I get these on various machines that are connected directly to the internet. Typically, I have found that this is occurring by a "NET SEND" command from another machine, in your case the machine located at 63.209.65.212 (providing that this is not your ip address).
There are a number of ways to prevent this. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jonas Fornander Sent: Monday, September 23, 2002 2:54 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] Virus on the server? I woke up this morning with my Imail server running a Messenger service popup window, looping through each IP address on the server. The Event viewer popup message was: Application popup: Messenger Service : Message from CONGRATULATIONS to 63.209.65.212 on 9/22/2002 11:21:05 PM You have just won 25 FREE cigars! To claim your prize, please visit: www.smokeshop.bz Windows explorer was also running in some kind of loop. Has anyone run into this? The only thing I can think of is that someone executed something via the webmail. Has a hacker found a way to compromise the Webmail? Jonas Fornander - System Administrator Netwood Communications, LLC - www.netwood.net Find out why we're better - 310-442-1530 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
