View Single Post
Old 07-03-02, 02:49 AM   #10
multi
Thanks for being with arse
 
multi's Avatar
 
Join Date: Jan 2002
Location: The other side of the world
Posts: 10,343
Default thx now i remember

yeah its much different
i think i read there was problems with the microsoft one and it suggested it was a good idea not to use it
but this one look like a good tool(thx Napho)
so back to the edonkey thing
i have now noticed that 2 or 3 popup windows every time edonkey starts(i think there used to be only 1) so im speculating that winsock change may have to do with that, bit like cydoor or something and may be have to put winsock back to origial state to get rid of it
(if this is a new way of inserting spy ware on to ppl's machines without being able to adaware it out(scary) a winsock backup and change detecting utility will be much needed!)

hope im not letting paranoia cloud my judgement here
but it seems these assheads will stop at nothing to infiltrate ppls machines with advert serving/detail collecting junk!

this is little more info i have found
i think the 3 inbound entries refer to the popups i mentioned
and this is the whois about 1 of them(all the outbound entries before these three were made by edonkey):
IANA (IANA-CBLK-RESERVED)
Internet Assigned Numbers Authority
4676 Admiralty Way, Suite 330
Marina del Rey, CA 90292-6695
US
Netname: IANA-CBLK1
Netblock: 192.168.0.0 - 192.168.255.255
Coordinator:
Internet Corporation for Assigned Names and Numbers (IANA-ARIN) res-ip@iana.org
(310) 823-9358
Domain System inverse mapping provided by:
BLACKHOLE-1.IANA.ORG192.0.32.18
BLACKHOLE-2.IANA.ORG192.0.32.19
These blocks are reserved for special purposes.
Please see RFC 1918 for additional information.
Record last updated on 12-Oct-2001.
Database last updated on 6-Mar-2002 19:57:26 EDT.
The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.
Done
(the 192.168.*.*ip's are our local network(3 boxes) 192.168.0.1 is the box with the modem,192.168.0.255 i think is the broadcast ip&192.168.0.9 is my box)
ok im all a bit fuzzy on this but maybe some one can peice it together-and tell me if im off track
edit-http://www.onresponse.com/banners/
was the pop up but only one this time
__________________

i beat the internet
- the end boss is hard

Last edited by multi : 07-03-02 at 04:30 AM.
multi is offline   Reply With Quote