Hi everyone, i couldn't find the introduction forums.
So, Hi everyone.
Does anyone knows what in the world is:
pokerface. ibiza. bishopston. net ?
LimeWire tries to make a connection to that site on port 3559.
When I ping it resolves to 127.0.0.1 aka localhost, but in the browser, bring me a "NT Logon Security", yahoo and google only displays links coming from the "url" mentioned, I want to know, why LimeWire tries to make a connection (on load time) to a site which behaves so estrange, and had a estrange "pokerface" name (like HackmanGT
![Redface (embarrassed)](images/smilies/redface.gif)
) ?
I would appreciate very much any reference, information, comments, links, laughs, insults, everything will be very appreciated.
Thanks in advance,
HackmanGT
Background :
I had tested on the same PC: AVG Antivirus Free, NOD32 Trial, Avast! Personal, AntiVir Free, Norton Antivirus 2006. Lavasoft AdAware, SpyBot Resident (Updated all). Posted HijackThis logs to 4 forums (never had an answer, from TechGuy, Wildersecurity, others). Executed Trend Micro House Call 6. Microsoft Malware Removal Tool. Updated from Microsoft. Sun SDK Application Server JRE 1.6. I dump with tcpdump & analized manually. Downloaded Limewire Java source, compiled on NetBeans 5.5, and debugged (step) the most critical Gnutella protocol ***
found nothing ***.
I tested ZoneAlarm and Norton AV 2005 Firewall. None of the above throws me any alert, even when I'm 100% ZoneA is working very good. I don't care too much about Norton.
I even "Remote Trace Route" to that site from Greece, Poland and USA.
Eight servers resolves to the same 127.0.0.1
It even doesn't have whois arin (who is registered database).
I'm a Microsoft user since DOS 3.1. And recently a Linux SUN Caldera 1.2, Linux Devian 2.2, from a few years. Software Designer and ...
Intranet Administrator, Web Site Administrator.