Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#124369 - 02/11/2002 09:10 NetBIOS/Windows Messaging spam
g_attrill
old hand

Registered: 14/04/2002
Posts: 1172
Loc: Hants, UK
Anyone had a popup using the "new" spam software going around? I have Messaging switched off at home and use a DSL router at work so haven't been exposed yet.

However I had this one on a web server when I logged in today:



I complained to the ICSTIS, the UK self-regulatory body which controls premium rate phone and text services, should be interesting to see how many other people have had it too.

Gareth


Attachments
123014-txt-spam.gif (151 downloads)


Top
#124370 - 02/11/2002 09:19 Re: NetBIOS/Windows Messaging spam [Re: g_attrill]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31596
Loc: Seattle, WA
Wow, I didn't know they were doing those sorts of things these days.

I would guess that any PC "open" enough to have its messenger service exposed to the internet is at risk of other windows-networking-level hacks, such as things like netBEUI attacks.
_________________________
Tony Fabris

Top
#124371 - 02/11/2002 10:07 Re: NetBIOS/Windows Messaging spam [Re: g_attrill]
oliver
addict

Registered: 02/04/2002
Posts: 691
I've been seeing this alot lately. The thing that bugs me the most about it. Is on my windows machines, it shows the ip address that the sender used. But its always been the ip address of the machine i see the message on!

How can i turn off the messanger service from all my windows boxes?
_________________________
Oliver mk1 30gb: 129 | mk2a 30gb: 040104126

Top
#124372 - 02/11/2002 10:15 Re: NetBIOS/Windows Messaging spam [Re: oliver]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31596
Loc: Seattle, WA
You have to disable the messenger service. Not just stop it, actually disable it so that it doesn't come back again on the next reboot.

Assuming an NT-based box, you do it under Control Panel/Services. Under Windows 2000, it's buried under the Local Computer Management widget somewhere. Under XP, I think you have to rub the Teletibbie's tummy three times sideways to get to the proper screen.

Keep in mind, though, that disabling the messenger service is a band-aid on a MUCH larger problem. The fact the message is appearing at all means that the PC in question is exposed to the internet in ways it should not be exposed. Put that machine behind a proper NAT firewall.
_________________________
Tony Fabris

Top
#124373 - 02/11/2002 18:47 Re: NetBIOS/Windows Messaging spam [Re: tfabris]
BAKup
addict

Registered: 11/11/2001
Posts: 552
Loc: Houston, TX
In reply to:

Under XP, I think you have to rub the Teletibbie's tummy three times sideways to get to the proper screen.




*SPLORT* *drip* *drip*

Ok now you owe me a new keyboard...And a new monitor.

Shame what you said is true though.
_________________________
--Ben
78GB MkIIa, Dead tuner.

Top
#124374 - 02/11/2002 19:06 Re: NetBIOS/Windows Messaging spam [Re: BAKup]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31596
Loc: Seattle, WA
Glad you liked that.

There's nothing I hate worse than how deeply XP buries critical configuration screens. Windows 2000 is almost as bad, but I've managed to work around most of the limitations by using shortcuts and/or copying the proper one-shot utilities over from NT4.
_________________________
Tony Fabris

Top
#124375 - 02/11/2002 21:17 Re: NetBIOS/Windows Messaging spam [Re: tfabris]
FireFox31
pooh-bah

Registered: 19/09/2002
Posts: 2494
Loc: East Coast, USA
Win2k forever!!

Sorry, just had to say that. Haha, last time I said a piece of software was "forever" was Word 6 in Office 4.2. Hell, I still use it! No friggin paper clip shouting at me.
_________________________
-
FireFox31
110gig MKIIa (30+80), Eutronix lights, 32 meg stacked RAM, Filener orange gel lens, Greenlights Lit Buttons green set

Top
#124376 - 03/11/2002 00:35 Re: NetBIOS/Windows Messaging spam [Re: tfabris]
jbauer
veteran

Registered: 08/05/2000
Posts: 1429
Loc: San Francisco, CA
NAT is NOT a firewall...!

- Jon

Top
#124377 - 03/11/2002 08:55 Re: NetBIOS/Windows Messaging spam [Re: jbauer]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31596
Loc: Seattle, WA
NAT is NOT a firewall...!

Right. I should have said behind a "NAT/Firewall router".

While I agree that a NAT server, a Firewall, and a Proxy server are technically three different things, you can often find all three or at least two of the three rolled into the same product. All three are ways to protect yourself against just the sort of internet hacks we're talking about in this thread.
_________________________
Tony Fabris

Top
#124378 - 03/11/2002 09:29 Re: NetBIOS/Windows Messaging spam [Re: tfabris]
g_attrill
old hand

Registered: 14/04/2002
Posts: 1172
Loc: Hants, UK
My boss bought a Sony Vaio <HOMER>mmm... expensive...</HOMER> in Hong Kong while stopping over on his way to Oz - he used it for six months while living down there and *still* had it on the default "Tellytubby" (LOL!) theme when he came back for a short while this month.

I screamed and quickly changed it to the "classic" theme and he seemed pleased - I don't think he thought it was possible to do that! I also switched on ClearType which is probably the best reason for upgrading if you have an LCD screen.

Gareth
PS. I am repenting for running a Windows web server, I hope owning an empeg redresses the balance slightly.

Top
#124379 - 04/11/2002 02:58 Re: NetBIOS/Windows Messaging spam [Re: g_attrill]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5916
Loc: Wivenhoe, Essex, UK
ClearType which is probably the best reason for upgrading if you have an LCD screen.

For me the boot/hibernate/shutdown times are the killer feature. My aging NEC laptop now takes longer to go through it's BIOS startup sequence that it takes XP to resume from a hibernation. It means I can "boot" (i.e. resume from hibernation) in a minute an a half rather than the five minutes boot time under Win2k.

I played with a friend's Sony SRX81 that boots in about 30 seconds with XP, wonderful.
_________________________
Remind me to change my signature to something more interesting someday

Top
#124380 - 04/11/2002 04:35 Re: NetBIOS/Windows Messaging spam [Re: andy]
Roger
carpal tunnel

Registered: 18/01/2000
Posts: 5683
Loc: London, UK
I played with a friend's Sony SRX81 that boots in about 30 seconds with XP, wonderful.

From flicking the switch, my Sony SRX87 gets to the XP Pro login screen in 36 seconds. From there, it's a further 7 seconds until the desktop is usable.

It goes into hibernate in 12 seconds, and is back at the password prompt in 20 seconds from hibernate.

I can't compare it with Win2k on this laptop, since it's never had Win2k installed, but I like it.
_________________________
-- roger

Top
#124381 - 04/11/2002 04:47 Re: NetBIOS/Windows Messaging spam [Re: Roger]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5916
Loc: Wivenhoe, Essex, UK
I notice that Sony also set the default action on closing the screen to hibernate rather than suspend, which makes perfect sense as it is so quick to hibernate and resume.

P.S. I had the model number wrong, the one I was playing with was the SRX51/P, a very nice and small bit of kit. I do hope that Sony make a Tablet PC the same size as the SRX51...
_________________________
Remind me to change my signature to something more interesting someday

Top
#124382 - 04/11/2002 04:57 Re: My laptop's significantly cuter than yours [Re: andy]
Roger
carpal tunnel

Registered: 18/01/2000
Posts: 5683
Loc: London, UK
Yeah, the SRX51 is the UK model number for the SRX87, except that the UK model also has Bluetooth.

Personally, I didn't think Bluetooth was worth £600, so I picked up the US model when I was in San Francisco earlier this year.
_________________________
-- roger

Top
#124383 - 04/11/2002 05:02 Re: My laptop's significantly cuter than yours [Re: Roger]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5916
Loc: Wivenhoe, Essex, UK
Personally, I didn't think Bluetooth was worth £600, so I picked up the US model when I was in San Francisco earlier this year.

How does that effect you if it breaks ? Do Sony have a worldwide warranty ?

I didn't like Sony laptops (except the picture book) until I played with the SRX51, which I fell in love with after having it for a few days. Then I had to give it back to it's owner :-(

I was "playing with it" because I friend bought it to take around the world with her on the 11 month http://www.clipper-ventures.com/ round-the-world yacht race.
_________________________
Remind me to change my signature to something more interesting someday

Top
#124384 - 04/11/2002 06:17 Re: My laptop's significantly cuter than yours [Re: andy]
Roger
carpal tunnel

Registered: 18/01/2000
Posts: 5683
Loc: London, UK
How does that effect you if it breaks ?

I'm shafted if it breaks.

Do Sony have a worldwide warranty ?

I don't think so.
_________________________
-- roger

Top
#124385 - 05/11/2002 16:47 Re: NetBIOS/Windows Messaging spam [Re: g_attrill]
muzza
Pooh-Bah

Registered: 21/07/1999
Posts: 1765
Loc: Brisbane, Queensland, Australi...
this is the second or third time I've gotten a message like this.




Any Idea where they come from?


Attachments
123584-popupspam.jpg (154 downloads)

_________________________
-- Murray I What part of 'no' don't you understand? Is it the 'N', or the 'Zero'?

Top
#124386 - 05/11/2002 17:24 Re: NetBIOS/Windows Messaging spam [Re: muzza]
ricin
veteran

Registered: 19/06/2000
Posts: 1495
Loc: US: CA
See here.
_________________________
Donato
MkII/080000565
MkIIa/010101253
ricin.us

Top
#124387 - 05/11/2002 17:25 Re: NetBIOS/Windows Messaging spam [Re: tfabris]
drakino
carpal tunnel

Registered: 08/06/1999
Posts: 7868
There's nothing I hate worse than how deeply XP buries critical configuration screens. Windows 2000 is almost as bad

2000: Start, Settings, Control Panal, Admin Tools, Services

XP: Start, Control Panal, Admin Tools, Services. XP may be in Category mode for the control panal, requiring a click on either "Switch to Classic View" or "Preformance and Maintaince" to reveal the admin tools.

The universal way with the two is Right Click on My Computer, Manage, Plus by Services and Applications, Services.

For my Windows torture, I'm sold on XP now. The benefits over 2000 outweigh the needed tweaking time at initial install to whip it into shape for a pro user. The Start Panal rocks once it's set up to your liking, and saves space by getting rid of the quick launch area.

There is one annoyning thing about XP that I am still working on. If I go to a LAN party, noone can connect to my box for file shares (or see a list of them), even when I type my specific domain, username, and password in. My 2000 Lan box would work fine away from my domain controller at home. Anyone have some ideas here on the differences? I've browsed the security policies, but can't find anything that fixes it. And yes, guest is enabled.

Top
#124388 - 05/11/2002 17:41 Re: NetBIOS/Windows Messaging spam [Re: drakino]
genixia
Carpal Tunnel

Registered: 08/02/2002
Posts: 3411

Anyone have some ideas here on the differences?


No, but I'm guessing that M$ have deliberately changed something to screw the samba team. Betcha samba.org has details though..
_________________________
Mk2a 60GB Blue. Serial 030102962 sig.mp3: File Format not Valid.

Top
#124389 - 05/11/2002 18:06 Re: NetBIOS/Windows Messaging spam [Re: genixia]
drakino
carpal tunnel

Registered: 08/06/1999
Posts: 7868
No, but I'm guessing that M$ have deliberately changed something to screw the samba team.

The only difference between 2000 and XP that I know of that affected Samba is the certificate authentication policy with domain controllers. Under 2000 it was optional by defauly, XP had it set to mandatory. Beyond that, the typical clear text password authentication issue that older Samba servers required changed is still there. Nothing as far as I can tell about offline dealings with domains.

Top
#124390 - 06/11/2002 15:37 Re: NetBIOS/Windows Messaging spam [Re: drakino]
muzza
Pooh-Bah

Registered: 21/07/1999
Posts: 1765
Loc: Brisbane, Queensland, Australi...
Could it be something with the 'browse master' function?
What version XP have you got?
What machines are you trying to connect to?

BTW. Ricin's link lead me to a site which tests your internet security. Thanks!


Edited by Drakino (12/11/2002 10:07)
_________________________
-- Murray I What part of 'no' don't you understand? Is it the 'N', or the 'Zero'?

Top
#124391 - 06/11/2002 16:32 Re: NetBIOS/Windows Messaging spam [Re: muzza]
jaharkes
enthusiast

Registered: 20/08/2002
Posts: 340
Loc: Pittsburgh, PA
Interesting, it seems unable to figure out what my address is and is testing the ip of some poor uu.net customer.
edit Ahh, figured it out. Muzza you probably want to edit that link you posted. Not everyone needs to see how secure your machine is


Edited by jaharkes (06/11/2002 16:39)
_________________________
40GB - serial #40104051 gpsapp

Top