[60975] in North American Network Operators' Group
Re: virus or hacked?
daemon@ATHENA.MIT.EDU (Jack McCarthy)
Wed Aug 20 14:29:57 2003
Date: Wed, 20 Aug 2003 11:19:10 -0700 (PDT)
From: Jack McCarthy <nanog@jackmccarthy.com>
Reply-To: nanog@jackmccarthy.com
To: nanog@merit.edu
Cc: ctodd@westernnews.com
In-Reply-To: <8F0DB37505A4D61192F100508B55E6821C8A39@WNIEX01>
Errors-To: owner-nanog-outgoing@merit.edu
Chris,
Chances are that you're not but...make sure you block the following ports (at a
minimum) at your firewall:
135
137-139
445
If you don't have a firewall, you need to get one installed ASAP. In the
meantime, install a personal (software) firewall - if the circumstances allow.
If you are getting pop-up ads on that server, who knows what else is going on.
-Jack
--- Chris Todd <ctodd@westernnews.com> wrote:
>
> Good morning:
> I was wondering if anyone has seen this message on a win2k server before and
> might be able to help me
>
> Message from destroyer to you on 8/19/2003 11:24:53pm
> Make this your last pop-up ever Destroy all these pop-up for a fraction of
> the price of our competitors!!!
> go to www. messagdestroyer.net
>
> This is all in a plain windows box(gray box with an ok button at the bottom
> and the X is the upper right corner)
>
> Any help or insight would much appreciated!!
>
> Thanks
> Chris Todd
> Computer Technician
> Western Newspapers, Inc.
> (928)775-2499
>
> Resistance is Futile
>
>
>
