Home page logo
/

nanog logo nanog mailing list archives

Re: virus or hacked?
From: Jack McCarthy <nanog () jackmccarthy com>
Date: Wed, 20 Aug 2003 11:19:10 -0700 (PDT)


Chris,
Chances are that you're not but...make sure you block the following ports (at a
minimum) at your firewall:

135
137-139
445


If you don't have a firewall, you need to get one installed ASAP.  In the
meantime, install a personal (software) firewall - if the circumstances allow. 
If you are getting pop-up ads on that server, who knows what else is going on.


-Jack






--- Chris Todd <ctodd () westernnews com> wrote:

Good morning:
I was wondering if anyone has seen this message on a win2k server before and
might be able to help me

Message from destroyer to you on 8/19/2003 11:24:53pm
Make this your last pop-up ever Destroy all these pop-up for a fraction of
the price of our competitors!!!
go to www. messagdestroyer.net

This is all in a plain windows box(gray box with an ok button at the bottom
and the X is the upper right corner)

Any help or insight would much appreciated!!

Thanks
Chris Todd
Computer Technician
Western Newspapers, Inc.
(928)775-2499

Resistance is Futile





  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]