The time now is Sun 19 May 2013, 01:51
All times are UTC - 4 |
|
Page 2 of 2 [22 Posts] |
Goto page: Previous 1, 2 |
| Author |
Message |
800
Joined: 31 Aug 2010 Posts: 17
|
Posted: Thu 09 Sep 2010, 16:03 Post subject:
|
|
Makoto
That's a good question. Sorry about the version error, I'm goofy with numbers, the correct version is 5.1.
I wonder why the test isn't satisfied by the lease obtained from the DNS server?
It's somewhere in the code that executes during boot when it gets to the "let's address the adapter and call out now" portion.
Hopefully whoever WROTE THAT PART will fess up and perhaps even teach us how to stop it from happening.
It does not happen in any of the prior versions that I've tried, it perplexes me why it should happen in this guy.
Personally I prefer to have a copy of Pup that doesn't autoconnect for my trouble-shooting-repair CD for fixing the other OS. Heh.
Thanks for the comeback
800
|
|
Back to top
|
|
 |
Aitch

Joined: 04 Apr 2007 Posts: 6825 Location: Chatham, Kent, UK
|
Posted: Thu 09 Sep 2010, 19:47 Post subject:
|
|
800
unlike upnorth, I tracked 174.143.209.250 to this
http://urldogg.com/174.143.209.250
http://www.robtex.com/dns/*.evanhayden.net.html[/url]
Evan Hayden aka Rackerhacker/pleskhacker.com and mysqltuner.pl. dedicated server with one IP, located in San Antonio, TX, United States zip code 78225, and the area code 210.
http://rackerhacker.com/
I also found a url which after translation shows 74.125.53.106 which upnorth had as google.com, in a hijackthis listing....many times
http://putera.forumotion.com/utiliti-dan-sekuriti-f55/tlg-cek-hijackthis-t6862.htm
I suspect you may have a rootkit virus or something equally nasty
Clean your PC before using puppy - use an updated AV program
If you have a windows partition check for [and delete] RtkBtMnt.exe if present
I would also reset your router if I were you, as something seems compromised, and I doubt it's Puppy, unless you have a save file it's picking up
Try booting puppy=pfix ram
HTH
Aitch
|
|
Back to top
|
|
 |
upnorth

Joined: 11 Jan 2010 Posts: 262 Location: Wisconsin UTC-6 (-5 DST)
|
Posted: Fri 10 Sep 2010, 12:26 Post subject:
http://www.robtex.com/ip/174.143.209.250.html Subject description: icanhazip.com |
|
I love that robtex site
http://www.robtex.com/ip/174.143.209.250.html
I just installed the showip extension a few days ago and it has robtex on the right click popup menu - pretty handy.
Btw, I type just 174.143.209.250 into url box on browser, i get major hayden's manual page which is majorhayden.com.
Here is original link to icanhazip.com with explanation:
http://rackerhacker.com/2009/07/31/get-the-public-facing-ip-for-any-server-with-icanhazip-com/
If I type 74.125.53.106 into url box on browser, the mountainview chocolate factory comes up .
same for this one:
Pw-in-f106.1e100.net
Here is another pretty good dns info site:
https://dns.l4x.org/74.125.53.106
|
|
Back to top
|
|
 |
Aitch

Joined: 04 Apr 2007 Posts: 6825 Location: Chatham, Kent, UK
|
Posted: Fri 10 Sep 2010, 14:04 Post subject:
|
|
upnorth
/aside
showip extension? the firefox one? Jan Dittmer again - clever so and so...also does Chrome extension
http://code.google.com/p/firefox-showip/wiki/ChromeExtension
his name crops up all over the place - does kernel cross compiles....
Wonder if he could do puppy/arm kernel??
Jan, if this shows up anywhere....we're in need of assistance!
http://l4x.org/
Aitch
|
|
Back to top
|
|
 |
nooby
Joined: 29 Jun 2008 Posts: 9383 Location: SwedenEurope
|
Posted: Fri 10 Sep 2010, 15:02 Post subject:
|
|
Wow Aitch you scare the shit out of me. Rootkit?
How does one know. What do you base that fearful conclusion on?
_________________
I'm a noob so I use Google Search of Puppy Forum
|
|
Back to top
|
|
 |
800
Joined: 31 Aug 2010 Posts: 17
|
Posted: Sun 12 Sep 2010, 22:24 Post subject:
|
|
Aitch
rootkit, eh? it's in the .iso then, because I think it also happens with the cd version, which cannot be written to....... I will double check to make sure. The version I have up now is 421 on the same switch and router and it doesn't see any of that activity.
is the .iso hacked?
thanks,
800
|
|
Back to top
|
|
 |
Aitch

Joined: 04 Apr 2007 Posts: 6825 Location: Chatham, Kent, UK
|
Posted: Mon 13 Sep 2010, 06:31 Post subject:
|
|
800
| Quote: | | it's in the .iso then, |
On reflection of the exchanges with Upnorth, and his first post, and subsequent links,
| Quote: | The second one is harmless and a part of the network utility ipinfo
line 21 of ipinfo:
var0="`wget -O - -q icanhazip.com`" |
....it may be that you are correct, and it MAY have been been added to the network utility in Puppy itself
I do not know for sure, as I haven't got copies of a version that has it
We both traced the IP address to the same source, but drawn different conclusions as to why
My feeling that it may have been a rootkit, was because of your Router settings comments - I trust you've done antivirals on the PC?
As to a solution?, maybe a post in that Puppy version's bug thread, and see what Barry/other Devs have to say about Upnorth's finding?
Sorry, for the anxiety [ I tend to err on caution looming on overkill, at times ]
Nooby, you should know me by now, sorry
Aitch
Last edited by Aitch on Mon 13 Sep 2010, 06:43; edited 1 time in total
|
|
Back to top
|
|
 |
|
|
Page 2 of 2 [22 Posts] |
Goto page: Previous 1, 2 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|