RPC message service?

Gareth Davies gdavies at willowbrook.co.uk
Tue Oct 29 12:21:00 GMT 2002

---- Original Message -----
From: "Christopher R. Hertel" <crh at ubiqx.mn.org>
To: <samba-technical at samba.org>
Sent: Monday, October 28, 2002 10:24 PM
Subject: RPC message service?

> A curious article:
>   http://www.wired.com/news/technology/0,1282,55795,00.html
> It says that the Messenger Service Spammers are using port 135, which
> means that they're not using regular WinPOPUP stuff (the <03> names on
> port 139).  I do, in fact, see connect attempts to port 135 in my home
> firewall logs.  (I think they should be called slimewalls.)
> I'm guessing that they're doing something RPC-related that has, basically,
> the same effect.  I'm just curious to know what it is...

They are they are using Windows messenger..

net send <ip address> "message goes here"


             Shaolin - IT Systems
                     WB Ltd.
.: http://www.security-forums.com :.

More information about the samba-technical mailing list