THE CORRECT (AND ONLY) WAY TO DEAL WITH MESSENGER SERVICE POP-UPS. DON'T LISTEN TO JK - OR ANYONE ELSE!!

Then why is Microsoft turning off Messenger Service by default in XP SP2 and
future releases?
"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:ekqnnflFEHA.624@TK2MSFTNGP10.phx.gbl...
> The *CORRECT* (and *only*) way to deal with these is below: -
>
> Turning off the messenger service is an incredibly
> stupid, idiotic and foolish thing to do. It has no bearing on messenger in
> any way, shape or form. The Messenger Service is what spammers exploit to
> shove porn at you. Read on to learn why disabling it is a bad idea.
>
> If the Messenger service is stopped, messages from the Alerter service
> (notifications from your antivirus software, for example) are not
> transmitted. If the Messenger service is turned off, any services
> that explicitly depend on the Messenger service do not start, and an error
> message is logged in the System event log. For this reason,
> Microsoft strongly recommends that you install a firewall and configure it
> to
> block NetBIOS and RPC traffic instead of turning off the Messenger
> service.
>
> And to think that JK speaks for MS and yet he directly contravenes their
> advice!! DON'T LISTEN TO HIM!!
>
> Do the title bars of these pop-ups read "Messenger Service?"
>
> This particular "sales method" is strikingly similar to the
> "protection" rackets offered to small businesses by organized
> criminals. Yes, it's a scam; no reputable business would need to
> resort to extortion. Particularly since they're trying to sell you a
> type of protection that is already available to you free of charge.
>
> This type of spam has become quite common over the past few
> months, and unintentionally serves as a valid security "alert." It
> demonstrates that you haven't been taking sufficient precautions while
> connected to the Internet. Your data probably hasn't been compromised
> by these specific advertisements, but if you're open to this exploit,
> you may well be open to other threats. Install and use a decent,
> properly configured firewall. (Disabling the messenger service, as
> some people recommend, only hides the symptom, and does nothing to
> secure your machine.) And ignoring or just "putting up with" these
> messages and the problem they represent is particularly foolish.
>
> Messenger Service of Windows
> http://support.microsoft.com/defaul...KB;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
> http://www.microsoft.com/windowsxp/...te/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> Oh, and be especially wary of people who advise you to do nothing
> more than disable the messenger service. Disabling the messenger
> service is a "head in the sand" approach to computer security.
>
> The real problem is not the messenger service pop-ups; they're
> actually providing a useful service by acting as a security alert. The
> true problem is the unsecured computer, and you've been
> advised to merely turn off the warnings. How is this helpful?
>
> Equivalent Scenario 1: Somewhere in a house, a small fire starts,
> and sets off the smoke alarm. You, not immediately seeing any
> fire/smoke, complain about the noise of the smoke detector, and are
> advised to remove the smoke detector's battery and go back to sleep.
>
> Equivalent Scenario 2: You over-exert your shoulder at work or
> play, causing bursitis. After weeks of annoying and sometimes
> excruciating pain whenever you try to reach over your head, you go to
> a doctor and say, while demonstrating the motion, "Doc, it hurts when
> I do this." The doctor, being as helpful as some of your respondents,
> replies, "Well, don't do that."
>
> I think that the people deliberately posting such
> bad advice are hacker-wannabes who have no true interest in helping
> you secure your system, but would rather give you a false sense of
> security while ensuring that your computer is still open to
> exploitation.
>
> Therefore, if Bruce is correct, JK is a hacker. Would you take advice from
> someone whose only interest is damaging your system and compromising your
> online safety?!
>
>
> Don't install NAV - it has a nasty habit of screwing up other things (like
> parts of Office for example).
>
> How JK became a MVP is one of the mysteries of the Universe. I hope that,
> come the next review, he's stripped of his title as he's done nothing
> (that
> I can see) to merit it. Unfortunately, that review is still 6 months away.
> Until then, heed this warning and heed it well - DON'T LISTEN TO JK OR YOU
> WILL END UP REGRETTING IT!
>
>

Fred wrote:
> Then why is Microsoft turning off Messenger Service by default in XP
> SP2 and future releases?

They aren't. Where on earth did you hear that?!

Take your pick of the articles:

http://www.google.com/search?hl=en&...SSENGER+SERVICE

Joe

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

Late last week, America Online acknowledged it taken the drastic and
unprecedented step of programming its software to silently turn off a
Windows service so that it could stem the tide of spam and security
vulnerabilities facing its subscribers.

The Windows Messenger service, enabled by default, allegorically leaves the
door wide open for pop-up ads to pester Windows XP and 2000 users, while
leaving them at risk of security exploits. Now, Microsoft has weighed in and
says it will turn off the service in Windows XP.


--

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
> > Then why is Microsoft turning off Messenger Service by default in XP
> > SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

I have a copy of RC1 Beta and they did.

Following is a quote fromt he release documentation.

"
What existing functionality is changing in Service Pack 2 for Windows XP?
Alerter and Messenger Services Disabled
Detailed description
In previous versions of Windows, the Messenger service is set to start
automatically and the Alerter service is set to manual start. In Service
Pack 2 for Windows XP, both of these services are set to Disabled. No other
changes are made to these services.

"

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

I have a copy of RC1 Beta and they did.

Following is a quote fromt he release documentation.

"

What existing functionality is changing in Service Pack 2 for Windows XP?
Alerter and Messenger Services Disabled
Detailed description
In previous versions of Windows, the Messenger service is set to start
automatically and the Alerter service is set to manual start. In Service
Pack 2 for Windows XP, both of these services are set to Disabled. No other
changes are made to these services.

Why is this change important? What threats does it mitigate?
There have been a number of security vulnerabilities discovered in these
services. While the services are started, they allow incoming network
connections and present an attack surface. This elevates their security
risk. Also, these services are used infrequently in current computing
environments. Because of the number of vulnerabilities discovered, the
additional attack surface that the services present, and the lack of service
use, they are now disabled by default.

What works differently or stops working? Are there any dependencies?
Any applications or services that use the Alerter or Messenger services to
communicate with the user will not be successful.

How do I fix these issues?
There are two possible avenues to resolve the issue. The recommended
resolution is to revise the software to use another method to communicate
with the user. This allows you to communicate with the user in a more secure
way, without having to use the Alerter or Messenger services.

The second way is to have the application start the Alerter or Messenger
service before making use of its services. Information on starting services
can be found in online Help and in MSDN.

Do I need to change my code to work with Service Pack 2 for Windows XP?
If your code makes use of the Messenger or Alerter services, you may need to
change your code. For more information, see "How do I fix these issues?"
above.

"

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

Hi,

Wow. I guess when you're too busy trying to slander others you don't have time to keep up
with the news.
____________________________________________
Jonathan Kay
Microsoft MVP - Windows Messenger/MSN Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com

"Cerridwen" <cerridwen@celticnet.com> wrote in message
news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> Fred wrote:
>> Then why is Microsoft turning off Messenger Service by default in XP
>> SP2 and future releases?
>
> They aren't. Where on earth did you hear that?!
>
>

Amen.

Joe

"Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in message
news:ewb5gknFEHA.624@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> Wow. I guess when you're too busy trying to slander others you don't have
> time to keep up with the news.
> ____________________________________________
> Jonathan Kay
> Microsoft MVP - Windows Messenger/MSN Messenger
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone/
> Messenger Resources - http://messenger.jonathankay.com
>
> "Cerridwen" <cerridwen@celticnet.com> wrote in message
> news:c4c20o$tbu$1@news7.svr.pol.co.uk...
>> Fred wrote:
>>> Then why is Microsoft turning off Messenger Service by default in XP
>>> SP2 and future releases?
>>
>> They aren't. Where on earth did you hear that?!
>>
>>
>
>

Well said :-)

--

"Jonathan Kay [MVP]" <msnewsreplies@jonathankay.com> wrote in message
news:ewb5gknFEHA.624@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> Wow. I guess when you're too busy trying to slander others you don't have
time to keep up
> with the news.
> ____________________________________________
> Jonathan Kay
> Microsoft MVP - Windows Messenger/MSN Messenger
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone/
> Messenger Resources - http://messenger.jonathankay.com
>
> "Cerridwen" <cerridwen@celticnet.com> wrote in message
> news:c4c20o$tbu$1@news7.svr.pol.co.uk...
> > Fred wrote:
> >> Then why is Microsoft turning off Messenger Service by default in XP
> >> SP2 and future releases?
> >
> > They aren't. Where on earth did you hear that?!
> >
> >
>
>

You have issues.