headers
José Pedro Ferreira | 3 Mar 2004 23:07
Picon
Favicon

Trendmicro and dnetc

Hi.
I got surprised today when I noticed that my antivirus (TrendMicro OfficeScan)
detected dnetc.com as a trojan. I quickly went to their site and found this: 

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DNET.A&VSect=T

Quote:

"This Trojan program has a payload of crashing the system, by using 100% of the
system's CPU utilization. In order for this malware to perform its payload,
there must be two copies of itself in the same directory. They both must have
the same file names, with .COM as the extension of one copy, and .EXE for the
other copy."

"Damage Potential: High"

Those guys on TrendMicro certainly don't know dnet. It would be good to warn
them, or their software will keep on cleaning the client from many systems.
Unfortunately, I can't run the client, because my processor overheats and halts
(even on the lowest priority). Isn't it possible to "slow down" the client, so
it becomes "lighter" to my processor?

Pedro

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
(Continue reading)

Permalink | Reply | 5 comments |
headers
Mike S | 4 Mar 2004 02:07

Re: Trendmicro and dnetc

José Pedro Ferreira wrote:

> Isn't it possible to "slow down" the client, so
> it becomes "lighter" to my processor?

If it's not a laptop and it's not overclocked, then your machine should 
be designed to withstand 100% cpu usage all the time. I agree with
Brad that a better cooling system is in order. What happens if you want 
to crunch on an important program (say, for business) and your machine dies?

The only benefit a "retarded" client would have would be improved power 
savings, but if you're worried about power then why are you running the 
client in the first place?

--

-- 

~Mike
wickedchicken@...

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 0 comments |
headers
Brad Tod | 4 Mar 2004 01:28
Picon
Favicon

Re: Trendmicro and dnetc

I've heard of people with lap tops having that problem, is that what you have? If not then invest in a better heatsink fan.

Jos Pedro Ferreira <pedro.ferreira-A1Gx7Te15Zc@public.gmane.org> wrote:
Hi.
I got surprised today when I noticed that my antivirus (TrendMicro OfficeScan)
detected dnetc.com as a trojan. I quickly went to their site and found this:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DNET.A&VSect=T

Quote:

"This Trojan program has a payload of crashing the system, by using 100% of the
system's CPU utilization. In order for this malware to perform its payload,
there must be two copies of itself in the same directory. They both must have
the same file names, with .COM as the extension of one copy, and .EXE for the
other copy."

"Damage Potential: High"

Those guys on TrendMicro certainly don't know dnet. It would be good to warn
them, or their software will keep on cleaning the client fro m many systems.
Unfortunately, I can't run the client, because my processor overheats a nd halts
(even on the lowest priority). Isn't it possible to "slow down" the client, so
it becomes "lighter" to my processor?

Pedro

_______________________________________________
rc5 mailing list
rc5-Ra3b/QYEcJ3d140v2zMXi0fjHoOT/h/0@public.gmane.org
http://lists.distributed.net/mailman/listinfo/rc5


Later,

Brad

visit me on the web <at> http://members.tripod.com/~Rambo_21
http://www.facethejury.com/profile.asp?user_name=wiltshire
AIM wiltshire559 ICQ 5513138 MSN brad_tod <at> yahoo.ca
My ftp server ftp://24.100.67.131


Post your free ad now! Yahoo! Canada Personals
_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 0 comments |
headers
Scott Dodson | 4 Mar 2004 05:46

Re: Trendmicro and dnetc

On Wed, 2004-03-03 at 22:07 +0000, José Pedro Ferreira wrote:

> Hi.
> I got surprised today when I noticed that my antivirus (TrendMicro OfficeScan)
> detected dnetc.com as a trojan. I quickly went to their site and found this: 
> 
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DNET.A&VSect=T
> 
> Quote:
> 
> "This Trojan program has a payload of crashing the system, by using 100% of the
> system's CPU utilization. In order for this malware to perform its payload,
> there must be two copies of itself in the same directory. They both must have
> the same file names, with .COM as the extension of one copy, and .EXE for the
> other copy."
> 
> "Damage Potential: High"
> 
> Those guys on TrendMicro certainly don't know dnet. It would be good to warn
> them, or their software will keep on cleaning the client from many systems.

I've contacted them with no response as of yet.  I'll try again tonight.
Customers of theirs may have more pull than a non customer however.  To
me this is a sign of poor quality product, please complain to them.

Keep an eye on the following bug, modify it if you're able to get
anywhere with them, or just e-mail me to let me know and I'll update the
bug.

http://n0cgi.distributed.net/bugs/show_bug.cgi?id=3597

> Unfortunately, I can't run the client, because my processor overheats and halts
> (even on the lowest priority). Isn't it possible to "slow down" the client, so
> it becomes "lighter" to my processor?

I think there are some cpu cooling software packages that are normally
very silly as windows and other OSes will normally idle the processor
down running operations which don't generate heat but while running our
software they might work well to reduce the heat.  Just speculation on
my part though.  Give this site a try : http://www.cpuidle.de/main.html

--
Scott
sdodson@...
sdodson@...

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 2 comments |
headers
Scott Dodson | 6 Mar 2004 02:45

Re: Trendmicro and dnetc

On Wed, 2004-03-03 at 23:46 -0500, Scott Dodson wrote:

> > "This Trojan program has a payload of crashing the system, by using 100% of the
> > system's CPU utilization. In order for this malware to perform its payload,
> > there must be two copies of itself in the same directory. They both must have
> > the same file names, with .COM as the extension of one copy, and .EXE for the
> > other copy."
> > 
> > "Damage Potential: High"
> > 
> > Those guys on TrendMicro certainly don't know dnet. It would be good to warn
> > them, or their software will keep on cleaning the client from many systems.
> 
> I've contacted them with no response as of yet.  I'll try again tonight.
> Customers of theirs may have more pull than a non customer however.  To
> me this is a sign of poor quality product, please complain to them.
> 
> Keep an eye on the following bug, modify it if you're able to get
> anywhere with them, or just e-mail me to let me know and I'll update the
> bug.
> 
> http://n0cgi.distributed.net/bugs/show_bug.cgi?id=3597

For what it's worth I've closed out the bug because the latest
signitures seem to not detect our client.  If anyone finds this not to
be the case please let me know.

--
Scott
sdodson@...
sdodson@...

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 1 comment |
headers
Brian Morrison | 6 Mar 2004 14:07
Picon

Re: Trendmicro and dnetc

On Fri, 05 Mar 2004 20:45:28 -0500 in 1078537527.53754.1.camel@...
Scott Dodson <sdodson@...> wrote:

> 
> For what it's worth I've closed out the bug because the latest
> signitures seem to not detect our client.  If anyone finds this not to
> be the case please let me know.

In my case it did not find anything other than the zip file containing
the Win32 build 483 client, took no notice of the .exe and .com files in
the installed directory.

Now using pattern version 801 and nothing else found.

--

-- 

Brian Morrison

bdm at fenrir dot org dot uk
_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 0 comments |
headers
Aaron Kramer | 11 Mar 2004 03:00
Picon

Linux Distro - floppy

THANKS TO ROMAN MANEDOV
Spasibo balshoye

I can't say enough about this GAHNIX 
http://www.dnaresearch.com.au/gahnix.shtml
It's just what the RC5 (and OGR too) doctor ordered.
I do share out a buffer directory for each client, so the in/out buffers 
can be checkpointed...architecturally I've also kept a perproxy...keeps 
my stats centralized for me...
True, GB disks are cheap, but they take time to deploy and redeploy. I 
can leave them as is and boot gahnix floppy anytime...without 
reinstalling an OS, patching, and installing/configuring dnet client. 
I've also removed the need for a HD and a CDROM in each compute server I 
build...I suppose I have that luxury that I can build machines just for 
this purpose. Right now I am using Athlons 2400+ - seems like a decent 
price point for me. I don't know whether the gahnix distro would support 
2 CPUs (or more).

Thanks again, Roman!
Aaron.

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 0 comments |
headers
Jean-Edouard BABIN | 13 Mar 2004 21:09
Picon
Favicon

CPU/OS stats

Hi,

Just a little comment about
http://stats.distributed.net/misc/platformlist.php?project_id=8&view=tco

I think that putting Darwin/Mac OS X instead of Rhapsody would be better,
and adding an icon (the favicon of www.apple.com would be cool)

Also a icon for NetBSD would be great :)

--

-- 
Jean-Edouard BABIN
Mail: Jeb@...
Web : www.Jeb.com.fr
IRC : Jeb  <at>  Undernet

_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 4 comments |
headers
Jim C. Nasby | 14 Mar 2004 22:58

Re: CPU/OS stats

If you generate an appropriate NetBSD icon and attach it to a bug, it
will get entered.

I'm checking to see if we can unilaterally rename Rhapsody to OS X. If
we can it'll be easy, if not, it depends on bug 2679 which will take a
while to get fixed.

On Sat, Mar 13, 2004 at 09:09:47PM +0100, Jean-Edouard BABIN wrote:
> Hi,
> 
> Just a little comment about
> http://stats.distributed.net/misc/platformlist.php?project_id=8&view=tco
> 
> I think that putting Darwin/Mac OS X instead of Rhapsody would be better,
> and adding an icon (the favicon of www.apple.com would be cool)
> 
> Also a icon for NetBSD would be great :)
> 
> -- 
> Jean-Edouard BABIN
> Mail: Jeb@...
> Web : www.Jeb.com.fr
> IRC : Jeb  <at>  Undernet
> 
> _______________________________________________
> rc5 mailing list
> rc5@...
> http://lists.distributed.net/mailman/listinfo/rc5
> 

--

-- 
Jim C. Nasby, Database Consultant                  jim@...
Member: Triangle Fraternity, Sports Car Club of America
Give your computer some brain candy! www.distributed.net Team #1828

Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming, or what?"
_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 3 comments |
headers
Jim C. Nasby | 14 Mar 2004 23:04

Re: CPU/OS stats

Rhapsody changed to Mac OS X.

On Sun, Mar 14, 2004 at 03:58:58PM -0600, Jim C. Nasby wrote:
> If you generate an appropriate NetBSD icon and attach it to a bug, it
> will get entered.
> 
> I'm checking to see if we can unilaterally rename Rhapsody to OS X. If
> we can it'll be easy, if not, it depends on bug 2679 which will take a
> while to get fixed.
> 
> On Sat, Mar 13, 2004 at 09:09:47PM +0100, Jean-Edouard BABIN wrote:
> > Hi,
> > 
> > Just a little comment about
> > http://stats.distributed.net/misc/platformlist.php?project_id=8&view=tco
> > 
> > I think that putting Darwin/Mac OS X instead of Rhapsody would be better,
> > and adding an icon (the favicon of www.apple.com would be cool)
> > 
> > Also a icon for NetBSD would be great :)
> > 
> > -- 
> > Jean-Edouard BABIN
> > Mail: Jeb@...
> > Web : www.Jeb.com.fr
> > IRC : Jeb  <at>  Undernet
> > 
> > _______________________________________________
> > rc5 mailing list
> > rc5@...
> > http://lists.distributed.net/mailman/listinfo/rc5
> > 
> 
> -- 
> Jim C. Nasby, Database Consultant                  jim@...
> Member: Triangle Fraternity, Sports Car Club of America
> Give your computer some brain candy! www.distributed.net Team #1828
> 
> Windows: "Where do you want to go today?"
> Linux: "Where do you want to go tomorrow?"
> FreeBSD: "Are you guys coming, or what?"
> _______________________________________________
> rc5 mailing list
> rc5@...
> http://lists.distributed.net/mailman/listinfo/rc5
> 

--

-- 
Jim C. Nasby, Database Consultant                  jim@...
Member: Triangle Fraternity, Sports Car Club of America
Give your computer some brain candy! www.distributed.net Team #1828

Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming, or what?"
_______________________________________________
rc5 mailing list
rc5@...
http://lists.distributed.net/mailman/listinfo/rc5
Permalink | Reply | 1 comment |

Gmane