The Hobbit Hole IV – The Road Goes Ever On…

[HairOfTheDog]

Welcome to The Hobbit Hole!

The Road Goes Ever On…

• First thread: New Zealander builds Hobbit hole
• Second thread: The New Hobbit Hole
• Third thread: The Hobbit Hole III - Journey to the Cross-roads! (Congratulations, we filled it up!)

The Road goes ever on and on
Down from the door where it began.
Now far ahead the Road has gone,
And I must follow, if I can,
Pursuing it with eager feet,
Until it joins some larger way
Where many paths and errands meet.
And whither then? I cannot say.

[2Jedismom]

Ok...they are both on.

What does this mean?

"Generic Host Process for Win32 Services v5.1.2600.0", located in "C:\WINDOWS\SYSTEM32\svchost.exe", to communicate in a way that was disallowed by the program's filtering rules. The data direction was outbound. The IP protocol type was UDP/IP. The remote port was 666 [Nok Nok (trojan)]. The IP address was (removed by me). The user's response to the alert was to always deny this kind of communication in the future.

What is svchost.exe?

[Bear_in_RoseBear]

Hello all! Turned out to be afternoon, but here are the weekly posting statistics!

First, a special "Welcome!" to first-time posters to HH4, RadioAstronomer and The Iguana! RA made an especially impressive showing, with enough posts to put him at #15 for the week! Also, a statistical quirk: libarian and my own Rose in RoseBear are tied for the fewest total posts (7) with at least one post each week. Now, the weekly totals!

HH IV Weekly Post Count, Week 3
(Aug. 18 through Aug. 24)

Daily Count, Total, Average
Mon	Tue	Wed	Thu	Fri	Sat	Sun	Tot	Ave
444	373	380	501	619	410	477	3204	458

Top Ten
Rank	Poster	#Posts
1.	HairOfTheDog	471
2.	Wneighbor	400
3.	Corin Stormhands	332
4.	2Jedismom	258
5.	Prof Engineer	178
6.	Overtaxed	156
(tie) 6.	RosieCotton	156
8.	Ramius	134
9.	ecurbh	120
10.	ksen	101

All Posters
Poster	Week 3	To Date
2Jedismom	258	648
300winmag	28	64
Alkhin	3	112
Argh	1	58
Bear_in_RoseBear	71	268
bentfeather	1	16
Corin Stormhands	332	629
ecurbh	120	392
g'nad	85	220
HairOfTheDog	471	1433
JenB	59	133
ksen	101	301
libarian	1	7
Lil'freeper	69	194
msdrby	95	110
mstar	68	163
My back yard	11	92
osagebowman	27	80
Overtaxed	156	251
Prof Engineer	178	348
proud_2_B_texasgal	89	214
RadioAstronomer	78	78
Ramius	134	565
RMDupree	89	555
Rocko	1	4
Rose in RoseBear	1	7
RosieCotton	156	492
Sam Cree	46	131
Samwise	5	37
SuziQ	56	183
The Iguana	5	5
trini	9	83
Wneighbor	400	1490

[2Jedismom]

I love this stuff!

[Prof Engineer]

*ahem*

I'm so sorry. I was at lunch with a vendor.

Proudly Spamming towards 10,000

[RMDupree]

Boy! This career uncertainty has me losing my touch! I must participate in more SPAM fests! LOL!!!

[Bear_in_RoseBear]

OK, that message looks to me like a Messenger Service spam; it's a new form a spam that uses the Windows built-in Messenger service to send ads directly to your screen. Turning on the firewall should stop them; also, you can turn off the Messenger Service within Windows to stop them. I'm not sure where to go in XP to turn off the service, though.

The message you got after turning on your firewall sounds like a Trojan virus was trying to communicate from your system. When was the last time you used McAfee to scan your hard disk? Did you scan all files on your disk?

[Fire-Breathing_Freeper]

I have this problem. I have to plan two hours of games and stuff for 20 teenaged people by 4:00 mountain time. We have an acre and I was thinking of capture the flag , but if anyone has anyother ideas they would be greatly appreciated.

FBF

[My back yard]

Radio Astronomer, huh? I really do miss a lot of what goes on here. So many posts, so little time ya know.

I met RA on FR a while back. A very nice young man! He has been very helpful to me for computer questions/advice.

Hey, RA, I'm still on the same old computer at home. But my son has since become the expert, and has a whole new system he picked for himself. He is very much involved with the computer department in his high school.

I do remain pretty lame in the computer area. But, I manage to get things done.. with help.

Glad to see you here.

[2Jedismom]

Yes, I scanned all my disks...took forever. And I have my firewall and auto scanner on all the time...

Here is a post where someone is having something similar happen...

Read over it and see what you think. They are even having the pop-up.

http://forums.techguy.org/t153330/s624cc44f8101fabf210ffe0bbb770bd5.html

[Bear_in_RoseBear]

Hmm... how about flag football? Sounds like you have enough kids for at least two teams.

[HairOfTheDog]

svchost.exe is what drives your normal internet communications.... that it was communicating with someone is not scary in itself. The theme of the message is that whatever was attempted was BLOCKED by McAfee and that is good. I can't say whether it means you actually have the trojan NOK NOK or whether someone just tried to inflict it on you, because I am a driver, not a mechanic and it is all word salad to me.... Bear?

Did you just get that message from McAfee after turning the firewall on? - I would highly recommend turning the firewall ON but turning notifications OFF. It will warn you night and day of every blip and ping it sees and make you nuts with constant interruptions. If it is protecting you, great, but the constant warnings are a bother.

[HairOfTheDog]

I mean the firewall traffic notifications.... that you can turn those off if you want peace.

[Fire-Breathing_Freeper]

Thats a good idea.

Thanks

[Bear_in_RoseBear]

That was an interesting read... the indication there, is that it's a legit program sending information back to the publisher, which is possible.

I'm going to track down the method of turning off Windows Messenging in XP....

[Soaring Feather]

Night's Black Stinging

Night's black stinging my bones
distant shadows found mornings warm
with my love of your eyes...

bentfeather

[HairOfTheDog]

I have this problem. I have to plan two hours of games and stuff for 20 teenaged people by 4:00 mountain time.

SCARY! (grin)

[Bear_in_RoseBear]

Yeah, I sort of dropped off the radar myself last week... just didn't feel much like posting.

[SuziQ]

School marm, indeed! LOL! Great pictures!

[2Jedismom]

No, I actually already had the firewall on. I noticed the warnings had been logged on the 13th...which was the night I downloaded all those updates, I believe...one occured at 3:27am and the other at 10:26am on the 13th.

[2Jedismom]

So this pop-up or messanger spam is part of my McAfee??? It started the minute I downloaded the program.

Rosie knows about McAfee...did yours do this??