Ultimate Boot CD
http://www.ultimatebootcd.com/forums/

Password requested on boot from UBCD
http://www.ultimatebootcd.com/forums/viewtopic.php?f=3&t=2294
Page 1 of 1

Author:  webseitz [ Sun Mar 07, 2010 10:19 am ]
Post subject:  Password requested on boot from UBCD

I won't break my arm patting myself on the back, but the CD was created and then requested a password to give further on the boot from the disk. Does anyone know what this means?

Author:  Icecube [ Sun Mar 07, 2010 10:29 am ]
Post subject: 

It shouldn't ask for a password.
Can you take a screenshot?

Author:  webseitz [ Sun Mar 07, 2010 10:35 am ]
Post subject:  Password

No, because it is requesting this at boot up and I can not get a screenshot. It is booting the UBCD through a DOS environment, then asking Password:

Author:  Icecube [ Sun Mar 07, 2010 11:27 am ]
Post subject: 

Can you take a picture with a digital camera?
Or try UBCD50RC1.

Author:  StopSpazzing [ Sun Mar 07, 2010 8:07 pm ]
Post subject:  Re: Password

webseitz wrote:
No, because it is requesting this at boot up and I can not get a screenshot. It is booting the UBCD through a DOS environment, then asking Password:


Make sure you have downloaded from the mirrors listed on the download page or try another mirror. If it works on another mirror report that mirror you originally used, as it may not be the proper version, or it wasnt downloaded completely and not booting properly.

Author:  Ubootz [ Tue Apr 06, 2010 6:53 am ]
Post subject: 

Hi, I have registered right now for posting this issue,

I have had the same problem, requesting a password at boot with UBCD 5.01 RC although.

I had a rootkit implented in the System, very Low Level.

With unattached harddisk, I managed to pack the files extracted to A: from UBCD
to USB drive.

Maybe someone could crosscheck them if they are allright.

http://www.filedump.net/dumped/ubcdbartsfolder1270404759.zip


Greets Mike

Author:  Icecube [ Tue Apr 06, 2010 9:04 am ]
Post subject: 

@ Ubootz
The files in the dump you took, aren't from UBCD50RC1.

Author:  Ubootz [ Tue Apr 06, 2010 11:02 am ]
Post subject: 

Strange, then these files must be extracted to A: from the rootkitfiles,

first I unattached the harddisk, then booted with UBCD 501 RC

after that
Code:
Ramdisk at 0xb7f47000, length 0x00067505
Moving compressed data from 0xb7f47000 to 0xb7e00a00
gzip image:decompressed addr 0xb7e68000, len 0x00168000: ok

Disk is fd0,1440 k,C/H/S=80/2/18 (FAT/FAT), rw
Using safe Int 15h access to high memory
code 1340 meminfo 192, cmdline 61, stack 512
Total size needed=2105 bytes, allocating 3K
Old dos memory at 0x9f000 (map says 0x9fc00), loading at 0x9f000
1588: 0xffff 15E801: 0x3c00 0xb6e6
Int 13 08: Failure, assuming this is the only drive
Drive probing gives drive shift limit: 0x03
old int13 = 9f00000a int 15 =9f0002d1 int1e=9f00051c

Loading boot sector......booting....
.
FreeDos kernel build 2036 cvs [version Aug 2006 compiled Aug 18 2006]


Now the UBCD menu pops out

I select DOS/LINUX Boot Disks
-Dos Boot Disks
-MSRRC: Bart's N/W Disks Clone V3.40
--
Code:
Loading memdisk...
Loading /images/fdnwd288.igz

Ready Bart[fdmsrrc.igz...]
MEMDISK 3.36 2007-02-10 Copyright 2001-2007 H.PETER Anvin
e2c000 0x001a4000
gzip image decompressed addr 0xb7d00000 len 0x002d000
command line: initrd=/images/fdmsrrc.igz ROOT_IMAGE=memdisk

Loading boot sector....booting...000376e only driveng at 0x9f000

FreeDos kernel build 2036 cvs [version Aug 2006 compiled Aug 18 2006]

Kernel compatibility 7.10-WATCOMC-80386 CPU required-FAT32-support
Coyright......

_Init Disk


now I can select
0 Boot Clean
1 Boot UMBPCI (optimal)
2 Boot UMBPCI (semi-defensive)
3 Boot EMM386 (optimal)
4 Boot EMM386 (semi-defensive)
5 Boot no UMB (defensive)
6 Boot no UMB (ultra-defensive)

Volume in drive A is NwDsk340fds
Volume Serial number is 0000-0000

...

Author:  Icecube [ Tue Apr 06, 2010 11:15 am ]
Post subject: 

@ Ubootz
That is UBCD411, not UBCD50RC1.
UBCD50RC1 has all floppy images in /ubcd/images/ and not in /images.
And the tool you mention, isn't in UBCD50RC1 either (was in UBCD411).

Page 1 of 1 All times are UTC - 8 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/