Article View: alt.comp.freeware
Article #480Re: Ulterior motive in 1-4a Rename's web site?
From: Phred
Date: Thu, 11 Mar 2004 15:33
Date: Thu, 11 Mar 2004 15:33
53 lines
3224 bytes
3224 bytes
G'day mate, I'm forwarding your response to aus.computers as I see you've trimmed newsgroups to a.c.f and there were a couple of blokes elsewhere who took an interest in this topic. They might be interested in your comments too. Thanks very much for your input. In article <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net>, Art Iculos Libres <articulos@loslibres.com> wrote: >On Wed, 10 Mar 2004 15:02:30 GMT, Phred wrote: >> >> A recent article in alt.msdos.batch recommended the freeware program >> 1-4a Rename for major file renaming projects. So I went to the URL >> <http://www.1-4a.com/rename/> to have a squiz at the thing. >> >> For some reason, when I first went there, and subsequently when I went >> "back", I got a warning message (presumably from Norton Internet >> Security Firewall) that "Microsoft Internet Explorer is attempting to >> access the Internet" (or something pretty close to that phrasing). >> >> Now this was pretty obvious, as that's what I sent it off to do. :-) >> >> However, I *don't* get this message when I browse any other sites. >> In fact, until tonight, I hadn't seen that message since I set up the >> firewall 12 months ago. >> >> So what's so bloody different about http://www.1-4a.com/rename/ ? >> >> Is it some sort of scam? (Just paranoid of course. ;-) ><snip> > >The only two things I see about this website: > >1) Using DNSKong and monitoring the AutoFilter window, I see > that it sends the browser off to "webcounter.goweb.de", > presumably a third-party page counter service; this can be confirmed by > looking at the webpage source which has an "href" to webcounter.goweb.de > and places the typical 1x1 pixel "image" on the page to do the "load" > counting. >2) The page attempts to load an ActiveX object, but since I have MS IE set > to prompt on ActiveX, I declined the prompt to allow loading. The > ActiveX control appears to be a Flash animation. > >I added "goweb" to my DNSKong "named.txt" file and the page loads fine >without it or the Flash animation. Not sure if any of this is related to >your situation, but this is all I can provide after a cursory look. Cheers, Phred. -- ppnerkDELETE@THISyahoo.com.INVALID
Technical Details
Message-ID:
<c2q0n3$1vqgeb$1@ID-151056.news.uni-berlin.de>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cpe-203-51-221-55.qld.bigpond.net.AU!not-for-mailReferences:
<c2nagp$1vi33l$1@ID-151056.news.uni-berlin.de> <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 108c83,65fbc44ff9ccee07 X-Google-Attributes: gid108c83,public X-Google-Thread: 112049,65fbc44ff9ccee07 X-Google-Attributes: gid112049,public X-Google-ArrivalTime: 2004-03-11 07:30:45 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cpe-203-51-221-55.qld.bigpond.net.AU!not-for-mail From: ppnerkDELETETHIS@yahoo.com (Phred) Newsgroups: alt.comp.freeware,aus.computers Subject: Re: Ulterior motive in 1-4a Rename's web site? Date: Thu, 11 Mar 2004 15:33:38 GMT Organization: Just me Lines: 54 Message-ID: <c2q0n3$1vqgeb$1@ID-151056.news.uni-berlin.de> References: <c2nagp$1vi33l$1@ID-151056.news.uni-berlin.de> <11bspwxzxxi7s$.8fxwhzn6ts7n.dlg@40tude.net> NNTP-Posting-Host: cpe-203-51-221-55.qld.bigpond.net.au (203.51.221.55) X-Trace: news.uni-berlin.de 1079019044 66929099 I 203.51.221.55 ([151056]) X-Orig-Path: Telstra X-Newsreader: News Xpress 2.01