[unisog] Windows Messaging Spam
flynngn at jmu.edu
Fri Oct 11 21:46:24 GMT 2002
The Messenger service is one of the RPC services run
in a svchost.exe process. When I send a message locally,
that process opens a random high UDP port. I don't see
any ports open when I start the Messenger service.
I'd guess the high port opens when someone requests the
services of the Messenger through the MS-RPC port 135.
Security Engineer - Technical Services
James Madison University
More information about the unisog