Fidonet echomail

Tillbaka till svenska Fidonet
English Information Debug

OS2BBS 0/787
OS2DOSBBS 0/580
OS2HW 0/42
OS2INET 0/37
OS2LAN 0/134
OS2PROG 0/36
OS2REXX 0/113
OS2USER-L 207
OS2 0/4786
OSDEBATE 3605/18996
PASCAL 0/490
PERL 0/457
PHP 0/45
POINTS 0/405
POLITICS 0/29554
POL_INC 0/14731
PSION 103
R20_ADMIN 1121
R20_AMATORRADIO 0/2
R20_BEST_OF_FIDONET 13
R20_CHAT 0/893
R20_DEPP 0/3
R20_DEV 399
R20_ECHO2 1379
R20_ECHOPRES 0/35
R20_ESTAT 0/719
R20_FIDONETPROG...
...RAM.MYPOINT 0/2
R20_FIDONETPROGRAM 0/22
R20_FIDONET 0/248
R20_FILEFIND 0/24
R20_FILEFOUND 0/22
R20_HIFI 0/3
R20_INFO2 3205
R20_INTERNET 0/12940
R20_INTRESSE 0/60
R20_INTR_KOM 0/99
R20_KANDIDAT.CHAT 42
R20_KANDIDAT 28
R20_KOM_DEV 112
R20_KONTROLL 0/13258
R20_KORSET 0/18
R20_LOKALTRAFIK 0/24
R20_MODERATOR 0/1852
R20_NC 76
R20_NET200 245
R20_NETWORK.OTH...
...ERNETS 0/13
R20_OPERATIVSYS...
...TEM.LINUX 0/44
R20_PROGRAMVAROR 0/1
R20_REC2NEC 534
R20_SFOSM 0/340
R20_SF 0/108
R20_SPRAK.ENGLISH 0/1
R20_SQUISH 107
R20_TEST 2
R20_WORST_OF_FIDONET 12
RAR 0/9
RA_MULTI 106
RA_UTIL 0/162
REGCON.EUR 0/2056
REGCON 0/13
SCIENCE 0/1206
SF 0/239
SHAREWARE_SUPPORT 0/5146
SHAREWRE 0/14
SIMPSONS 0/169
STATS_OLD1 0/2539.065
STATS_OLD2 0/2530
STATS_OLD3 0/2395.095
STATS_OLD4 0/1692.25
SURVIVOR 0/495
SYSOPS_CORNER 0/3
SYSOP 0/84
TAGLINES 0/112
TEAMOS2 0/4530
TECH 0/2617
TEST.444 0/105
TRAPDOOR 0/19
TREK 0/755
TUB 0/290
UFO 0/40
UNIX 0/1316
USA_EURLINK 0/102
USR_MODEMS 0/1
VATICAN 0/2740
VIETNAM_VETS 0/14
VIRUS 0/378
VIRUS_INFO 0/201
VISUAL_BASIC 0/473
WHITEHOUSE 0/5187
WIN2000 0/101
WIN32 0/30
WIN95 0/4288
WIN95_OLD1 0/70272
WINDOWS 0/1517
WWB_SYSOP 0/419
WWB_TECH 0/810
ZCC-PUBLIC 0/1
ZEC 4

4DOS 0/134
ABORTION 0/7
ALASKA_CHAT 0/506
ALLFIX_FILE 0/1313
ALLFIX_FILE_OLD1 0/7997
ALT_DOS 0/152
AMATEUR_RADIO 0/1039
AMIGASALE 0/14
AMIGA 0/331
AMIGA_INT 0/1
AMIGA_PROG 0/20
AMIGA_SYSOP 0/26
ANIME 0/15
ARGUS 0/924
ASCII_ART 0/340
ASIAN_LINK 0/651
ASTRONOMY 0/417
AUDIO 0/92
AUTOMOBILE_RACING 0/105
BABYLON5 0/17862
BAG 135
BATPOWER 0/361
BBBS.ENGLISH 0/382
BBSLAW 0/109
BBS_ADS 0/5290
BBS_INTERNET 0/507
BIBLE 0/3563
BINKD 0/1119
BINKLEY 0/215
BLUEWAVE 0/2173
CABLE_MODEMS 0/25
CBM 0/46
CDRECORD 0/66
CDROM 0/20
CLASSIC_COMPUTER 0/378
COMICS 0/15
CONSPRCY 0/899
COOKING 32677
COOKING_OLD1 0/24719
COOKING_OLD2 0/40862
COOKING_OLD3 0/37489
COOKING_OLD4 0/35496
COOKING_OLD5 9370
C_ECHO 0/189
C_PLUSPLUS 0/31
DIRTY_DOZEN 0/201
DOORGAMES 0/2053
DOS_INTERNET 0/196
duplikat 6002
ECHOLIST 0/18295
EC_SUPPORT 0/318
ELECTRONICS 0/359
ELEKTRONIK.GER 1534
ENET.LINGUISTIC 0/13
ENET.POLITICS 0/4
ENET.SOFT 0/11701
ENET.SYSOP 33888
ENET.TALKS 0/32
ENGLISH_TUTOR 0/2000
EVOLUTION 0/1335
FDECHO 0/217
FDN_ANNOUNCE 0/7068
FIDONEWS 24094
FIDONEWS_OLD1 0/49742
FIDONEWS_OLD2 0/35949
FIDONEWS_OLD3 0/30874
FIDONEWS_OLD4 0/37224
FIDO_SYSOP 12852
FIDO_UTIL 0/180
FILEFIND 0/209
FILEGATE 0/212
FILM 0/18
FNEWS_PUBLISH 4393
FN_SYSOP 41678
FN_SYSOP_OLD1 71952
FTP_FIDO 0/2
FTSC_PUBLIC 0/13598
FUNNY 0/4886
GENEALOGY.EUR 0/71
GET_INFO 105
GOLDED 0/408
HAM 0/16069
HOLYSMOKE 0/6791
HOT_SITES 0/1
HTMLEDIT 0/71
HUB203 466
HUB_100 264
HUB_400 39
HUMOR 0/29
IC 0/2851
INTERNET 0/424
INTERUSER 0/3
IP_CONNECT 719
JAMNNTPD 0/233
JAMTLAND 0/47
KATTY_KORNER 0/41
LAN 0/16
LINUX-USER 0/19
LINUXHELP 0/1155
LINUX 0/22090
LINUX_BBS 0/957
mail 18.68
mail_fore_ok 249
MENSA 0/341
MODERATOR 0/102
MONTE 0/992
MOSCOW_OKLAHOMA 0/1245
MUFFIN 0/783
MUSIC 0/321
N203_STAT 924
N203_SYSCHAT 313
NET203 321
NET204 69
NET_DEV 0/10
NORD.ADMIN 0/101
NORD.CHAT 0/2572
NORD.FIDONET 189
NORD.HARDWARE 0/28
NORD.KULTUR 0/114
NORD.PROG 0/32
NORD.SOFTWARE 0/88
NORD.TEKNIK 0/58
NORD 0/453
OCCULT_CHAT 0/93

Möte OSDEBATE, 18996 texter

Text 3415, 141 rader
Skriven 2005-04-05 10:12:36 av Gary Britt (1:379/45)
Ärende: Re: Have You Seen This Happen?
======================================
From: "Gary Britt" <zotu@nospamforme.com>

This is a multi-part message in MIME format.

------=_NextPart_000_0032_01C539C7.FE082930
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

OK, thanks for the ideas.  So far I think its either something along the =
lines of what you are speaking about or it might be some key that is =
generated by one of two pieces of trialware I started demoing a few days = ago.
 I'll try the sysinternals.com rootkit revealer thingy.  I don't = run NTFS on
my computers since I don't personally need that kind of = security, and I like
being able to boot Win98 and access the drives with = all my familiar gui and
dos tools.  I haven't noticed any new processes = but will look again.

Gary
  "Geo" <georger@nls.net> wrote in message news:4252657d$1@w3.nls.net...
  My first thought was a keylogger, go to www.sysinternals.com and =
download rootkit revealer, see if there is a hidden process running. If = not
then look in task manager process tab for any new processes.

  If you are using NTFS, you could set the file permissions to everyone =
no access and see if that generates an error message.

  Geo.
    "Gary Britt" <zotu@nospamforme.com> wrote in message =
news:42517864@w3.nls.net...
    Something on my Win2K Pro laptop has started creating a file named =
os142886.bin in the root directory of my system drive.  It may be = created at
shutdown (maybe not).  If I delete it or move it to another = directory nothing
seems to break.  I can't find anything on this file = name.  I have no idea
what program is creating this file.  It will = re-create on shutdown most
likely if moved or deleted.  If moved or = deleted nothing seems to break. 
Based upon what the file looks like = when viewed in a file viewer, it seems
encrypted in some way.

    Any ideas?  I've run all the ad aware, spy stuff, and virus stuff.  =
It doesn't register as anything bad.  I'm not noticing any system or = program
abnormalities.  It just bugs me that I don't know what is = creating this file.
 Maybe its a copy protection scheme on something = I've started running?

    Gary
------=_NextPart_000_0032_01C539C7.FE082930
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1491" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#f7f7fa>
<DIV><FONT face=3DArial size=3D2>OK, thanks for the ideas.&nbsp; So far =
I think its=20
either something along the lines of what you are speaking about or it = might
be=20
some key that is generated by one of two pieces of trialware I started =
demoing a=20
few days ago.&nbsp; I'll try the sysinternals.com rootkit revealer =
thingy.&nbsp;=20
I don't run NTFS on my computers since I don't personally need that kind =
of=20
security, and I like being able to boot Win98 and access the drives with = all
my=20
familiar gui and dos tools.&nbsp; I haven't noticed any new processes = but
will=20
look again.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Gary</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV>"Geo" &lt;<A =
href=3D"mailto:georger@nls.net">georger@nls.net</A>&gt; wrote=20
  in message <A=20
  =
href=3D"news:4252657d$1@w3.nls.net">news:4252657d$1@w3.nls.net</A>...</DI=
V>
  <DIV><FONT face=3DArial size=3D2>My first thought was a keylogger, go =
to <A=20
  href=3D"http://www.sysinternals.com">www.sysinternals.com</A> and =
download=20
  rootkit revealer, see if there is a hidden process running. If not =
then look=20
  in task manager process tab for any new processes.</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>If you are using NTFS, you could set =
the file=20
  permissions to everyone no access and see if that generates an error=20
  message.</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Geo.</FONT></DIV>
  <BLOCKQUOTE dir=3Dltr=20
  style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
    <DIV>"Gary Britt" &lt;<A=20
    href=3D"mailto:zotu@nospamforme.com">zotu@nospamforme.com</A>&gt; =
wrote in=20
    message <A=20
    =
href=3D"news:42517864@w3.nls.net">news:42517864@w3.nls.net</A>...</DIV>
    <DIV><FONT face=3DArial size=3D2>Something on my Win2K Pro laptop =
has started=20
    creating a file named os142886.bin in the root directory of my =
system=20
    drive.&nbsp; It may be created at shutdown (maybe not).&nbsp; If I =
delete it=20
    or move it to another directory nothing seems to break.&nbsp; I =
can't find=20
    anything on this file name.&nbsp; I have no idea what program is =
creating=20
    this file.&nbsp; It will re-create on shutdown most likely if moved =
or=20
    deleted.&nbsp; If moved or deleted nothing seems to break.&nbsp; =
Based upon=20
    what the file looks like when viewed in a file viewer, it seems =
encrypted in=20
    some way.</FONT></DIV>
    <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
    <DIV><FONT face=3DArial size=3D2>Any ideas?&nbsp; I've run all the =
ad aware, spy=20
    stuff, and virus stuff.&nbsp; It doesn't register as anything =
bad.&nbsp; I'm=20
    not noticing any system or program abnormalities.&nbsp; It just bugs =
me that=20
    I don't know what is creating this file.&nbsp; Maybe its a copy =
protection=20
    scheme on something I've started running?</FONT></DIV>
    <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
    <DIV><FONT face=3DArial=20
size=3D2>Gary</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0032_01C539C7.FE082930--

--- BBBS/NT v4.01 Flag-5
 * Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)