[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [RT] Security Alert -- new attack bypasses firewalls



PureBytes Links

Trading Reference Links

Kent:

The article states "Messenger traditionally uses commonly protected ports
137 and 139, Flynn said the recent pop-ups appear to use port 135, which is
often left unprotected by a firewall because it's a vital conduit for
communicating with a Microsoft service called RPC"

I have Norton's firewall on my computer and have gotten 3 of these popups in
the last 3+ weeks.  I have gone in and changed my settings as Jurik
suggested, and am going to go to the highest settings on Norton and see if
that will prevent them.

>From experience, these popup messages are REALLY annoying - advertising
"University Diplomas"!

Ed

----- Original Message -----
From: "Kent Rollins" <kentr@xxxxxxxxxxxxxx>
To: <realtraders@xxxxxxxxxxxxxxx>; <omega-list@xxxxxxxxxx>
Sent: Wednesday, October 23, 2002 5:04 PM
Subject: Re: [RT] Security Alert -- new attack bypasses firewalls


> One minor correction: this form of spam cannot bypass firewalls.  This
spam
> uses port 135 and if a firewall leaves that port open, only then can the
> spam get thru.  Most firewalls close all ports by default.
>
> Kent
>
>
> ----- Original Message -----
> From: "Mark Jurik" <mark@xxxxxxxxxxxx>
> To: "'Omega List'" <Omega-list@xxxxxxxxxx>; "'Realtraders'"
> <realtraders@xxxxxxxxxxxxxxx>
> Sent: Wednesday, October 23, 2002 3:23 PM
> Subject: [RT] Security Alert -- new attack bypasses firewalls
>
>
>
>
> Seems like where there's a profit to be had, there's a way to be found.
> This time, a spamming agency is selling software that bypasses firewalls
and
> pops up messages on a recipient's computer.   Worms and viruses can be
> expected to follow suit.  For a report on this security breach, go to ...
>
> http://www.itsecure.com.au/news/story.htm?StoryID=254
>
> One way to block this form of attack is to disable the Messenger Service
on
> your computer and disable all non-essential communication bindings.  The
two
> attached pix show settings on my computers.
>
>
> Regards,
> Mark Jurik
>
>
>
> To unsubscribe from this group, send an email to:
> realtraders-unsubscribe@xxxxxxxxxxxxxxx
>
>
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
> To unsubscribe from this group, send an email to:
> realtraders-unsubscribe@xxxxxxxxxxxxxxx
>
>
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>



------------------------ Yahoo! Groups Sponsor ---------------------~-->
Home Selling? Try Us!
http://us.click.yahoo.com/QrPZMC/iTmEAA/jd3IAA/zMEolB/TM
---------------------------------------------------------------------~->

To unsubscribe from this group, send an email to:
realtraders-unsubscribe@xxxxxxxxxxxxxxx

 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/