Re: Source of Windows PopUp SPAM

From: Nick FitzGerald (nick@virus-l.demon.co.uk)
Date: Thu Oct 17 2002 - 14:37:05 PDT

Next message: H C: "Re: HTTP attack looking for /sumthin ?"

Previous message: Esler, Joel: "RE: HTTP attack looking for /sumthin ?"
In reply to: Michael Katz: "Re: Source of Windows PopUp SPAM"
Next in thread: Brenna Primrose: "RE: Source of Windows PopUp SPAM"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Michael Katz <mikeat_private> replied to Ron Trenka:

> >Anyone have a way to disable this on W2K and NT 4.0 servers?
> 
> Stop and disable the Messenger service.

That will certainly do it but may remove other "useful" functionality 
that depends on the Messenger service for delivering system alerts 
(AV software, various system monitoring/alerting tools, etc).

If you'd rather keep (some of) that functionality, read the end of 
the following page (a really good link originally posted by Gary 
Flynn) where binding services to specific interfaces is described:

   http://www.hsc.fr/ressources/breves/min_srv_res_win.en.html


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: H C: "Re: HTTP attack looking for /sumthin ?"
Previous message: Esler, Joel: "RE: HTTP attack looking for /sumthin ?"
In reply to: Michael Katz: "Re: Source of Windows PopUp SPAM"
Next in thread: Brenna Primrose: "RE: Source of Windows PopUp SPAM"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Oct 17 2002 - 15:31:12 PDT