[windows2000] Re: Virus/Worm via Messenger Service?

  • From: "Rayneman" <reignofdeath@xxxxxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Fri, 4 Oct 2002 12:25:29 -0400

I periodically get popup messages that are similar to IM messages but claim
to be a Windows Messenger Service or some such thing....I don't remember
installing any such thing but evidently I have some type of messaging
service on this W2K Server machine that can send/receive messages in the
background and I wish to COMPLETELY DISABLE this function.  Please advise me
as to what to do and where to do it.  I'd like to think that I am relatively
proficient in this OS but this is an obvious indication that I am NOT.  And
for those that are curious...they are all spam messages and I'm scared of
what access this IM gives itself in my server.

Thank you in advance.

Ray S.
raynserv@xxxxxxxxx



-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Scott Ehrlich
Sent: Friday, October 04, 2002 9:58 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Virus/Worm via Messenger Service?



Last night around 5pm EST we received a Messenger Service window from a
host called WX2.   Most people, across subnets, received a poem, credited
to Henry Cuyler Bunner (1855-1896) will a hallmark of "Provided by
http://www.ALLprice.info";

Of our two NT 4 domain controllers, one received the message intact, the
other just received "Message from WX2 to <domain controller> on 10/3/2002
<timestamp>" but no body of the message.

Anyone heard of anything like that?

nbtstat shows no such host, as does nslookup.

Thanks for any insight.

Scott


==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm


==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: