Solution for: Unwanted Popup Messages Exploiting C:\Windows\system32\svchost.exe

[Miquel]

In case it might help anyone:

I have been able to find a solution for my problem
through this site:

http://www.fightmessanger.com/

Thanks and best regards,
Miquel

 

[Wesley Vogel]

Miquel;
I went to the link you provided. As a side note, just follow the
instructions to turn off Messenger. You do not need to buy anything. I
understand there are outfits that will be more than happy to sell you
software to turn off Messenger for you.
You can also do the following: Start/Programs/Administrative
Tools/Services/scroll down to Messenger/right click Properties/Under startup
choose "Disabled", then choose Stop/When stopped, click Ok.
Wes

 

[Bruce Chambers]

Greetings --

That web site is offering very harmful advice.

Disabling the messenger service is a "head in the sand" approach
to computer security.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and the site's only advice was
to turn off the warnings. How is this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as that web site, replies,
"Well, don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Bruce Chambers]

Greetings --

Please stop posting potentially harmful advice.

Disabling the messenger service is a "head in the sand" approach
to computer security.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Wesley Vogel]

I don't have my head in the sand. Might I suggest you go here for a free
firewall, better than what comes with XP.
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zadb_zadown
Wes

 

[Bruce Chambers]

Greetings --

Then why did you advise the OP to simply turn off the messenger
service? Had you advised him to install a firewall, it would have
been the right thing to do.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Wesley Vogel]

Bruce;
That was not what he asked for. Also, I knew you would be there to
cover for me. ;-)))
Wes

 

[Alun Jones [MS MVP]]

I went to the link you provided. As a side note, just follow the
instructions to turn off Messenger. You do not need to buy anything. I
understand there are outfits that will be more than happy to sell you
software to turn off Messenger for you.
You can also do the following: Start/Programs/Administrative
Tools/Services/scroll down to Messenger/right click Properties/Under startup
choose "Disabled", then choose Stop/When stopped, click Ok.

<sigh> Once again, rather less than helpful advice on this issue.

As you pointed out in the part you quoted:

And yet, what is your solution? Should you block the port? No, apparently,
it's sufficient to allow packets on this port to keep flooding your machine,
but just hide the fact from yourself by disabling the service that displays
messages transmitted on that port.

No, I'm going to quit the sarcasm for now - this is dangerous advice you're
offering. Disabling the Messenger Service is _not_ a safe way to solve this
problem. You need to block that port (and a few others - alright, _all_
others, because you aren't running a server that you want outsiders to
access, are you?), so use a firewall. Fortunately, XP has one built in, and
here's an article, replete with pretty pictures, on how to enable it:

http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Leave the Messenger Service enabled - that way, you'll know immediately, by
the returned presence of advertising, if your firewall ever gets
accidentally disabled.

Me, I'd suggest enabling this firewall soon - there's a new exploit on that
very same port announced just recently, and it's an easy bet that there'll
be a "Blaster, Next Generation" any day now. Disabling the Messenger
Service won't protect you. Patching will protect you - Windows Update has
the patch - and installing the firewall will protect you, too. Do both.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]