In article <MPG.19d82a9d917411eb98a6e6@news.tele.dk>, ms2mogens@ingen says...
> In dk.edb.sikkerhed, Per Nielsen <dazzler53@hotmail.com> says...
> > Bruger du/i så Skype eller noget andet?
>
> Vi bruger Skype, for det kræver ikke specielle opsætninger og har ikke
> ekko-effekt.
Vi bruger PicoPhone, idet den overhovedet ikke fordrer nogen installation, såvel som den har et
absolut minimalt ressurse forbrug.
Skype er idag beta med de problemer, det kan medføre (se install-log herunder)
Skype notere i deres licens-aftale at de ikke påtager sig ansvar for skader på anden
konfiguration.
Jvf. nedenstående install-log, ændrer Skype BETA åbenbart i MicroSoft's kryptografering
(registry) såvel som ZoneAlarm opsætning ligeledes blev ændret på den pågældende PC.
Jeg kan ydermere ikke lide, den meget omfattende & komplekse kommunikation Skype har jvf.
nedenstående, er her kun tale om audio transmission?? Næppe
Hvad skal Skype med port 80? Jvf RFC793 standarden herunder, er port 80 udelukkende til http
datatransmission
RFC793:
http 80/udp World Wide Web HTTP
www 80/tcp World Wide Web HTTP
www 80/udp World Wide Web HTTP
www-http 80/tcp World Wide Web HTTP
www-http 80/udp World Wide Web HTTP
Hvad port 80 også er brugt til af mindre lødige programmer:
80 TCP www-http World Wide Web HTTP
80 UDP www-http World Wide Web HTTP
711 trojan (Seven Eleven), AckCmd, Back End, Back Orifice 2000 Plug-Ins, Cafeini, CGI Backdoor,
Code Red, Executor, God Message, God Message 4 Creator, Hooker, IISworm, MTX, NCX, Nimda, Noob,
Ramen, Reverse WWW Tunnel Backdoor, RingZero, RTB 666, Seeker, WAN Remote, Web Server CT,
WebDownloader
Jeg tror, lige at jeg vil lade Ethereal kigge nærmere, for at se hvad der egentlig sker når
Skype snakker
--
Best regards
Lars
---------------------
Skype IP-Port brug
Skype.exe:1604 TCP 0.0.0.0:2015 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP ##.##.##.##:2015 ##.##.##.##:80 CLOSE_WAIT
Skype.exe:1604 TCP 0.0.0.0:31675 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP 0.0.0.0:2017 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP ##.##.##.##:2017 ##.##.##.##:33033 ESTABLISHED
Skype.exe:1604 UDP 0.0.0.0:31675 *:*
Skype.exe:1604 TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP 0.0.0.0:2015 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP 0.0.0.0:2028 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP 0.0.0.0:31675 0.0.0.0:0 LISTENING
Skype.exe:1604 TCP ##.##.##.##:2015 ##.##.##.##:80 CLOSE_WAIT
Skype.exe:1604 TCP ##.##.##.##:2028 ##.##.##.##:80 ESTABLISHED
Skype.exe:1604 UDP 0.0.0.0:31675 *:*
---------------------
PicoPhone IP-Port brug
PicoPhone162.ex:1780 UDP 0.0.0.0:11676 *:*
------------------------------------
System Changes Report: Skype install log
==========================================
System modifcations tracked via: Disk contents comparison
Drives Tracked:
C:\
FILES AND DIRECTORIES ADDED: (12)
C:\Documents and Settings\Administrator\Application Data\Skype
C:\Documents and Settings\Administrator\Application Data\Skype\lar
C:\Documents and Settings\Administrator\Application Data\Skype\lar\index.dat
C:\Documents and Settings\Administrator\Application Data\Skype\lar\profile256.dbb
C:\Documents and Settings\Administrator\Desktop\Skype.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Skype
C:\Documents and Settings\All Users\Start Menu\Programs\Skype\Skype.lnk
C:\Skype
C:\Skype\Phone
C:\Skype\Phone\Skype.exe
C:\Skype\Phone\unins000.dat
C:\Skype\Phone\unins000.exe
FILES CHANGED: (31)
C:\Documents and Settings\Administrator\Application Data\ICAClient\Cache\zlcache
C:\Documents and Settings\Administrator\Cookies\index.dat
C:\Documents and Settings\Administrator\Desktop
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows
\UsrClass.dat.LOG
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows
\UsrClass.dat
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\21J81832
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\99BURGEN
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\G6AO04MM
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\index.dat
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\JVTFV54S
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\LC4V55SL
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
\PY75QXG4
C:\Documents and Settings\Administrator\ntuser.dat.LOG
C:\Documents and Settings\Administrator\NTUSER.DAT
C:\Documents and Settings\Administrator\Recent
C:\MacroMagic\My Macros
C:\Program Files\Common Files\System
C:\temp
C:\tmpf
C:\WINNT\Internet Logs
C:\WINNT\Internet Logs\DL01.ldb
C:\WINNT\Internet Logs\IAMDB.RDB
C:\WINNT\Internet Logs\ZALog.txt
C:\WINNT\system32
C:\WINNT\system32\config\software.LOG
C:\WINNT\system32\config\software
C:\WINNT\system32\drivers
C:\WINNT\system32\NtmsData
C:\WINNT\wincmd.ini
NO CHANGES MADE TO C:\WINNT\SYSTEM.INI...
NO CHANGES MADE TO C:\WINNT\WIN.INI...
REGISTRY KEYS ADDED: (21)
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Classes\callto
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Classes\callto\shell
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Classes\callto\shell\open
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Classes\callto\shell\open
\command
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Bandwidth
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Firewall
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\HostCache
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Localnode
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\Connection
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\General
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\MainWindow
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500_Classes\callto
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500_Classes\callto\shell
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500_Classes\callto\shell\open
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500_Classes\callto\shell\open\command
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
REGISTRY KEY VALUES CHANGED: (8)
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Microsoft\Windows
\CurrentVersion\Internet Settings\Connections
Value "SavedLegacySettings": binary data changed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG
Value "Seed": binary data changed
HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm
Value "BlockCount": from "70663" to "70665"
HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm
Value "IncomingCount": from "115" to "117"
REGISTRY KEY VALUES ADDED: (39)
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Classes\callto\shell\open
\command\@="C:\Skype\Phone\Skype.exe "/callto:%1""
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Microsoft\Windows
\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%
pfvqy2%\Fxlcr="4B,04,00,00,02,00,00,00,00,00,00,00,00,00,00,00"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Microsoft\Windows
\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:%
pfvqy2%\Fxlcr\Fxlcr.yax="4B,04,00,00,02,00,00,00,00,00,00,00,00,00,00,00"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\FEServer="80.160.91.11:33033"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\LastIP="1346334362"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Port="31675"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Bandwidth\CurSlotLength="50"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Bandwidth\LastRtTestTime="1064352617"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Bandwidth\RtHistory="8365"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Firewall\TcpInHistory="-1431655765"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Firewall\UdpInHistory="-1431655766"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\Firewall\UdpOutHistory="-1431655765"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\HostCache\1="80.160.91.5:33033,10"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Connection
\HostCache\2="80.160.91.10:33033"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\Lib\Localnode
\NodeID="44,D6,DD,0F,32,AD,60,6E"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\Connection
\Credentials=""
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\Connection
\SecureLogin="0"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\General
\ConfirmHoldOnAnswer="0"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\General
\ConfirmHoldOnCalling="0"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\General
\ConfirmQuit="0"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\MainWindow
\Height="450"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\MainWindow
\Width="284"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\MainWindow
\X="300"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500\Software\Skype\Phone\UI\MainWindow
\Y="83"
HKEY_USERS\S-1-5-21-839522115-1580818891-1957994488-500_Classes\callto\shell\open\command\@="C:
\Skype\Phone\Skype.exe "/callto:%1""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\DisplayIcon="C:\Skype\Phone\Skype.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\DisplayName="Skype™ Beta 0.92"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\DisplayVersion="0.92"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\HelpLink="
http://www.skype.com/ui/0/92/help"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
App Path="C:\Skype\Phone"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
Deselected Tasks="quicklaunchicon,startSkype"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
Icon Group="Skype"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
Selected Tasks="desktopicon,calltotags"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
Setup Version="4.0.5-beta"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1\Inno Setup:
User="Administrator"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\Publisher="Skyper Ltd"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\UninstallString="C:\Skype\Phone\unins000.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\URLInfoAbout="
http://www.skype.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Skype_is1
\URLUpdateInfo="
http://www.skype.com/ui/0/92/latestversion"