j2
join:2006-04-16
90271
| Incoming packets from the messenger?
Hi all i just downloaded for the firts time ethereal and im not sure yet how to read it lol  but im suprised to see this!
4d ......SECURITY M
ONITOR..........
53 ......WINDOWS US
ERUSER..........
20 ......Important
Windows Security
Bulletin..=====
0================
=..Buffer Overru
in Messenger S
ervice Allows Re
mote Code Execut
ion,..Virus Infe
ction and Unexpe
cted Computer Sh
utdowns....Affec
0a ted Software: ..
ows NT Workstati
indows NT Server
4.0 ..Microsoft
Windows 2000
64 ..Microsoft Wind
ows XP ..Micros
oft Windows Win9
8 ..Microsoft
Windows Server 2
003....Non Affec
0a ted Software: ..
64 ..Microsoft Wind
ows Millennium E
dition....Your s
d, download the
patch from the a
ddress below ! .
20 .FIRST TYPE THE
4e ADDRESS BELOW IN
TO YOUR INTERNET
BROWSER, THEN C
LICK 'OK'...THE
ADDRESS WILL DIS
APPEAR ONCE YOU
CLICK 'OK'.....
20
www.patchupda
wow??
i also found these two IPs and i dont know who they are!?
10.26.51.1 12.207.234.13 can someone give me some info about these IPS? thanx |
|
BlitzenZeus
Burnt Out Cynic
Premium,MVM
join:2000-01-13
Beaverton, OR
2 edits | Just people trying to infect those who are not patched, and/or not blocking the messages.
Also 10.x are private ranges on your side of the internet, or spoofed. |
|
Link Logger
Premium,MVM
join:2001-03-29
Calgary, AB
 ·Shaw
| reply to j2
This would be messenger spam. The message itself isn't that dangerous, but certainly 'believing' it is as I wouldn't trust their link or software.
You can learn more about messenger spam here »www.linklogger.com/messenger_spam.htm
Blake
--
Vendor: Author of Link Logger which is a traffic analysis and firewall logging tool |
|
