patch scam

W

william smith

HI !____ there is a popup every so often on this computer XP-Pro running SP1
and is propertied to come from the messenger service__I am told that there
is a virus or spyware and have to download a patch from www.patchnow.net__
and another web site www.spw2c.com this is a scam__looks very much like a
windows page__and wants $19+ to fix the popup__I do not have a virus and no
spyware__can anyone suggest a way of dealing with this other than using a
popup program

Regards willofaustralia
 
K

Kevin

You have spyware and/or adware on your system. Use a product like Ad-Aware,
Spybot Search and Destroy, Pest Patrol or Spyware Blaster to find and remove
these unwanted pests. Of course, you should also be running a good
anti-virus application and a firewall. Keep your system updated regularly
and never, ever click on those pop ups. To block pop ups use the Google
Toolbar. It works well and is totally free of charge.
 
R

Ron Bogart

In
william smith said:
HI !____ there is a popup every so often on this computer XP-Pro
running SP1 and is propertied to come from the messenger service__I
am told that there is a virus or spyware and have to download a patch
from www.patchnow.net__ and another web site www.spw2c.com this is
a scam__looks very much like a windows page__and wants $19+ to fix
the popup__I do not have a virus and no spyware__can anyone suggest a
way of dealing with this other than using a popup program

Regards willofaustralia

Start - Run - services.msc - navigate down to messenger right click on
Messenger and choose Properties - Click on the drop down arrow next to
Startup type and change to Disabled. This will take the availability of the
messenger spam away from the outside world.
 
J

Joel Rubin

HI !____ there is a popup every so often on this computer XP-Pro running SP1
and is propertied to come from the messenger service__I am told that there
is a virus or spyware and have to download a patch from www.patchnow.net__
and another web site www.spw2c.com this is a scam__looks very much like a
windows page__and wants $19+ to fix the popup__I do not have a virus and no
spyware__can anyone suggest a way of dealing with this other than using a
popup program

Regards willofaustralia
Unless you're actually using Microsoft Messenger, run services.msc,
scroll down on the extended tab to Messenger, right click, hit
properties, and on the General tab, start up type, make it "disabled".

Then hit OK.

This will get rid of Microsoft Messenger popup windows.
 
A

Alex Nichol

Ron said:
Start - Run - services.msc - navigate down to messenger right click on
Messenger and choose Properties - Click on the drop down arrow next to
Startup type and change to Disabled. This will take the availability of the
messenger spam away from the outside world.

BUT also make sure there is a firewall in place, blocking the NETBIOS
ports - those are where this message got in to messenger, but are also
the route used by major worm attacks like Blast and Sasser
 
R

Ron Bogart

In
Alex Nichol said:
BUT also make sure there is a firewall in place, blocking the NETBIOS
ports - those are where this message got in to messenger, but are also
the route used by major worm attacks like Blast and Sasser

Thanks for the extra tip Alex. 8)
 
B

Bruce Chambers

william said:
HI !____ there is a popup every so often on this computer XP-Pro running SP1
and is propertied to come from the messenger service__I am told that there
is a virus or spyware and have to download a patch from www.patchnow.net__
and another web site www.spw2c.com this is a scam__looks very much like a
windows page__and wants $19+ to fix the popup__I do not have a virus and no
spyware__can anyone suggest a way of dealing with this other than using a
popup program

Regards willofaustralia

As you've correctly concluded, it's a scam, plain and simple. It's
from a very unscrupulous "business." They're trying to sell you patches
that Microsoft provides free-of-charge, and using a very intrusive means
of advertising. It's also demonstrating that your PC is very unsecure.

This type of spam has become quite common over the past couple of
years, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you most definitely open to other threats, such as the Blaster,
Welchia, and Sasser Worms that still haunt the Internet. Install and
use a decent, properly configured firewall. (Merely disabling the
messenger service, as some people recommend, only hides the symptom,
and does little or nothing to truly secure your machine.) And
ignoring or just "putting up with" the security gap represented by
these messages is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure UDP ports 135,
137, and 138 and TCP ports 135, 139, and 445 are all blocked. You
may also disable Inbound NetBIOS over TCP/IP). You'll have
to follow the instructions from firewall's manufacturer for the
specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is not the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
B

Bruce Chambers

Joel said:
Unless you're actually using Microsoft Messenger, run services.msc,
scroll down on the extended tab to Messenger, right click, hit
properties, and on the General tab, start up type, make it "disabled".

Then hit OK.

This will get rid of Microsoft Messenger popup windows.

I realize that you're trying to help, and that such an intent is
commendable, but please don't post potentially harmful advice.

Merely disabling the messenger service, as recommend does, is a
"head in the sand" approach to computer security that leaves the PC
vulnerable to threats such as the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and your only advice, however
well-intended, was to turn off the warnings. Was this truly helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you've been, replies,
"Well, don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
V

_Vanguard_

william smith said:
HI !____ there is a popup every so often on this computer XP-Pro
running SP1
and is propertied to come from the messenger service__I am told that
there
Regards willofaustralia
<this guy also visits alt.cracks looking to "acquire" software>

Did you really have a need to multi-post your message rather than
cross-post it?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top