RE: Port 1025 - Network Blackjack

  I don't know why things think 1025 is "Network Blackjack". The Windows RPC stuff tends to assign its services ports just above 1024. 135 is where the "end-point mapper" that will tell a client "the service you want is on my port 1025" lives.

  So the box is apparently running Windows RPC and allows you (and probably anyone else on the Internet) to connect to it. Sounds like a great candidate for W32.Blaster infection, doesn't it? The scans you've seen may well have been attempts to spread the infection to your machine.

David Gillett

> -----Original Message-----