Re: Messenger
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/11/04
- Next message: David H. Lipman: "Re: Stop redirection to unknown website"
- Previous message: David H. Lipman: "Re: Bloodhound.W32.1"
- In reply to: madunix: "Messenger"
- Next in thread: Bruce Chambers: "Re: Messenger"
- Reply: Bruce Chambers: "Re: Messenger"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 11 Oct 2004 08:38:51 -0400
1) Download the following three items...
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp
Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp
Adaware SE (personal free version)
http://www.lavasoftusa.com/
Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt194.zip
Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.
2) Update Adware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
10) Please report back your results
Dave
"madunix" <madunix@gmail.com> wrote in message news:2svb3sF1qvgbhU1@uni-berlin.de...
| last few days, I began to receive spam messages that
| simply pop up on my LAN computer screens.
| The message it says: Application popup: Messenger Service
| Message from MICROSOFTNETWORKS to WINDOWSUSER on 26/08/25
| Microsoft Security Patch ......... go to www.windowspatch.net.
| I think some one has discovered our LAN and trying to use the
| spamming technique to flood our network based on Windows Messenger.
|
| I stopped this at the moment by disable the messenger service on
| each client.
|
| Please Note:
|
| The Private LAN Branch is connected via ATM to our Head Office.
| All the client running Windows2000 with SP3
|
|
| 1. I tried to trace the source without success because its a spam
| can any one tell me how to trace the source of these messeging services?
| to kick his trash out of the network?
|
| 2. How can I disable the messenger services on my Router
| I want to create an ACL to block udp and NetBIOS inbound?
|
| Any input would be really appreciated.
|
|
|
| Thanks
|
|
- Next message: David H. Lipman: "Re: Stop redirection to unknown website"
- Previous message: David H. Lipman: "Re: Bloodhound.W32.1"
- In reply to: madunix: "Messenger"
- Next in thread: Bruce Chambers: "Re: Messenger"
- Reply: Bruce Chambers: "Re: Messenger"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
