|
|
|
|
06-29-2003, 05:44 AM
|
#1 |
xp attack
Recently my XP Pro PC got several attacks from 224.0.0.22
(IGMP.MCAST.NET). One attack is to change %windows% \explorer.exe. Another one is to change %WINDOWS% \PCHEALTH\HELPCTR\Binaries\pch*.dll files. Would anyone please tell me how should I deal with the issue? Is IGMP.MCAST.NET a well-known attack machine? Who owns this machine? Thank you. Nick Nick |
|
|
|
06-29-2003, 01:32 PM
|
#2 |
|
Posts: n/a
|
Re: xp attack
"Nick" <> wrote in news:17bd01c33df9$14ff1bc0
$: > Recently my XP Pro PC got several attacks from 224.0.0.22 Are you for real? With kind regards Fermin Sanchez PGP KeyID: 4096/9FDF4275 FP: 7E6D CC1D 798C ADCD 9093 A6C4 BCC2 2BD4 9FDF 4275 -- Man has his will. Woman has her won't! |
|
|
|
06-29-2003, 03:52 PM
|
#3 |
|
Posts: n/a
|
xp attack
Have traced organization that own the machine. Here is
the result: (WHY IANA DOES THAT???!!!) ======================================= OrgName: Internet Assigned Numbers Authority OrgID: IANA Address: 4676 Admiralty Way, Suite 330 City: Marina del Rey StateProv: CA PostalCode: 90292-6695 Country: US NetRange: 224.0.0.0 - 239.255.255.255 CIDR: 224.0.0.0/4 NetName: MCAST-NET NetHandle: NET-224-0-0-0-1 Parent: NetType: IANA Special Use NameServer: FLAG.EP.NET NameServer: STRUL.STUPI.SE NameServer: NS.ISI.EDU NameServer: NIC.NEAR.NET Comment: This block is reserved for special purposes. Comment: Please see RFC 3171 for additional information. Comment: RegDate: 1991-05-22 Updated: 2002-09-16 OrgTechHandle: IANA-ARIN OrgTechName: Internet Corporation for Assigned Names and Number OrgTechPhone: +1-310-823-9358 OrgTechEmail: res- # ARIN WHOIS database, last updated 2003-06-28 21:05 # Enter ? for additional hints on searching ARIN's WHOIS database. ============================== >-----Original Message----- >Recently my XP Pro PC got several attacks from 224.0.0.22 >(IGMP.MCAST.NET). One attack is to change %windows% >\explorer.exe. Another one is to change %WINDOWS% >\PCHEALTH\HELPCTR\Binaries\pch*.dll files. Would anyone >please tell me how should I deal with the issue? Is >IGMP.MCAST.NET a well-known attack machine? Who owns this >machine? >Thank you. >Nick >. > |
|
|
|
06-29-2003, 05:52 PM
|
#4 |
|
Posts: n/a
|
Re: xp attack
"nick" <> wrote in news:003501c33e4d$feeaf200
$: > Have traced organization that own the machine. Here is > the result: (WHY IANA DOES THAT???!!!) You are becoming more and more entertaining. Please, keep up the good work  ))With kind regards Fermin Sanchez PGP KeyID: 4096/9FDF4275 FP: 7E6D CC1D 798C ADCD 9093 A6C4 BCC2 2BD4 9FDF 4275 -- Building Contractors, not to be confused with homemakers |
|
|
