Help!! Constantly connected to microsoft and cannot block

[James]

Hi,
All the time I am connected to the Internet my computer is
constantly giving information to http://msgr.dlservice.midrosoft.com
I have cleared my firewall of all programs but as soon as I connect it
configures something called Microsoft Generic host process for win32
services.
If I block this the above problem stops but I cannot connect at all to
the Internet.
Can anyone explain what any of the above does. Is it Spyware or a
Virus or just normal ??
Using Win XP Home NIS 2004.

Thanks and Regards
James

 

[Duane Arnold]

Hi,
All the time I am connected to the Internet my computer is
constantly giving information to http://msgr.dlservice.midrosoft.com
I have cleared my firewall of all programs but as soon as I connect it
configures something called Microsoft Generic host process for win32
services.
If I block this the above problem stops but I cannot connect at all to
the Internet.
Can anyone explain what any of the above does. Is it Spyware or a
Virus or just normal ??
Using Win XP Home NIS 2004.

Why would you post this in the AV NG too?

Duane

 

[Colon Terminus]

Thats just MSN Messenger registering your presence and availability for the
MSN Messenger Service. This happens automatically with XP whether you use
Messenger or not. If you don't use MSN Messenger then you can go here:
http://xp-antispy.org/index.php?option=com_remository&func=sellang&iso=en
and download a program to block this service and many other built-in XP junk
that you may not want but Microsoft wants you to have.

 

[James]

Why would you post this in the AV NG too?

Duane

Because it might be a Virus causing the problem
URL should read http://msgr.dlservice.microsoft.com/download/<string
of numbers and letters>/Install_MSN_Messenger.exe.
I do not have MSN Messenger on my machine only Windows messenger

Thanks and Regards
James

 

[Bob]

Because it might be a Virus causing the problem
URL should read http://msgr.dlservice.microsoft.com/download/<string
of numbers and letters>/Install_MSN_Messenger.exe.
I do not have MSN Messenger on my machine only Windows messenger

Can't you stop the Messenger Service in the Control Panel Services?


--

Map of the Vast Right Wing Conspiracy
http://home.houston.rr.com/rkba/vrwc.html

"The first thing we do, let's kill all the lawyers."
--William Shakespeare; Henry VI, Act IV, Scene II

 

[YoKenny]

In news: Bob typed:

Can't you stop the Messenger Service in the Control Panel Services?

You are confusing Messenger Service (MS) with MSN Messenger (MSNM). They
are two very different applications.

Just to confuse matters microsoft also has Windows Messenger (WM). It can
be disabled in the Tools menu.

(WM) communicates with other WM users.

MSNM communicates with other MSNM users and uses Microsoft Passport. It can
be disabled in the Tools menu.

MS is a service usually used by local system administrators to relay
important system messages. It can be disabled in the System Services setup
application available through right clicking the My Computer icon..

 

[* * Chas]

snip<
You are confusing Messenger Service (MS) with MSN Messenger (MSNM). They
are two very different applications.

Just to confuse matters microsoft also has Windows Messenger (WM). It can
be disabled in the Tools menu.

(WM) communicates with other WM users.

MSNM communicates with other MSNM users and uses Microsoft Passport. It can
be disabled in the Tools menu.

MS is a service usually used by local system administrators to relay
important system messages. It can be disabled in the System Services setup
application available through right clicking the My Computer icon..

Great explanation!

 

[James]

I have also experienced this problem, and am currently trying to use
Process
Explorer to track it down.

If anyone else wants to look at this, then perhaps installing the same
MSN Messenger versions will recreate this situation. lol.

I have the original MSN Messenger installed (version 4.7), and then I
also installed the newer MSN Messenger (version 6.2). For some reason
the older version is not uninstalled and both of them are co-existing
on the computer.

Now, I use Naviscope for web browsing. Naviscope is a HTTP monitor
which tells me any file being downloaded onto my computer.

A download to this link constantly comes up on Naviscope:

msgr.dlservice.microsoft.com:80/download/5/d/9/5d9bb5b2-49c7-4890-94ab-d1d5e44a0e6d/Install_MSN_Messenger.exe

And repeatedly does so, obtaining files of 8000 byes to 20KB in size.
It actually even uses up all of my ADSL's 256kbs.

I am also running ZoneAlarm and it has not helped with this problem.
Whateve
r this process is, it is running through svchost.exe. I am fairly
experienced with dealing with viruses and spyware manually. Something
strange is going on here.

My deduction would be that the two different versions of MSN Messenger
are conflicting, and the old version continually requests updates when
they are not actually needed.


Kind Regards,
Aether

I think you may be right here. I originally had 6.2 MSN Messenger on
my machine but uninstalled it. I find that if I block all Traffic on
my Firewall for about a minute this seems to stop the connection
coming back when I allow traffic back. It is within svchost.exe
according to Process Explorer which of course I cannot block or there
goes my Internet access. Windows Messenger also seems to work from
here to. I suppose I could install MSN Messenger V 7 and this might
stop the problem. If I click on the actual link my Internet Download
Manager tries to download this version.
Thanks to all who replied to this post for the help and advice


Thanks and Regards
James