Hijacked dialup

Status
Not open for further replies.
Hello ,
I acquired an HP 8770 win98se. The problem I've been battling is the computer is always directed to http://64.136.164.23/. Tried Opera with the same results and programs seeking updates appear to get shuttled there as well. Some questions might be answered by a quick scan of the AVG free thread. http://forum.grisoft.cz/freeforum/read.php?4,44140,page=1,backpage=,sv=
I think it's odd the sick machine always gets assigned an address of 67.1.xx.xx. Another win98 machine is 4.228 and my XP currently is 206.109.
The PPPlog indicates that is the number passed. I've ran all the tools.

I installed an intel Anypoint adapter and microsoft ICS. I could share the dialup connection on the XP machine and did all critical updates to windows plus all the respective programs and tools.

I think I need a network specialist. Trying to understand what piece of software controls what and when. I installed DUN14-se.exe for kicks.
Tried DR Watson http://www.cavebear.com/dwtnda/ but it is a bit above my head. I got Intel traffic but I don't think I was seeing the PPP adapter.

When I look at the source of what I've began to call 'that damn page'
link="#E68E02" vlink="#E68E02" alink="#E68E02". I did a search of the computer and was surprised to find E68E02 in the AVG7 control file. In fact it was the source for 'that damn page'. I used HtTrack and asked it to mirror http:\\google.com. I found the number there as well because it perfectly mirrored 'that damn page'
<!-- Mirrored from www.google.com/ by HTTrack Website Copier/3.x [XR&CO'2005], Wed, 03 Aug 2005 13:51:20 GMT -->
<head>
<title>Your Current Access Number Has Been Decomissioned!</title>

So while I don't think hijack will help I'm open to new suggestions.
Laine...
P.S. It looks like the previous owner last used the computer in Aug. 2003 so I'm not looking for something new or crafty.
 

Attachments

  • hijackthis.txt
    2.4 KB · Views: 8
Not sure about this one, but to take a little bit of work out of it...

64.136.164.23 resolves to node23-164-136-64.1dial.com

You could fairly assume that this address would be related to the access numbers section of www.1dial.com
 
There are some different issues here.

Hijackthis log is perfectly clean.

link="#E68E02" vlink="#E68E02" alink="#E68E02".
This is HTML or webpage-speak. These are completely harmless, and the #E68E02 is only the hexadecimal code of a colour, used when you 'hover' your mouse over a button on a webpage. Sometimes it changes also to a different colour when you have visited a link (read: clicked that button).

Win98 was never very good with networking.
Perhaps you should invest in a router with firewall and 4 ethernet ports and/or wireless.
You could then setup the router to make all the contact with your ISP, while the router also assigns proper IPs for the PCs that are attached to it.
The above IPs 67.1 and 4.228 make no sense to me at all.
 
Status
Not open for further replies.
Back