Have had a few of our dialup customers complaining about this one.. SNIP from geek tools--------- New "Messenger spam" invades desktops Just when you thought e-mail spam was bad enough, along comes Direct Advertiser software, which can send pop-up messages directly to users' desktops. These pop-up messages appear even if the user is not in e-mail or an Internet browser. The software utilizes Microsoft's Messenger Windows service, which is turned on by default (on WinNT, 2000, and XP systems) and used by administrators to send messages to users on the network. This is different from the MSN Messenger instant message software. http://www.geek.com/news/geeknews/2002Oct/gee20021017016848.htm Kindest Regards Jay Best Orcon Internet - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
in other words its just a net send message afaik however I'm not sure how
accurate that is. it is just running on a larger scale.
Cheers,
Mark
----- Original Message -----
From: "Orcon Support - Jay Best"
Have had a few of our dialup customers complaining about this one..
SNIP from geek tools---------
New "Messenger spam" invades desktops Just when you thought e-mail spam was bad enough, along comes Direct Advertiser software, which can send pop-up messages directly to users' desktops. These pop-up messages appear even if the user is not in e-mail or an Internet browser.
The software utilizes Microsoft's Messenger Windows service, which is turned on by default (on WinNT, 2000, and XP systems) and used by administrators to send messages to users on the network. This is different from the MSN Messenger instant message software.
http://www.geek.com/news/geeknews/2002Oct/gee20021017016848.htm
Kindest Regards
Jay Best Orcon Internet
- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
Its using the Windows Messenger service. See http://www.chebucto.ns.ca/~rakerman/trojan-port-table.html Gordon Smith CCNA Network Operations Manager MoreNet Ltd - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Wed, 2002-10-23 at 15:36, Orcon Support - Jay Best wrote:
Have had a few of our dialup customers complaining about this one..
It is a commercially available direct marketing package, sigh... Most of the Universities got hit a couple of weeks ago (with adverts for fake degrees ;-) and someone tracked down the software responsible. If your are really interested there is an long discussion in the SANS unisog mailing list archives at www.thetheorygroup.com. Blocking upd/tcp 135 at the border kills this activity. -- Russell Fulton, Computer and Network Security Officer The University of Auckland, New Zealand "It aint necessarily so" - Gershwin - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On 23 Oct 2002, Russell Fulton wrote:
It is a commercially available direct marketing package, sigh... Most of the Universities got hit a couple of weeks ago (with adverts for fake degrees ;-) and someone tracked down the software responsible. If your are really interested there is an long discussion in the SANS unisog mailing list archives at www.thetheorygroup.com.
Blocking upd/tcp 135 at the border kills this activity.
Is it a NZ or US spammer? Guess it's the latter, if it's ye olde fake degrees thang. -- Juha Saarinen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
On Wed, 2002-10-23 at 15:36, Orcon Support - Jay Best wrote:
Have had a few of our dialup customers complaining about this one..
The most shocking part about this, is the fact that the site who provide this spamware actually have accurate information on how to 'optout' from receiving these messages. http://www.directadvertiser.com/optout.html -- Jeremy Brooking - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
Jeremy Brooking wrote:
On Wed, 2002-10-23 at 15:36, Orcon Support - Jay Best wrote:
Have had a few of our dialup customers complaining about this one..
The most shocking part about this, is the fact that the site who provide this spamware actually have accurate information on how to 'optout'
...and get your e-mail address/IP sold to the next 'optout' direct marketing campaigner... As a side note, depending on the size of the organization(s), it can be quite funny to troll back through a consolidated syslog ( http://ntsyslog.sourceforge.net ). People say the damnedest things when they think the communications is peer to peer and non-archived... which explains why lots of folks are developing IPSec policies that prevent arbitrary, lateral comms. Do you have any "emergent" IM happening your org? Very probably. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
participants (7)
-
cfb -
Gordon Smith -
Jeremy Brooking -
Juha Saarinen -
Mark Thompson -
Orcon Support - Jay Best -
Russell Fulton