Active e-mails

From: Don Carr (zl4ds_at_hotmail.com)
Date: 06/30/03

  • Next message: skymike: "security"
    Date: Mon, 30 Jun 2003 01:33:43 -0700
    
    

    I recently had to rebuild an SBS Server after an attack.
    I saved the Exchange mailboxes, 35 Mbytes into a .pst
    archive. When I restored the mail into the new Exchange
    and opened it on a Win XP workstation, as I deleted each
    spam e-mail a user tried to logon to my nice new server.
    one user was "anecdotal" who popped up four times, and
    another who is written down but left at the
    server. "anecdotal" came from a dating service, the
    others from those offering bodily improvement.
    I think they were trying to logon to active something in
    the former server.
    The hack was to open port 3150 and netbios. Sufficient
    traffic built up on the ADSL to warrant investigation.

    Has anyone else had these active spam e-mails. They dont
    bother either Norton or Fprot, but they are mini Trojans.

    Don


  • Next message: skymike: "security"

    Relevant Pages

    • Re: Active e-mails
      ... > I recently had to rebuild an SBS Server after an attack. ... > spam e-mail a user tried to logon to my nice new server. ... > Has anyone else had these active spam e-mails. ...
      (microsoft.public.win2000.security)
    • Re: Complex AD migration
      ... create one new root domain and 2 subdomains. ... On another server, create company1.common.local and on another server ... Copy back AD info and Exchange mailboxes back from the temp.local ... if you've got questions on the scenario I ...
      (microsoft.public.win2000.active_directory)
    • Re: Backups reporting corrupt data: database or database element is corrupt
      ... What errors are you seeing in your Application Log in Event Viewer. ... Microsoft Exchange Support ... > 5.5 server which had a hard drive going bad. ... > the Exchange mailboxes to the new server so I used exmerge ...
      (microsoft.public.exchange.misc)
    • Re: Server Replacement
      ... would be the exchange mailboxes. ... You cannot separate the components using SBS. ... >> Pack" if you want to separate the Windos Small Business Server ...
      (microsoft.public.windows.server.general)
    • Re: Manually moving a mailbox
      ... >mail boxes as concerned it was suggested that each user export their mail to ... >identical domain name and Ip address scheme, just as the old SBS2000, all ... >users will be manually recreated & exchange mailboxes will be recreated. ... (Domain Name, Server Name and IP ...
      (microsoft.public.exchange2000.admin)