Mr W

When you get another file like this and want to check out what it is, just look up the file name on Google using all of the file name itself as the search word:

If you do that for

C:\WINNT\System32\ntoskrnl.exe

you'll come across a web site called "littlewhitedog.com" which is quite educational and has a good section on this particular file.

Mr W

The reference to ntoskrnl is no doubt because of the updates you downloaded: they replaced the file with a newer version which your firewall spotted. In any case Windows 2000 has protection against system files changing, it reloads them from a backup copy, so it's very unlikely to be suspect.

As for the UDP packet, it looks as though NETBIOS is enabled over the link with your ISP. This, if true, is a security risk as it potentially exposes your files to the world and you should disable it.

thanks everyone.

How do i disable the netbios,is it complicated for a dimwit?

cheers
glenn

leo1
just noticed you gave me the instruction to disable the netbios

thank you

I found this on my computer. Can someone tell me what it means?

// Set cookie lifetime to 57600 Minutes function zedo_lifetime(){ var zedo_expire = new Date(); zedo_expire.setTime(zedo_expire.getTime() + (57600*60*1000)); return zedo_expire.toUTCString();}function zedo_getCookie() { var zedo_cookieval = document.cookie.match(/ZEDOPOP=(\d+)/ ); if ( zedo_cookieval != null && zedo_cookieval.length > 0 ) { return parseInt(zedo_cookieval[1]); } else { return 0; }}var zflag_nid=140; var zflag_cid="9002"; var zflag_sz=15; var zflag_width=1; var zflag_height=1; var zedo_cap = 2;var zedo_pub_cookie = zedo_getCookie(); // ZEDOPOP cookievar zedo_cookies_supported = true;// Detect for cookies on IE4+ and NS6if ( (document.getElementById || document.all) && !navigator.cookieEnabled ) { zedo_cookies_supported = false;}if ( zedo_cookies_supported && ( zedo_pub_cookie '); zedo_pub_cookie++; document.cookie="ZEDOPOP=" +zedo_pub_cookie +";expires="+zedo_lifetime()+ ";domain=.advfn.com;path=/";}

Bob, thats the cookie that sends copies of everything you post here to Clem ;-)

But seriously have you been banned by ADVFN?

Neil

No. What ever makes you think that? ;-)

I reckon the above looks a bit like a zedo pub cookie, don't you think?

I must have had a dirty glass - or some cookieval beer with a drop of zedopop in it.

DocProc, there was a problem at ADVFN a few months ago which sent users copies of their php software rather than running it and giving them the results. I have a copy of the whole thread.php3 file :-) Is the file dated 14th December 2002? Zedo are the people they use for ad delivery (http://www.zedo.com), although apparently the cookie is also used to stop banned users from using a different username to log in with.

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=zedo_pub_cookie&btnG=Google+Search

also gives a few clues on Google

Kayak

Thankyou

I remember it now. I pasted the above into a Word document to save it on my machine and yes, it is dated 14.12.02. I found the Word document looking for something else and wondered what on earth it was.

By the way, thank you also for your support on ADVFN's 'Downgrade' thread.

Harassment indeed!

lol Doc, I know, butter wouldn't melt in your mouth! :-)

?? does anyone know where & how xp stores its routing table??

TIA

Just for your info, in case someone else has received the same email...

Received unsolicited email from 03hillaj@reeds.surrey.sch.uk at 4:33pm.
The attached file colby598.com has virus W32.HLLW.Fizzer@mm.
Email removed.

Does anyone know how to track down the user?

mbbcat,

not in my basic book on XP

try

www.winguides.com
communities.msn.com/windowsxpforrealpeople
www.windows-help.net/windowsxp

axdpc,

re contacting that user about that email. I dont suppose youve tried emailing them? :)

J.

axdpc, the user probably does not know he's infected...

My pc freezes on average twice a day(mouse freezes normally)sometimes more ,especialy when i run a certain programme called hotcomlite but another 40odd people who use the same programme do not have a problem.

This freezing problem still happens even when i am not running this programme,my computer expert has given up on it.

what can you do, i have had this problem for months but it has got better since i changed from xp to 2000.(i have a dual processor)

I am considering taking it in to PC world where i understand they keep it for a good few days which is a complete pain but i have got to do something.

Do you think their is any point in taking it in their,would one pc boffin do anything different from my usual guy who seems to be an expert.

very frustrating

any advice

Mayday Mayday Mayday

My second m/c has just said "unable to write to drive c:". When I rebooted it gets to a message saying "unable to locate operating system" and goes no further. The c drive obviously didn't boot up so I'm guessing I'm fooked!! Would a computer repair shop be able to copy the disk onto a new one or is it totally irretrievable? Would it do this if it overheated? Anyone got any pointers as to my next move, pleeeeeease.

Looks like I am about to get taught the lesson about keeping back ups up to date :-(

Robb, you got a disk error, which will happen to everyone at some time, which is why it's important to take back ups :-) Seriously, disk errors are not too bad if they occur in areas of the disk used by applications or data, but if they occur in areas used by Windows then they can leave you without a bootable system. The procedure is to (a) run Scandisk with the thorough option to write and readback from every sector on the disk to check for bad sectors, which are then removed from use, (b) fix the operating system, by reinstalling if you don't have a backup, (c) if you reinstall the operating system you will need to reinstall all your applications and (d) based on how many bad sectors have been found and how long you've had the drive you may decide it is safer to replace the drive rather than run the risk of more errors.

What version of Windows do you have? The procedure will be somewhat simpler if you created a repair disk at some stage in the past.

Kayak - thanks for the reply.

I'm running that m/c on 98se. This may be a dummo question but how do I run scandisk if on initial start up it only gets to "unable to locate operating system" and goes no further. If I touch a key it just repeats the message.

I have floppies marked Windows 98 Start Up Disk No.1 and 2 and also a bunch that looks like they were created with Norton labelled Rescue Disk No.'s 1-6. No.1 is Basic Rescue Boot Floppy Disk and the other 5 are to do with NAV Program and Definitions.

Robb: do you get a dos prompt e.g. C:> or just that message? If you don't get a DOS prompt then it's more likely that the boot sector on the disk is dead. That would tend to indicate that you may have been infected with a virus.