NetBIOS/Windows Messaging spam

Posted by: g_attrill

NetBIOS/Windows Messaging spam - 02/11/2002 09:10

Anyone had a popup using the "new" spam software going around? I have Messaging switched off at home and use a DSL router at work so haven't been exposed yet.

However I had this one on a web server when I logged in today:



I complained to the ICSTIS, the UK self-regulatory body which controls premium rate phone and text services, should be interesting to see how many other people have had it too.

Gareth
Posted by: tfabris

Re: NetBIOS/Windows Messaging spam - 02/11/2002 09:19

Wow, I didn't know they were doing those sorts of things these days.

I would guess that any PC "open" enough to have its messenger service exposed to the internet is at risk of other windows-networking-level hacks, such as things like netBEUI attacks.
Posted by: oliver

Re: NetBIOS/Windows Messaging spam - 02/11/2002 10:07

I've been seeing this alot lately. The thing that bugs me the most about it. Is on my windows machines, it shows the ip address that the sender used. But its always been the ip address of the machine i see the message on!

How can i turn off the messanger service from all my windows boxes?
Posted by: tfabris

Re: NetBIOS/Windows Messaging spam - 02/11/2002 10:15

You have to disable the messenger service. Not just stop it, actually disable it so that it doesn't come back again on the next reboot.

Assuming an NT-based box, you do it under Control Panel/Services. Under Windows 2000, it's buried under the Local Computer Management widget somewhere. Under XP, I think you have to rub the Teletibbie's tummy three times sideways to get to the proper screen.

Keep in mind, though, that disabling the messenger service is a band-aid on a MUCH larger problem. The fact the message is appearing at all means that the PC in question is exposed to the internet in ways it should not be exposed. Put that machine behind a proper NAT firewall.
Posted by: BAKup

Re: NetBIOS/Windows Messaging spam - 02/11/2002 18:47

In reply to:

Under XP, I think you have to rub the Teletibbie's tummy three times sideways to get to the proper screen.




*SPLORT* *drip* *drip*

Ok now you owe me a new keyboard...And a new monitor.

Shame what you said is true though.
Posted by: tfabris

Re: NetBIOS/Windows Messaging spam - 02/11/2002 19:06

Glad you liked that.

There's nothing I hate worse than how deeply XP buries critical configuration screens. Windows 2000 is almost as bad, but I've managed to work around most of the limitations by using shortcuts and/or copying the proper one-shot utilities over from NT4.
Posted by: FireFox31

Re: NetBIOS/Windows Messaging spam - 02/11/2002 21:17

Win2k forever!!

Sorry, just had to say that. Haha, last time I said a piece of software was "forever" was Word 6 in Office 4.2. Hell, I still use it! No friggin paper clip shouting at me.
Posted by: jbauer

Re: NetBIOS/Windows Messaging spam - 03/11/2002 00:35

NAT is NOT a firewall...!

- Jon
Posted by: tfabris

Re: NetBIOS/Windows Messaging spam - 03/11/2002 08:55

NAT is NOT a firewall...!

Right. I should have said behind a "NAT/Firewall router".

While I agree that a NAT server, a Firewall, and a Proxy server are technically three different things, you can often find all three or at least two of the three rolled into the same product. All three are ways to protect yourself against just the sort of internet hacks we're talking about in this thread.
Posted by: g_attrill

Re: NetBIOS/Windows Messaging spam - 03/11/2002 09:29

My boss bought a Sony Vaio <HOMER>mmm... expensive...</HOMER> in Hong Kong while stopping over on his way to Oz - he used it for six months while living down there and *still* had it on the default "Tellytubby" (LOL!) theme when he came back for a short while this month.

I screamed and quickly changed it to the "classic" theme and he seemed pleased - I don't think he thought it was possible to do that! I also switched on ClearType which is probably the best reason for upgrading if you have an LCD screen.

Gareth
PS. I am repenting for running a Windows web server, I hope owning an empeg redresses the balance slightly.
Posted by: andy

Re: NetBIOS/Windows Messaging spam - 04/11/2002 02:58

ClearType which is probably the best reason for upgrading if you have an LCD screen.

For me the boot/hibernate/shutdown times are the killer feature. My aging NEC laptop now takes longer to go through it's BIOS startup sequence that it takes XP to resume from a hibernation. It means I can "boot" (i.e. resume from hibernation) in a minute an a half rather than the five minutes boot time under Win2k.

I played with a friend's Sony SRX81 that boots in about 30 seconds with XP, wonderful.
Posted by: Roger

Re: NetBIOS/Windows Messaging spam - 04/11/2002 04:35

I played with a friend's Sony SRX81 that boots in about 30 seconds with XP, wonderful.

From flicking the switch, my Sony SRX87 gets to the XP Pro login screen in 36 seconds. From there, it's a further 7 seconds until the desktop is usable.

It goes into hibernate in 12 seconds, and is back at the password prompt in 20 seconds from hibernate.

I can't compare it with Win2k on this laptop, since it's never had Win2k installed, but I like it.
Posted by: andy

Re: NetBIOS/Windows Messaging spam - 04/11/2002 04:47

I notice that Sony also set the default action on closing the screen to hibernate rather than suspend, which makes perfect sense as it is so quick to hibernate and resume.

P.S. I had the model number wrong, the one I was playing with was the SRX51/P, a very nice and small bit of kit. I do hope that Sony make a Tablet PC the same size as the SRX51...
Posted by: Roger

Re: My laptop's significantly cuter than yours - 04/11/2002 04:57

Yeah, the SRX51 is the UK model number for the SRX87, except that the UK model also has Bluetooth.

Personally, I didn't think Bluetooth was worth £600, so I picked up the US model when I was in San Francisco earlier this year.
Posted by: andy

Re: My laptop's significantly cuter than yours - 04/11/2002 05:02

Personally, I didn't think Bluetooth was worth £600, so I picked up the US model when I was in San Francisco earlier this year.

How does that effect you if it breaks ? Do Sony have a worldwide warranty ?

I didn't like Sony laptops (except the picture book) until I played with the SRX51, which I fell in love with after having it for a few days. Then I had to give it back to it's owner :-(

I was "playing with it" because I friend bought it to take around the world with her on the 11 month http://www.clipper-ventures.com/ round-the-world yacht race.
Posted by: Roger

Re: My laptop's significantly cuter than yours - 04/11/2002 06:17

How does that effect you if it breaks ?

I'm shafted if it breaks.

Do Sony have a worldwide warranty ?

I don't think so.
Posted by: muzza

Re: NetBIOS/Windows Messaging spam - 05/11/2002 16:47

this is the second or third time I've gotten a message like this.




Any Idea where they come from?
Posted by: ricin

Re: NetBIOS/Windows Messaging spam - 05/11/2002 17:24

See here.
Posted by: drakino

Re: NetBIOS/Windows Messaging spam - 05/11/2002 17:25

There's nothing I hate worse than how deeply XP buries critical configuration screens. Windows 2000 is almost as bad

2000: Start, Settings, Control Panal, Admin Tools, Services

XP: Start, Control Panal, Admin Tools, Services. XP may be in Category mode for the control panal, requiring a click on either "Switch to Classic View" or "Preformance and Maintaince" to reveal the admin tools.

The universal way with the two is Right Click on My Computer, Manage, Plus by Services and Applications, Services.

For my Windows torture, I'm sold on XP now. The benefits over 2000 outweigh the needed tweaking time at initial install to whip it into shape for a pro user. The Start Panal rocks once it's set up to your liking, and saves space by getting rid of the quick launch area.

There is one annoyning thing about XP that I am still working on. If I go to a LAN party, noone can connect to my box for file shares (or see a list of them), even when I type my specific domain, username, and password in. My 2000 Lan box would work fine away from my domain controller at home. Anyone have some ideas here on the differences? I've browsed the security policies, but can't find anything that fixes it. And yes, guest is enabled.
Posted by: genixia

Re: NetBIOS/Windows Messaging spam - 05/11/2002 17:41


Anyone have some ideas here on the differences?


No, but I'm guessing that M$ have deliberately changed something to screw the samba team. Betcha samba.org has details though..
Posted by: drakino

Re: NetBIOS/Windows Messaging spam - 05/11/2002 18:06

No, but I'm guessing that M$ have deliberately changed something to screw the samba team.

The only difference between 2000 and XP that I know of that affected Samba is the certificate authentication policy with domain controllers. Under 2000 it was optional by defauly, XP had it set to mandatory. Beyond that, the typical clear text password authentication issue that older Samba servers required changed is still there. Nothing as far as I can tell about offline dealings with domains.
Posted by: muzza

Re: NetBIOS/Windows Messaging spam - 06/11/2002 15:37

Could it be something with the 'browse master' function?
What version XP have you got?
What machines are you trying to connect to?

BTW. Ricin's link lead me to a site which tests your internet security. Thanks!
Posted by: jaharkes

Re: NetBIOS/Windows Messaging spam - 06/11/2002 16:32

Interesting, it seems unable to figure out what my address is and is testing the ip of some poor uu.net customer.
edit Ahh, figured it out. Muzza you probably want to edit that link you posted. Not everyone needs to see how secure your machine is