Discussion Locked

Messenger Service

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

When I logged into my server this morning I saw the following message:
Messenger Service
Body: Message from Microsoft to IP address... I then click ok to close this message".
When I checked the event logs the source was Application Popup with event ID:26.

I've never seen this before and I am wondering if it is something that I should be concerned about? Where might I get more information about this? I checked the Event ID (s) listing on the Internet but did not find anything that reallyhelped.

Thanks

5 replies

by andydufrane

Is this the Win2000 Messenger service that allows admins to send messages to client computers? Like before a server reboot and stuff... There have been tons of stories about a new spam program that can access that server messenging service and display a little popup window. The ones that I've seen have all been a similar format:
"Message from blahblah to IP xxx.xxx.xxx.xxx
Check out these free blah blahs!"
and then a little OK button.

I don't know how to stop folks from spamming this way, although some articles have said that a strong firewall can stop the messages.
Hope this helps!
Andy

This discussion is closed to new replies.