Messenger Popups

[Tpowell]

How do I stop the messenger popups? They come every 5
minutes and are driving me up a wall.

 

[Carey Frisch [MVP]]

A New Window Appears When You Visit Some Web Sites
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308446

Messenger Service Window That Contains an Internet Advertisement Appears
http://support.microsoft.com/default.aspx?scid=kb;en-us;330904&sd=tech

Free Popup Blockers
http://www.webattack.com/Freeware/misctools/fwpopblock.shtml

Essential Security Tools for Home Office Users
http://www.microsoft.com/technet/tr...l=/technet/columns/security/5min/5min-105.asp

If you wish to solve your pop-up problems once and for
all, consider purchasing and installing a third-party program
designed to do just that:

Norton Internet Security 2004
http://www.symantec.com/sabu/nis/nis_pe/

-- Includes Norton AntiVirus 2004
-- Includes Norton Personal Firewall
-- Includes prevention of annoying web pop-ups
-- Includes Parental Controls
-- All in one, easy-to-install package



--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

--------------------------------------------------------------------------------

 

[geo]

start your internal firewall built into xp

 

[Laudon Williams [MSFT]]

To add one link to Carey's excellent list:
http://www.microsoft.com/protect/

 

[calvin]

Have you tried Start-Programs-Administrative Tools-Services
and then stopping or disabling Messenger?

 

[Guest]

Enabling Windows XP ICF (Internet Connection Firewall) is the way to go:

http://www.microsoft.com/windowsxp/home/using/howto/homenet/icf.asp

 

[Alun Jones [MS MVP]]

Have you tried Start-Programs-Administrative Tools-Services
and then stopping or disabling Messenger?

That's not a complete solution.

There are hordes of malicious packets coming in to this computer.

Disabling Messenger Service does one thing - it prevents you noticing that
those packets are coming in.

It does not stop those packets, nor does it prevent them from harming other
vulnerable services.

Yes, there is a point to reducing the number of unnecessary services that
your system runs, and yes, there is a recently-disclosed vulnerability in
Messenger Service. None of these change the fact that your system is better
protected by installing a firewall than it is by merely disabling Messenger
Service. Installing a firewall prevents those malicious packets from
reaching Messenger Service _or_ any of a dozen other possibly exposed
services and/or applications. [Besides, Messenger Service _is_ necessary to
some applications, and you can be sure that it'll be patched in short order]

And, since Windows XP has a firewall on board, you'd be really stupid to
only disable Messenger Service and think that has fixed your problems.

http://www.microsoft.com/protect has some helpful information on setting up
your firewall.

Disable Messenger Service if you know that you can do without it, but don't
think that this prevents you from needing a firewall, or that it is a
significantly protective measure.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]

 

[Kevin Davis³]

That's not a complete solution.

There are hordes of malicious packets coming in to this computer.

Disabling Messenger Service does one thing - it prevents you noticing that
those packets are coming in.

It also prevents you from having hackers own your system

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-043.asp

Everyone thought I was crazy in the last couple of months in these
forums when I suggested that it just might be possible that there was
a vulnerability in this Service and if not needed it should be turned
off. Who know if there are more? Who do you think will find out
first? You or the hackers?

 

[Alun Jones [MS MVP]]

Everyone thought I was crazy in the last couple of months in these
forums when I suggested that it just might be possible that there was
a vulnerability in this Service and if not needed it should be turned
off. Who know if there are more? Who do you think will find out
first? You or the hackers?

Sure - every piece of software in your computer has bugs in it, and some
percentage of those bugs are remotely exploitable. So we should close down
all programs?

By your logic, you should be computing with a brick.

But we all know that's stupid. You run the tools you use, and you block the
attackers by as many paths as you can. You patch, you firewall, and you
scan. <URL:http://www.microsoft.com/protect> You also disable as many
services as you can _without_ affecting the day to day working of your
computer, or reducing your security.

I maintain that Messenger Service (patched, of course) serves a very
valuable purpose - as everyone here knows, if your firewall fails, and
starts letting packets through, you'll get hit with an advert for sexual
enhancement or firewalls within a few seconds. This should serve as warning
that you need to unplug the computer until you've got your firewall back in
place.

With a firewall that operates correctly, all the buffer overflows that you
might care to imagine in Messenger Service (or other services) are
unavailable to attack by remote computers. However, if you're only going to
disable Messenger Service, and _not_ install a firewall, which is what
you've been suggesting, then you've reduced the ability of attackers to hit
you by - what, something like .01%?

Suggesting that you simply disable Messenger Service is a very small act of
protection, and a firewall is much more protective of your system.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]

 

[Kevin Davis³]

Sure - every piece of software in your computer has bugs in it, and some
percentage of those bugs are remotely exploitable. So we should close down
all programs?

By your logic, you should be computing with a brick.

That's an incorrect interpretation of what I said.

But we all know that's stupid. You run the tools you use, and you block the
attackers by as many paths as you can. You patch, you firewall, and you
scan. <URL:http://www.microsoft.com/protect> You also disable as many
services as you can _without_ affecting the day to day working of your
computer, or reducing your security.

You are re-iterating what I said so you agree with me and don't seem
to realize it.

I maintain that Messenger Service (patched, of course) serves a very
valuable purpose - as everyone here knows, if your firewall fails, and
starts letting packets through, you'll get hit with an advert for sexual
enhancement or firewalls within a few seconds. This should serve as warning
that you need to unplug the computer until you've got your firewall back in
place.

I maintain that the "valuable purpose" that the Messenger Service
provides is a very weak one. There is absolutely no guarantee that
there will be a pop-up message alerting you to your firewall letting
packets through. You are playing russian roulette and increasing your
risk and the vast majority of security experts would agree with me.
If your firewall is wide open to allow these alerts to come in, then
it is also a very real risk that some hacker can first exploit a
serious vulnerability. So you are gambling that you have no
vulnerabilities in the Messenger Service and a benign pop-up will
alert you before any nasty guys get in. You can argue with me on that
point but you would also be arguing with the vast majority of security
experts.

With a firewall that operates correctly, all the buffer overflows that you
might care to imagine in Messenger Service (or other services) are
unavailable to attack by remote computers. However, if you're only going to
disable Messenger Service, and _not_ install a firewall, which is what
you've been suggesting, then you've reduced the ability of attackers to hit
you by - what, something like .01%?

You guys are just too much. Over the top. I have NEVER said to
*just* turn off the Messenger Service. NEVER. I have always agreed
that a firewall should be put in place FIRST.

Suggesting that you simply disable Messenger Service is a very small act of
protection, and a firewall is much more protective of your system.

It would be nice if you actually read my posts. If you really did,
then you would know that I have NEVER advocated only turning off the
Messenger Service.