Pretty sure I read in the release notes that it's related to Blaster or the recent MS03-039.
A XPU a month ago provided an update of this signature. Jack -----Original Message----- From: Witkowski,Tytus,WARSAW,GLOBE IT-CC [mailto:[EMAIL PROTECTED] Sent: Thursday, 9 October 2003 9:15 p.m. To: [EMAIL PROTECTED] Subject: [ISSForum] MSRPC - events Hi All On our one network sensor (7.0) inside windows network I receive a lot of events with description MSRPC_RemoteActivate_Bo. Is it connected to MSOutlook client which start communication with Exchange server (port 135) or is it some kind of MSRPC vulnerability (unpatched PC, infected PC)??? br Tytus Witkowski _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
