System Service details for 849a1278deca25e2daa655db9e4eda17

Registry Key

Messenger

Display Name

Messenger

Description

Transmits net send and Alerter service messages between clients and servers. BlackViper.com adds this: This service provides the ability to send messages between clients and servers. This service needs not to be running under normal home conditions. It is also advisable to make this service go away to avoid the possibility of 'net send' messages hitting your computer from the internet. This has nothing to do with MSN Messenger, nor is it WinPopUp. To test for this security vulnerability, at the command prompt, (run: cmd.exe) type: net send 127.0.0.1 hi. If you get a popup 'hi' message, you should disable the Messenger service. If you get an error stating, 'The message alias could not be found on the network,' you are safe. If, for whatever reason, you need the Messenger service running but wish not to have spam popups active, you can disable the particular ports at your firewall. The Messenger service uses UDP ports 135, 137, and 138; TCP ports 135, 139, and 445.

Image Path

%SystemRoot%\System32\svchost.exe -k netsvcs

Image MD5 Hash

8F078AE4ED187AAABC0A305146DE6716

Object Name

LocalSystem