Modded 5100 problem

[billybob69]

I've had a problem with one of my modded 5100 modem -

On both my PC and laptop I have a modded 5100 that were both working well until today.

Last night I managed to download a "Zlob" Trojan malware which I think that I managed to remove as my internet connection was working last night and this morning.

I was modding another 5100 for a friend this afternoon and when I plugged in my original modded 5100 on my PC, it couldn't establish a connection.

This is what I've tried so far -
- I tried swapping the ethernet cable for one that I know that works.
- I've tried the modded modem from my laptop (that I know works) on my PC and that doesn't establish a connection (and I get a "the problem occured because the network did not assign a network address to the computer" message when I click on repair connection).
- I've tried the PC modem on my laptop and it establishs a connection, but the only webpage that I can access is a VM page that is a setup for a VM connection.

I'm guessing that the MAC address on the PC modem that I was using has expired and / or the setup on my PC is wrong?

Any ideas?

[bruce2728]

VM keep records of your PC MAC alongside the modem MAC on there records.

I'd change the MAC on the modems and spoof the MAC on your PC's NIC if you haven't already.

hope this helps

[billybob69]

Originally Posted by bruce2728

I'd change the MAC on the modems

Thanks for the reply.
To change the MAC on a 5100, I follow the Haynes manual and I need to plug it into a JTAG cable and go to h**p://192.168.100.1 right?

Only trouble is that when I do that Sigma-X doesn't appear so that I can't change the MAC.
Any ideas?

[nr24103]

Originally Posted by billybob69

Thanks for the reply.
To change the MAC on a 5100, I follow the Haynes manual and I need to plug it into a JTAG cable and go to h**p://192.168.100.1 right?

Only trouble is that when I do that Sigma-X doesn't appear so that I can't change the MAC.
Any ideas?

try 192.168.100.1337/ hope this helps

[billybob69]

Originally Posted by nr24103

try 192.168.100.1337/

Thanks. That doesn't work either.
When I plug the cable and the ethernet cable back in and run ipconfig in dos on my pc and the 'autoconfiguration IP address' begins with 169.

Anybody else able to offer any pointers?

[666]

mac m8

192.168.100.1:1337/

[billybob69]

Originally Posted by 666

mac m8

192.168.100.1:1337/

Thanks for the reply. I'm guessing that it is the MAC also, but I can't seem to get to the page to change the MAC.

I've tried both 192.168.100.1.1337/ and 192.168.100.1:1337/ but neither of them work.

I think that the JTAG cable is functional as when I initially run Schwarze Katze / Blackcat it picks up that the modem is connected.

Is there any settings on the PC that I should be checking?

[fitz]

lol more of a pc problem than modems imo, but here we go:

first open a command prompt and try:
"ping 127.0.0.1" this will test your TCP/IP protocol and winsocks.

if the above is a success (with replies listed) then you need to specify your network adapter's IP address manually. you do this (in xp) by opening "network connections" open the properties of your lan adapter.

open the properties of TCP/IP, in your lan properties.

specify "use the following IP address". enter "192.168.100.10" for IP, "255.255.255.0" for subnet and "192.168.100.1" for gateway.

"ok" out of all that crap, then in command window ping 192.168.100.1 .
That's your modem and it should reply.

then browse to 192.168.100.1 in ie or firefox and you should get your modem status page.

if successful, go to 192.168.100.1:1337 or 192.168.100.1:1338 to get the modem hack page.

cheers, fitz.

EDIT: sorry for the bump everyone

[billybob69]

more of a pc problem than modems imo

I’m thinking that it is PC problem that needs to be fixed first as well. Thanks for the reply.

When following the advice, I'm right in thinking that I am supposed to follow your instructions with just the Ethernet cable plugged in (together with the power to the modem)?

When I “ping” 127.0.0.1, I get the following response -
Ping statistics for 127.0.01
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss)

So I guess that that step is OK?

specify "use the following IP address". enter "192.168.100.10" for IP, "255.255.255.0" for subnet and "192.168.100.1" for gateway.

Do I then leave the “Use the following DNS Server addresses” blank?


When I “ping” 192.168.100.1 with the Ethernet cable, I get the following response –

Ping statistics for 192.168.100.1
Request timed out

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)

So I’m guessing that the ping to 192.168.100.1 isn't working or I used the wrong number?

So I then tried “pinging” 192.168.100.10 with the Ethernet cable and got the following response –
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)

I then browsed to 192.168.100.1 but didn't see the modem access page.


However when I followed the same steps with the modem that I was attempting to flash, I got the same 100% ping results, could access the modem access page but couldn't access the 192.168.100.1:1337 or 192.168.100.1:1337 modem hack page.

Any ideas what this means?

Thanks in advance.

bb69

[fitz]

Hi mate.

You are correct in that "use the following DNS" can be left blank as DNS servers only resolve domain names (eg google.com) to IP addresses. Our tests there used literal IP's and therefore did not require DNS servers. Also all tests should be performed with the ethernet cable connected.

It is important here to determine whether when you tried the ping tests to 192.168.100.1 and 192.168.100.10 (which both failed as you saw) after you had already performed the step of specifing your IP address manually.

If you had already set your IP to 192.168.100.10 and the ping tests to 192.168.100.10 failed, this would indicate a fault with your PC's TCP/IP protocol. The 127.0.0.1 address is a 'loopback' address which pretty much tells the PC to ping itself, regardless of what actual IP address it's using. The result of ping xxx.xxx.xxx.xxx where xxx.xxx.xxx.xxx is the IP you've manually specified should always be the same as the result of ping 127.0.0.1 .

The ping 192.168.100.1 tests comms to your modem rather than your own PC.

It is no suprise that you couldn't access 192.168.100.1:1337 or *:1338 on the unflashed modem, as this page is only enabled by the hacked firmware AFTER flashing.

I hope this has made sense so far. We're in danger of getting in a bit of a mess if we reffer to too many modems here. Let's stick with 1) the pc's modem - hacked but no longer working. 2) the unflashed modem.

To reset all the crap we've done so far on the PC, run the following w/o quotes in a command prompt window "netsh int ip reset crap.txt". Also reset your XP firewall to defaults (network connections > LAN adapter properties > advanced > settings > advanced > restore defaults).

From there, connect the unflashed modem to the PC. Turn both off, turn on modem, wait 30s and power up PC. Test your internet connection and ensure you get the same VM registration page you got with the unhacked modem on your laptop. From there you're in a position to flash the new modem and get web pages through it.

Once that's achieved we can go back to modem 1).

<takes deep breath>

cheers, fitz