Hey yall. I have seen this happening to my windows workstations as well lately. Here's an article that might shed a little more light on the subject.
http://mynetwatchman.com/kb/security/articles/popupspam/netsend.htm J.J. -----Original Message----- From: Russell Coker [mailto:russell@;coker.com.au] Sent: Monday, October 28, 2002 8:22 AM To: Scott Cc: Debian ISP Subject: Re: port 137 scans On Mon, 28 Oct 2002 15:11, Scott wrote: > They are SPAM messages being set to the Windows Messenger service. We > got several clients who were blasted with: "Get Your Degree" in a > windows pop-up. There are spam utilities that now do this. The technical description linked from the Wired article on the topic says that it's port 135. Does the spam use both ports 135 and 137? -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]