Hey yall. I have seen this happening to my windows workstations as well
lately. Here's an article that might shed a little more light on the
subject.

http://mynetwatchman.com/kb/security/articles/popupspam/netsend.htm

J.J.

-----Original Message-----
From: Russell Coker [mailto:russell@;coker.com.au] 
Sent: Monday, October 28, 2002 8:22 AM
To: Scott
Cc: Debian ISP
Subject: Re: port 137 scans


On Mon, 28 Oct 2002 15:11, Scott wrote:
> They are SPAM messages being set to the Windows Messenger service.  We

> got several clients who were blasted with: "Get Your Degree" in a 
> windows pop-up.  There are spam utilities that now do this.

The technical description linked from the Wired article on the topic
says that 
it's port 135.  Does the spam use both ports 135 and 137?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux
packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to