RE: Off topic - But important

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 29 May 2003 06:45:07 -0700

Be extremely careful of accusations. I highly doubt they are from the
google.com site. Google does not allow popup ads.

 

John Tolmachoff MCSE CSSA

Engineer/Consultant

eServices For You

www.eservicesforyou.com

 

-----Original Message-----
From: Rami SIK [mailto:rami@xxxxxxxxxxxxxxx] 
Sent: Thursday, May 29, 2003 6:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Off topic - But important

 

http://www.ISAserver.org

We have seen some spyware programs and/or trojan viruses coming from google
search site via pop-up ad screens. 

So far, I have detected 3 files; syslog.exe, OWMng.exe and tpss.exe.

 

Please check your task manager to see anyone of these running. If so, then
check your registry, and use netstat command to check which of these
listening on what port?

 

I strongly suspect that these come from google search site, if correct what
does google try to? Any idea?

 

 

 

 

--------------------------------------------------------------------

Rami SIK

 

System & Network Administrator

CCNA

 

Kimyatas

Istanbul / Turkey

 

Tel:90-212-334 4963

--------------------------------------------------------------------

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: