newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Unknown connection to Neveron IP
#95748 - 08/03/04 05:45 AM (213.6.126.230)
|
|
|
Something on my machine sends data to the neveron IP whenever I connect to the Internet, before I even go the LoginPage. While I find it highly irritable, I would like to know is there a gamerelevant reason to it?
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
airbagTTS
Sergeant Major
Reged: 06/24/02
Posts: 220
Loc: near Stuttgart/Germany
|
Re: Unknown connection to Neveron IP
[Re: newrotic]
#95761 - 08/03/04 08:02 AM (62.152.177.194)
|
|
|
can you post port infos or something like that so we can make guesses what it is 
--------------------
Comment 1: "Life would be much easier if I had the source Code"
Comment 2: "In a world without walls and fences - who needs windows and gates?"
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Unknown connection to Neveron IP
[Re: airbagTTS]
#95762 - 08/03/04 08:13 AM (213.6.126.58)
|
|
|
IŽll see...
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Unknown connection to Neveron IP
[Re: newrotic]
#95771 - 08/03/04 01:09 PM (213.6.127.98)
|
|
|
Ok.
It is using TCP. Remote port is 80 (http). You want to know the remote MacAdress? I can tell you, I just dont think its a good IDea to do so in these public Forums. The local port it is using I also dont want to tell here. I will tell you that much, it is an unasigned port (taken from IANA port info, last updated last updated 29 July 2004).
When I backtrace it, I am getting a clear line to hop 10, after that 1 or more hops are hidden, then it reaches the .72 IP.
Interesting for me is, the 1st hop goes from my machine to nbg2-d3-2.mcbone.net. First 3 hops are to mcbone.net machines. From there, it goes directly to Global crossing in Phoenix, Arizona . Well, at least an IP assigned to and through them. One more hop to another Global Crossing IP, then it goes to Limelight Networks ICC. Another hop to another Limelight Machine. Hops to an IP given to Mountain Telecommunications Inc. from there. Hops to another MTI IP, then hops to what I guess is neverons provider, RTD. Systems and Networking. Then the hidden hop happens. Finally reaches the .72 IP.
I could only guess what happens with that hidden hop, but I am sure you airbag, and maybe some others, are much more apt in networking things than I am. So if possible, please clear me up. Come to think of it, thsi could be dangerous for neveron, really...I mean, I could go and find what sends this data to the IP, and make it send what I want, no?
I might have to read up on laws regarding this in germany...
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
Sintares
Captain
Reged: 07/07/02
Posts: 922
|
Re: Unknown connection to Neveron IP
[Re: newrotic]
#95786 - 08/03/04 06:26 PM (81.79.71.188)
|
|
|
Have you checked your computer with adaware, spybot s&d and created a log from HijackThis ? http://tomcoyote.com/hjt/
The log should give you an idea of what is starting up (from the registry and elsewere) and if you have any browser addons etc that you shouldn't .
You can post the log at
http://discussions.virtualdr.com/forumdisplay.php?s=&forumid=71 or
http://tomcoyote.com
--------------------
When I talk to God it's called prayer, when God talks specifically to me, its schizophrenia.
New player ? Enter my promo code for bonus cash!
Promo code -> Per Ardua ad Astra
|
airbagTTS
Sergeant Major
Reged: 06/24/02
Posts: 220
Loc: near Stuttgart/Germany
|
Re: Unknown connection to Neveron IP
[Re: newrotic]
#95808 - 08/03/04 11:49 PM (62.152.177.194)
|
|
|
i will pm you something so you can get more infos about WHAT is send to the webserverport of www2.neveron.com
--------------------
Comment 1: "Life would be much easier if I had the source Code"
Comment 2: "In a world without walls and fences - who needs windows and gates?"
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Unknown connection to Neveron IP
[Re: Sintares]
#95824 - 08/04/04 06:58 AM (213.6.126.112)
|
|
|
Thanks for that, Sintares. I have checked with Spybot when I realized it first, nothign was found. Just to make sure, I let spybot run again atvm, have also checked for updates, but no new ones available. I guess I will look for the newest version though.
Have just dled hijack this, and will run the scan once spybot is through.
Thanks again.
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Unknown connection to Neveron IP
[Re: airbagTTS]
#95928 - 08/05/04 12:01 PM (213.6.127.105)
|
|
|
Thanks a LOT for your help airbag! Not only did you put in a lot of time while you were apparently busy RL, it also was interesting to me, and I learned a lot of knew, and interesting things while trying to find the course for my problem. Thanks again!!!
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Solved (for now)
[Re: newrotic]
#95953 - 08/05/04 04:21 PM (213.6.127.236)
|
|
|
Funny enough, I had posted this about 30 minutes ago already, but somehow, the post went into Limbo...well, again then:
Downlaoded progs:
AdAware 6.1 (latest detectionfile, and 3 plugins, nice things 
SpyBot Search & Destroy 1.3 (also latest detect).
Adaware found 3 dataminers (cookies), which were just deleted. It ALSO found a "possible browser hijack" related to my default homepage, which I guess was at least part of the prob. The acc. registry key I also just deleted.
Spybot: Of course I made the recommended registry backup before doing anything with it. It found several interesting things: A problem with my "whats related" file. This could only get solved after restart. Also, several windowshelpfiletype files (*.chm) which were not actually linked to any helpfile entry were found. Filenames:
msjro.chm, dao.chm, jetsql.chm, jetdef.chm, nmplace.chm. For simplicities sake, I just deleted them, along with some other stuff that didnt seem to be ok to me.
Of course I also immunized my machine, and the resident bad ActiveX blocker is also in there now.
Well. Thanks again airbag and sinaters. I feel like having to apologize to everybody and their mother for having been so upset abut this, especially where the solution was so simple. For one thing I am glad: I am kind of sure that the problems I had were not directly caused by neveron, but merely by chatusers I had contact with, or totally unrelated people exploiting weaknesses on my system. Windows updates are now full up to date, new firewall installed, SPyBot, AdAware and the virusscanner get updated regularily and will have a good deal of work everyday now. Kind of annoying it costs me like 1:20 hrs processor time each time I have been to the net afterwards, just to make sure the machine is clean, but well...
I hope the nevgods will show mercy on me, when I spilled wild accusations it was only because I coul imagine a variety of things being the cuase for my prob.
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
Sintares
Captain
Reged: 07/07/02
Posts: 922
|
Re: Solved (for now)
[Re: newrotic]
#95986 - 08/05/04 07:34 PM (81.77.43.242)
|
|
|
Glad you got it all sorted !
Another nice piece of software to have is Spywareblaster, from
http://www.javacoolsoftware.com/spywareblaster.html
Totally recommend this , helps stop spyware and adware , bad cookies and dialers from installing and because it does not run in the background, does not use any system resources ! Update it every week or two as usual and thats all you need to do . Another great point is its freeware !
Note , Spybot has an immunize feature rather like Spywareblaster , but Spywareblaster can be used as well and covers a lot more , so you might as well have both installed.
--------------------
When I talk to God it's called prayer, when God talks specifically to me, its schizophrenia.
New player ? Enter my promo code for bonus cash!
Promo code -> Per Ardua ad Astra
|
airbagTTS
Sergeant Major
Reged: 06/24/02
Posts: 220
Loc: near Stuttgart/Germany
|
Re: Unknown connection to Neveron IP
[Re: newrotic]
#95991 - 08/05/04 11:40 PM (62.152.177.194)
|
|
|
np bud
--------------------
Comment 1: "Life would be much easier if I had the source Code"
Comment 2: "In a world without walls and fences - who needs windows and gates?"
|
Tenshi
Sergeant Major
Reged: 05/27/03
Posts: 259
|
Re: Solved (for now)
[Re: newrotic]
#95993 - 08/06/04 12:26 AM (68.117.147.179)
|
|
|
Just to warn you newrotic, I had a great deal of problems with Neveron when using Spybot's ActiveX blocker. Just something to watch for, but I may have missed an "exclude this site" option. :x
--------------------
It's when you start wishing you had a cool sig that you come up with something this bad...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Solved (for now)
[Re: Tenshi]
#95999 - 08/06/04 04:40 AM (213.6.126.178)
|
|
|
Thanks for the heads up. You sure it was with spybot, or was it spywareblaster...?
Last night, when I fought pirates, I had spybot on the machine already, noproblems. Battles was as smooth and fast as it hasnt been for a LONG time. The casual "personbae not properly loaded", or "map is screwed up", but that kind of was it...maybe thereŽs more to come.
SpyBlaster I just installed today. IŽll have to see how it affects my gameplay.
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
Tenshi
Sergeant Major
Reged: 05/27/03
Posts: 259
|
Re: Solved (for now)
[Re: newrotic]
#96055 - 08/06/04 07:05 PM (68.117.147.179)
|
|
|
Spybot for sure, but it has been a few updates since I tried it again? Dunno, I may try it again soon since it seems to work for you.
--------------------
It's when you start wishing you had a cool sig that you come up with something this bad...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Solved (for now)
[Re: Tenshi]
#96076 - 08/07/04 03:36 AM (213.6.126.172)
|
|
|
The latest Version, the one I downloaded, 1.3, seems to have changed a lot. First important change is, it asks you to make the registry backup first time you start it.
I suggest you give it a try, I did have a few pirate battles since then, and really had no problems. Have to see how it affects my arenaing still...
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
Tenshi
Sergeant Major
Reged: 05/27/03
Posts: 259
|
Re: Solved (for now)
[Re: newrotic]
#96097 - 08/07/04 09:45 AM (68.117.147.179)
|
|
|
Gave it a whirl, Neveron running fine right now. Now I can tell IE to just trust unsigned activeX things not get a popup every time I click on a neveron battle button.... wow, talk about reducing the annoyance factor.
--------------------
It's when you start wishing you had a cool sig that you come up with something this bad...
|
newrotic
Lieutenant
Reged: 08/28/03
Posts: 681
Loc: Why are you looking for me?
|
Re: Solved (for now)
[Re: Tenshi]
#96098 - 08/07/04 10:54 AM (213.6.126.90)
|
|
|
Glad it worked for you, too. Without sintares pointing it out to me, I would have needed weeks I guess, and now I am just pasing on what he gave me...
--------------------
What you call truth is just your way of seeing things. Truth is too complex to be explained in words...
|
Previous
Index
Next
Threaded
Edit
Reply
Quote
