What is "Messenger Service"

G

Guest

I continue to get pop ups, the box is labeled messenger service. It tells me
my windows files are damage in variety of ways and wants me to connect to
various sites, such as: fixpcregistry.com
helpfixpc.com
patchupdte.com
rerixit.com
Again, new sites but included in a pop up window labeled: Messenger Service
Is this spam?
How do I get rid of this annoying situation?
I am trying to fix my father's (83yrs old) computer. Can you forward the
response to: (e-mail address removed)?
 
W

Wesley Vogel

Make sure a firewall is turned on. And you need to disable or remove the
Messenger service.

[[If advertisements are opening on your computer in a window titled
Messenger Service, it may indicate that your system is not secure. You
should enable the Internet Connection Firewall and disable the Messenger
Service in Windows XP to help protect your computer from unwanted spam and
other potential threats.

The Messenger Service was originally designed for use by system
administrators to notify Windows users about their networks. However, some
advertisers have started using this service to send information via the
Internet, and these messages could be used maliciously to distribute a
virus.]]
Disabling Messenger Service in Windows XP
http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx

[[These messages are also known as "messenger spam."]]
[[To resolve this issue, install or turn on a firewall that blocks inbound
NetBIOS and UDP broadcast traffic. ]]
[[To work around this issue, turn off the Messenger service.]]
Messenger Service window that contains an Internet advertisement appears
http://support.microsoft.com/default.aspx?scid=kb;en-us;330904

Disabling Messenger Service in Windows XP
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
B

Bruce Chambers

Litespeed said:
I continue to get pop ups, the box is labeled messenger service. It tells me
my windows files are damage in variety of ways and wants me to connect to
various sites, such as: fixpcregistry.com
helpfixpc.com
patchupdte.com
rerixit.com
Again, new sites but included in a pop up window labeled: Messenger Service
Is this spam?
How do I get rid of this annoying situation?
I am trying to fix my father's (83yrs old) computer. Can you forward the
response to: (e-mail address removed)?


It a common scam, and proof-positive that you are not practicing
"safe hex.".

It's spam from some very unscrupulous "businesses." They're trying
to sell you patches that Microsoft provides free-of-charge, or a useless
"product" that will install adware/spyware, and using a very intrusive
means of advertising. It's also demonstrating that your PC is very
unsecure. The presence of that message on your desktop is proof that
your machine is still infested, as the message *is* malware.

This type of spam has become quite common over the past few years,
and unintentionally serves as a valid security "alert." It demonstrates
that the computer user hasn't been taking sufficient precautions while
connected to the Internet. The user's data probably hasn't been
compromised by these specific advertisements, but if he/she's open to
this exploit, he/she may well be open to other threats, such as the
Blaster Worm that swept across the Internet years ago and the Sasser
Worm that followed shortly thereafter, both of which can still be
contacted. Install and use a decent, properly configured firewall.
(Merely disabling the messenger service, as some people recommend, only
hides the symptom, and does little or nothing to truly secure the
machine.) And ignoring or just "putting up with" the security gap
represented by these messages is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise the user to do
nothing more than disable the messenger service. Disabling the
messenger service, by itself, is a "head in the sand" approach to
computer security. The real problem is not the messenger service
pop-ups; they're actually providing a useful, if annoying, service by
acting as a security alert. The true problem is the unsecured computer,
and the user's been advised to merely turn off the warnings. How is
this helpful?

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
D

David H. Lipman

From: "Litespeed" <[email protected]>

| I continue to get pop ups, the box is labeled messenger service. It tells me
| my windows files are damage in variety of ways and wants me to connect to
| various sites, such as: fixpcregistry.com
| helpfixpc.com
| patchupdte.com
| rerixit.com
| Again, new sites but included in a pop up window labeled: Messenger Service
| Is this spam?
| How do I get rid of this annoying situation?
| I am trying to fix my father's (83yrs old) computer. Can you forward the
| response to: (e-mail address removed)?
|

It is a con job !

To disable the Windows Messenger Service, you can open a Command Prompt and type the
following commands...

sc stop Messenger
sc config Messenger start= disabled

A Router such as the Linksys BEFSR41 will also block this at the WAN/LAN interface and such
messages won't be seen on a LAN PC.

It also means you have NOT installed WinXP SP2 yet. If you had installed SP2 the you would
not be getting these NetBIOS Pop-Ups. Installing WinXP SP2 does two things. Install and
enable the improved WinXP SP2 FireWall and disable the NT Messenger Service. Both mitigate
thes Pop-Ups.
 
G

Guest

Thank you ! And again you have answered my questions and helped me.
I followed you intructions and disabled Messenger. The pop ups have stopped.
Since I have you here I have two more questions:
1)The firewall installed on my father's computer is McAfee, should I go into
add/remove programs and remove it?
2) What should I replace it with? (His computer was given to him, it came
from US Steel Corp.........he does not have the product key number and when I
try to validate Windows Defender, it says I do not have a genuine copy of
Windows XP Pro).
3) Would you please give me a list of good "Free" Firewalls out there?
Thank you
--
Thanks


Wesley Vogel said:
Make sure a firewall is turned on. And you need to disable or remove the
Messenger service.

[[If advertisements are opening on your computer in a window titled
Messenger Service, it may indicate that your system is not secure. You
should enable the Internet Connection Firewall and disable the Messenger
Service in Windows XP to help protect your computer from unwanted spam and
other potential threats.

The Messenger Service was originally designed for use by system
administrators to notify Windows users about their networks. However, some
advertisers have started using this service to send information via the
Internet, and these messages could be used maliciously to distribute a
virus.]]
Disabling Messenger Service in Windows XP
http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx

[[These messages are also known as "messenger spam."]]
[[To resolve this issue, install or turn on a firewall that blocks inbound
NetBIOS and UDP broadcast traffic. ]]
[[To work around this issue, turn off the Messenger service.]]
Messenger Service window that contains an Internet advertisement appears
http://support.microsoft.com/default.aspx?scid=kb;en-us;330904

Disabling Messenger Service in Windows XP
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Litespeed said:
I continue to get pop ups, the box is labeled messenger service. It tells
me my windows files are damage in variety of ways and wants me to connect
to various sites, such as: fixpcregistry.com
helpfixpc.com
patchupdte.com
rerixit.com
Again, new sites but included in a pop up window labeled: Messenger
Service Is this spam?
How do I get rid of this annoying situation?
I am trying to fix my father's (83yrs old) computer. Can you forward the
response to: (e-mail address removed)?
 
D

David H. Lipman

From: "Litespeed" <[email protected]>

| Thank you ! And again you have answered my questions and helped me.
| I followed you intructions and disabled Messenger. The pop ups have stopped.
| Since I have you here I have two more questions:
| 1)The firewall installed on my father's computer is McAfee, should I go into
| add/remove programs and remove it?
| 2) What should I replace it with? (His computer was given to him, it came
| from US Steel Corp.........he does not have the product key number and when I
| try to validate Windows Defender, it says I do not have a genuine copy of
| Windows XP Pro).
| 3) Would you please give me a list of good "Free" Firewalls out there?
| Thank you

You need to install Windows XP Service Pack 2 !

If the PC is connected to Broadband Internet, it is *highly* suggested to install a
Cable/DSL Router such as the Linksys BEFSR41 or a Router with a full FireWall
implementation.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top