virus or hacked?

From: Chris Todd <>
Date: Wed, 20 Aug 2003 09:32:30 -0700

Good morning:
I was wondering if anyone has seen this message on a win2k server
before and might be able to help me


This is the new spam technique using the windows "admin" pop-up

Supposed to be used by an Admin to send messages of some import to all
their users on a particular server.

That the popup showed up means you have some patching to do as well as
some (3 - I think) ports to block on your firewall.

See the NANOG archives for more details.

Gregory Hicks

Message from destroyer to you on 8/19/2003 11:24:53pm
Make this your last pop-up ever Destroy all these pop-up for a

fraction of

the price of our competitors!!!
go to www.

This is all in a plain windows box(gray box with an ok button at the