Net Send and Messenger Service

[NightHog]

Is there a way to programatically intercept a Net Send command before the
Messenger Service popup appears?
I need to log the sender and the message text.

How does the Messenger Service works?
Has anyone tried to write a program replacing Message Service?

To write an application listening to port 139 will not work because it is in
used by NetBios.
Is there a workaround?

Thanks.

 

[Jared Parsons [MSFT]]

You could open a raw socket up and manually parse out all of the packets.
That wouldn't prevent the message box from popping up but it would allow you
to log it.