ENDADS, BYEBYEADS and similar pop-ups

  • Thread starter Thread starter J. Sheldon
  • Start date Start date
J

J. Sheldon

How do I get these critters off my computer? They are
interfering with my work and my good humor. I'm using
Windows XP (home) and MS Outlook.

Is it Outlook that is doing this to me? Should I drop
Outlook and use another e-mail program?
 
It's not outlook.
Secure your hacker prone computer:

If they say messenger service in the title bar, these popups have nothing to
do with MSN messenger or Windows messenger. What this is a new way for
spammers to attack your computer and send you pop-up ads. If you receive
these ads it means that your computers netbios ports are wide open to the
internet and this could be a real security problem. What you should do is
install a good firewall that will block the ports the spammers use and stop
the ads. A good place to start is Zone Alarm ( www.zonelabs.com ) for an
inbound/outbound blocking firewall or use the inbound blocking only firewall
built in to XP. If needed configure the XP firewall to block ports 135,
137-139 and 445. Zone Alarm will block these ports by default.

Use this site to test some of your ports security:
https://grc.com/x/ne.dll?bh0bkyd2

You can disable the messenger service, which is the service the spammers
exploit, but it isn't needed to stop the ads and disabling the service will
not secure your computer from outside attacks or block the open netbios
ports.

Note: If the Messenger service is stopped, messages from the Alerter
service (notifications from your antivirus software, for example) are
not transmitted. If the Messenger service is turned off, any services
that explicitly depend on the Messenger service do not start, and an
error message is logged in the System event log. For this reason,
Microsoft recommends that you install a firewall and configure it to
block NetBIOS and RPC traffic instead of turning off the Messenger
service.

If the pop-ups appear while surfing web pages then download and install one
of the many pop-up blocker programs. Search www.download.com for popup
blocker, you'll find many free ones.

Also get a good spyware cleaner -- http://security.kolla.de/
 
J. Sheldon bashed at the keyboard and said:
How do I get these critters off my computer? They are
interfering with my work and my good humor. I'm using
Windows XP (home) and MS Outlook.

Is it Outlook that is doing this to me? Should I drop
Outlook and use another e-mail program?

Outlook is not causing this, these messages are coming from the messenger
service (NOT MSN Messenger) however, the messenger service is not the
problem.
The real problem is the fact that you are not running a firewall, or if you
are, you haven't blocked ports 137-139

A good firewall can be found at www.zonelabs.com

The small (free) "ShootTheMessenger" Messenger service enabler/disabler will
turn off the messenger.

http://grc.com/

To remove the ability for anyone in the world to pop up messages on your
computer, you can disable the Messenger service. Its easy to reverse at a
later time if you wish to do so.

*Windows XP Home*
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK

*Windows XP Professional*
Click Start->Settings ->Control Panel
Click Administrative Tools
Click Services
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK

Enjoy :-)
 
Greetings --

There are several varieties of pop-ups, and the solutions vary
accordingly. Which specific type(s) is troubling you?

Does the title bar of these pop-ups read "Messenger Service?"

This particular "sales method" is strikingly similar to the
"protection" rackets offered to small businesses by organized
criminals. Yes, it's a scam; no reputable business would need to
resort to extortion. Particularly since they're trying to sell you a
type of protection that is already available to you free of charge.

This type of spam has become quite common over the past few
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats. Install and use a decent,
properly configured firewall. (Disabling the messenger service, as
some people recommend, only hides the symptom, and does nothing to
secure your machine.) And ignoring or just "putting up with" these
messages and the problem they represent is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service is a "head in the sand" approach to computer security.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you've been
advised to merely turn off the warnings. How is this helpful?

Equivalent Scenario 1: Somewhere in a house, a small fire starts,
and sets off the smoke alarm. You, not immediately seeing any
fire/smoke, complain about the noise of the smoke detector, and are
advised to remove the smoke detector's battery and go back to sleep.

Equivalent Scenario 2: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as some of your respondents,
replies, "Well, don't do that."

I'm beginning to think that the people deliberately posting such
bad advice are hacker-wannabes who have no true interest in helping
you secure your system, but would rather give you a false sense of
security while ensuring that your computer is still open to
exploitation.

For regular Internet pop-ups, you might try the free 12Ghosts
Popup-killer from http://12ghosts.com/ghosts/popup.htm or Pop-Up
Stopper from http://www.panicware.com/. Myself, I use Norton Internet
Security, which, in addition to containing Norton Anti-Virus and
Personal Firewall, also blocks most of the pop-up adds on the
Internet.

For pop-ups caused by some sort of "adware" and/or "spyware" that
you've inadvertently installed, two products that are quite effective
at finding and removing scumware are Ad-Aware from www.lavasoft.de and
SpyBot Search and Destroy from http://security.kolla.de/. Both have
free evaluation versions.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top