheers, Phred.

-- 
ppnerkDELETE@THISyahoo.com.INVALID
Technical Details
Message-ID: <c2q0n3$1vqgeb$1@ID-151056.news.uni-berlin.de>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cpe-203-51-221-55.qld.bigpond.net.AU!not-for-mail
References: <c2nagp$1vi33l$1@ID-151056.news.uni-berlin.de> <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 108c83,65fbc44ff9ccee07
X-Google-Attributes: gid108c83,public
X-Google-Thread: 112049,65fbc44ff9ccee07
X-Google-Attributes: gid112049,public
X-Google-ArrivalTime: 2004-03-11 07:30:45 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cpe-203-51-221-55.qld.bigpond.net.AU!not-for-mail
From: ppnerkDELETETHIS@yahoo.com (Phred)
Newsgroups: alt.comp.freeware,aus.computers
Subject: Re: Ulterior motive in 1-4a Rename's web site?
Date: Thu, 11 Mar 2004 15:33:38 GMT
Organization: Just me
Lines: 54
Message-ID: <c2q0n3$1vqgeb$1@ID-151056.news.uni-berlin.de>
References: <c2nagp$1vi33l$1@ID-151056.news.uni-berlin.de> <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net>
NNTP-Posting-Host: cpe-203-51-221-55.qld.bigpond.net.au (203.51.221.55)
X-Trace: news.uni-berlin.de 1079019044 66929099 I 203.51.221.55 ([151056])
X-Orig-Path: Telstra
X-Newsreader: News Xpress 2.01