Messenger SErvice

  • Thread starter Thread starter Janie
  • Start date Start date
J

Janie

I keep getting a pop up entitled Messenger Service. I
can't get rid of it. When I close it, another takes its
place, and so on. Is this a virus? How can I get rid of
it?
 
Its most likely to be spyware or ad ware. This is method that web sites use
to advertise, when you click ok to close the window it basically stores a
cookie on your machine and then send you data from the web i.e. adverts. Try
installing something like pop up stopper or ad aware. If you want to be
clever though, disable the messenger service ;-).

Hope that helps.
 
You can disable the Messenger Service for now but you should invest in a
firewall (ie. LinkSys BEFSX41).
 
Greetings --

This type of spam has become quite common over the past several
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats, such as the Blaster Worm that
recently swept cross the Internet. Install and use a decent,
properly configured firewall. (Merely disabling the messenger
service, as some people recommend, only hides the symptom, and does
little or nothing to truly secure your machine.) And ignoring or just
"putting up with" the security gap represented by these messages is
particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Greetings --

How can you call yourself an "IT Support Technician" while
deliberately posting advice that's not only wrong, but harmful?

Please stop posting potentially harmful advice.

Disabling the messenger service is a "head in the sand" approach
to computer security that leaves the PC vulnerable to threats such as
the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Greetings --

Please stop posting potentially harmful advice.

Disabling the messenger service is a "head in the sand" approach
to computer security that leaves the PC vulnerable to threats such as
the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Bruce,
Due to the fact that this question has been asked so much in this group
and your canned response to it, would it be possible to give an example of
protecting our machines with a firewall as you suggest? I personally am
behind a NAT firewall and had never saw these messages until I one day put a
test machine in my DMZ and lo and behold they started coming in. Are there
specific ports that you can list that need to be closed? Is a NAT firewall
against this vulnerability another head in the sand approach?

I do not disagree with your response in any way. I agree that putting your
head under the covers so you don't see the monster doesn't mean the monster
isn't there anymore. I just thought you could give us a hand in closing this
vulnerability.

Thanks

Charlie

Bruce Chambers said:
Greetings --

How can you call yourself an "IT Support Technician" while
deliberately posting advice that's not only wrong, but harmful?

Please stop posting potentially harmful advice.

Disabling the messenger service is a "head in the sand" approach
to computer security that leaves the PC vulnerable to threats such as
the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
Click to expand...
 
Greetings --

Use a firewall to ensure UDP ports 135, 137, and 138 and TCP ports
135, 139, and 445 are _all_ blocked. You may also disable Inbound
NetBIOS (NetBIOS over TCP/IP). You'll have to follow the instructions
from the firewall's manufacturer for the specific steps.

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Thanks Bruce, That is exactly what I was looking for.


By the way. In the second link you provided titled
"Stopping Advertisements with the Messenger Service Titles"

Did you see Microsofts alternative to enabling ICF. It's at the bottom of
the page on that link.

Here is a copy of what it says.

Note You can also disable the Messenger Service in Windows XP. When you
disable the messenger service, it is no longer available for receiving
legitimate messages, such as administrative alerts and notifications from
antivirus programs. Be sure to talk with your system administrator before
taking this action if your computer is part of a corporate network.

For people who do not understand firewalls, this will probably be the route
they take. This is why I was wanting more specific information. I have had
little luck with software firewalls and network accessibility. Seems like I
can get it to work and allow LAN communications until I restart the machine
and then no one in the LAN can connect to my machine anymore. Will have to
pull out the disc and give it another shot I guess.

Thanks for the information

Charlie
 
Greetings --

You're welcome.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top