NetStumbler.org Forums

Go Back   NetStumbler.org Forums > WiFi Forums > Hardware
Register Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
Old 05-17-2007   #31 (permalink)
Beard
Talking softly
 
Beard's Avatar
 
Join Date: May 2005
Location: Ozark mountains, Arkansas
Posts: 331
Quote:
Originally Posted by ccie4526
Put beakmyn's zip onto my non-U3 Apacer, have plugged into several machines, and rooted only one. Thus, thinking I need to do U3 after all.

Saw the Cruzer Micro 1Gb at WalMart last week for $19.99, looked like regular price. Guess I'm gonna have to break down and get one.
Check ebay. I just received a 2 Gb [$20 shipped] and ordered a 1 Gb [9.50 shipped], both brand new. I waited too long to get a 4 Gb for $32 shipped.
__________________
Beard

"We hold these truths to be self evident"....
Religous: "Thou shalt not steal."
Amish: "You shall burn in hell for theft of wifi." {courtesy streaker69}
Secular: What's on the books. {courtesy beakmyn}
Redneck; "Thievin' bastard, [blam, blam]"

Solutions for the most common problems or questions of new members are here, here, and here .
Beard is offline   Reply With Quote
Old 05-17-2007   #32 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
Quote:
Originally Posted by ccie4526
Put beakmyn's zip onto my non-U3 Apacer, have plugged into several machines, and rooted only one. Thus, thinking I need to do U3 after all.

Saw the Cruzer Micro 1Gb at WalMart last week for $19.99, looked like regular price. Guess I'm gonna have to break down and get one.
It won't "autorun" but it will pop-up on the machine the 'what do you want to do dialog'. I'm gonna make a U3 version of it so that I can run it using the built in U3 launchpad rather then killing the memorex U3 launchpad. Should have it done by tomorrow.

BTW, you might want to put a shortcut to go.exe on the root of your non-u3 drive, that way if the autorun dialog doesn't pick it up you don't have to go into /cmd/wip and just click on the shortcut.

Zonealarm will pick up on the running of pspv.exe

TODO:
Still looking into Intel Proset's wifi utility since that's what Dells use. Got some tests/ideas to try.
WMI interface - see if anything interesting
PWDUMP6 is updated - i think, can't download from work
fgdump is updated - looking into using it to replace



Anybody else notice that the standard U3 launchpad takes a long time to load?
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘

Last edited by beakmyn : 05-17-2007 at 12:57 PM.
beakmyn is offline   Reply With Quote
Old 05-17-2007   #33 (permalink)
Dutch
Humourless EuroMod.
 
Dutch's Avatar
 
Join Date: Mar 2004
Location: City of Mermaids, Denmark
Posts: 6,813
Quote:
Originally Posted by beakmyn
It won't "autorun" but it will pop-up on the machine the 'what do you want to do dialog'. I'm gonna make a U3 version of it so that I can run it using the built in U3 launchpad rather then killing the memorex U3 launchpad. Should have it done by tomorrow.

BTW, you might want to put a shortcut to go.exe on the root of your non-u3 drive, that way if the autorun dialog doesn't pick it up you don't have to go into /cmd/wip and just click on the shortcut.

Zonealarm will pick up on the running of pspv.exe

Still looking into Intel Proset's wifi utility since that's what Dells use. Got some tests/ideas to try.

Anybody else notice that the standard U3 launchpad takes a long time to load?
Could you try to install grisofts new AVG Anti RootKit software, and see if it detects a USB Switchblade installed rootkit ?

http://free.grisoft.com/doc/39798/lng/us/tpl/v5

Dutch
__________________
All your answers are belong to Google. SEARCH DAMMIT!
Warning. Warning.
Low C8H10N4O2 level detected. Operator halted....
Dutch is offline   Reply With Quote
Old 05-17-2007   #34 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
Quote:
Originally Posted by Dutch
Could you try to install grisofts new AVG Anti RootKit software, and see if it detects a USB Switchblade installed rootkit ?

http://free.grisoft.com/doc/39798/lng/us/tpl/v5

Dutch
I don't see how it would, but I'll try it. There's talk in the hak.5 forum that a new m$ patch is causing lsass to crash which forces an automatic reboot of the machine. I haven't see this yet.
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘
beakmyn is offline   Reply With Quote
Old 05-18-2007   #35 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
The switchblade (at least my version) doesn't install any rootkits. This grisoft is an click and scan for rootkits its not a live monitoring application.
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘
beakmyn is offline   Reply With Quote
Old 05-18-2007   #36 (permalink)
Dutch
Humourless EuroMod.
 
Dutch's Avatar
 
Join Date: Mar 2004
Location: City of Mermaids, Denmark
Posts: 6,813
Quote:
Originally Posted by beakmyn
The switchblade (at least my version) doesn't install any rootkits. This grisoft is an click and scan for rootkits its not a live monitoring application.
My bad.. I was thinking of their Anti Spy and malware monitoring app..
Could I persuade you to try that one too ? It's a trial version that reverts to a limited function free version unless you register, and shouldn't leave anything behind when you uninstall it.

Dutch
__________________
All your answers are belong to Google. SEARCH DAMMIT!
Warning. Warning.
Low C8H10N4O2 level detected. Operator halted....
Dutch is offline   Reply With Quote
Old 05-18-2007   #37 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
5 popups when run here's the report:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:32:50 AM 5/18/2007

+ Scan result:



E:\WIP\CMD\FirePassword.exe -> Not-A-Virus.PSWTool.Win32.FirePass.a : No action taken.
E:\WIP\CMD\mspass.exe -> Not-A-Virus.PSWTool.Win32.Messen.106 : No action taken.
E:\WIP\CMD\netpass.exe -> Not-A-Virus.PSWTool.Win32.NetPass.b : No action taken.
E:\WIP\CMD\pwservice.exe -> Not-A-Virus.PSWTool.Win32.PWDump.d : No action taken.
E:\WIP\CMD\pspv.exe -> Trojan.IcqSmiley.e : No action taken.


::Report end
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘
beakmyn is offline   Reply With Quote
Old 05-18-2007   #38 (permalink)
Dutch
Humourless EuroMod.
 
Dutch's Avatar
 
Join Date: Mar 2004
Location: City of Mermaids, Denmark
Posts: 6,813
Quote:
Originally Posted by beakmyn
5 popups when run here's the report:
That was during a manual scan, but nothing while just running as a monitoring app, when you inserted the USB Switchblade ?

Hmm.. Seems like it's possible to protect, or rather be advised that something is happening, but only by a scan.

Dutch
__________________
All your answers are belong to Google. SEARCH DAMMIT!
Warning. Warning.
Low C8H10N4O2 level detected. Operator halted....
Dutch is offline   Reply With Quote
Old 05-18-2007   #39 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
Quote:
Originally Posted by Dutch
That was during a manual scan, but nothing while just running as a monitoring app, when you inserted the USB Switchblade ?

Hmm.. Seems like it's possible to protect, or rather be advised that something is happening, but only by a scan.

Dutch
Sorry, no when you run the switchblade you get the pop-ups. It didn't detect until I ran the switchblade and it accessed the programs. So, just plugging it in doesn't trigger it.
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘

Last edited by beakmyn : 05-28-2007 at 02:12 PM.
beakmyn is offline   Reply With Quote
Old 05-29-2007   #40 (permalink)
beakmyn
root\.workspace\.garbage.
 
Join Date: Aug 2003
Posts: 4,751
Code:
for /f "tokens=1-4 delims=/ " %%i in ("%date%") do (
  set dow=%%i
  set month=%%j
  set day=%%k
  set year=%%l
 )

set /A month=1%month% - 100 + 0

if %month%==1 set mon=Jan
if %month%==2 set mon=Feb
if %month%==3 set mon=Mar
if %month%==4 set mon=Apr
if %month%==5 set mon=May
if %month%==6 set mon=Jun
if %month%==7 set mon=Jul
if %month%==8 set mon=Aug
if %month%==9 set mon=Sep
if %month%==10 set mon=Oct
if %month%==11 set mon=Nov
if %month%==12 set mon=Dec

for /f "tokens=1-4 delims=.: " %%i in ("%time%") do (
 set hour=%%i
 set minute=%%j
 set second=%%k
 set hundredth=%%l
)

if %hour% LSS 10 set hour=0%hour%

SET filename=%computername%_%year%%mon%%day%-%hour%h_%minute%m_%second%s

now you get
computername-2007May29-15h_16m_23s.log

Why you ask? Because I'm going back to Montana next week and I want to be able to tell the difference between the files when I run it on the 2 public terminals again.
Attached Files
File Type: zip go.zip (23.0 KB, 6 views)
__________________
It's not Intelligent Design, it's peer pressure.

┌──────────────────────────────┐
NS Icons Explained|et hoc genus omne
└──────────────────────────────┘
beakmyn is offline   Reply With Quote
Old 07-01-2007   #41 (permalink)
theprez98
SpoonfeederExtraordinaire
 
theprez98's Avatar
 
Join Date: Jan 2005
Location: Maryland
Posts: 3,613
FYI, Office Depot has the the SanDisk Cruzer Micro (1GB) with U3 on sale this week for $9.99 (instant rebate).

http://www.officedepot.com/ddSKU.do?...g=true&An=text

They were down to 2 on the shelf when I stopped by this afternoon. Should be on sale til that mythical of dates, 07.07.07.
__________________
:00475160 0E A6 AE A0 19 E3 A3 46 .......F
:00475168 0D 65 17 0C 53 70 6F 6F .e..Spoo
:00475170 6E 66 65 65 64 65 72 2E nfeeder.
:00475178 45 78 74 72 61 6F 72 64 Extraord
:00475180 69 6E 61 69 72 65 5D 3B inaire];
:00475188 8B 9E 92 5A FF 5D A6 F0 ...Z.]..
theprez98 is offline   Reply With Quote
Old 07-01-2007   #42 (permalink)
Barry
Managing the iTards.
 
Barry's Avatar
 
Join Date: Dec 2002
Location: Ohio
Posts: 5,193
Damn! We don't have one. My buddy is getting married on 070707. He wanted to get married on June 6th last year, but she caught on pretty quick.
__________________
Penny's giving it up. She's giving it up hard. Cause she's with Captain Hammer, and these, are not the hammer...... The hammer is my penis. --- Captain Hammer, Dr. Horrible's Sing-Along Blog.
Barry is offline   Reply With Quote
Old 07-06-2007   #43 (permalink)
Barry
Managing the iTards.
 
Barry's Avatar
 
Join Date: Dec 2002
Location: Ohio
Posts: 5,193
How's this for a freaking cool wife. She came home today after running some errands and brought me a 4Gb cruzer micro!
__________________
Penny's giving it up. She's giving it up hard. Cause she's with Captain Hammer, and these, are not the hammer...... The hammer is my penis. --- Captain Hammer, Dr. Horrible's Sing-Along Blog.
Barry is offline   Reply With Quote
Old 07-06-2007   #44 (permalink)
Dutch
Humourless EuroMod.
 
Dutch's Avatar
 
Join Date: Mar 2004
Location: City of Mermaids, Denmark
Posts: 6,813
Quote:
Originally Posted by Barry
How's this for a freaking cool wife. She came home today after running some errands and brought me a 4Gb cruzer micro!
Let me guess, she's gonna get some sweet luvin' tonight, eh.. Wink, wink, nudge, nudge, say no more, eh, eh...

Dutch
__________________
All your answers are belong to Google. SEARCH DAMMIT!
Warning. Warning.
Low C8H10N4O2 level detected. Operator halted....
Dutch is offline   Reply With Quote
Old 07-06-2007   #45 (permalink)
Mark57
What??
 
Mark57's Avatar
 
Join Date: May 2005
Location: OKC
Posts: 1,240
Quote:
Originally Posted by Dutch
Let me guess, she's gonna get some sweet luvin' tonight, eh.. Wink, wink, nudge, nudge, say no more, eh, eh...

Dutch
Yeah, say no more, just post pics.
__________________
Mark
Mark57 is offline   Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Google
 
Web NetStumbler.org

All times are GMT -7. The time now is 09:22 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 ©2007, Crawlability, Inc.


All messages express the views of the author and are for entertainment purposes only. Netstumbler.org cannot be held responsible for the authenticity of the content or the actions of its members. By using this site and its services, you warrant that you will not post any messages that are discriminating, obscene, hateful, threatening, or otherwise violates any laws and you release Netstumbler.org from any future claims of any kind whatsoever including, but not limited to, addiction and loss of productivity. All forum messages, private messages and any other content are properties of Netstumbler.org. Even if publicly available, personal or copyrighted information are not to be posted without the consent of the owner. Distribution of licensed and copyrighted materials in any way not endorsed by the copyright owner is strictly prohibited. You may not use this site and its resources to spam other sites or individuals or perform any action that violates any law. Items sold or bought in the For Sale forum are sold as is and no warranty or insurance of any kind is provided. Netstumbler.org cannot be held responsible for the outcome of any transactions and no warranty of any kind is provided, either express or implied. Vulgar words are not allowed in the subject lines ; they may be used in the message body in any forum. The Administrator, Super Moderators and Moderators of Netstumbler.org have the right to remove, edit, move or close any thread for any reason and to reveal your identity and other known information in the event of a complaint or legal action arising from any message posted by you.