nubie

Hi all, my apologies for my stupidity, the issue already solved, because in folder code already exist file qrcode (built in function, i try to made), whatever its hidden file, so i just move away that file.

Hayabusa, thank’s a lot for your tips, it give me an idea for every line running within code.

Thank’s a lot & once again, pardon me about this.

Thank’s for your reply,

– what i did is trying to repath the python path & scripts & lib in environment variable because i used this on windows

– i ran my script in command prompt using this way: python script.py, just like that, however if i trying the code in interpreter, it works fine.

I already try this in another pc (windows system too)…[Read more]

Thank’s for your reply:
1. vpn client getting static ip i set from mikrotik for each client vpn
2. the client vpn when connect to vpn get the ip same as subnet as my network,
  but the real client ip subnet is different from my network(sorry for my explanation)
3. yes, this only happen when 2 client connect to application program via vpn,…[Read more]

@cd1zz , yes, you’re right this problem only occured only vpn users, in inside network
there is no problem like this.

Do you have any idea to find out this issue ?

Thank’s a lot

Sorry for reply right now,

@cd1zz, i’m very sure the users can connect to vpn at same time, but the problem is
just when accessing application program – even when application program error disconnected it just make error on program access not the vpn, thank’s
@WCNA, i’ve try to setup ipsec but on my experience it’s show the same error on the way…[Read more]

Yes, you’re right Equix3n, but this user of this pc wants he can do installation on pc he use and actually he is some kind general manager on office so, from the beginning my supervisor give full access on his pc and it’s true like you said it’s all about policy and honestly i don’t have such as power to make decision and i’ve think about sudowin…[Read more]

Thank’s for all your feedback, got the exploit in C:Document and SettingsuserLocal SettingTempjar_cache446947312547567613.tmp(Java.9357 exploit) and rootkit Bubnix.S rootkit C:Windowssystem32driverszeepu.sys, got deleted it and now i see on my router box not have any connection from that user ip to suspect website.

You’re right Ketchup, i don’t…[Read more]

Right now i’m doing scan with avira personal and after finish i will try with malware bytes free, is there any suggestion please?.
And I’m just check the connection of that user ip before doing scanning av pc,
is the connection go throught illmap.ru i’m not yet check this out, i will try to find out later.

Thank’s a lot

No Ketchup, on my box i use different ip public with network, so is there anything else i must do, i’ve been blocked access to that website and right now i’m gonna check the user pc.

Need any advices Ketchup thank’s a lot.

Thank’s for your reply Ketchup, i ran scapy on other pc and with direct link internet just to test the connection to http://chernomorsky.name, and right now i’m still in progress to check the pc user, cause the pc is still need to use by user to their work.

Thank’s a lot

Yes, i’ve been thinking like that too however when i checked again that machine there is no conficker found, is that possible for the new pc unpatched being the gateway for conficker to other machine on network cause on the packet i’ve seen on wireshark sometime the new pc unpatched being the source to destination some machine on network(patched)…[Read more]

Yes, that’s correct johnfellers, but when i check using wireshark on unpatched new pc
to sniff packet on network it got warned AV but the source is come from pc on network, on wireshark when i right click some packet and follow tcp stream the av
pop up and warned about conficker.

Thank’s a lot for your reply and i’m very hope for your advise…[Read more]

Thank’s a lot guys for your replies, so the conclusion i got from this thread is i must report
to ISP support for this happen again.

Thank’s again for timmedin and don, you guys give me a great help.

regards,
nubie ^^

Thank’s for your quick reply, i will exlain something,
  1. i use Microtic router os to test out some network method and it have logs to view any
      change on router system.
  2. i think whatismyipaddress.com can trace down another ip public not just our ip public cause
      in lookup ip address thereis a textbox that we can input another…[Read more]

Thanks for the reply, but i also need to know what about if some ip public caught in my log router
(want to access my router)what the first think i must to do to trace back that IP public cause if
i use like robtex.com/whatismyipaddress.com it just show information about the ISP or should i
report to that ISP about that happen to get more…[Read more]

Hi NickFnord,

Thanks for your opinion and it makes me realizes and comfort about writing shellcode  :).

Thanks again for your help  ;D.

regards,
nubie

Hi NickFnord,

thanks for the tutorial above, but from that that tutorial it makes me think/choose for
create a true code without NULL by using pure assembly code or fixing NULL bytes later
when code has set up  ???, actually both of it i must still learn but i just ask some opinion
about this.

Thank’s a lot . 🙂

regards,
nubie

Hi all,
What i want to asking is about in line 16 in my code that i posted about %.LC0 when i search about LC0 it just about symbol/label for an address and i see using objdump the address is
0x8048500 and it contain one part NULL, i need some help/advices for rid that part of NULL from that address ?.
And also is my think is true based on this…[Read more]

Thank you NickFnord for your support and your help  :),
and i’m really like/glad if you want to help me.

regards,
nubie  🙂

Hi all,

Thanks a lot for all your replies and sorry just post this reply now, cause
i had a problem internet connection( :'( in my country it’s so difficult to find a good and cheap provider). And about code above that i’ had compiled theoritically
i had understand that but why/or it is true when i compiled same code in different pc with…[Read more]