strange hack; hacker using w2k messanger serv to advertise on network

[pollux0]

how is he doing this??? the hacker is using w2k messanger service to advertise on network when a user logs in. I am not sure if he doing this from a single point on the network and it spreads to the remaining network or he is using some sort of scanner and doing it one machine at a time. How can I stop this!!!

please help!!!

 

[GlenJohnson]

I recieved the same thing with my cable modem hooked to a wireless router that I connect my laptop to the internet via the wireless. I think that got at me via the wireless, so I just turned off messeging in the services. Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"Common sense is an instinct for the truth."
Max Jacobs (1876-1944); French writer.

 

[pollux0]

doesnt really solve the problem, does it?

 

[access64]

I got the message too. I am using a dial up connection. Not sure how they are doing it, but sure would like to know

 

[JWFdev]

pollux...

do you audit these programs?

ftp.exe tftp.exe command.com cmd.exe telnet.exe wscript.exe cscript.exe

maybe just doing some auditing... or rename the files and you use the new names and see if the old ones get called. Sincerely,
John Ford

 

[manitou]

I recieved the same message when I logged on to my server. A prompt came up with an advertisement and the options of "OK" and "Cancel".

Now I'm worrying about security.

Manitou

 

[THEMISDEPT]

here's some info on how the hacker's are doing it.
and it's not just hacker their using the messenger feature that MS uses to notify users of system updates and shutdowns.

http://zdnet.com.com/2100-1105-962483.html