windows mesanger service

J

Josif

every few minutes I have pop-up windows mesanger service
add. i want to get read of it, but i can't. if somebody
can help me?
thanks
 
P

purplehaz

Always run a firewall when online.
Secure your hacker prone computer:

If they say messenger service in the title bar, these pop ups have nothing
to do with MSN messenger or Windows messenger. What this is a new way for
spammers to attack your computer and send you pop-up ads. If you receive
these ads it means that your computers netbios ports are wide open to the
internet and this could be a real security problem. What you should do is
install a good firewall that will block the ports the spammers use and stop
the ads. A good place to start is Zone Alarm ( www.zonelabs.com ) for an
inbound/outbound blocking firewall or use the inbound blocking only firewall
built in to XP. If needed configure the firewall to block ports 135, 137-139
and 445. Zone Alarm will block these ports by default.

Use this site to test some of your ports security:
https://grc.com/x/ne.dll?bh0bkyd2

You can/should also disable the messenger service, which is the service the
spammers exploit, but it isn't needed to stop the ads and disabling the
service will not block the open netbios ports.

Note: If the Messenger service is stopped, messages from the Alerter
service (notifications from your antivirus software, for example) are
not transmitted. If the Messenger service is turned off, any services
that explicitly depend on the Messenger service do not start, and an
error message is logged in the System event log. For this reason,
Microsoft recommends that you install a firewall and configure it to
block NetBIOS and RPC traffic instead of turning off the Messenger
service. To turn off the service goto, control panel, administrative tools,
services, find messenger, right click, properties, hit the stop button, set
startup type to manual or disabled. (be sure to stay patched at windows
update as well)

If the pop-ups appear while surfing web pages then download and install one
of the many pop-up blocker programs. Search www.download.com for popup
blocker, you'll find many free ones.

Also get a good spyware cleaner:

Spybot - http://www.safer-networking.org/

Ad-aware - http://www.lavasoft.com
 
P

purplehaz

Killing the messenger service is good, but to stop the real problem, which
is open netbios ports, you need to install and run a firewall when online.
You should always give the firewall advice along with any other advice to
stop the service. The firewall is essential, just killing the service is not
enough to secure your computer. Both solutions should be offered as both are
needed to keep the netbios ports secure.
 
R

Ramesh [MVP]

How to block Pop-ups?
http://www.mvps.org/sramesh2k/Popups.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Virus attachment claims to contain software updates from Microsoft
http://www.mvps.org/sramesh2k/VirusAlert.htm

How to guard against CoolWebSearch spyware:
http://www.mvps.org/sramesh2k/Defend_CWS.htm

How to prevent Blaster Worm attack:
http://www.mvps.org/sramesh2k/Blaster_Defence.htm
-------------------------------------------


every few minutes I have pop-up windows mesanger service
add. i want to get read of it, but i can't. if somebody
can help me?
thanks
 
G

Guest

A firewall will not stop the MS messenger service
-----Original Message-----
Killing the messenger service is good, but to stop the real problem, which
is open netbios ports, you need to install and run a firewall when online.
You should always give the firewall advice along with any other advice to
stop the service. The firewall is essential, just killing the service is not
enough to secure your computer. Both solutions should be offered as both are
needed to keep the netbios ports secure.




.
 
B

Bruce Chambers

Greetings --

This type of spam has become quite common over the past several
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats, such as the Blaster Worm that
recently swept cross the Internet. Install and use a decent,
properly configured firewall. (Merely disabling the messenger
service, as some people recommend, only hides the symptom, and does
little or nothing to truly secure your machine.) And ignoring or just
"putting up with" the security gap represented by these messages is
particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure
UDP ports 135, 137, and 138 and TCP ports 135, 139, and 445 are _all_
blocked. You may also disable Inbound NetBIOS (NetBIOS over TCP/IP).
You'll have to follow the instructions from firewall's manufacturer
for the specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
B

Bruce Chambers

Greetings --

Please stop deliberately posting potentially harmful advice.

Disabling the messenger service, as Gibson's utility does, is a
"head in the sand" approach to computer security that leaves the PC
vulnerable to threats such as the W32.Blaster.Worm.

The real problem is _not_ the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you're only
advice, however well-intended, was to turn off the warnings. How is
this helpful?

Equivalent Scenario: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as you are, replies, "Well,
don't do that."

The only true way to secure the PC, short of disconnecting it from
the Internet, is to install and *properly* configure a firewall; just
installing one and letting it's default settings handle things is no
good. Unfortunately, this does require one to learn a little bit more
about using a computer than used to be necessary.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
B

Bruce Chambers

Greetings --

No, but it will block the spam that's using the messenger service,
as well as other exploits such as the Blaster worm. Turning off the
messenger service does nothing but hide the problem; it fixes nothing.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
P

purplehaz

Ya what's your point? Who said a firewall stops the messenger service? I
didn't. A firewall will block/hide the open netbios ports that the spammers
are exploiting. The spammers exploit these ports and you get messenger
service popup ads. If the ports can't be exploited, via a firewall, then the
messenger service popup ads won't appear. It's simple, install a good
firewall and the messenger service popup ads stop. Period. The service does
not even have to be disabled or stopped, although if you don't need it then
disabling it is a good idea. If you get messenger service popup ads, the
real problem with your computer is bad security practices and open netbios
ports. Ports so easy to hack/exploit that my six year old cousin can do it.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top