vnocspace.net accessing my computer?

Occasionally I see a pop up on my task bar that indicates by AVG Free is scanning for something called host1.vnospace.net . I don't recall ever being at that site. I did visit it today and it is a domain hosting site - appears to be simply selling web hosting services. Could that website or someone who has a domain hosted at that site be trying to access or be accessing my computer. If so, how do I go about blocking it. I have two computers connected through a Belkin hard wired router and have the XP firewall enabled.

 

Hi Robert,

Do you have WF's logging enabled? This will show you the IP adresses connecting to your system.

Control Panel > Security Center > WF's Advanced tab, under Security Logging > Settings and check one or both Log Dropped and Log Successful and Save as \WINDOWS\pfirewall.log, opens with Notepad.

You could use the Hosts file to block the Domain:

\windows\system32\drivers\etc\hosts and add a line with Domain name.

127.0.0.1 + Domain name

Regards - Charles

 

Thanks for the response Charles.

I used Whois to see what info I could get on vnospace.net and it came back with an address of 8.7.57.109 and made a reference to Go Daddy Software. I checked the WF log and found the following entry among a couple of pages :

2005-07-08 13:27:09 OPEN Personal IP Address Deleted by Virginai 8.7.57.109 4929 80 - - - - - - .

I think the first part of the number is my ISP assigned address. I tried the blocking suggestion but I was using Windows Explorer - is your suggestion done in DOS? If so, how do I go about doing that - and should I insert the domain name or the IP address number. Thanks again.

Note - I edited my post to delete my IP assigned address - Virginia

 

Hi Robert,

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost


That's what your default Hosts file should look like now. Add that new line under the current single entry and use the Domain name and see if that works.

So it should look like this:
127.0.0.1 localhost
127.0.0.1 vnospace.net

The Hosts file for XP is in C:\windows\system32\drivers\etc\hosts and opens with Notepad.

Regards - Charles

 

Charles,

Got it done. Will check out my FW tomorrow to see if there have been any more attempts - but I suppose if the Etc Folder entry works I won't even see any attempts. Perhaps those will show up in the log of Dropped Packets. In any event, thanks. I will post again in a couple of days to give you an update.

 

Charles,

It appears that the entry in "Hosts" file did the trick. Haven't seen any more of this popup message

Will keep an eye out to see if all is working OK. Thanks.

 

Hi Robert,

Great and thanks for the followup.

Regards - Charles