For Win95 and WinNT users
Last Updated March 8/98


HAVE YOUR WIN95 OR NT INSTALLATION CD/DISKS available as some steps may require files from them.


[ Win95+Winsock 1.1 Patches ] [ Win95+Winsock 2.2 Patches ] [ WinNT Patches ]

UPDATE:
Winsock 2 Patch is here(NewTear/Bonk/Boink)!

Microsoft has finally released a Winsock 2 patch against the latest round of teardrop variant
nukes(bonk,boink,newtear).



Well, another day, another nuke! It seems another round of DoS(Denial of Service) attacks
have appeared on the scene. For those who haven't heard of it yet, it has been called
by various names, such as bonk,boink,newtear or teardrop2. This exploit of the
buggy windows Tcp/IP implementation causes a crash of windows Tcp/IP stack and a pretty
BSoD(Blue Screen of Death). After the screen Your connection to the net will still be
active however, windows will be unable send/recieve anything. The only way to restore everything
is basically to shut down all your open apps(to save any data to disk) and reboot the system.



The following steps will work to protect most users from TearDrop,Land,Winnuke,
and Ssping
. There are different patches which must be applied depending on whether
or not your running Winsock 1 or Winsock 2.

If your not sure of which winsock you have, open Windows explorer, or some other
File manager type utility and look in your windows\ and windows\system directory's
for a file called "ws2_32.dll". If you find this file, then you ARE running Winsock 2.
Which therefore means if you don't have it you must be running Winsock 1 :)



It is essential you follow the following steps IN ORDER. If you do not you
MAY CAUSE DAMMAGE to your own Tcp/IP setup. Should that occur, uninstall
Tcp/IP(Control Panel/System) and reinstall Tcp/IP and dialup networking from
your Win95 CD.



PROCEED AT YOUR OWN RISK

I take NO responsibility if this does not work for you,
or if you do it out of order and your system becomes unstable.

Be sure that your NOT connected to the internet when you begin this upgrade process
since if your connected some of the files are already in use by windows and you can
easily corrupt essential files if you try to write to them while they are in use :)




Winsock 1.1(Win95) Fix:(fixes Winnuke, jolt, ssping, teardop(variants) & Land )

Step 1: Update Winsock wsockupd.exe ,Reboot
Step 2: Update to DUN 1.2 msdun12.exe ,Reboot
Step 3: Winsock Patch(Jolt,Ssping,TearDrop(bonk/boink/newtear)) vipup11.exe ,Reboot
Step 4: Land Patch for Winsock 1.1vtcpup11.exe ,Reboot


Winsock 2.2(Win 95) Fix:(fixes Winnuke, jolt, ssping, teardop(variants) & Land)

Step 1: Update Winsock wsockupd.exe ,Reboot
Step 2: Update to DUN 1.2 msdun12.exe ,Reboot
Step 3: Winsock 2.2 Upgrade ws2setup.exe ,Reboot
Step 4: Land Patch for Winsock 2 vtcpup20.exe ,Reboot


WinNT 4.0 Fix:(fixes Winnuke, jolt, ssping, teardop(variants) & Land)

Step 1: Install Sp3 nt4sp3_i.exe
Step 2: Install Tearfixi.exe ,Reboot


Download these files & Install them IN THE ORDER SHOWN. Close out
all other programs before installation, reboot your system after you have
completed ALL of the steps outlined above.

If your looking for more technical information on the nukes/exploits listed
above please check out www.irchelp.org a site run by EfNet #IRCHelp.
I have found it a great source of information on IRC as well as the nukes
used to spoil your IRC fun.

Enjoy, GreyFoxx.