Messenger

D

Daniel Louwrens

Would someone please remind me how to turn off Messenger or messaging
service so I do not keep getting those pop ups.

thanks

Daniel
 
P

Parry

Hi,

When Windows Messenger Service windows pop up continuously on your

screen, disable the Messenger Service in Windows XP to resolve the

problem. You can disable the Windows Messenger Service by following

these steps:



1. Click Start, Settings, and Control Panel.

2. Click Performance and Maintenance.

3. Click Administrative Tools.

4. Double-click Services.

5. Scroll down and select Messenger.

6. Right-click the highlighted line and choose Properties.

7. Click the Stop button.

8. Select Disable or Manual in the Startup Type scroll bar.

9. Click OK.



Alternatively, you can follow these steps to disable Messenger Services

from Windows:



1. Click Start and Run.

2. Type services.msc in the Open box and click OK

3. Scroll down to Messenger in the right pane.

4. Double-click Messenger and click the General tab.

5. Under Service Status, click the Stop button.

6. In the Startup Type drop-down box, select Disable.

7. Click Apply and OK.

8. Restart the computer.



Windows Messenger Service windows should no longer pop up on your screen.

Parry
 
D

David Candy

This is silly advice. The problem isn't with messenger. It's because you have holes open in your security. EG You are networking with the world.
 
C

Cerridwen

Parry wrote:

Well there's only one thing I can conclude from that - Parry's a hacker. Why
else would he be posting such foolhardy 'advice'?! The *CORRECT* (and only)
solution is below (courtesy of MVP Bruce Chambers).

If the Messenger service is stopped, messages from the Alerter service
(notifications from your antivirus software, for example) are not
transmitted. If the Messenger service is turned off, any services that
explicitly depend on the Messenger service do not start, and an error
message is logged in the System event log. For this reason,
Microsoft recommends that you install a firewall and configure it to block
NetBIOS and RPC traffic instead of turning off the Messenger service.

This particular "sales method" is strikingly similar to the "protection"
rackets offered to small businesses by organized criminals. Yes, it's a
scam; no reputable business would need to resort to extortion. Particularly
since they're trying to sell you a type of protection that is already
available to you free of charge.

This type of spam has become quite common over the past few months, and
unintentionally serves as a valid security "alert." It demonstrates that you
haven't been taking sufficient precautions while connected to the Internet.
Your data probably hasn't been compromised by these specific advertisements,
but if you're open to this exploit, you may well be open to other threats.
Install and use a decent, properly configured firewall. (Disabling the
messenger service, as some people recommend, only hides the symptom, and
does nothing to secure your machine.) And ignoring or just "putting up
with" these messages and the problem they represent is particularly
foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise you to do nothing more
than disable the messenger service. Disabling the messenger service is a
"head in the sand" approach to computer security.

The real problem is not the messenger service pop-ups; they're actually
providing a useful service by acting as a security alert. The true problem
is the unsecured computer, and you've been advised to merely turn off the
warnings. How is this helpful?

Equivalent Scenario 1: Somewhere in a house, a small fire starts, and
sets off the smoke alarm. You, not immediately seeing any fire/smoke,
complain about the noise of the smoke detector, and are advised to remove
the smoke detector's battery and go back to sleep.

Equivalent Scenario 2: You over-exert your shoulder at work or play,
causing bursitis. After weeks of annoying and sometimes excruciating pain
whenever you try to reach over your head, you go to a doctor and say, while
demonstrating the motion, "Doc, it hurts when I do this." The doctor, being
as helpful as some of your respondents, replies, "Well, don't do that."

I'm beginning to think that the people deliberately posting such bad advice
are hacker-wannabes who have no true interest in helping you secure your
system, but would rather give you a false sense of security while ensuring
that your computer is still open to exploitation.
 
D

DILIP

I agree, the problem isn't with messenger. But let's remember that running
unnecessary services is not good for security either - a barebones Windows
OS can run with as less as 6 processes at boot. I would say get a firewall,
and disable the service anyway
 
C

Cerridwen

DILIP said:
I agree, the problem isn't with messenger. But let's remember that
running unnecessary services is not good for security either - a
barebones Windows OS can run with as less as 6 processes at boot. I
would say get a firewall, and disable the service anyway

More stupid advice.

If the Messenger service is stopped, messages from the Alerter service
(notifications from your antivirus software, for example) are not
transmitted. If the Messenger service is turned off, any services that
explicitly depend on the Messenger service do not start, and an error
message is logged in the System event log. For this reason, Microsoft
strongly recommends that you install a firewall and configure it to block
NetBIOS and RPC traffic instead of turning off the Messenger service.
 
D

David Candy

Type regedit in Start Run
navigate here
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and here
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and tell me what's under them.
 
D

David Candy

Ignore, posted to wrong thread.

--
----------------------------------------------------------
http://www.g2mil.com/Dec2003.htm
Type regedit in Start Run
navigate here
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and here
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
and tell me what's under them.
 
K

Kevin Davis³

Why? Turn your firewall on and remove NetBIOS from you connection.

Because Microsoft advises you to. They have been pressured by
knowledgable security organizations to change their approach on this.
You may find it interesting that Microsoft is turning off the
Messenger Service by default in SP2

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp

And Don't forget that the Messenger Service would also provide a
useful service to hackers if it is not patched:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-043.asp

Setup a firewall first, but if you don't need the Messenger Service,
turn it off. If you need it, patch it. You would also be well
advised to spend $50 and buy a home router.

http://www.infoworld.com/article/03/10/28/HNmessengeroff_1.html

http://www.pcworld.com/news/article/0,aid,113321,tk,dn110703X,00.asp

http://news.com.com/2100-7355_3-5095935.html

http://www.cnn.com/2003/TECH/internet/11/07/microsoft.popup.reut/index.html
 
B

Bruce Chambers

Greetings --

This type of spam has become quite common over the past year or
so, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you most definitely open to other threats, such as the Blaster Worm
that still haunts the Internet. Install and use a decent, properly
configured firewall. (Merely disabling the messenger service, as some
people recommend, only hides the symptom, and does little or nothing
to truly secure your machine.) And ignoring or just "putting up with"
the security gap represented by these messages is particularly
foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure
UDP ports 135, 137, and 138 and TCP ports 135, 139, and 445 are _all_
blocked. You may also disable Inbound NetBIOS (NetBIOS over TCP/IP).
You'll have to follow the instructions from firewall's manufacturer
for the specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
B

Bruce Chambers

Greetings --

I realize that you're trying to help, and that such an intent is
commendable, but please don't post potentially harmful advice.

Disabling the messenger service, as you advise, is a "head in the
sand" approach to computer security that leaves the PC vulnerable to
threats such as the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
C

CS

I guess then you and Bruce would consider Microsoft hackers too since
they also advise home users to turn off the Messenger Service?

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp
I agree with you. It's absolutely silly to run the messenger service
in a stand alone machine at home. Granted, one should NOT get on the
net without a firewall and virus software, however, some of the
remarks I've seen from so called informed posters regarding the
messenger service are just plain out of line.

I advise everyone who does not need the messenger service to turn it
off. BTW, you can't possibly take anything serious from lady
"Cerridwen". At least Mr. Chambers does offer some good advice once
in awhile......

Regards.
 
D

David Candy

Yes. They are propaganda driven. They insist on making every connection a network connection. THAT IS THE PROBLEM. You are networking with the world.

You are refusing to configure your computer. As messenger only works on networks, and the internet shouldn't have access to a network connection, there is no issue. If you can get popups then people can delete your hard drive, logon, and other things.

This is because XP is designed solely for corporate use. Therefore it will assume you will connect to a domain controller.
 
A

Alex Nichol

Kevin said:
Because Microsoft advises you to. They have been pressured by
knowledgable security organizations to change their approach on this.
You may find it interesting that Microsoft is turning off the
Messenger Service by default in SP2


Because it is indicating that the machine is open to the world through
that NetBIOS opening, which should be shut (MS are now having it shut by
default in later versions of their Firewall).

Once that is done, disabling the Messenger Service is not *needed*, but
as it will not be getting any use except in serious business networks,
it is better off by default, on the grounds of economy
 
K

Kevin Davis³

This is because XP is designed solely for corporate use. Therefore it will assume you will connect to a domain controller.

You mean XP Pro only of course since XP Home was not even designed to
log onto a Windows domain.
 
K

Kevin Davis³

Because it is indicating that the machine is open to the world through
that NetBIOS opening, which should be shut (MS are now having it shut by
default in later versions of their Firewall).

Once that is done, disabling the Messenger Service is not *needed*,

Yes, it is needed if you want good security. It's called hardening
your system and part of security 101 - Defense in Depth.

If you want to put all your eggs in one basket and solely rely on your
software firewall to be your defense, be my guest. Software firewalls
like anything else are susceptible to vulnerabilities and have been
known to have them in the past and there's no rational reason to
believe that now all of the sudden, magically, all of those
vulnerabilities have been resolved and they are all bulletproof.
but
as it will not be getting any use except in serious business networks,
it is better off by default, on the grounds of economy

As well as on the grounds of better security.
 
K

Kevin Davis³

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?

Don't forget that the Messenger Service would also provide a useful
service to hackers if it is not patched:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-043.asp

Setup a firewall first, but if you don't need the Messenger Service,
turn it off. If you need it, patch it. You would also be well
advised to spend $50 and buy a home router.

Be especially wary of people who would insist on having you keep the
Messenger Service on as a "helpful feature" and conveniently
forgetting to inform you that it has a very serious vulnerability that
needs to be patched immediately.

And of particular interest is that Microsoft itself and security
experts are seriously reconsidering the role of the Messenger service:

http://www.infoworld.com/article/03/10/28/HNmessengeroff_1.html

http://www.pcworld.com/news/article/0,aid,113321,tk,dn110703X,00.asp

http://news.com.com/2100-7355_3-5095935.html

http://www.cnn.com/2003/TECH/internet/11/07/microsoft.popup.reut/index.html


Here's a link where Microsoft actually outright advises the user to
turn off the Messenger Service:

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp


Those who would advise not to turn off the Messenger Service for the
less than trivial unintended side benefit of being a warning is
dispensing advice which contradicts the advice of many real security
professionals.
The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert.

If you were protecting your house and you had one door that nobody
ever used and that door was really loud and squeaky, would you:

A: Keep the door unlocked all the time and actually depend on the
loud squeak of the door to be an integral part of your house alarm
system to alert you of an intruder?

or

B. Since no legitimate people would ever use the door, bar the door
shut so that there was no chance no-one could enter through it?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top