Messenger service notice

[JMattero]

On another computer I own, I am now getting a message that
says I should connect to www.patchwindows.org to download
an update that has something to do with a "buffer
overrun". I have closed the window, so I don't have the
exact wording. Anyway, this other computer is runnig
windows XP. Do I trust that I need this patch, or is this
some kind of virus?
Also, whenever I reboot, I get a message that either me or
a program on my computer is trying to send information to
insec.nlan.org. I keep closing the pop-up after
checking "Don''t remind me about this until the next time
I reboot". If I don't check this box, the pop-up keeps
coming back. Is this a virus?
I should explain that this is my son's computer which he
uses at college. He has brought it home, and I noticed
that NAV 2003 was no longer installed. I am trying to re-
install it, and, while it installs "successfully", it
won't launch. I have downloaded the removal tool for all
previous versions of NAV, which I have run per the
directions at Symantec. Before re-installing the NAV
software, I have decided to do a Windows update, which I
am currently running on his computer (7 hour download!!!).
I had anticipated that, after this download/install had
been completed, that I would try to re-install NAV 2003.
Have the things I have done in any way caused these
problems?
Thanks in advance!!!!

JM

 

[phoenix]

On another computer I own, I am now getting a message that
says I should connect to www.patchwindows.org to download
an update that has something to do with a "buffer
overrun". I have closed the window, so I don't have the
exact wording. Anyway, this other computer is runnig
windows XP. Do I trust that I need this patch, or is this
some kind of virus?
Also, whenever I reboot, I get a message that either me or
a program on my computer is trying to send information to
insec.nlan.org. I keep closing the pop-up after
checking "Don''t remind me about this until the next time
I reboot". If I don't check this box, the pop-up keeps
coming back. Is this a virus?
I should explain that this is my son's computer which he
uses at college. He has brought it home, and I noticed
that NAV 2003 was no longer installed. I am trying to re-
install it, and, while it installs "successfully", it
won't launch. I have downloaded the removal tool for all
previous versions of NAV, which I have run per the
directions at Symantec. Before re-installing the NAV
software, I have decided to do a Windows update, which I
am currently running on his computer (7 hour download!!!).
I had anticipated that, after this download/install had
been completed, that I would try to re-install NAV 2003.
Have the things I have done in any way caused these
problems?
Thanks in advance!!!!

JM

Without looking at it in detail you have probably got some adware/malware
on your system. That site is *not* a Microsoft site and doesn't contain any
patches for your system.

I suggest you do a quick search on google (sorry, I don't have the links
handy) for Spybot S & D, Ad-Aware and spywareblaster. Install, update and
run those chesks on your system to see what's causing the problem. You
could also look at this program http://snipurl.com/23n and have a look what
is starting when you boot your system.

HTH

Regards

Bill

 

[Jupiter Jones [MVP]]

Yes, you need this patch.
However do not pay them when Microsoft gives it away for free.
If you have all Critical Updates, you have the patch:
http://www3.telus.net/dandemar/paypat.htm

 

[Jupiter Jones [MVP]]

While the OP may have spyware on the computer, there is no relation to
the specified issue.
The Messenger Service ads get through simply because the OP does not
have a firewall, or at least a properly configured firewall.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


Without looking at it in detail you
have probably got some adware/malware

 

[Bruce Chambers]

Greetings --

There are at least three varieties of pop-ups, and the solutions
vary accordingly. Which specific type(s) is troubling you?

1) Does the title bar of these pop-ups read "Messenger Service?"

This type of spam has become quite common over the past several
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats, such as the Blaster Worm that
recently swept cross the Internet. Install and use a decent,
properly configured firewall. (Merely disabling the messenger
service, as some people recommend, only hides the symptom, and does
little or nothing to truly secure your machine.) And ignoring or just
"putting up with" the security gap represented by these messages is
particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?

2) For regular Internet pop-ups, you might try the free 12Ghosts
Popup-killer from http://12ghosts.com/ghosts/popup.htm, Pop-Up Stopper
from http://www.panicware.com/, or the Google Toolbar from
http://toolbar.google.com/, which is what I use.

3) To deal with pop-ups caused by any sort of "adware" and/or
"spyware,"such as Gator, Comet Cursors, Xupiter, Bonzai Buddy, or
KaZaA, and their remnants, that you've deliberately (but without
understanding the consequences) installed, two products that are
quite effective (at finding and removing this type of scumware) are
Ad-Aware from www.lavasoft.de and SpyBot Search & Destroy from
www.safer-networking.org/. Both have free versions. It's even
possible to use SpyBot Search & Destroy to "immunize" your system
against most future intrusions. I use both and generally perform
manual scans every week or so to clean out cookies, etc.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Kevin Davis³]

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?

Don't forget that the Messenger Service would also provide a useful
service to hackers if it is not patched:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-043.asp

Setup a firewall first, but if you don't need the Messenger Service,
turn it off. If you need it, patch it. You would also be well
advised to spend $50 and buy a home router.

Be especially wary of people who would insist on having you keep the
Messenger Service on as a "helpful feature" and conveniently
forgetting to inform you that it has a very serious vulnerability that
needs to be patched immediately.

And of particular interest is that Microsoft itself and security
experts are seriously reconsidering the role of the Messenger service:

http://www.infoworld.com/article/03/10/28/HNmessengeroff_1.html

http://www.pcworld.com/news/article/0,aid,113321,tk,dn110703X,00.asp

http://news.com.com/2100-7355_3-5095935.html

http://www.cnn.com/2003/TECH/internet/11/07/microsoft.popup.reut/index.html


Here's a link where Microsoft actually outright advises the user to
turn off the Messenger Service:

http://www.microsoft.com/WindowsXP/pro/using/howto/communicate/stopspam.asp


Those who would advise not to turn off the Messenger Service for the
less than trivial unintended side benefit of being a warning is
dispensing advice which contradicts the advice of many real security
professionals.

If you were protecting your house and you had one door that nobody
ever used and that door was really loud and squeaky, would you:

A: Keep the door unlocked all the time and actually depend on the
loud squeak of the door to be an integral part of your house alarm
system to alert you of an intruder?

or

B. Since no legitimate people would ever use the door, bar the door
shut so that there was no chance no-one could enter through it?