A file called ident.txt is in the .cab. Here is the contents:
[cabpools]
ServerCount=1
default=1
Server1=http://www.download.windowsupdate.com/msdownload/update/v3-19990518
[v3]
ServerCount=4
default=1
Server1=http://windowsupdate.microsoft.com/R824
Server2=http://www.windowsupdate.com/R824
Server3=http://www.windowsupdate.microsoft.com/R824
Server4=http://windowsupdate.microsoft.com/R824/v31site
[content]
ServerCount=1
default=1
Server1=http://windowsupdate.microsoft.com/v3contentA
[content31]
ServerCount=2
default=1
Root=2
Server1=http://windowsupdate.microsoft.com/R824/v31content
Server2=http://windowsupdate.microsoft.com
[V2Header]
arch=V2Arch
os=V2OS
lcid=V2LCID
browser=V2IE
server=V2SRV
[AUHeader]
arch=AUArch
os=AUOS
lcid=AULCID
browser=AUIE
server=AUSRV
[WUV3Header]
arch=WUV3Arch
os=WUV3OS
lcid=WUV3LCID
browser=WUV3IE
server=WUV3SRV
[QMgrHeader]
arch=QMgrArch
os=QMgrOS
lcid=WUV3LCID
browser=QMgrIE
server=QMgrSRV
[DUHeader]
arch=DUArch
os=DUOS
lcid=WUV3LCID
browser=DUIE
server=DUSRV
[V2SRV]
server=
[AUSRV]
server=
[WUV3SRV]
server=
[QMgrSRV]
server=
[DUSRV]
server=
[V2Arch]
x86=/x86
alpha=/alpha
;rel number is arbitrary but should not be repeated
[AUArch]
x86=/rel1083.11/x86
alpha=/rel1083.11/alpha
ia64=/rel1083.11/ia64
[WUV3Arch]
x86=/V31controls/x86
alpha=/V31controls/alpha
ia64=/V31controls/ia64
[QMgrArch]
x86=/qmgr1109.0/x86
alpha=/qmgr1109.0/alpha
ia64=/qmgr1109.0/ia64
[DUArch]
x86=/DuRel2517/x86
ia64=/DuRel2517/ia64
[V2OS]
w98=
w95=
NT4=
NT5=
[AUOS]
w98=/w9x
w95=/w9x
NT4=
NT5=
mil=/mil
whi=/whi
[WUV3OS]
w98=/w98
w95=/w95
NT4=/nt4
NT5=/nt5
mil=/mil
whi=/whi
[QMgrOS]
w98=/w9x
w95=/w9x
NT4=
NT5=
mil=/mil
whi=/whi
[DuOS]
w98=
w95=
NT4=
NT5=
mil=
whi=
[V2LCID]
ar=/ar
zhtw=/zhtw
zhcn=/zhcn
cs=/cs
da=/da
de=/de
deat=/de
dech=/de
el=/el
el_ms=/el
el_ibm=/el
en=/en
enza=/en
engb=/en
enau=/en
enca=/en
ennz=/en
enie=/en
en_arabic=/en
en_hebrew=/en
en_thai=/en
fi=/fi
fr=/fr
frbe=/fr
frca=/fr
frch=/fr
he=/he
hu=/hu
it=/it
itch=/it
ja=/ja
nec=/ja
ko=/ko
nl=/nl
nlbe=/nl
no=/no
pl=/pl
ptbr=/ptbr
pt=/pt
ru=/ru
sk=/sk
sv=/sv
th=/en
tr=/tr
sl=/sl
es=/es
esmx=/es
esve=/es
esco=/es
espe=/es
esar=/es
esec=/es
escl=/es
[AULCID]
ar=/ar
zhtw=/zhtw
zhcn=/zhcn
cs=/cs
da=/da
de=/de
deat=/de
dech=/de
el=/el
el_ms=/el
el_ibm=/el
en=/en
enza=/en
engb=/en
enau=/en
enca=/en
ennz=/en
enie=/en
en_arabic=/en
en_hebrew=/en
en_thai=/en
fi=/fi
fr=/fr
frbe=/fr
frca=/fr
frch=/fr
he=/he
hu=/hu
it=/it
itch=/it
ja=/ja
nec=/ja
ko=/ko
nl=/nl
nlbe=/nl
no=/no
pl=/pl
ptbr=/ptbr
pt=/pt
ru=/ru
sk=/sk
sv=/sv
th=/en
tr=/tr
sl=/sl
es=/es
esmx=/es
esve=/es
esco=/es
espe=/es
esar=/es
esec=/es
escl=/es
[WUV3LCID]
ar=/ar
zhtw=/zhtw
zhcn=/zhcn
cs=/cs
da=/da
de=/de
deat=/de
dech=/de
el=/el
el_ms=/el
el_ibm=/el
en=/en
enza=/en
engb=/en
enau=/en
enca=/en
ennz=/en
enie=/en
en_arabic=/en
en_hebrew=/en
en_thai=/en
fi=/fi
fr=/fr
frbe=/fr
frca=/fr
frch=/fr
he=/he
hu=/hu
it=/it
itch=/it
ja=/ja
nec=/ja
ko=/ko
nl=/nl
nlbe=/nl
no=/no
pl=/pl
ptbr=/ptbr
pt=/pt
ru=/ru
sk=/sk
sv=/sv
th=/en
tr=/tr
sl=/sl
es=/es
esmx=/es
esve=/es
esco=/es
espe=/es
esar=/es
esec=/es
escl=/es
[V2IE]
ie4=
ie5=
[AUIE]
ie4=
ie5=
[WUV3IE]
ie4=
ie5=
[QMgrIE]
ie4=
ie5=
[DUIE]
ie4=
ie5=
Lead Site Engineer
Computerjobs.com
678.589.2223
-----Original Message-----
From: sanja madan [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 23, 2001 6:44 AM
To: [EMAIL PROTECTED]
Subject: http_head from w2k/win98
hi ..
i have one win98 and 1 win2k professional setup
(without IIS) which are trying to continuously access
the windows update site for a file 'ident.cab'. the
connection is trying to use a http_head .
i have searches for it on the net but havnt been able
to locate anything useful as to how to disable this.
There was a suggestion that this could be code blue.
But the registry settings and files that go along with
code blue are not there on my systems. Besides, both
systems do not have IIS.
Any ideas how i could stop these http_head requests
emanating from the server ??
thanks
sanjay
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
