Onsight Data



Home Blog Tags hacks

Onsight Data Team

News from Onsight Data. Lethbridge Webhosting and Web site design. Seo Specialists and Data Network installers.
Tags >> hacks
Mar 25
2009

A cyber Trojan worm is expected to hit millions of computers on April 1,

Posted by admin in Security , News , hacks

A cyber Trojan worm is expected to hit millions of computers on April 1, and authorities aren't treating it like an April Fool's joke.

The Canadian Internet Registration Authority (CIRA) has issued a warning about the latest version of the Conficker worm, which could potentially have infected any computers running a Microsoft operating system.

CIRA, which manages Canada's dot-ca (.ca) domain name registry, says that the worm will force infected computers to connect randomly to about 50,000 web URLs a day beginning April 1.

But what could happen when those computers reach those websites is anyone's guess. Files on the websites could instruct the worm to do anything from steal passwords or banking information, to delete a person's hard drive to simply sending spam messages.

Experts say that anywhere from three to 12 million computers may be infected.

TV's technology expert Kris Abel said that most users with up-to-date anti-virus software should be fine and the biggest threat is towards computers that have been inactive for the last six months or so.

"These computers that have been infected . . . can be potentially organized . . . and be remotely controlled as one big organization force," Abel said. "Now typically this is done to use these computers to harvest credit card information . . . but we are not quite sure what the intentions will be on April 1."

Christopher Davis, the CEO of Defence Intelligence, an Ottawa-based information security firm, told CTV Newsnet that he believes the worm is "far from a hoax."

"It's one of the biggest bot-nets we've ever seen," he said.

Davis recommended that Canadian computer users make sure their Microsoft Windows update is working and that their anti-virus software is up to date.

He said that on April 1, when the worm goes live, the average user wouldn't notice it operating on their computer as it will run hidden.

says it is registering and isolating unregistered dot-ca domain names that are expected to be generated by the Conficker worm.

Abel says that there are tools online that will search and destroy the worm if you think your computer is infected.

Dec 08
2008

Using your magicjack with standalone voip devices by recovering your sip

Posted by admin in Voip , Technology , hacks

1) Download pmdump but don't run it but just place that .exe file on your desktop.
2) Unplug your magicjack
3) Open up a shell prompt ( start - run - cmd )
4) cd to your desktop
5) plug your magic jack back in 6) type pmdump.exe -list and find your pid for magicjack.exe
7) type pmdump.exe magicjackdump.txt

( Note: I realized that my screenshot I posted I had already created a magicjack.txt so I had to name mine magicjack1.txt)

pmdump screen shot - Recover your sip from magic jack

8) Go here http://www.hexworkshop.com/ and download the "Hex Editor".
9) Run the hexEditor and drag and drop above file in.
10) Go to Edit menu and select find -> text string values:
"ProxyUserName"
"ProxyUserPassword", "SIPProxyURI" (this will look -> SipProxyURI : sip: 207.155.164.198 :5070)


10) After noting down all above go here http://www.dslreports.com/forum/r21209178-magicjack-sucks and determine according to IP address (sipproxyURI) , what city you are located. If U don't find that IP here please google it. If U find more reliable site please post for all.

Then modify Ur proxy like this: proxy1.yourcityname.talk4free.com:5070

Now you are ready to use your own device.

You have Username, Password and the Proxyserver.

If you use Linksys PAP2 , its like this..!

Username and password as above
sip port: 5070
proxy: proxy1.yourcityname.talk4free.com:5070
register: yes
make call without reg: yes
answer call without reg: no
register expires: 3600
display name: your phone number

216.234.76.104 upgrade.talk4free.com
67.90.152.80 911.talk4free.com
67.90.152.80 prov1.talk4free.com

#67.90.138.70 proxy1.Atlanta.talk4free.com
#67.107.82.70 proxy1.Austin.talk4free.com
#67.111.250.134 proxy1.Baltimore.talk4free.com
#67.91.233.134 proxy1.Boston.talk4free.com
#71.5.91.70 proxy1.Chicago.talk4free.com
#67.88.10.198 proxy1.Cleveland.talk4free.com
#66.104.96.198 proxy1.Columbus.talk4free.com
#67.107.71.134 proxy1.Dallas.talk4free.com
#207.155.164.198 proxy1.Denver.talk4free.com
#67.91.177.70 proxy1.Detroit.talk4free.com
#67.88.84.6 proxy1.Houston.talk4free.com
#67.90.80.134 proxy1.LasVegas.talk4free.com
#64.0.147.6 proxy1.LosAngeles.talk4free.com
#67.91.96.134 proxy1.Memphis.talk4free.com
#66.239.101.50 proxy1.Miami.talk4free.com
#67.88.183.70 proxy1.Minneapolis.talk4free.com
#67.90.152.70 proxy1.Nashville.talk4free.com
#67.106.135.70 proxy1.NewYork.talk4free.com
#67.106.133.198 proxy1.Newark.talk4free.com
#71.5.113.6 proxy1.Philadelphia.talk4free.com
66.104.81.70 proxy1.Phoenix.talk4free.com
#67.88.11.6 proxy1.Pittsburgh.talk4free.com
#67.88.208.198 proxy1.Portland.talk4free.com
#67.109.32.70 proxy1.Sacramento.talk4free.com
#67.108.236.70 proxy1.SaltLakeCity.talk4free.com
#67.111.81.6 proxy1.SanDiego.talk4free.com
#64.1.213.70 proxy1.SanFrancisco.talk4free.com
#67.88.218.6 proxy1.Seattle.talk4free.com
#67.110.56.198 proxy1.StLouis.talk4free.com
#67.90.16.6 proxy1.Tampa.talk4free.com
#67.90.177.70 proxy1.Washington.talk4free.com