Password requested on boot from UBCD

webseitz · **Joined:** Sun Mar 07, 2010 10:14 am **Posts:** 2

I won't break my arm patting myself on the back, but the CD was created and then requested a password to give further on the boot from the disk. Does anyone know what this means?

Icecube · **Joined:** Fri Jan 11, 2008 2:52 pm **Posts:** 1275

It shouldn't ask for a password.
Can you take a screenshot?

webseitz · **Joined:** Sun Mar 07, 2010 10:14 am **Posts:** 2

No, because it is requesting this at boot up and I can not get a screenshot. It is booting the UBCD through a DOS environment, then asking Password:

Icecube · **Joined:** Fri Jan 11, 2008 2:52 pm **Posts:** 1275

Can you take a picture with a digital camera?
Or try UBCD50RC1.

StopSpazzing · **Posted:** Sun Mar 07, 2010 8:07 pm

webseitz wrote:

No, because it is requesting this at boot up and I can not get a screenshot. It is booting the UBCD through a DOS environment, then asking Password:

Make sure you have downloaded from the mirrors listed on the download page or try another mirror. If it works on another mirror report that mirror you originally used, as it may not be the proper version, or it wasnt downloaded completely and not booting properly.

Ubootz · **Joined:** Tue Apr 06, 2010 6:45 am **Posts:** 2

Hi, I have registered right now for posting this issue,

I have had the same problem, requesting a password at boot with UBCD 5.01 RC although.

I had a rootkit implented in the System, very Low Level.

With unattached harddisk, I managed to pack the files extracted to A: from UBCD
to USB drive.

Maybe someone could crosscheck them if they are allright.

http://www.filedump.net/dumped/ubcdbartsfolder1270404759.zip

Greets Mike

Icecube · **Joined:** Fri Jan 11, 2008 2:52 pm **Posts:** 1275

@ Ubootz
The files in the dump you took, aren't from UBCD50RC1.

Ubootz · **Joined:** Tue Apr 06, 2010 6:45 am **Posts:** 2

Strange, then these files must be extracted to A: from the rootkitfiles,

first I unattached the harddisk, then booted with UBCD 501 RC

after that

Code:

Ramdisk at 0xb7f47000, length 0x00067505 
Moving compressed data from 0xb7f47000 to 0xb7e00a00 
gzip image:decompressed addr 0xb7e68000, len 0x00168000: ok

Disk is fd0,1440 k,C/H/S=80/2/18 (FAT/FAT), rw
Using safe Int 15h access to high memory 
code 1340 meminfo 192, cmdline 61, stack 512
Total size needed=2105 bytes, allocating 3K 
Old dos memory at 0x9f000 (map says 0x9fc00), loading at 0x9f000
1588: 0xffff 15E801: 0x3c00 0xb6e6
Int 13 08: Failure, assuming this is the only drive
Drive probing gives drive shift limit: 0x03
old int13 = 9f00000a int 15 =9f0002d1 int1e=9f00051c

Loading boot sector......booting....
.
FreeDos kernel build 2036 cvs [version Aug 2006 compiled Aug 18 2006]

Now the UBCD menu pops out

I select DOS/LINUX Boot Disks
-Dos Boot Disks
-MSRRC: Bart's N/W Disks Clone V3.40
--

Code:

Loading memdisk...
Loading /images/fdnwd288.igz

Ready Bart[fdmsrrc.igz...]
MEMDISK 3.36 2007-02-10 Copyright 2001-2007 H.PETER Anvin
e2c000 0x001a4000
gzip image decompressed addr 0xb7d00000 len 0x002d000
command line: initrd=/images/fdmsrrc.igz ROOT_IMAGE=memdisk

Loading boot sector....booting...000376e only driveng at 0x9f000

FreeDos kernel build 2036 cvs [version Aug 2006 compiled Aug 18 2006]

Kernel compatibility 7.10-WATCOMC-80386 CPU required-FAT32-support
Coyright......

_Init Disk

now I can select
0 Boot Clean
1 Boot UMBPCI (optimal)
2 Boot UMBPCI (semi-defensive)
3 Boot EMM386 (optimal)
4 Boot EMM386 (semi-defensive)
5 Boot no UMB (defensive)
6 Boot no UMB (ultra-defensive)

Volume in drive A is NwDsk340fds
Volume Serial number is 0000-0000

...

Icecube · **Joined:** Fri Jan 11, 2008 2:52 pm **Posts:** 1275

@ Ubootz
That is UBCD411, not UBCD50RC1.
UBCD50RC1 has all floppy images in /ubcd/images/ and not in /images.
And the tool you mention, isn't in UBCD50RC1 either (was in UBCD411).

Password requested on boot from UBCD

Who is online