Try running ad-aware from www.lavasoftusa.com to clean up the spyware = crap. Joe -----Original Message----- From: Jim Kenzig [mailto:jimkenz@xxxxxxxxxxxxxx] Sent: Tuesday, October 15, 2002 7:10 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Windows Messenger via a proxy? I just got the same thing the other day on my server. It really threw me = for a loop. I scanned with every virus scanner known to man and tried to = trace it but got nowhere. I am not sure how the heck they did this but I = turned off the windows messenger service just to be safe. JK -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Scott Ehrlich Sent: Tuesday, October 15, 2002 9:51 AM To: scott@xxxxxxxxxx Subject: [windows2000] Windows Messenger via a proxy? We have a Windows Messenger message pop up on a machine, shown as being sent from another host, but we don't believe anyone from the = "originating" host actually sent the message. The popup offers diplomas. We've only started receiving popups = recently and I've advised on how users can disable the messenger service to get = rid of the annoyance. This particular popup did NOT appear to be a = broadcast, as our two NT 4 servers did not receive the message and they have = messenger service enabled. Thus begs the question - is it possible to use/compromise a Windows host = as a proxy? If so, it may mean the "originating" host is compromised. Thanks for any leads. Scott =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm