[windows2000] Re: Windows Messenger via a proxy?

  • From: Jim Kenzig <jimkenz@xxxxxxxxxxxxxx>
  • To: windows2000@xxxxxxxxxxxxx
  • Date: Tue, 15 Oct 2002 10:10:26 -0400

I just got the same thing the other day on my server. It really threw me for
a loop.  I scanned with every virus scanner known to man and tried to trace
it but got nowhere. I am not sure how the heck they did this but I turned
off the windows messenger service just to be safe.

-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Scott Ehrlich
Sent: Tuesday, October 15, 2002 9:51 AM
To: scott@xxxxxxxxxx
Subject: [windows2000] Windows Messenger via a proxy?

We have a Windows Messenger message pop up on a machine, shown as being
sent from another host, but we don't believe anyone from the "originating"
host actually sent the message.

The popup offers diplomas.   We've only started receiving popups recently
and I've advised on how users can disable the messenger service to get rid
of the annoyance.  This particular popup did NOT appear to be a broadcast,
as our two NT 4 servers did not receive the message and they have messenger
service enabled.

Thus begs the question - is it possible to use/compromise a Windows host as
a proxy?  If so, it may mean the "originating" host is compromised.

Thanks for any leads.


To Unsubscribe, set digest or vacation
mode or view archives use the below link.


Other related posts: