Full Disclosure mailing list archives
RE: Odd Behavior - Windows Messenger Service
From: David Vincent <david.vincent () mightyoaks com>
Date: Wed, 16 Jul 2003 14:37:18 -0700
this is messenger service spam. the messenger service runs by default out of the box. since it runs as a service, it is running and accepting connections before anyone logs in. you happenned to login with the admin login, i bet if you'd done the same thing with a user account it would have been on that desktop too. those messenger spams are sent to MACHINES not USERS. this is a FEATURE not a bug or a security vuln. if you don't want these, there's TONS of info on how to stop it. turning off the messenger service/installing a firewall/not being stupid and setting up an unprotected machine while connected to the internet are all good options. -d
-----Original Message----- From: morning_wood [mailto:se_cur_ity () hotmail com] Sent: July 16, 2003 1:12 PM To: Martin; full-disclosure () lists netsys com Subject: Re: [Full-disclosure] Odd Behavior - Windows Messenger ServiceI can confirm this behavior. This service is enabled on Windows 2000 and XP by default. I noticed it on my sister's PC after she clicked away 3advertisementpop-ups and growling at the PC. I think that the average user does not know how to disable it. (And btw: NO, the average MS-Windows user is NOT USING anyfirewalls.)more to the point... THERE WAS NO LOGIN PERIOD this was a fresh install.. waiting at the login prompt.. the pop up was there before any user ( admin ) settings initialized or login took place. once again.. this is out of the box install following all prompts, no sharing etc. ( only setting computer name and workgroup )reboot.. sit at login prompt.. login.. pop up was waiting on an uninitialized desktop.. this is my question / issue... NOT my personal security or lack of knowlege about basic networking / security. disabling the service is easy, im reporting on default out of the box behavior, not how to get rid of it or protect myself. please all.. re-read my scenario... donnie _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Odd Behavior - Windows Messenger Service, (continued)
- Re: Odd Behavior - Windows Messenger Service gregh (Jul 19)
- RE: Odd Behavior - Windows Messenger Service Bojan Zdrnja (Jul 19)
- Re: Odd Behavior - Windows Messenger Service gregh (Jul 19)
- Re: Odd Behavior - Windows Messenger Service Thijs Dalhuijsen (Jul 18)
- RE: Odd Behavior - Windows Messenger Service Bojan Zdrnja (Jul 18)
- Re: Odd Behavior - Windows Messenger Service morning_wood (Jul 18)
- RE: Odd Behavior - Windows Messenger Service Bojan Zdrnja (Jul 18)
- RE: Odd Behavior - Windows Messenger Service ops-lists (Jul 17)
- Re: Odd Behavior - Windows Messenger Service morning_wood (Jul 17)
- RE: Odd Behavior - Windows Messenger Service Jay Sulzberger (Jul 16)
- Re: Odd Behavior - Windows Messenger Service morning_wood (Jul 16)
- Re: Odd Behavior - Windows Messenger Service morning_wood (Jul 17)
- Re: Odd Behavior - Windows Messenger Service Neil McKellar (Jul 17)
- Re: Odd Behavior - Windows Messenger Service Ron DuFresne (Jul 17)
- Re: Odd Behavior - Windows Messenger Service Jay Sulzberger (Jul 17)
- Re: Odd Behavior - Windows Messenger Service morning_wood (Jul 17)