Check this out for your WPAD.DAT file.
http://www.volera.com/Support/KnowledgeBase/00012_Customizing_Web_Proxy_Auto.html

and this for the NSPLAYER Agent
They are connected
--- Steve Topilnycky <steve_topilnyckyCOMPUSERVE.COM>
wrote:
> Hi
> I have just opened my web server to the net, and in
> reviewing the first day it
> was live, I have the following entries, starting at
> 15:51:01 to on until
> 17:54:23. If I understand the log correctly, it
> appears that something was
> attempting to do a GET request for wpad.dat. Since
> no such file exists on my
> server with that name, obviously it was not found.
> Is this some sort of
> attack, or test.. I'm running NT 4 SP6a, and the
> latest hot fixes.
>
> Also has anyone heard of a user agent using the name
> of NSPlayer/4.1.0.3925 -
>
> Any thoughts..
>
>
>
> #Fields: date time c-ip cs-username s-sitename
> s-computername s-ip cs-method
> cs-uri-stem cs-uri-query sc-status sc-win32-status
> sc-bytes cs-bytes
> time-taken s-port cs-version cs(User-Agent)
> cs(Cookie) cs(Referer)
>
> 2001-09-06 15:51:01 192.168.1.1 - W3SVC1 VIPER
> 192.168.1.7 GET /wpad.dat - 404
> 2 623 120 80 80 HTTP/1.1 NSPlayer/4.1.0.3925 - -
> --
> Regards,
>
> Steve Topilnycky
>
>
_____________________________________________________________________
> ** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE
> win2ksecadvice"
> ** FOR A WEEKLY DIGEST, send the command "SET
> win2ksecadvice DIGEST"
> SEND ALL COMMANDS TO:
> listservlistserv.ntsecurity.net
>
>

__________________________________________________
Do You Yahoo!?
Get email alerts & NEW webcam video instant messaging with Yahoo! Messenger
http://im.yahoo.com

_____________________________________________________________________
** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE win2ksecadvice"
** FOR A WEEKLY DIGEST, send the command "SET win2ksecadvice DIGEST"
SEND ALL COMMANDS TO: listservlistserv.ntsecurity.net

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]