General discussion

Locked

Error message ?

By Megtek ·
Has anyone see this pop up on their screen before?

c:\winnt\system32>net use /del \\67.84.152.112\ipc$
The network connection could not be found.
More help is available by typing NET HELPMSG 2250.
c:\winnt\system32>net use \\67.84.152.112\ipc$ "" /user:administrator
System error 1326 has occurred.
Logon failure: unknown user name or bad password.
c:\winnt\system32>if not errorlevel 1 goto blkad
c:\winnt\system32>net use \\67.84.152.112\ipc$ "administrator" /user:administrat
or
System error 1326 has occurred.
Logon failure: unknown user name or bad password.
c:\winnt\system32>if not errorlevel 1 goto adad
c:\winnt\system32>net use \\67.84.152.112\ipc$ "test" /user:administrator
System error 1326 has occurred.
Logon failure: unknown user name or bad password.
c:\winnt\system32>if not errorlevel 1 goto adtest
c:\winnt\system32>net use \\67.84.152.112\ipc$ "test" /user:test

I have no idea...anyone know?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Error message ?

by kari.stetzer In reply to Error message ?

These sites may be useful:

http://www.packetstormsecurity.org/9906-exploits/nt4+sp4.wts.4.0.txt

http://www.cygwin.com/ml/cygwin/2002-07/msg01617.html

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/debug/base/system_error_codes.asp

Collapse -

Error message ?

by Megtek In reply to Error message ?

Poster rated this answer

Collapse -

Error message ?

by saihib In reply to Error message ?

You don't say what OS you're using but this might help.
http://support.microsoft.com/default.aspx?scid=kb;en-us;130995

Close up any spaces in the URL after you paste it.

Collapse -

Error message ?

by Megtek In reply to Error message ?

Poster rated this answer

Collapse -

Error message ?

by Megtek In reply to Error message ?

Answer #1: Two out of the three links do not work. Thanks anyway.

Answer #2: I am running Windows 2000 Professional. I have high speed internet access. It is a home PC not connected to any Domain.

Collapse -

Error message ?

by Joseph Moore In reply to Error message ?

Looks like someone or something (a virus, perhaps) was running a password-cracking BAT file on the system.
These are all login attempts, directed towards 67.84.152.112 (a live IP on the Internet registerd to Optimum Online, which is an ISP, so this IP is probably dynamically used by one of their clients).
You can see how 5 connection attemts were tried. Doing a NET USE to the IPC$ of a system is how you manually connect and authenticate to a remote Windows system.
And then, all of the IF NOT ERRORLEVEL statements are just jumps in the BAT file for if the mapping works, then go to another section of the BAT file and do something else.

So, someone was hackin' from the looks of it!

Collapse -

Error message ?

by Megtek In reply to Error message ?

Poster rated this answer

Collapse -

Error message ?

by Megtek In reply to Error message ?

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums