Messenger Service - Message from SYSTEM to ALERT

  • Thread starter Thread starter Guest
  • Start date Start date
>

I keeps getting this dialog appearing on my pc and asking me to go to
http://www.regfix2k.com to download/install/run the Registry Cleaner.

I get the same message but it would say : Message from MICROSOFT to SYSTEM
and ask to repair the pc http://www.regupgrade.com

How can I get rid of this message. Thanks
Click to expand...

You don't have a properly running and configured firewall that's blocking
these messages. There are several good free or low cost ones including zone
alarm and sunbelt software's Kerio personal firewall.

Scan your system for malware. Here are some links on how to do that.

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

http://www.elephantboycomputers.com/page2.html#Removing_Malware

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml

http://mvps.org/winhelp2002/unwanted.htm
http://www.spywareinfo.com
 
From: "lander" <[email protected]>

| I keeps getting this dialog appearing on my pc and asking me to go to
| http://www.regfix2k.com to download/install/run the Registry Cleaner.
|
| I get the same message but it would say : Message from MICROSOFT to SYSTEM
| and ask to repair the pc http://www.regupgrade.com
|
| How can I get rid of this message. Thanks

By getting these messages it means two things
- You have NOT installed Windows XP SP2
- You do NOT have a FireWall

Even a NAT Router such as the Linksys BEFSR41 will bblock such NetBIOS Pop-Ups.

What you are getting is a NetBIOS Pop-Up spam scam. Basically, a con job.

To disable the Windows Messenger Service, you can open a Command Prompt and type the
following commands...

sc stop Messenger
sc config Messenger start= disabled

I strongly suggest the above and installing WinXP SP2.
 
lander said:
I keeps getting this dialog appearing on my pc and asking me to go to
http://www.regfix2k.com to download/install/run the Registry Cleaner.

I get the same message but it would say : Message from MICROSOFT to SYSTEM
and ask to repair the pc http://www.regupgrade.com

How can I get rid of this message. Thanks
Click to expand...


Install and enable a firewall.

It's a scam, plain and simple. It's from a very unscrupulous
"business." They're trying to sell you patches that Microsoft provides
free-of-charge, and using a very intrusive means of advertising. It's
also demonstrating that your PC is very unsecure.

This type of spam has become quite common over the past few years,
and unintentionally serves as a valid security "alert." It demonstrates
that you haven't been taking sufficient precautions while connected to
the Internet. Your data probably hasn't been compromised by these
specific advertisements, but if you're open to this exploit, you most
definitely open to other threats, such as the Blaster, Welchia, and
Sasser Worms that still haunt the Internet. Install and use a decent,
properly configured firewall. (Merely disabling the messenger service,
as some people recommend, only hides the symptom, and does little or
nothing to truly secure your machine.) And ignoring or just "putting up
with" the security gap represented by these messages is particularly
foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure UDP ports 135,
137, and 138 and TCP ports 135, 139, and 445 are all blocked. You may
also disable Inbound NetBIOS over TCP/IP). You'll have to follow the
instructions from firewall's manufacturer for the specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is not the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as a
security alert. The true problem is the unsecured computer, and you've
been advised to merely turn off the warnings. How is this helpful?

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.

The weakest link in this "equation" is, of course, the computer
user. No software manufacturer can -- nor should they be expected
to -- protect the computer user from him/herself. All too many people
have bought into the various PC/software manufacturers marketing
claims of easy computing. They believe that their computer should be
no harder to use than a toaster oven; they have neither the
inclination or desire to learn how to safely use their computer. All
too few people keep their antivirus software current, install patches
in a timely manner, or stop to really think about that cutesy link
they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her own computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

List of Antivirus Software Vendors
http://support.microsoft.com/default.aspx?scid=kb;en-us;49500

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
Many thanks for the useful info. I noticed that the Firewall icon in my
Control panel is missing. I agreed the best approach is not to use the short
cut to the problem, now how can I get back the Firewall icon so that I can
set the Windows Firewall to work? Thanks
 
lander said:
Many thanks for the useful info. I noticed that the Firewall icon in
my Control panel is missing. I agreed the best approach is not to use
the short cut to the problem, now how can I get back the Firewall icon
so that I can set the Windows Firewall to work? Thanks
Click to expand...

You need to clean up your computer. Go through these general malware
removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV, plus Ewido. Do all
prep/finishing work and follow instructions to do all scans in Safe
Mode.
You may also need to run the specific removal steps here:
http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a professional
computer repair shop (not your local version of BigStoreUSA).

Malke
 
From: "Malke" <[email protected]>


|
| You need to clean up your computer. Go through these general malware
| removal steps systematically -
| http://www.elephantboycomputers.com/page2.html#Removing_Malware
|
| Include scanning with either Sysclean or Multi_AV, plus Ewido. Do all
| prep/finishing work and follow instructions to do all scans in Safe
| Mode.
| You may also need to run the specific removal steps here:
| http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan
|
| When all else fails, run HijackThis and post your log in one of the
| specialty forums listed at the link above (not here, please).
|
| If the procedures look too complex - and there is no shame in admitting
| this isn't your cup of tea - take the machine to a professional
| computer repair shop (not your local version of BigStoreUSA).
|
| Malke

And...

Needs Windows XP SP2 installed once the system is deemed clean !
 
lander said:
Many thanks for the useful info. I noticed that the Firewall icon in my
Control panel is missing. I agreed the best approach is not to use the short
cut to the problem, now how can I get back the Firewall icon so that I can
set the Windows Firewall to work? Thanks
Click to expand...

A repair installation or the installation of Service Pack 2 should
repair the built-in firewall, but I'd also recommend the acquisition of
a 3rd party personal firewall, such as ZoneAlarm.

WinXP's built-in firewall is adequate at stopping incoming attacks,
and hiding your ports from probes. What WinXP SP2's firewall does not
do, is provide an important additional layer of protection by informing
you about any Trojans or spyware that you (or someone else using your
computer) might download and install inadvertently. It doesn't monitor
out-going network traffic at all, other than to check for IP-spoofing,
much less block (or at even ask you about) the bad or the questionable
out-going signals. It assumes that any application you have on your
hard drive is there because you want it there, and therefore has your
"permission" to access the Internet. Further, because the Windows
Firewall is a "stateful" firewall, it will also assume that any incoming
traffic that's a direct response to a Trojan's or spyware's out-going
signal is also authorized.

ZoneAlarm or Kerio are much better than WinXP's built-in firewall,
in that they do provide that extra layer of protection, are much more
easily configured, and have free versions readily available for
downloading. Even the commercially available Symantec's Norton Personal
Firewall provides superior protection, although it does take a heavier
toll of system performance then do ZoneAlarm or Kerio.

Having said that, it's important to remember that firewalls and
anti-virus applications, which should always be used and should always
be running, while important components of "safe hex," cannot, and should
not be expected to, protect the computer user from him/herself.
Ultimately, it is incumbent upon each and every computer user to learn
how to secure his/her own computer.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
Back
Top