| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Windows Messenger is new spam vector | |
|
||
| Time: 05:41 EST/10:41 GMT | News Source: The Register | Posted By: Alex Harris | ||
|
The forces of evil have produced a devilish tool whereby spam can be sent to thousands of Windows users in minutes, in the guise of system alerts. This was brought to our attention by reader Mike MacNeill, who sent us a screenie of a Windows system alert offering him the university diploma of his dreams with "no required tests, classes, books or interviews," in the classic manner. The scam is the brainchild of an outfit called DirectAdvertiser, and leverages the Windows RPC (Remote Procedure Call) function. I downloaded the demo version and played around for a while. My results may not be entirely accurate because I didn't use the full, $700 version, and because I used it on my own network behind a firewall. However, running Ethereal on the box and trying it out revealed packets destined for ports 135 (DCE/RPC), 137 (NetBIOS name service) and 138 (NetBIOS UDP) on the target. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 148 Last | Next |
The time now is
10:08:16 AM
ET.
Any comment problems? E-mail us |
| #1 By 2960 (156.80.64.132) at 10/16/2002 8:38:40 AM |
|
#3,
Sure, you can turn it off. But what about situations where you NEED it ? TL |
| #2 By 7754 (216.160.8.41) at 10/16/2002 12:43:51 PM |
| #6, you don't need to have Windows Networking enabled on your Internet-facing NIC for this "attack" to be successful. As long as the Messenger service is running (and there is no firewall/port blocking) and TCP/IP is bound to the NIC, it will work. |
| #3 By 7826 (65.205.133.2) at 10/16/2002 3:07:15 PM |
| Most ISPs block those ports already. Also, this age of days, nobody should connect to internet without some kind of protection. |
| #4 By 7760 (12.155.143.87) at 10/16/2002 7:21:52 PM |
| I got that "university diploma" pop-up a few nights ago, myself. I promptly closed it and disabled the "Windows Messenger" service. Stinking spammers. |
| #5 By 7760 (12.155.143.87) at 10/16/2002 7:40:52 PM |
| BTW, for anyone who hasn't read the article and may be wondering... this is referring to a networking service called Windows Messenger, NOT the popular instant messanger program. |
| #6 By 1845 (12.254.162.111) at 10/17/2002 3:22:45 AM |
| Thanks, Osprey. I was a little puzzled since I was just scanning the posts. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 148 Last | Next |
The time now is
10:08:16 AM
ET.
Any comment problems? E-mail us |
