pop up

J

Jupiter Jones [MVP]

George;
No need to pay for the fix.
For Messenger Service ads:
You need to install or enable a firewall:
http://support.microsoft.com/?kbid=330904
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
Disabling Messenger Service can be a good idea, but it does not solve
the real problem.
The ads are not the real problem, the ads are only a symptom.
The real problem is open ports that allow unwanted traffic into the
computer.
Disabling Messenger does nothing for the open ports.
The firewall controls the traffic.

Internet Connection Firewall will not work if you have AOL.
AOL is not compatible with Windows XP Internet Connection Firewall
(ICF)
If you have AOL, you should contact AOL and/or get a 3rd party
firewall:
http://www.zonelabs.com/store/content/home.jsp
http://www.symantec.com/sabu/nis/npf/

Disable Messenger Service:
Start/Control Panel, click Administrative Tools, double click
Services.
Go down to "Messenger".
Right click "Messenger" and select Properties.
Then under Start-up select DISABLE
Click OK and follow prompts
 
M

Mike R

Jupiter Jones said:
George;
No need to pay for the fix.
For Messenger Service ads:
You need to install or enable a firewall:
http://support.microsoft.com/?kbid=330904
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
Disabling Messenger Service can be a good idea, but it does not solve
the real problem.
The ads are not the real problem, the ads are only a symptom.
The real problem is open ports that allow unwanted traffic into the
computer.
Disabling Messenger does nothing for the open ports.
The firewall controls the traffic.
WRONG
Disableing the Messenger Service closes the ports used by that service.
Someone can't access a port if there is nothing on the other end to access.
 
J

Jupiter Jones [MVP]

Rich;
And that is one of the many problems with that site.
Unless it has recently changed, that site suggests disabling Messenger
Service at the complete fix for Messenger Service ads.

That is very bad advice because it is incomplete.
Unless stopping the ads is your only goal and the security of your
computer is of no consequence.

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


Rich said:
If you go to www.grc.com , there are a lot of free little
utilities to do stuff like shut down
 
J

Jupiter Jones [MVP]

Mike;
Are you suggesting disabling Messenger Service is all the protection
that is required?
With Messenger Service disabled there are no other ports that should
have the protection afforded by a firewall?

A firewall is essential.
 
G

Guest

My understanding is that the utility does close the port, as well there are other tool
on the site that check other ports that are supposedly vulnerable as shipped

I don't believe I said security wasn't important. I run anti-virus and firewall as wel
asw AdWare, Spybot and a couple others to protect my system

Fact of the matter is that grc.com is where I got started investigating some of th
spyware and security utilities because MS was not up to snuff on providing
product that could resist the bugs on the net.
 
G

Guest

Let me rephrase a bit--I think most of the MS users are usually left to g
find our own solutions to problems that start showing up in the os an
MS doesn't come out with any information or give us a timely work around

On the messenger service, I can't imagine why any home user would nee
a functionality that would be mainly used by corporate networks. And ther
was so little documentation out on it when I disabled it 18 months ago tha
I was forced to go out and find out for myself what the difference between
messenger service and Windows messenger were. It was not well explained
in any MSKB article that I found

Or more recently, I counted at least a dozen threads posted after this on
where the windows update service is causing problems after installing th
five updates from Tuesday. Not a single one of those threads has been
answered by one of the MS expert folks that post here. Are you guy
ignoring them or still figuring out why it is happening

I did go back to HP on the update problem and they gave me a sort of partia
answer which I posted here. It didn't directly address the entire problem an
I stated that in my post. But at least it is a start

So, please don't scold us for searching out and passing along informatio
to resolve issues that MS doesn't always resolve in an expedient manner.
 
J

Jupiter Jones [MVP]

Whether his fix closes a port or not was not really relevant.
GRC suggested his fix was a complete fix while ignoring the real
problem of an unprotected computer.
A firewall is the more complete and correct protection although it is
a good idea to disable unused services.
And yes, I know some home users that routinely use Messenger Service.

When Messenger Service ads became a problem, many suggested disabling
Messenger Service as a good fix.
Later when Blaster came out, the same people that used the fix
provided by GRC found themselves hit because the fix they used was too
narrow to really protect the computer.
The reality was, there was no problem other than the nuisance of the
ads while blaster and other evils were potential problems.
The result was many covered a nuisance while leaving their computers
vulnerable to Blaster and more.
Many on these newsgroups were adamant as to the necessity of a
firewall and others were adamant with no need for a firewall.
Blaster showed the hard way what was necessary.
Even the suggestion that disabling Messenger Service to solve the
issue is potentially disastrous and should be cleared up as soon as
possible.
Your initial post said nothing about a firewall, you may use one and
you may know the necessity of it, but you did not state such in your
post.
The lack of other information may give someone the wrong impression.

As to your comment in the other post about the Windows Update issues,
perhaps if there is no response, it may be because this is not an
appropriate newsgroup for Windows Update issues.
The appropriate newsgroup for Windows Update issues is:
news://msnews.microsoft.com/microsoft.public.windowsupdate
 
G

Guest

Well--I guess that I am one of the lost souls wondering aimlessly lookin
for the right place to post about updates

Regarding the frewall, I assume that you also "assume" a certain knowledg
level for folks on the board, if for no other reason thatn they figured out ho
to navigate to the this discussion board.

I didn't think assuming that a firewall was sort of a standard sor
of a thing that people were using was a an unrealistic assumption
these days. I have been running one for 2 or 3 years. If the proble
with the worms and viruses are as bad as you indicate, I may have
overestimated the general population use of firewalls

Am I forgiven?
 
J

Jupiter Jones [MVP]

Nothing to be forgiven of.

Unfortunately many do not use a firewall and many do not use antivirus
or quit when it expires.
Blaster was an eye opener, however many were blind once the eyes were
opened.

Everyone assumes, but I try not to assume, still sometimes I fail

I also try to take into account the lurker who may have a similar
problem but does not ask.

Whoever said "It's a jungle out there" never knew the internet if he
thought it would be that tame.

If you have Windows Update issues, take it to the newsgroup referenced
in my last post.
It is a busy group, but a high % of post get answered and there are
even a few Microsoft employees that stop by.
 
B

Bruce Chambers

Greetings --

This type of spam has become quite common over the past year or
so, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you most definitely open to other threats, such as the Blaster Worm
that still haunts the Internet. Install and use a decent, properly
configured firewall. (Merely disabling the messenger service, as some
people recommend, only hides the symptom, and does little or nothing
to truly secure your machine.) And ignoring or just "putting up with"
the security gap represented by these messages is particularly
foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure
UDP ports 135, 137, and 138 and TCP ports 135, 139, and 445 are _all_
blocked. You may also disable Inbound NetBIOS (NetBIOS over TCP/IP).
You'll have to follow the instructions from firewall's manufacturer
for the specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
B

Bruce Chambers

Greetings --

No, it doesn't.

Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
B

Bruce Chambers

Greetings --

Using "Shoot the Messenger" is as bad as doing nothing. All it
does is hide the problem. The GRS Shields Up Port Probe doesn't even
scan/test one of the ports (137) used by the messenger service.

Because Gibson's Shields Up! checks only a very few of the more
than 65,000 ports available, and even skips one of the ones exploited
by messenger service spam, you should also test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Security Scan - Sygate Online Services
http://www.sygatetech.com/

Gibson has been fooling a lot of people for several years, now, so
don't feel too bad about having believed him. He mixes just enough
facts in with his hysteria and hyperbole to be plausible. Gibson's
"Shoot the Messenger" may be free, but I really don't believe that a
free bogus solution is significantly better than unnecessarily paying
for the real solution offered by many of the spammers. To my way of
thinking, they're just unscrupulous salesmen taking advantage of the
gullible to make money; something unscrupulous salesmen have been
doing for centuries. People should know better, Buyer Beware, and all
of that. :-} Gibson, on the other hand, is assuming a presumably
morally superior pose as a White Knight out to rescue the poor,
defenseless computer user, all the while offering a solution that does
no good whatsoever.

Perhaps you should hear what computer security specialists have to
say about Steve Gibson's "security" expertise. You can start here:
http://www.grcsucks.com/



Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
G

Guest

Oh my..!

Let me ask a hypothetical question--I started seeing the "messenger pop up" problem mayb
2/12 years ago when I got a broadband connection. I called my ISP and all they kept tellin
me was that "you need to disable messenger"

I did uninstall Windows Messenger, but the problem was still occurring. I was definitely i
the category of not knowing enough to understand what I didn't know. I started lookin
around on the net for that type of problem and found the grc.com site. I wasn't running
firewall then (what was that?) and what I took away from the site (besides shoot th
messenger) was the need to be a lot more proactive with security on my pc

Since then--I have Mcafee virus scan privacy service and firewall. Also, I use AdAware an
Spybot Search and Destroy and also have CWShredder, Spyware Guard, Spyblaster, RbKille
and a couple programs that monitor when cookies or programs are added to my system
(WinPatrol the Ultimate Troubleshooter). I think I send most of my time on the pc now checking
to see if all that stuff is up tp date. Yeah--I know--sounds overboard

I guess I wasn't meaning to say that I was a GRC.com guru, but I felt that running across that sit
was my initial wap over the head with a board to get serious with computer pc security. I am still
not really sure I understand 50% of what all he is saying there, but I hope Mcafee is protecting me
 
B

Bruce Chambers

Greetings --

Please quote at least part of the message to which you're
replying. It makes it possible for those who are not closely
following a specific thread to understand what the conversation is
about.

There are several essential components to computer security: a
knowledgeable and pro-active user, a properly configured firewall,
reliable and up-to-date antivirus software, and the prompt repair (via
patches, hotfixes, or service packs) of any known vulnerabilities.
The weak link in this "equation" is, of course, the computer user.
All too many people have bought into the various PC/software
manufacturers marketing claims of easy computing. They believe that
their computer should be no harder to use than a toaster oven; they
have neither the inclination or desire to learn how to safely use
their computer. All too few people keep their antivirus software
current, install patches in a timely manner, or stop to really think
about that cutesy link they're about to click.

Firewalls and anti-virus applications, which should always be used
and should always be running, are important components of "safe hex,"
but they cannot, and should not be expected to, protect the computer
user from him/herself. Ultimately, it is incumbent upon each and
every computer user to learn how to secure his/her computer.

To learn more about practicing "safe hex," start with these links:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

Home Computer Security
http://www.cert.org/homeusers/HomeComputerSecurity/

Home PC Firewall Guide
http://www.firewallguide.com/

Scumware.com
http://www.scumware.com/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
G

Guest

LOL--safe hex---

Thanks--I guess I was thinking more generally and asking where should th
somehwat knowledgeable but easily "bamboozled" pc user go for informatio
on something NEW in the "cyber universe"..

A few years ago, something NEW was firewalls and virus scan programs, bu
I was thinking of whatever the NEW pc issues of tomorrow. Not asking what th
issues might be, but where is the best place for the yearning to learn folks o
this board go to learn
 
K

Kevin Davis³

Many on these newsgroups were adamant as to the necessity of a
firewall and others were adamant with no need for a firewall.

I can't remember a single person posting anything that insisted that
there was no need for a firewall. Can you provide examples?
 
J

Jupiter Jones [MVP]

Kevin;
I do not recall the specific posts.
But if you research my posts starting about the time of Blaster and
going back several months, you will see several, it may take some time
since I do not recall the specific posters or even the specific
newsgroups involved.
Strangely most of these posts suddenly stopped about the time Blaster
hit.
If you start looking, you will soon see why I can not recall the
specific post.
When I said "these newsgroups", I was referring to all of Microsoft
newsgroups, not just this one.

Whether you remember or not is not relevant...they were there.
One poster insisted a firewall was unnecessary largely because of the
complexity and potential problems.
 
J

Jupiter Jones [MVP]

Rich;
A few years ago is was usually OK not to have a firewall on a home
computer.
However as you know times have changed and continue to change.
You did what I would have done at that time with that knowledge.

Users need to learn how to properly maintain their computers.
However the computer sellers should do more to help educate new users
if not at least point them to a good starting point on the web.
Microsoft also should share in the education process and in fact they
have been going a long way as can be demonstrated by their program to
Protect Your PC:
http://www.microsoft.com/security/protect/default.asp

The days have passed where a new computer user needs to know nothing
about maintaining the computer.
In this respect a computer is more like an automobile than a toaster,
yet users treat computers like a toaster.
 
B

Bruce Chambers

Greetings --

I don't know if there's any single place for a user to get
information about all future PC issues. One way would be to subscribe
to one of Microsoft's security newsletters. Another way would be to
periodically check the web sites of the major antivirus and firewall
suppliers, as they generally provide info on new threats as they
emerge.

Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top