net send incident

I was at school(college) in my computer science class. I like to send messages to other people with the net send command from the command prompt. Anyways, I sent someone a message trying to tell them how to see all the domains at the university, here is what I typed:

net send computername type net view /domain

where computername is the netbios name of the comp i was sending the message to and "type net view /domain"
was supposed to be the message. Well apparently it didn't take the /domain as part of the message, but took it as me wanting the message sent to the whole domain. When I hit enter every computer in the room made a little ding noise when the message popped up, including my professors. He was writing on the board at the time and when he went back to his computer he just said I don't know what that is and just clicked the X on the popup box. After talking to someone after class they said there are 200 computers on that domain. Hopefully I won't get into trouble, I was just trying to send it to the one person. I guess I'll find out on friday if I'm in trouble. Anyways, I just thought that was a funny story and that you all would get a kick out of it.
Hope it made you feel smart.

instead of /domain i belive that you can use "*" instead. Aslo you said "net view /domain"
when I belive that you ment "NET SEND /DOMAIN".

I was trying to send a message to the person telling them how to see the domains at my school
which would be net view /domain
if I used net send * it probably would have gone to all ten domains instead of the one my comp was on and that would have been worse. Anyways, I wasn't really asking how to do anything I was just sharing a funny and embarrasing story. But thanks anyways.

I don't know why you would get in trouble for that...

That is exactly why we have the messenger service disabled.

I had an instance where a teller was just joking around with another teller and sent them a message... something like: "I'm going to rob you and then go to the racetrack to play some slots." Well, the message didn't go to the intended person, but instead went to a whole subnet. My phone started ringing off the hook. They were all bugged out and I told them that I knew who it was and I'd take care of it. I called the person and scared the living sh17 out of her, and told her that the President called wanting to know who was sending messages like that. She never tried it again...

But then again... after that instance, I just killed the messenger service on all workstations.

It isn't that useful and we only really used it to let users know that their logon hours were expired and that they'd have to save all work and then logoff. Then they got the boot 5 min later.

BTW: If you don't want all of your computers showing up with the "net view" command... simply disable the computer browser service. That computer will no longer show up, nor will it be able to participate in browser elections. (You don't need workstations to do that anyway.)

So is there a chance I'll get yelled at.

the message everyone got was:
type net view

that isn't bad. Hopefully they will think nothing of it.
I'm still kindof scared they might get mad.

LOL< when i did a net send /domain the teacher had his computer up on an projector and when i het enter i have every computer in the room make a ding sound. Then i looked up at the projector screen and there was my message. Lol, i just tried not to smile.

Quote:

---

spools.exe wrote:
LOL< when i did a net send /domain the teacher had his computer up on an projector and when i het enter i have every computer in the room make a ding sound. Then i looked up at the projector screen and there was my message. Lol, i just tried not to smile.

---

were you quoting me or did this happen to you also?

The same thing has happened to me at school, the computer admin thought he was good and the school is secure, i sent the message "Ha ha i know you passwords" he got it on his laptop the same with every one else in the school. He lectured me for about half an hour "You wont get into my laptop again i assure you that" its pretty sad how he auctly thought i "hacked" his laptop.

Hi h3r3tic

Last time I came across that was 1982.....IBM system 38 mid-range OS38/RPG III

Our senior operator was doing a command language programming course (CLP.....mainframers probably call it OCL) He sent a message to all 176 branches telling them that they had to log off in 30 minutes...........The sales director came storming round................I said "we have a UPS that lasts for 30 minutes............12 minutes have elapsed, and I still have to hear from 130 of your guys"............I think that the "bastard sysadmin from Michegan" would have been proud of me.................I got him to send a memo to his guys telling them to sharpen up :D

I modded the proggy so it only sent the message to the system console in future :cool:

Good luck

How would you go about disabling the net send command on a network. If two computers have it shouldn't they be able to use it no matter what? Or do you have all traffic routed through one central computer and filter the stuff on that computer? That seems like the solution, only, with what little knowledge i have I don't know if it's possible.

edit
another question, if a remote comp has port 139 open, can you do a net send to that comp?
If so, that wouldn't be illegal would it, because you're not actually accessing their computer, you are just sending them a message?

thanks for the replies.

Its very easy. Go To START MENU>>RUN>>TYPE "SERVICES.MSC"
Richt click on "Messanger" and goto properties.
Set StartUp Type to DISABLED and click the stop button.

wouldn't that only disable it on your computer, and everyone else on the network would still be able to use it?
That's how I see it. I may be wrong though.

you can have it done through you ISP i belive. If not you have to disable it on each computer by hand. Or atleast thats what i've come to belive.

you can also use disable it in group policy.

Here is a decent little guide...

http://iatservices.missouri.edu/tech...e-sharing.html

Does sending files is no longer supported meen my service provider doesn't allow it?

Thanks for the link phisphreek80, but I didn't really understand it. I found one that I did understand though http://www.theeldergeek.com/messenger_removal.htm.

Quote:

---

another question, if a remote comp has port 139 open, can you do a net send to that comp?

---

what about the question above. Does anyone know the answer.
thanks.

edit

Quote:

---

Does sending files is no longer supported meen my service provider doesn't allow it?

---

who is your service provider and what program were you trying to send a file with?
need more details to answer.

I tried doing the stuff on the link I posted above but it didn't work. So I still don't know how to disable the messenger service without going to each individual computer and doing it manually.

1. Right-click the appropriate OU; ensure that Advanced Features is checked in the View menu.
2. Click the Group Policy tab.
3. Click Add.
4. Click the All Policy tab.
5. Click IATS DISABLE Messenger.
6. Click OK.

this is from the site that phisphreek80 posted and I have no clue what it means. It seems to be specific to their systems or something. If someone can explain the above or give a better solution I'd be greatly appreciative.
Also, my question about doing a net send to remote computers with port 139 open ( is it possible?) is still up for grabs. I don't really want to try it because it doesn't seem smart I just want to know.
Thanks

hhehehehehe nice work just kidding hope you dont get into trouble there sa help command in the command shell which can help you how to handle the NET command try net /? so you can see the command that you can use and try google for more information

I work for a major airline and the same thing happened to me. I wanted to send a insulting message to one of my coworkers who didn't even know there was such a thing as messenger service but it gave me an error so I used the /? switch and one of the things mentioned was the /domain switch that I used next (my god, what was I thinking then) I knew I had made a mistake as soon as I hit enter but it was to late....
2 minutes later someone from IT came rushing over asking my coworker if he was sending messages (because his name was in the message), I told them it wasn't him and they looked at me and said: Oh no it's you again!!!! Why is it always you when stuff like this is happening???
Anyway luckily for me they smiled and went back to work, so next time I will be more carefull.
Funny thing is that my coworker never saw the message because his computer (2 desks away) was in another domain but a whole lot of other people in the building did.

Quote:

---

another question, if a remote comp has port 139 open, can you do a net send to that comp?

---

Only if they have the messenger service running.

Quote:

---

this is from the site that phisphreek80 posted and I have no clue what it means. It seems to be specific to their systems or something. If someone can explain the above or give a better solution I'd be greatly appreciative.

---

That info I gave you is for an active directory environment. You need to be admin to do it. Group policy grants users and groups certain permissions. You can also use it to kill a lot of services.

Looks like I'm not the only one who this has happened to.
phisphreek80, i'm still lost but since I only have 3 computers with windows and one is 98(which makes disabling the messenger out of the question(even though it doesn't seem to be working), leaving only two computers to disable I can see no reason why I can't do it manually. I just wanted to know how to do it from one comp for future reference. Did you look at the link I posted, because it seems like it would work but it didn't.
Oh well, thank you all for your input.

h3r3tic this info might help....

Windows 2000
Click Start-> Settings-> Control Panel-> Administrative Tools->Services
Scroll down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK


Windows XP Home
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK


Windows XP Professional
Click Start->Settings ->Control Panel
Click Administrative Tools
Click Services
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK


Windows NT
Click Start ->Control Panel
Double Click Administrative Tools
Select Services-> Double-click on Messenger
In the Messenger Properties window, select Stop,
Then choose Disable as the Startup Type
Click OK

Windows 98 & ME
Windows Messenger Service cannot be disabled


as for the port 139, it has nothing to do with messaging, this port is a netbios session port for all file and print sharing.

Quote:

---

Windows XP Home
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK


Windows XP Professional
Click Start->Settings ->Control Panel
Click Administrative Tools
Click Services
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK

---

or

start-->run--> services.msc
scroll down till you see messenger
right click then stop.

I think that also works for 2000 also.
:cool:

Yes, If port 139 is not filtered and the message service is running you can net send them(Net send is a netbios function). This is how messenger spammers work. Also, to disable the messenger service via group policy means there is a domain which has its own securtiy policies which are used when logged onto the domain and set by the domain controller. Also using NetBios in conjuction with RPC it is possible to execute commands remotely and basically do whatever you want if you have the proper permissions.


-Maestr0

lol, i remembered this post from a while ago and though i would post my incident that occured today.

I wasmessgina around trying to get the computer next to me to shut down through command prompt. i typed in "shutdown -m <IP> -s -t 1" and noticed that it didn't work. I wanted to see if net was enabeled so i tried "net send <IP> TEST" and it did nothing. Then.... thinking that NET SEND was disabeled i typed "NET SEND /DOMAIN TEST" and pressed ENTER.

The ding of a message was heard throught the room as every computer in my school received that message. I had also failed to realize that if you do not have a name specified its uses you computer name as the sender. My computer happened to be named <Room#>_HS_<ComputerNumber>. The next thing that happened was my computer teacher can running in the room from upstairs and stopped as soon as he saw me. "<MY NAME>" he said. "I had a feeling it was you".

I found it kinda funny. Also kinda sucked.

So did you get into trouble.
I never heard a word about it the next time I went to class.
You would think they wouldn't care, it's really not that big of deal. If it is wrong for you to do it then it should be disabled. Anyways, I feel your pain and satisfaction.