IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New Re: Got it...didn't help...and its getting worse....
You don't understand - you don't have to be infected with ANYTHING. Your machine is scanned and found to be vulnerable. A rogue file is downloaded to your machine - really a tftp server riding on the back of a legitimate Windows file. This happens WITHOUT any beastie being on your machine prior to the scan. Every time you connect to the net you'll be rescanned. Until you fix the root problem you'll never be able to get back on the net.

Did you install service pack 1a? Not 1, 1a. You can't install it over the net, you have to DOWNLOAD the entire thing and install it locally with the net cable unplugged.

(Can you imagine the numbers of machines with the same problem and their owners completely unaware? The net is a cesspool, and Windows is a scandal.)

-drl
New Service Pack 1a for what?
W2K? No, I only installed W2K, then immediately W2K-SP2 (which, as I said, is the end of the line for Windows, as far as I am concerned.)

What is SP1a?

Now, as far as the beastie is concerned, what you're talking about, if I read you correctly, is a Trojan. AVG is supposed to identify trojans of this sort. If I am being pinged by someone trying to activate it, I would expect that 1) the firewall would bitch about the incoming ping, and 2) that the trojan infected file would be rooted out by AVG or somebody like that (McAfee might just miss it if it were relatively new).

There is a third possibility, of course. That being that Real replaced a Windows DLL with one of its own, and the uninstaller for it "conveniently" declined to replace it when I uninstalled it. Of course, Micros~1 swears up and down that that can't happen in Win2K, but I don't believe it for a minute. So, does anybody have details about Real...I seem to recal some kind of brouhaha over Real's "phoning home" some time back....

thanx-
jb4
shrub\ufffdbish (Am., from shrub + rubbish, after the derisive name for America's 43 president; 2003) n. 1. a form of nonsensical political doubletalk wherein the speaker attempts to defend the indefensible by lying, obfuscation, or otherwise misstating the facts; GIBBERISH. 2. any of a collection of utterances from America's putative 43rd president. cf. BULLSHIT

New Sorry, thought you were on XP
Install Service Pack 4. D/L the entire thing and install locally.

It sounds like you've got the RPC server exploit, see here:

[link|http://z.iwethey.org/forums/render/content/show?contentid=127320|http://z.iwethey.org...?contentid=127320]

You need at least SP3. Installing 4 will fix it.
-drl
New The trouble w/ SP>2 is
That Micros~1 added the "Phone Home" virusfeature to W2K at that point. While I'd like very much to be rid of that problem, I don't want BillG(e) mucking around in my machine...not sure which is better.

Now if there were a way to disable the "Phone Home" virusfeature....
jb4
shrub\ufffdbish (Am., from shrub + rubbish, after the derisive name for America's 43 president; 2003) n. 1. a form of nonsensical political doubletalk wherein the speaker attempts to defend the indefensible by lying, obfuscation, or otherwise misstating the facts; GIBBERISH. 2. any of a collection of utterances from America's putative 43rd president. cf. BULLSHIT

New Re: The trouble w/ SP>2 is
Well you're not going to fix it any other way.

There is no 'phone home' feature in W2K. That's hooey.
-drl
New He's talking about an implementation in the license
more than in actual software.
--\n-------------------------------------------------------------------\n* Jack Troughton                            jake at consultron.ca *\n* [link|http://consultron.ca|http://consultron.ca]                   [link|irc://irc.ecomstation.ca|irc://irc.ecomstation.ca] *\n* Kingston Ontario Canada               [link|news://news.consultron.ca|news://news.consultron.ca] *\n-------------------------------------------------------------------
New Re: Service Pack 1a for what?
[link|http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx|http://www.microsoft.../sp1/default.mspx]

Just in case anyone was wondering.

Install this, then SP2.


Peter
[link|http://www.debian.org|Shill For Hire]
[link|http://www.kuro5hin.org|There is no K5 Cabal]
[link|http://guildenstern.dyndns.org|Blog]
New SP4 on W2K
-drl
     Any ideas as to WTF is going on? - (jb4) - (53)
         Re: Any ideas as to WTF is going on? - (altmann) - (16)
             Thanx...BTW I'm running W2Ksp2 - (jb4) - (14)
                 I've got tons of systems on SP4 with no home-phoning. - (Silverlock) - (13)
                     OK, Now I'm confused... - (jb4) - (12)
                         Sigh. - (pwhysall) - (11)
                             What he said. - (Silverlock)
                             Unroll yer eyes, and use them to read! - (jb4) - (9)
                                 Wow, approaching Conrattitude! -NT - (deSitter) - (1)
                                     Conrattitude! /me likes! ;-) -NT - (jb4)
                                 Ooh, snippy. - (pwhysall)
                                 Oh, and I did. - (pwhysall) - (5)
                                     Yerah, but read for *contex*t, and you'll hafta admit... - (CRConrad) - (4)
                                         I know, I know... - (pwhysall) - (3)
                                             How the **** could I? Effing bastidge. -NT - (CRConrad) - (2)
                                                 buy ticket, fly over, drink beer, fly home, nurse hangover. -NT - (Steve Lowe) - (1)
                                                     Nurse Hangover? sounds like a chr from MASH -NT - (deSitter)
             Yep exactly - he's RPC exploited seems like -NT - (deSitter)
         Antivirus installed? - (pwhysall) - (23)
             Tried Avast? Very nice, very free - (deSitter) - (1)
                 Not tried, AVG is adequate. And free. -NT - (pwhysall)
             Yes...McAfee - (jb4) - (20)
                 AVG seems to be more... - (folkert) - (19)
                     What's the oldest Win 9X AVG will run on? - (lincoln) - (18)
                         Avast www.avast.com - (deSitter) - (2)
                             Arrr -NT - (altmann) - (1)
                                 scurrrrvay knave :) -NT - (deSitter)
                         Take a look here... - (folkert) - (14)
                             Thanks for finding the info! - (lincoln) - (1)
                                 No probs. -NT - (folkert)
                             Got it...didn't help...and its getting worse.... - (jb4) - (11)
                                 Re: what cpd.exe is? - (a6l6e6x) - (2)
                                     Caveat - (drewk)
                                     Thanks. - (jb4)
                                 Re: Got it...didn't help...and its getting worse.... - (deSitter) - (7)
                                     Service Pack 1a for what? - (jb4) - (6)
                                         Sorry, thought you were on XP - (deSitter) - (3)
                                             The trouble w/ SP>2 is - (jb4) - (2)
                                                 Re: The trouble w/ SP>2 is - (deSitter) - (1)
                                                     He's talking about an implementation in the license - (jake123)
                                         Re: Service Pack 1a for what? - (pwhysall) - (1)
                                             SP4 on W2K -NT - (deSitter)
         I found something you might want to do. - (folkert) - (11)
             Oooohh! Nice! - (jb4)
             Done! - (jb4) - (9)
                 How'd it do for you? - (folkert) - (8)
                     Well.... - (jb4) - (7)
                         !!! - (deSitter) - (6)
                             Not if it means that I have to go beyond W2K SP2!!! - (jb4) - (5)
                                 Yes, you are. - (inthane-chan) - (4)
                                     Dude...I'm on DIALUP! - (jb4) - (3)
                                         I used my D-Link DI-704P on dialup before I got cable... - (Another Scott) - (2)
                                             Yep... - (folkert)
                                             What he said. What I said. -NT - (deSitter)

Anality R'US.
95 ms