Re: messenger service spam -- though net client disabled?

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam@hydro.com)
Date: 10/10/02


From: "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com>
Date: Thu, 10 Oct 2002 08:01:55 +0200


Sinuously wrote:

> I run Windows 2000 Professional. I just got some advertising spam
> through the "messenger service" popup, and though I do believe that I
> can stop this sort of thing by disabling messenger service via the
> services menu, I am concerned -- because the spam was received even
> though "client for microsoft networking" is disabled on my outward
> facing network adapter.
>
> 1.) Previously, I had thought (perhaps incorrectly) that disabling
> microsoft networking would prevent such intrusions. A lot of posted
> advice regarding this sort of spam mentions disabling networking as a
> possible precaution -- but if so, how could I possibly get this spam?
> Is messenger service listening on the port directly?
>
> 2.) Also, I have disabled, but not completely removed the client for
> microsoft networking component, and the same for the file sharing
> component. This is because I have an inward facing network adapter
> for file sharing on my internal network. But as I said before, both
> file sharing and net client ARE DISABLED on the outward facing
> adapter. Polyana says that receiving information in the form of spam
> does not necessarily imply that sensitive information will flow out by
> the same route. So how seriously should I worry about my system being
> exposed to intruders vis-a-vis the client for networking, or the file
> sharing component, when they are in fact disabled?

Hi

To stop this, you need to disabling the messenger service (or remove the TPC/IP
protocol from your computer ;-). And sensitive information will not flow out by
the same route as Polyana says.

--
torgeir
Microsoft MVP Scripting and WMI
Porsgrunn Norway


Relevant Pages

  • Re: messenger service spam -- though net client disabled?
    ... > through the "messenger service" popup, ... > can stop this sort of thing by disabling messenger service via ... I am concerned -- because the spam was received ... > microsoft networking would prevent such intrusions. ...
    (microsoft.public.win2000.security)
  • messenger service spam -- though net client disabled?
    ... I just got some advertising spam ... through the "messenger service" popup, and though I do believe that I ... I had thought that disabling ... microsoft networking would prevent such intrusions. ...
    (microsoft.public.win2000.security)
  • Re: Messenger Service spam problems again
    ... After disabling the ... windows firewall I am getting the classic spam through windows ... What can be causing the spam from the messenger service ...
    (microsoft.public.windowsxp.general)
  • Re: Q. Some Internet bug stopped by diabling the Messenger Service
    ... >> generated from the Windows environment. ... They are spam, like most everything else on the web. ... >(Merely disabling the messenger service, as some people recommend, only ...
    (microsoft.public.win2000.new_user)
  • Re: Administrator account hijacked?
    ... Disabling NDR on Exchange 2003 ... Non-delivery reports have a very legitimate purpose and are used to notify senders of any errors that may have been encountered during message delivery. ... Most anti-spam software does not attempt to filter non-delivery reports for spam content. ...
    (microsoft.public.windows.server.sbs)