Strange error message

Tarekaz · 02-16-2006, 01:44 PM

its me again

well while browsing on the net , i got an EMPTY error message with only an OK button , and when i clicked on it , i was linked to this page ,
http://127.0.0.1:4664/&s=vzNox-tRWuuIkZOS7suzqPDIyMk

anyidea?

Cheers!!

Tinkster · 02-16-2006, 01:57 PM

Pointless to post that link, it's pointing at your loop-back
interface and no one else will be able to see that ;}

Cheers,
Tink

Tarekaz · 02-16-2006, 02:00 PM

yeah but what does it mean?

Robhogg · 02-16-2006, 02:02 PM

I wonder whether a script on the site could be trying to do something dodgy. IP address 127.0.0.1 is localhost (i.e. your own PC), while port 4664 appears to be used by Google Desktop Search (see this page from O'Reilly). Not sure what the string at the end of the URL signifies, but could it be an attempted exploit for systems with GDS running? I tried checking for such exploits with Google, but the first few pages returned, at least, no longer had the info on them.

Yours (paranoidly)
Rob

Tarekaz · 02-16-2006, 02:09 PM

YES, exactly Robhogg ,
this is what i fear , that my system is being hacked using a datapipe and google desktop search , so he would search my pc , so that it is listening on TCP port 1180 and forwarding requests to 127.0.0.1 on port 4664

What do you think?

Robhogg · 02-16-2006, 02:21 PM

I'm no expert on this, but I have now found something more specific that suggests that such an exploit is possible (see page 4).

Do you have GDS running?

Rob

Tarekaz · 02-16-2006, 02:28 PM

thanks for the link its a good reading,

i have gds installed but not running , i suppose that that's why i got the error message , otherwise the search would have been completly silent...
but what is weird about all that , is that port 4664 IS closed!!