[unisog] *NOT* a False alarm - Windows "diplomas" message

Tony Wright wright at wsu.edu
Thu Oct 10 21:31:01 GMT 2002


Ryan Inman trapped the ip address.

On Thu, 10 Oct 2002, Ryan Inman wrote:

> It hit my machine and I was able to capture the IP which was sent to
abuse.
> But, fyi in case it hits you...
>
> IP=148.221.145.177

dup-148-221-145-177.prodigy.net.mx



On Thu, 10 Oct 2002, Stacey Conrad wrote:

> We saw the same thing here today as well.
>
> /stacey/
>
>
> -----Original Message-----
> From: Sims, David [mailto:dsims at clark.edu]
> Sent: Thursday, October 10, 2002 2:30 PM
> To: 'unisog at sans.org'
> Subject: RE: [unisog] *NOT* a False alarm - Windows "diplomas" message
>
>
> We are now seeing this on our NT 4.0 server console.
>
> Unknown at this point where it is coming from.
>
> David Sims...Clark College...Computing Services
> dsims at clark.edu
>
>
> -----Original Message-----
> From: Arnold, Jamie [mailto:harnold at binghamton.edu]
> Sent: Thursday, October 10, 2002 8:51 AM
> To: 'Rita Seplowitz Saltz'; 'unisog at sans.org'
> Subject: RE: [unisog] False alarm - Windows "diplomas" message
>
>
> Nope...it's here as well....same thing....new form of SPAM.
>
> -----Original Message-----
> From: Rita Seplowitz Saltz [mailto:rita at princeton.edu]
> Sent: Thursday, October 10, 2002 9:01 AM
> To: unisog at sans.org
> Subject: [unisog] False alarm - Windows "diplomas" message
>
>
> The incident of the "diplomas" window is not a mass phenomenon, so likely
> has quite a different etiology from the poetry window.  (Possibly a local
> compromised box net-sent it.)
>
> Whew!
>
> Rita Saltz
> Princeton University
>




More information about the unisog mailing list