messenger Patch alert

[william smith]

HI !____ there is a popup every so often on this computer XP-Pro running SP1
and is propertied to come from the messenger service__I am told that there
is a virus or spyware and have to download a patch from www.patchnow.net__
and another web site www.spw2c.com this is a scam__looks very much like a
windows page__and wants $19+ to fix the popup__I do not have a virus and no
spyware__can anyone suggest a way of dealing with this other than using a
popup program

Regards willofaustralia

 

[Jupiter Jones [MVP]]

William;
Is th pop up labeled "Messenger Service"?
If so, that indicated you are running an unprotected computer.

These ads are using Messenger Service.
Messenger Service is a valuable tool many use.
Like many tools, it can be exploited.
No need to pay for the fix.
For Messenger Service ads:
You need to install or enable a firewall:
http://support.microsoft.com/?kbid=330904
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
Disabling Messenger Service can be a good idea, but it does not solve
the real problem.
The ads are not the real problem, the ads are only a symptom.
The real problem is open ports that allow unwanted traffic into the
computer.
Disabling Messenger does nothing for the open ports.
The firewall controls the traffic.

Internet Connection Firewall will not work if you have AOL.
AOL is not compatible with Windows XP Internet Connection Firewall
(ICF)
If you have AOL, you should contact AOL and/or get a 3rd party
firewall:
http://www.zonelabs.com/store/content/home.jsp
http://www.symantec.com/sabu/nis/npf/

Disable Messenger Service:
Start/Control Panel, click Administrative Tools, double click
Services.
Go down to "Messenger".
Right click "Messenger" and select Properties.
Then under Start-up select DISABLE
Click OK and follow prompts

Also see:
http://www3.telus.net/dandemar/security.htm

 

[Miss Perspicacia Tick]

HI !____ there is a popup every so often on this computer XP-Pro
running SP1 and is propertied to come from the messenger service__I
am told that there is a virus or spyware and have to download a patch
from www.patchnow.net__ and another web site www.spw2c.com this is
a scam__looks very much like a windows page__and wants $19+ to fix
the popup__I do not have a virus and no spyware__can anyone suggest a
way of dealing with this other than using a popup program

Regards willofaustralia

Look, moron, learn the difference between crossposting and multiposting -
you might also want to invest in a few remedial English classes whilst
you're at it.

 

[Bruce Chambers]

HI !____ there is a popup every so often on this computer XP-Pro running SP1
and is propertied to come from the messenger service__I am told that there
is a virus or spyware and have to download a patch from www.patchnow.net__
and another web site www.spw2c.com this is a scam__looks very much like a
windows page__and wants $19+ to fix the popup__I do not have a virus and no
spyware__can anyone suggest a way of dealing with this other than using a
popup program

Regards willofaustralia

As you've correctly concluded, it's a scam, plain and simple. It's
from a very unscrupulous "business." They're trying to sell you patches
that Microsoft provides free-of-charge, and using a very intrusive means
of advertising. It's also demonstrating that your PC is very unsecure.

This type of spam has become quite common over the past couple of
years, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you most definitely open to other threats, such as the Blaster,
Welchia, and Sasser Worms that still haunt the Internet. Install and
use a decent, properly configured firewall. (Merely disabling the
messenger service, as some people recommend, only hides the symptom,
and does little or nothing to truly secure your machine.) And
ignoring or just "putting up with" the security gap represented by
these messages is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure UDP ports 135,
137, and 138 and TCP ports 135, 139, and 445 are all blocked. You
may also disable Inbound NetBIOS over TCP/IP). You'll have
to follow the instructions from firewall's manufacturer for the
specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is not the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?



--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[steve eddy]

http://www.grc.com/stm/shootthemessenger.htm

 

[Jupiter Jones [MVP]]

Shoot The Messenger by itself is no solution by itself unless you only
want to cover the symptoms while leaving the actual problem of an
unprotected computer.
See my other post.

 

[Bruce Chambers]

http://www.grc.com/stm/shootthemessenger.htm

I realize that you're trying to help, and that such an intent is
commendable, but please don't post potentially harmful advice.

Merely disabling the messenger service, as Gibson's band-aid "Shoot
the Messenger" applet, is a dangerous "head in the sand" approach to
computer security that leaves the PC vulnerable to threats such as the
W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and your only advice, however
well-intended, was to turn off the warnings. Was this truly helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you've been, replies,
"Well, don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[miskairal]

Look, moron, learn the difference between crossposting and multiposting -
you might also want to invest in a few remedial English classes whilst
you're at it.

Such kind words you teach with!

 

[Its only me]

Jeeeeeeez, you are one ignorant cow.