Home page logo
/

basics logo Security Basics mailing list archives

Re: Net Send popup in Event Viewer
From: "Karma" <steve () frij com>
Date: Sat, 3 May 2003 11:23:28 +1000

yup, you need to switch on your logging options to include the "process
tracking" and possibly "object access"
then you can see who called the process.

You can track the user and then parent process that called the net send
command. You should be aware that many spyware uses the messenger service to
pop up messages, it's probably a good idea to run ad-aware etc.



----- Original Message -----
From: "DeBerry, Casey" <Casey.DeBerry () trizetto com>
To: "Security-Basics (E-mail)" <security-basics () securityfocus com>
Sent: Saturday, May 03, 2003 6:14 AM
Subject: Net Send popup in Event Viewer


Event viewer has an event of :

Applicatiop popup:  Hello:  We are watching you


Are there any means of tracking the source of this net send msg?  This is
an
MS Windows 2000 box.

--------------------------------------------------------------------------
-
FastTrain has your solution for a great CISSP Boot Camp. The industry's
most
recognized corporate security certification track, provides a
comprehensive
prospectus based upon the core principle concepts of security. This ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
--------------------------------------------------------------------------
--





---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]