puppy 501 hooking up

Using applications, configuring, problems
Message
Author
800
Posts: 17
Joined: Tue 31 Aug 2010, 17:28

#16 Post by 800 »

Makoto

That's a good question. Sorry about the version error, I'm goofy with numbers, the correct version is 5.1.

I wonder why the test isn't satisfied by the lease obtained from the DNS server?

It's somewhere in the code that executes during boot when it gets to the "let's address the adapter and call out now" portion.

Hopefully whoever WROTE THAT PART will fess up and perhaps even teach us how to stop it from happening.

It does not happen in any of the prior versions that I've tried, it perplexes me why it should happen in this guy.

Personally I prefer to have a copy of Pup that doesn't autoconnect for my trouble-shooting-repair CD for fixing the other OS. Heh.

Thanks for the comeback

800

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#17 Post by Aitch »

800

unlike upnorth, I tracked 174.143.209.250 to this

http://urldogg.com/174.143.209.250

http://www.robtex.com/dns/*.evanhayden.net.html[/url]

Evan Hayden aka Rackerhacker/pleskhacker.com and mysqltuner.pl. dedicated server with one IP, located in San Antonio, TX, United States zip code 78225, and the area code 210.

http://rackerhacker.com/

I also found a url which after translation shows 74.125.53.106 which upnorth had as google.com, in a hijackthis listing....many times

http://putera.forumotion.com/utiliti-da ... -t6862.htm

I suspect you may have a rootkit virus or something equally nasty

Clean your PC before using puppy - use an updated AV program

If you have a windows partition check for [and delete] RtkBtMnt.exe if present

I would also reset your router if I were you, as something seems compromised, and I doubt it's Puppy, unless you have a save file it's picking up

Try booting puppy=pfix ram


HTH

Aitch :)

User avatar
upnorth
Posts: 287
Joined: Mon 11 Jan 2010, 19:32
Location: Wisconsin UTC-6 (-5 DST)
Contact:

http://www.robtex.com/ip/174.143.209.250.html

#18 Post by upnorth »

I love that robtex site 8)

http://www.robtex.com/ip/174.143.209.250.html

I just installed the showip extension a few days ago and it has robtex on the right click popup menu - pretty handy.

Btw, I type just 174.143.209.250 into url box on browser, i get major hayden's manual page which is majorhayden.com.

Here is original link to icanhazip.com with explanation:
http://rackerhacker.com/2009/07/31/get- ... hazip-com/

If I type 74.125.53.106 into url box on browser, the mountainview chocolate factory comes up :wink: .
same for this one:
Pw-in-f106.1e100.net

Here is another pretty good dns info site:
https://dns.l4x.org/74.125.53.106

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#19 Post by Aitch »

upnorth

/aside

showip extension? the firefox one? Jan Dittmer again - clever so and so...also does Chrome extension

http://code.google.com/p/firefox-showip ... eExtension

his name crops up all over the place - does kernel cross compiles....

Wonder if he could do puppy/arm kernel??

Jan, if this shows up anywhere....we're in need of assistance! :wink: :lol:

http://l4x.org/

Aitch :)

nooby
Posts: 10369
Joined: Sun 29 Jun 2008, 19:05
Location: SwedenEurope

#20 Post by nooby »

Wow Aitch you scare the shit out of me. Rootkit?

How does one know. What do you base that fearful conclusion on?
I use Google Search on Puppy Forum
not an ideal solution though

800
Posts: 17
Joined: Tue 31 Aug 2010, 17:28

#21 Post by 800 »

Aitch

rootkit, eh? it's in the .iso then, because I think it also happens with the cd version, which cannot be written to....... I will double check to make sure. The version I have up now is 421 on the same switch and router and it doesn't see any of that activity.

is the .iso hacked?

thanks,

800

User avatar
Aitch
Posts: 6518
Joined: Wed 04 Apr 2007, 15:57
Location: Chatham, Kent, UK

#22 Post by Aitch »

800
it's in the .iso then,
On reflection of the exchanges with Upnorth, and his first post, and subsequent links,
The second one is harmless and a part of the network utility ipinfo

line 21 of ipinfo:
var0="`wget -O - -q icanhazip.com`"
....it may be that you are correct, and it MAY have been been added to the network utility in Puppy itself
I do not know for sure, as I haven't got copies of a version that has it
We both traced the IP address to the same source, but drawn different conclusions as to why
My feeling that it may have been a rootkit, was because of your Router settings comments - I trust you've done antivirals on the PC?
As to a solution?, maybe a post in that Puppy version's bug thread, and see what Barry/other Devs have to say about Upnorth's finding?

Sorry, for the anxiety [ I tend to err on caution looming on overkill, at times :wink: ]
Nooby, you should know me by now, sorry :lol:

Aitch :)
Last edited by Aitch on Mon 13 Sep 2010, 10:43, edited 1 time in total.

Post Reply