Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How Many 017 Entries Should I Have In Hjt?


  • Please log in to reply
8 replies to this topic

#1 Redpanda

Redpanda

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:United Kingdom
  • Local time:04:02 PM

Posted 21 January 2008 - 06:51 AM

Hello there,


How many 017 entries should there be in an HJT log? I thought if you were doing an HJT log you shouldn't be connected to the internet, I was and found 2 such entries. I'm sure when I've done them before there was only one, then again I was once sure I'd turned the pan off and.... well that's another story. :inlove:
Anyway I tried Google for help and one post somewhere said don't delete the entry unless you know it doesn't belong to your ISP. How do I find out whether it belongs to my ISP or not?? :trumpet: I have tried the search facility on here but most of my words were less than 4 letters and it wouldn't tell me a thing. :huh:

Thanks for any help :thumbsup:

Kind regards, Linda :flowers:

BC AdBot (Login to Remove)

 


#2 Falu

Falu

  • Security Colleague
  • 3,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:02 AM

Posted 21 January 2008 - 07:04 AM

Hi Linda, :thumbsup:

Click this link to check 017's!

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:02 PM

Posted 21 January 2008 - 08:38 AM

If your unsure of the results, post them here.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Redpanda

Redpanda
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:United Kingdom
  • Local time:04:02 PM

Posted 21 January 2008 - 01:41 PM

Thanks you guys,

I hope I've done the right thing. I entered the IP address and these are the results.

Let me just tell you I haven't a clue what all this means (well I wouldn't be asking for help :flowers:) My ISP is Pipex Homecall, so is this stuff right?

Not even sure if I've done it right. I copied and pasted the IP address from the HJT log into the domain name box, was this right??

Many thanks, Linda :thumbsup:

IP Location: United States United States Middletown AT&T Worldnet Services
IP Address: 12.139.132.52 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
Blacklist Status: Clear

Whois Record

OrgName: AT&T WorldNet Services
OrgID: ATTW
Address: 200 S. Laurel AVE.
City: MIDDLETOWN
StateProv: NJ
PostalCode: 07748
Country: US

NetRange: 12.0.0.0 - 12.255.255.255
CIDR: 12.0.0.0/8
NetName: ATT
NetHandle: NET-12-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: DBRU.BR.NS.ELS-GMS.ATT.NET
NameServer: DMTU.MT.NS.ELS-GMS.ATT.NET
NameServer: CBRU.BR.NS.ELS-GMS.ATT.NET
NameServer: CMTU.MT.NS.ELS-GMS.ATT.NET
Comment: For abuse issues contact
RegDate: 1983-08-23
Updated: 2007-05-22

RTechHandle: IAA17-ARIN
RTechName: IP Address Administration
RTechPhone: +1-732-420-2071
RTechEmail:

OrgAbuseHandle: ATTAB-ARIN
OrgAbuseName: ATT Abuse
OrgAbusePhone: +1-919-319-8130
OrgAbuseEmail:

OrgTechHandle: ICC-ARIN
OrgTechName: IP Customer Care
OrgTechPhone: +1-888-613-6330
OrgTechEmail:

OrgTechHandle: IPSWI-ARIN
OrgTechName: IP SWIP
OrgTechPhone: +1-888-613-6330
OrgTechEmail:

CustName: AT&T Worldnet Services
Address: 200 S. Laurel Ave.
City: Middletown
StateProv: NJ
PostalCode: 07748
Country: US
RegDate: 2003-12-17
Updated: 2003-12-17

NetRange: 12.139.128.0 - 12.139.143.255
CIDR: 12.139.128.0/20
NetName: ATTSVC-12-139-128-0-LOS-ANGELES
NetHandle: NET-12-139-128-0-1
Parent: NET-12-0-0-0-1
NetType: Reassigned
Comment: Contact AT&T Abuse ( ) for policy abuse issues.
RegDate: 2003-12-17
Updated: 2003-12-17

RTechHandle: IAA17-ARIN
RTechName: IP Address Administration
RTechPhone: +1-732-420-2071
RTechEmail:

OrgAbuseHandle: ATTAB-ARIN
OrgAbuseName: ATT Abuse
OrgAbusePhone: +1-919-319-8130
OrgAbuseEmail:

OrgTechHandle: ICC-ARIN
OrgTechName: IP Customer Care
OrgTechPhone: +1-888-613-6330
OrgTechEmail:

OrgTechHandle: IPSWI-ARIN
OrgTechName: IP SWIP
OrgTechPhone: +1-888-613-6330
OrgTechEmail:

Edited by Redpanda, 21 January 2008 - 01:54 PM.


#5 Redpanda

Redpanda
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:United Kingdom
  • Local time:04:02 PM

Posted 23 January 2008 - 07:46 AM

Hi there,

Any body got any ideas on this. I don't understand why it says my IP location is in the USA when I'm with Pipex Homecall in the UK. I went to Shields up and my IP address was completely different to that on my HJT log. When I entered this to check the 017 entries it said the IP location was the UK, better yes, but it did say tiscali so not sure what's going on there. Can someone please help me, maybe it's nothing and that's just the way things are, but then again :flowers:

Many thanks, Linda :thumbsup:


#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:02 PM

Posted 23 January 2008 - 08:56 AM

Did you check with your ISP to see if they have any affiliation with AT&T?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Redpanda

Redpanda
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:United Kingdom
  • Local time:04:02 PM

Posted 23 January 2008 - 10:06 AM

Hi there,

No I haven't but I'll get onto that right away, don't know why I didn't think of that instead of bothering you :flowers: Could you tell me though why the IP is different on my HJT log to that at Shields up?

Many thanks, Linda :thumbsup:

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:02 PM

Posted 23 January 2008 - 10:27 AM

Computers can use static or dynamic IP addresses. A static IP address is a number assigned to a computer by an Internet service provider (ISP) and intended to be its permanent address on the Internet. Thus it will not change.

However, there are not enough IP numbers for each computer so many ISPs limit the number of static IP addresses they assign and utilize a pool of IP addresses instead. The ISP will temporarily assign a dynamic IP address automatically to a requesting Dynamic Host Configuration Protocol (DHCP) computer from this pool of addresses and it will change each time you connect to the Internet. When you disconnect from the Internet, the temporary dynamic IP address is returned to the IP address pool so it can be assigned to someone else. When you reconnect, you are then assigned a different dynamic IP address from those available in the pool.

So depending on when you creating your log and when you went to Shields up, the IP address could show differently.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 Redpanda

Redpanda
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:United Kingdom
  • Local time:04:02 PM

Posted 27 January 2008 - 05:07 PM

Much appreciated quietman7. Those numbers in my HJT log are different to that on shields up though, even now as I've done an HJT log. There are now three 017 entries. Don't want to put the numbers cos I'm not sure if I should (huh that's how much I know eh?? :trumpet:)

This is how it goes though:

O17 - HKLM\System\CCS\Services\Tcpip\..\{14452285-450F-45A4-AFF8-F2B0AE28F094}: NameServer = XXX.XXX.XXX.XX XXX.XXX.XXX.XX
O17 - HKLM\System\CS1\Services\Tcpip\..\{14452285-450F-45A4-AFF8-F2B0AE28F094}: NameServer = XXX.XXX.XXX.XX XXX.XXX.XXX.XX
O17 - HKLM\System\CS2\Services\Tcpip\..\{14452285-450F-45A4-AFF8-F2B0AE28F094}: NameServer = XXX.XXX.XXX.XX XXX.XXX.XXX.XX

The X's are numbers and they're all the same, infact the same as they were the other day. But the Shields up IP address is different to those above and to that of the other day. :flowers:
Sorry about this but I really haven't a clue, especially as now there are 3 entries instead of 1 (two the other day) I'm still waiting for a reply from my ISP. I now know Pipex Homecall is associated with tiscali so that's one thing.

Many thanks for your help

Kind regards, Linda :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users