On Wednesday, June 09, 2004 6:50 PM [EDT], jef moskot
<[EMAIL PROTECTED]> wrote:

>
> Popping up a message on the machine with the proper IP number of the
> source of the infection sounds useful at best and harmless at
> worst...but is it really harmless?  Could these popups interrupt
> running processes on poorly configured servers and such?
>

No, under Windows NT/2k/XP/2k3 its a system service called Messenger
that handles incoming messages.  All it does is popup a rather intrusive
but harmless dialog box that doesn't block other activity from
continuing.

In Win9x/ME you have to be running Winpopup or one of its variants to
get the message.

Its worth a shot.

I will note that people are welcome to contact me offlist to discuss
possibly sending the AHBL data on infected hosts, since I can get them
added quick.


-- 
Brian Bruns
The Summit Open Source Development Group
Open Solutions For A Closed World / Anti-Spam Resources
http://www.sosdg.org

The Abusive Hosts Blocking List
http://www.ahbl.org



-------------------------------------------------------
This SF.Net email is sponsored by: GNOME Foundation
Hackers Unite!  GUADEC: The world's #1 Open Source Desktop Event.
GNOME Users and Developers European Conference, 28-30th June in Norway
http://2004/guadec.org
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to