RE: webpopup

2002-10-16 Thread Niki Blowfield - Exchange

I've had these on all my Win2k and XP machines at home

Its titled WEBPOPUP but is actually the messenger service dialog, as if a
net send command was received

-Original Message-
From: Mellott, Bill [mailto:[EMAIL PROTECTED]] 
Sent: 15 October 2002 15:30
To: Exchange Discussions
Subject: RE: webpopup


Umm Ill throw in 2 cents

What do you mean exactly by Webpopup

the fore a mentioned NET SEND by others..I personally would not consider a
Webpopup, just a NET SEND message. I would consider a Webpopup like an
annoying popup you get when surfing the web and you get the credit card
thing'y.

Are you opening IE? on the server?

more detail might help

bill

-Original Message-
From: Watkins V [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 15, 2002 9:00 AM
To: Exchange Discussions
Subject: webpopup


Apologies if this is totally off topic.
All my exchange servers (could be conicidence) have shown webpopup
messages, these are messages sent to the machine by ip address from who
knows where, selling rubbish.  How are they doing it?  Using msg from
command line requires terminal services which I am not running on these
machines.  Any ideas?

Many thanks

Vanessa Watkins
Network Manager
Royal Holloway, University of London
email: [EMAIL PROTECTED]





_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: webpopup

2002-10-15 Thread Andy David

If port 139 is open on their firewall, they have bigger issues than Spam!

-Original Message-
From: Stephen Grant [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, October 15, 2002 9:08 AM
To: Exchange Discussions
Subject: RE: webpopup


I believe this will clear it up for you.

http://www.techtv.com/screensavers/answerstips/story/0,24330,3374542,00.html

Stephen Grant 
IT/IM Officer 
Federal Superannuates National Association 
1052 St. Laurent Blvd. 
Ottawa, ON  K1K 3B4 
tel: (613)745-2559 
fax: (613)745-5457
[EMAIL PROTECTED] 




 -Original Message-
 From: Watkins V [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, October 15, 2002 9:00 AM
 To: Exchange Discussions
 Subject: webpopup
 
 
 Apologies if this is totally off topic.
 All my exchange servers (could be conicidence) have shown webpopup
 messages, these are messages sent to the machine by ip 
 address from who
 knows where, selling rubbish.  How are they doing it?  Using msg from
 command line requires terminal services which I am not 
 running on these
 machines.  Any ideas?
 
 Many thanks
 
 Vanessa Watkins
 Network Manager
 Royal Holloway, University of London
 email: [EMAIL PROTECTED]
 
 
 
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

--
The information contained in this email message is privileged and confidential 
information intended only for the use of the individual or entity to whom it is 
addressed.  If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copy of this message is 
strictly prohibited.  If you have received this email in error, please immediately 
notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or 
email ([EMAIL PROTECTED]) and delete the message.  Thank you.

==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: webpopup

2002-10-15 Thread Watkins V

It isn't open!! Which is a concern...
Thanks
Vanessa

-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]] 
Sent: 15 October 2002 14:12
To: Exchange Discussions
Subject: RE: webpopup


If port 139 is open on their firewall, they have bigger issues than Spam!

-Original Message-
From: Stephen Grant [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, October 15, 2002 9:08 AM
To: Exchange Discussions
Subject: RE: webpopup


I believe this will clear it up for you.

http://www.techtv.com/screensavers/answerstips/story/0,24330,3374542,00.html

Stephen Grant 
IT/IM Officer 
Federal Superannuates National Association 
1052 St. Laurent Blvd. 
Ottawa, ON  K1K 3B4 
tel: (613)745-2559 
fax: (613)745-5457
[EMAIL PROTECTED] 




 -Original Message-
 From: Watkins V [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, October 15, 2002 9:00 AM
 To: Exchange Discussions
 Subject: webpopup
 
 
 Apologies if this is totally off topic.
 All my exchange servers (could be conicidence) have shown webpopup 
 messages, these are messages sent to the machine by ip address from 
 who knows where, selling rubbish.  How are they doing it?  Using msg 
 from command line requires terminal services which I am not
 running on these
 machines.  Any ideas?
 
 Many thanks
 
 Vanessa Watkins
 Network Manager
 Royal Holloway, University of London
 email: [EMAIL PROTECTED]
 
 
 
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


--
The information contained in this email message is privileged and
confidential information intended only for the use of the individual or
entity to whom it is addressed.  If the reader of this message is not the
intended recipient, you are hereby notified that any dissemination,
distribution or copy of this message is strictly prohibited.  If you have
received this email in error, please immediately notify Veronis Suhler
Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
([EMAIL PROTECTED]) and delete the message.  Thank you.


==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: webpopup

2002-10-15 Thread Stephen Grant

Yes, strange behaviour if it isn't showing as open.  I had a Messenger popup occur at 
home twice now even though a port scan shows 139 closed.  I don't know how they are 
getting through.

Steve

 -Original Message-
 From: Watkins V [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, October 15, 2002 9:31 AM
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 It isn't open!! Which is a concern...
 Thanks
 Vanessa
 
 -Original Message-
 From: Andy David [mailto:[EMAIL PROTECTED]] 
 Sent: 15 October 2002 14:12
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 If port 139 is open on their firewall, they have bigger 
 issues than Spam!
 
 -Original Message-
 From: Stephen Grant [mailto:[EMAIL PROTECTED]] 
 Sent: Tuesday, October 15, 2002 9:08 AM
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 I believe this will clear it up for you.
 
 http://www.techtv.com/screensavers/answerstips/story/0,24330,3
 374542,00.html
 
 Stephen Grant 
 IT/IM Officer 
 Federal Superannuates National Association 
 1052 St. Laurent Blvd. 
 Ottawa, ON  K1K 3B4 
 tel: (613)745-2559 
 fax: (613)745-5457
 [EMAIL PROTECTED] 
 
 
 
 
  -Original Message-
  From: Watkins V [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, October 15, 2002 9:00 AM
  To: Exchange Discussions
  Subject: webpopup
  
  
  Apologies if this is totally off topic.
  All my exchange servers (could be conicidence) have shown 
 webpopup 
  messages, these are messages sent to the machine by ip address from 
  who knows where, selling rubbish.  How are they doing it?  
 Using msg 
  from command line requires terminal services which I am not
  running on these
  machines.  Any ideas?
  
  Many thanks
  
  Vanessa Watkins
  Network Manager
  Royal Holloway, University of London
  email: [EMAIL PROTECTED]
  
  
  
  
  
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Archives:   http://www.swynk.com/sitesearch/search.asp
  To unsubscribe: mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
  
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 --
 --
 --
 The information contained in this email message is privileged and
 confidential information intended only for the use of the 
 individual or
 entity to whom it is addressed.  If the reader of this 
 message is not the
 intended recipient, you are hereby notified that any dissemination,
 distribution or copy of this message is strictly prohibited.  
 If you have
 received this email in error, please immediately notify Veronis Suhler
 Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
 ([EMAIL PROTECTED]) and delete the message.  Thank you.
 
 ==
 ==
 ==
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: webpopup

2002-10-15 Thread Mellott, Bill

Umm Ill throw in 2 cents

What do you mean exactly by Webpopup

the fore a mentioned NET SEND by others..I personally would not consider a
Webpopup, just a NET SEND message.
I would consider a Webpopup like an annoying popup you get when surfing
the web and you get the credit card thing'y.

Are you opening IE? on the server?

more detail might help

bill

-Original Message-
From: Watkins V [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 15, 2002 9:00 AM
To: Exchange Discussions
Subject: webpopup


Apologies if this is totally off topic.
All my exchange servers (could be conicidence) have shown webpopup
messages, these are messages sent to the machine by ip address from who
knows where, selling rubbish.  How are they doing it?  Using msg from
command line requires terminal services which I am not running on these
machines.  Any ideas?

Many thanks

Vanessa Watkins
Network Manager
Royal Holloway, University of London
email: [EMAIL PROTECTED]





_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: webpopup

2002-10-15 Thread Eric Sedore

It uses port 445, see discussion from other mailing list below:

These links discuss port 445.  It's apparently used by SMB over TCP/IP,
and is a new feature in Windows 2000/Active Directory (the first link is
an official Microsoft doc, the second is a pretty good plain English
discussion):
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q204279;
http://ntsecurity.nu/papers/port445/


-Eric

-Original Message-
From: Stephen Grant [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, October 15, 2002 10:30 AM
To: Exchange Discussions
Subject: RE: webpopup


Yes, strange behaviour if it isn't showing as open.  I had a Messenger
popup occur at home twice now even though a port scan shows 139 closed.
I don't know how they are getting through.

Steve

 -Original Message-
 From: Watkins V [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, October 15, 2002 9:31 AM
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 It isn't open!! Which is a concern...
 Thanks
 Vanessa
 
 -Original Message-
 From: Andy David [mailto:[EMAIL PROTECTED]]
 Sent: 15 October 2002 14:12
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 If port 139 is open on their firewall, they have bigger
 issues than Spam!
 
 -Original Message-
 From: Stephen Grant [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, October 15, 2002 9:08 AM
 To: Exchange Discussions
 Subject: RE: webpopup
 
 
 I believe this will clear it up for you.
 
 http://www.techtv.com/screensavers/answerstips/story/0,24330,3
 374542,00.html
 
 Stephen Grant
 IT/IM Officer 
 Federal Superannuates National Association 
 1052 St. Laurent Blvd. 
 Ottawa, ON  K1K 3B4 
 tel: (613)745-2559 
 fax: (613)745-5457
 [EMAIL PROTECTED] 
 
 
 
 
  -Original Message-
  From: Watkins V [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, October 15, 2002 9:00 AM
  To: Exchange Discussions
  Subject: webpopup
  
  
  Apologies if this is totally off topic.
  All my exchange servers (could be conicidence) have shown
 webpopup
  messages, these are messages sent to the machine by ip address from
  who knows where, selling rubbish.  How are they doing it?  
 Using msg
  from command line requires terminal services which I am not running 
  on these machines.  Any ideas?
  
  Many thanks
  
  Vanessa Watkins
  Network Manager
  Royal Holloway, University of London
  email: [EMAIL PROTECTED]
  
  
  
  
  
  _
  List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
  Archives:   http://www.swynk.com/sitesearch/search.asp
  To unsubscribe: mailto:[EMAIL PROTECTED]
  Exchange List admin:[EMAIL PROTECTED]
  
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 --
 --
 --
 The information contained in this email message is privileged and 
 confidential information intended only for the use of the individual 
 or entity to whom it is addressed.  If the reader of this
 message is not the
 intended recipient, you are hereby notified that any dissemination,
 distribution or copy of this message is strictly prohibited.  
 If you have
 received this email in error, please immediately notify Veronis Suhler
 Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
 ([EMAIL PROTECTED]) and delete the message.  Thank you.
 
 ==
 ==
 ==
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]