Query regarding pop up message RE: Windows XP/Messenger

[Susan Reddington]

I received the following message and wondered if it was
anyhting to be concerned about. I had left my computer
on overnight, downloading from Kazaa, and when I switched
my monitor on the following morning the mesage appeared
in a grey box. I have not taken any action as I was not
sure if it was from Microsoft, or whether it was just
another pop-up, and am aware that any changes I make
could affect my computers security, the message said:

----------------------------------------------------

MESSGE FROM WINDOWS TO

(MY IP ADDRESS) on 21.05.2003

05.03.12

Windows has detected that the messenger service is
enabled and your computer is vunerable to hundreds of pop-
ups like this every day it is strongly reccommended that
you disable the messenger service as soon as possible to
secure your desktop please open internet browser and go
to popup barrier.com for instructions on disabling
messenger service.

----------------------------------------------------

I do not believe that this was sent by Microsoft or any
of it's partners, and therefore am asking for any
assistance to find out what this may be as I do not want
to remove my MSN Messenger as I use it frequently.

Thank you,

Susan Reddington

[Jonathan Kay [MVP]]

Greetings Susan,

What you're seeing is the Messenger service built-in to Windows, *not* Windows Messenger
(which are two different things) which spammers are exploiting -- this is not Microsoft, nor
can Microsoft control them anymore then they can control spam to your e-mail inbox.

To get rid of these pop ups, you'll need to disable the "Messenger Service", click Start,
then Run, enter "services.msc"and click OK. Scroll down to "Messenger", select it,
right-click and then choose Properties. Under startup type, choose 'Disabled' and then
choose the 'Stop' button. After the service is stopped, click OK. Nothing in Windows or any
real third-party applications should be effected by this.
____________________________________________
Jonathan Kay
Windows MVP, Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com

"Susan Reddington" > wrote in message
...
> I received the following message and wondered if it was
> anyhting to be concerned about. I had left my computer
> on overnight, downloading from Kazaa, and when I switched
> my monitor on the following morning the mesage appeared
> in a grey box. I have not taken any action as I was not
> sure if it was from Microsoft, or whether it was just
> another pop-up, and am aware that any changes I make
> could affect my computers security, the message said:
>
> ----------------------------------------------------
>
> MESSGE FROM WINDOWS TO
>
> (MY IP ADDRESS) on 21.05.2003
>
> 05.03.12
>
> Windows has detected that the messenger service is
> enabled and your computer is vunerable to hundreds of pop-
> ups like this every day it is strongly reccommended that
> you disable the messenger service as soon as possible to
> secure your desktop please open internet browser and go
> to popup barrier.com for instructions on disabling
> messenger service.
>
> ----------------------------------------------------
>
> I do not believe that this was sent by Microsoft or any
> of it's partners, and therefore am asking for any
> assistance to find out what this may be as I do not want
> to remove my MSN Messenger as I use it frequently.
>
> Thank you,
>
> Susan Reddington
>

[Geri S.]

I have seen the same issue and we were advised not to
disable the Messenger Service because it may interfere
with other programs that use it being able to send you
messages - like your printer or virus software. Turning
it off also does not block the ports the messages are
coming in on, it simply stops the message from coming up.
There is an article on it at
http://support.microsoft.com/default.aspx?scid=kb%3ben-us%
3b330904


>-----Original Message-----
>Greetings Susan,
>
>What you're seeing is the Messenger service built-in to
Windows, *not* Windows Messenger
>(which are two different things) which spammers are
exploiting -- this is not Microsoft, nor
>can Microsoft control them anymore then they can control
spam to your e-mail inbox.
>
>To get rid of these pop ups, you'll need to disable
the "Messenger Service", click Start,
>then Run, enter "services.msc"and click OK. Scroll down
to "Messenger", select it,
>right-click and then choose Properties. Under startup
type, choose 'Disabled' and then
>choose the 'Stop' button. After the service is stopped,
click OK. Nothing in Windows or any
>real third-party applications should be effected by this.
>____________________________________________
>Jonathan Kay
>Windows MVP, Messenger
>Associate Expert
>http://www.microsoft.com/windowsxp/expertzone/
>Messenger Resources - http://messenger.jonathankay.com
>
>"Susan Reddington" > wrote
in message
...
>> I received the following message and wondered if it was
>> anyhting to be concerned about. I had left my computer
>> on overnight, downloading from Kazaa, and when I
switched
>> my monitor on the following morning the mesage appeared
>> in a grey box. I have not taken any action as I was not
>> sure if it was from Microsoft, or whether it was just
>> another pop-up, and am aware that any changes I make
>> could affect my computers security, the message said:
>>
>> ----------------------------------------------------
>>
>> MESSGE FROM WINDOWS TO
>>
>> (MY IP ADDRESS) on 21.05.2003
>>
>> 05.03.12
>>
>> Windows has detected that the messenger service is
>> enabled and your computer is vunerable to hundreds of
pop-
>> ups like this every day it is strongly reccommended that
>> you disable the messenger service as soon as possible to
>> secure your desktop please open internet browser and go
>> to popup barrier.com for instructions on disabling
>> messenger service.
>>
>> ----------------------------------------------------
>>
>> I do not believe that this was sent by Microsoft or any
>> of it's partners, and therefore am asking for any
>> assistance to find out what this may be as I do not want
>> to remove my MSN Messenger as I use it frequently.
>>
>> Thank you,
>>
>> Susan Reddington
>>
>
>
>.
>

[Jonathan Kay [MVP]]

Hi Geri,

There is no "modern" printer or virus scanning software that is using the Messenger Service
to communicate -- the only place where these lurk is in corporate networks (where the
Messenger Service advertising windows wouldn't even get to, because it's a local network, and
the users most likely do not have a public IP address).

You can setup firewalls, block ports, etc. but features like Windows/MSN Messenger's file
transfer, voice/video, remote assistance, whiteboard, application sharing, other instant
messaging programs, online gaming, and a slew of other internet applications may not work
without advanced time consuming configuration in the firewall software.
____________________________________________
Jonathan Kay
Windows MVP, Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com

"Geri S." > wrote in message ...
>
> I have seen the same issue and we were advised not to
> disable the Messenger Service because it may interfere
> with other programs that use it being able to send you
> messages - like your printer or virus software. Turning
> it off also does not block the ports the messages are
> coming in on, it simply stops the message from coming up.
> There is an article on it at
> http://support.microsoft.com/default.aspx?scid=kb%3ben-us%
> 3b330904
>
>
> >-----Original Message-----
> >Greetings Susan,
> >
> >What you're seeing is the Messenger service built-in to
> Windows, *not* Windows Messenger
> >(which are two different things) which spammers are
> exploiting -- this is not Microsoft, nor
> >can Microsoft control them anymore then they can control
> spam to your e-mail inbox.
> >
> >To get rid of these pop ups, you'll need to disable
> the "Messenger Service", click Start,
> >then Run, enter "services.msc"and click OK. Scroll down
> to "Messenger", select it,
> >right-click and then choose Properties. Under startup
> type, choose 'Disabled' and then
> >choose the 'Stop' button. After the service is stopped,
> click OK. Nothing in Windows or any
> >real third-party applications should be effected by this.
> >____________________________________________
> >Jonathan Kay
> >Windows MVP, Messenger
> >Associate Expert
> >http://www.microsoft.com/windowsxp/expertzone/
> >Messenger Resources - http://messenger.jonathankay.com
> >
> >"Susan Reddington" > wrote
> in message
> ...
> >> I received the following message and wondered if it was
> >> anyhting to be concerned about. I had left my computer
> >> on overnight, downloading from Kazaa, and when I
> switched
> >> my monitor on the following morning the mesage appeared
> >> in a grey box. I have not taken any action as I was not
> >> sure if it was from Microsoft, or whether it was just
> >> another pop-up, and am aware that any changes I make
> >> could affect my computers security, the message said:
> >>
> >> ----------------------------------------------------
> >>
> >> MESSGE FROM WINDOWS TO
> >>
> >> (MY IP ADDRESS) on 21.05.2003
> >>
> >> 05.03.12
> >>
> >> Windows has detected that the messenger service is
> >> enabled and your computer is vunerable to hundreds of
> pop-
> >> ups like this every day it is strongly reccommended that
> >> you disable the messenger service as soon as possible to
> >> secure your desktop please open internet browser and go
> >> to popup barrier.com for instructions on disabling
> >> messenger service.
> >>
> >> ----------------------------------------------------
> >>
> >> I do not believe that this was sent by Microsoft or any
> >> of it's partners, and therefore am asking for any
> >> assistance to find out what this may be as I do not want
> >> to remove my MSN Messenger as I use it frequently.
> >>
> >> Thank you,
> >>
> >> Susan Reddington
> >>
> >
> >
> >.
> >

[Geri S.]

Thank you for the response! What about the ports being
left open? I support mostly remote users and there is
concern about the ports being exploited by hackers and
folks that write viruses in the articles I read about
this. Our users typically use an internet dial up
connection to access their mail and shared drives on the
network. Any further advice or information would be
greatly appreciated.

>-----Original Message-----
>Hi Geri,
>
>There is no "modern" printer or virus scanning software
that is using the Messenger Service
>to communicate -- the only place where these lurk is in
corporate networks (where the
>Messenger Service advertising windows wouldn't even get
to, because it's a local network, and
>the users most likely do not have a public IP address).
>
>You can setup firewalls, block ports, etc. but features
like Windows/MSN Messenger's file
>transfer, voice/video, remote assistance, whiteboard,
application sharing, other instant
>messaging programs, online gaming, and a slew of other
internet applications may not work
>without advanced time consuming configuration in the
firewall software.
>____________________________________________
>Jonathan Kay
>Windows MVP, Messenger
>Associate Expert
>http://www.microsoft.com/windowsxp/expertzone/
>Messenger Resources - http://messenger.jonathankay.com
>
>"Geri S." > wrote in message
...
>>
>> I have seen the same issue and we were advised not to
>> disable the Messenger Service because it may interfere
>> with other programs that use it being able to send you
>> messages - like your printer or virus software. Turning
>> it off also does not block the ports the messages are
>> coming in on, it simply stops the message from coming
up.
>> There is an article on it at
>> http://support.microsoft.com/default.aspx?scid=kb%3ben-
us%
>> 3b330904
>>
>>
>> >-----Original Message-----
>> >Greetings Susan,
>> >
>> >What you're seeing is the Messenger service built-in to
>> Windows, *not* Windows Messenger
>> >(which are two different things) which spammers are
>> exploiting -- this is not Microsoft, nor
>> >can Microsoft control them anymore then they can
control
>> spam to your e-mail inbox.
>> >
>> >To get rid of these pop ups, you'll need to disable
>> the "Messenger Service", click Start,
>> >then Run, enter "services.msc"and click OK. Scroll down
>> to "Messenger", select it,
>> >right-click and then choose Properties. Under startup
>> type, choose 'Disabled' and then
>> >choose the 'Stop' button. After the service is stopped,
>> click OK. Nothing in Windows or any
>> >real third-party applications should be effected by
this.
>> >____________________________________________
>> >Jonathan Kay
>> >Windows MVP, Messenger
>> >Associate Expert
>> >http://www.microsoft.com/windowsxp/expertzone/
>> >Messenger Resources - http://messenger.jonathankay.com
>> >
>> >"Susan Reddington" >
wrote
>> in message
>> ...
>> >> I received the following message and wondered if it
was
>> >> anyhting to be concerned about. I had left my
computer
>> >> on overnight, downloading from Kazaa, and when I
>> switched
>> >> my monitor on the following morning the mesage
appeared
>> >> in a grey box. I have not taken any action as I was
not
>> >> sure if it was from Microsoft, or whether it was just
>> >> another pop-up, and am aware that any changes I make
>> >> could affect my computers security, the message said:
>> >>
>> >> ----------------------------------------------------
>> >>
>> >> MESSGE FROM WINDOWS TO
>> >>
>> >> (MY IP ADDRESS) on 21.05.2003
>> >>
>> >> 05.03.12
>> >>
>> >> Windows has detected that the messenger service is
>> >> enabled and your computer is vunerable to hundreds of
>> pop-
>> >> ups like this every day it is strongly reccommended
that
>> >> you disable the messenger service as soon as
possible to
>> >> secure your desktop please open internet browser and
go
>> >> to popup barrier.com for instructions on disabling
>> >> messenger service.
>> >>
>> >> ----------------------------------------------------
>> >>
>> >> I do not believe that this was sent by Microsoft or
any
>> >> of it's partners, and therefore am asking for any
>> >> assistance to find out what this may be as I do not
want
>> >> to remove my MSN Messenger as I use it frequently.
>> >>
>> >> Thank you,
>> >>
>> >> Susan Reddington
>> >>
>> >
>> >
>> >.
>> >
>
>
>.
>

[Jonathan Kay [MVP]]

Hi Geri,

The Messenger Service/RPC ports themselves aren't really a risk to have a open -- there are
no known security holes. However, having the file sharing port open (port 445) could be a
risk, especially if the user is using weak passwords on their PC.

Since you're supporting business users, then it probably would be a good idea (depending on
how they're establishing their remote connections), to have a firewall engaged, primarily for
security of company data, especially if they're dialing up and getting public IP addresses.
Although realistically dial up users aren't targeted too much (simply because would-be
"attackers" with nothing better to do, can't stand the slowness) and there really is no known
"hole" to exploit, but in this day and age it's better to be safe then sorry when it comes to
corporate information.

However, just to pull things together, on a more general note, I still do believe that
turning off the Messenger Service is the best (and easiest) solution for the Messenger
Service ads, but when it comes to corporate security, obviously there's more to consider.
____________________________________________
Jonathan Kay
Windows MVP, Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com


"Geri S." > wrote in message ...
> Thank you for the response! What about the ports being
> left open? I support mostly remote users and there is
> concern about the ports being exploited by hackers and
> folks that write viruses in the articles I read about
> this. Our users typically use an internet dial up
> connection to access their mail and shared drives on the
> network. Any further advice or information would be
> greatly appreciated.
>
> >-----Original Message-----
> >Hi Geri,
> >
> >There is no "modern" printer or virus scanning software
> that is using the Messenger Service
> >to communicate -- the only place where these lurk is in
> corporate networks (where the
> >Messenger Service advertising windows wouldn't even get
> to, because it's a local network, and
> >the users most likely do not have a public IP address).
> >
> >You can setup firewalls, block ports, etc. but features
> like Windows/MSN Messenger's file
> >transfer, voice/video, remote assistance, whiteboard,
> application sharing, other instant
> >messaging programs, online gaming, and a slew of other
> internet applications may not work
> >without advanced time consuming configuration in the
> firewall software.
> >____________________________________________
> >Jonathan Kay
> >Windows MVP, Messenger
> >Associate Expert
> >http://www.microsoft.com/windowsxp/expertzone/
> >Messenger Resources - http://messenger.jonathankay.com
> >
> >"Geri S." > wrote in message
> ...
> >>
> >> I have seen the same issue and we were advised not to
> >> disable the Messenger Service because it may interfere
> >> with other programs that use it being able to send you
> >> messages - like your printer or virus software. Turning
> >> it off also does not block the ports the messages are
> >> coming in on, it simply stops the message from coming
> up.
> >> There is an article on it at
> >> http://support.microsoft.com/default.aspx?scid=kb%3ben-
> us%
> >> 3b330904
> >>
> >>
> >> >-----Original Message-----
> >> >Greetings Susan,
> >> >
> >> >What you're seeing is the Messenger service built-in to
> >> Windows, *not* Windows Messenger
> >> >(which are two different things) which spammers are
> >> exploiting -- this is not Microsoft, nor
> >> >can Microsoft control them anymore then they can
> control
> >> spam to your e-mail inbox.
> >> >
> >> >To get rid of these pop ups, you'll need to disable
> >> the "Messenger Service", click Start,
> >> >then Run, enter "services.msc"and click OK. Scroll down
> >> to "Messenger", select it,
> >> >right-click and then choose Properties. Under startup
> >> type, choose 'Disabled' and then
> >> >choose the 'Stop' button. After the service is stopped,
> >> click OK. Nothing in Windows or any
> >> >real third-party applications should be effected by
> this.
> >> >____________________________________________
> >> >Jonathan Kay
> >> >Windows MVP, Messenger
> >> >Associate Expert
> >> >http://www.microsoft.com/windowsxp/expertzone/
> >> >Messenger Resources - http://messenger.jonathankay.com
> >> >
> >> >"Susan Reddington" >
> wrote
> >> in message
> >> ...
> >> >> I received the following message and wondered if it
> was
> >> >> anyhting to be concerned about. I had left my
> computer
> >> >> on overnight, downloading from Kazaa, and when I
> >> switched
> >> >> my monitor on the following morning the mesage
> appeared
> >> >> in a grey box. I have not taken any action as I was
> not
> >> >> sure if it was from Microsoft, or whether it was just
> >> >> another pop-up, and am aware that any changes I make
> >> >> could affect my computers security, the message said:
> >> >>
> >> >> ----------------------------------------------------
> >> >>
> >> >> MESSGE FROM WINDOWS TO
> >> >>
> >> >> (MY IP ADDRESS) on 21.05.2003
> >> >>
> >> >> 05.03.12
> >> >>
> >> >> Windows has detected that the messenger service is
> >> >> enabled and your computer is vunerable to hundreds of
> >> pop-
> >> >> ups like this every day it is strongly reccommended
> that
> >> >> you disable the messenger service as soon as
> possible to
> >> >> secure your desktop please open internet browser and
> go
> >> >> to popup barrier.com for instructions on disabling
> >> >> messenger service.
> >> >>
> >> >> ----------------------------------------------------
> >> >>
> >> >> I do not believe that this was sent by Microsoft or
> any
> >> >> of it's partners, and therefore am asking for any
> >> >> assistance to find out what this may be as I do not
> want
> >> >> to remove my MSN Messenger as I use it frequently.
> >> >>
> >> >> Thank you,
> >> >>
> >> >> Susan Reddington
> >> >>
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

[Geri S.]

Thank you so much for your input! Obviously I am not on
the networking side of things and discovered this as a
user issue. I'll pass this along to the folks making the
decisions...again, Thank you!

>-----Original Message-----
>Hi Geri,
>
>The Messenger Service/RPC ports themselves aren't really
a risk to have a open -- there are
>no known security holes. However, having the file
sharing port open (port 445) could be a
>risk, especially if the user is using weak passwords on
their PC.
>
>Since you're supporting business users, then it probably
would be a good idea (depending on
>how they're establishing their remote connections), to
have a firewall engaged, primarily for
>security of company data, especially if they're dialing
up and getting public IP addresses.
>Although realistically dial up users aren't targeted too
much (simply because would-be
>"attackers" with nothing better to do, can't stand the
slowness) and there really is no known
>"hole" to exploit, but in this day and age it's better to
be safe then sorry when it comes to
>corporate information.
>
>However, just to pull things together, on a more general
note, I still do believe that
>turning off the Messenger Service is the best (and
easiest) solution for the Messenger
>Service ads, but when it comes to corporate security,
obviously there's more to consider.
>____________________________________________
>Jonathan Kay
>Windows MVP, Messenger
>Associate Expert
>http://www.microsoft.com/windowsxp/expertzone/
>Messenger Resources - http://messenger.jonathankay.com
>
>
>"Geri S." > wrote in message
...
>> Thank you for the response! What about the ports being
>> left open? I support mostly remote users and there is
>> concern about the ports being exploited by hackers and
>> folks that write viruses in the articles I read about
>> this. Our users typically use an internet dial up
>> connection to access their mail and shared drives on the
>> network. Any further advice or information would be
>> greatly appreciated.
>>
>> >-----Original Message-----
>> >Hi Geri,
>> >
>> >There is no "modern" printer or virus scanning software
>> that is using the Messenger Service
>> >to communicate -- the only place where these lurk is in
>> corporate networks (where the
>> >Messenger Service advertising windows wouldn't even get
>> to, because it's a local network, and
>> >the users most likely do not have a public IP address).
>> >
>> >You can setup firewalls, block ports, etc. but features
>> like Windows/MSN Messenger's file
>> >transfer, voice/video, remote assistance, whiteboard,
>> application sharing, other instant
>> >messaging programs, online gaming, and a slew of other
>> internet applications may not work
>> >without advanced time consuming configuration in the
>> firewall software.
>> >____________________________________________
>> >Jonathan Kay
>> >Windows MVP, Messenger
>> >Associate Expert
>> >http://www.microsoft.com/windowsxp/expertzone/
>> >Messenger Resources - http://messenger.jonathankay.com
>> >
>> >"Geri S." > wrote in message
>> ...
>> >>
>> >> I have seen the same issue and we were advised not to
>> >> disable the Messenger Service because it may
interfere
>> >> with other programs that use it being able to send
you
>> >> messages - like your printer or virus software.
Turning
>> >> it off also does not block the ports the messages are
>> >> coming in on, it simply stops the message from coming
>> up.
>> >> There is an article on it at
>> >> http://support.microsoft.com/default.aspx?scid=kb%
3ben-
>> us%
>> >> 3b330904
>> >>
>> >>
>> >> >-----Original Message-----
>> >> >Greetings Susan,
>> >> >
>> >> >What you're seeing is the Messenger service built-
in to
>> >> Windows, *not* Windows Messenger
>> >> >(which are two different things) which spammers are
>> >> exploiting -- this is not Microsoft, nor
>> >> >can Microsoft control them anymore then they can
>> control
>> >> spam to your e-mail inbox.
>> >> >
>> >> >To get rid of these pop ups, you'll need to disable
>> >> the "Messenger Service", click Start,
>> >> >then Run, enter "services.msc"and click OK. Scroll
down
>> >> to "Messenger", select it,
>> >> >right-click and then choose Properties. Under
startup
>> >> type, choose 'Disabled' and then
>> >> >choose the 'Stop' button. After the service is
stopped,
>> >> click OK. Nothing in Windows or any
>> >> >real third-party applications should be effected by
>> this.
>> >> >____________________________________________
>> >> >Jonathan Kay
>> >> >Windows MVP, Messenger
>> >> >Associate Expert
>> >> >http://www.microsoft.com/windowsxp/expertzone/
>> >> >Messenger Resources -
http://messenger.jonathankay.com
>> >> >
>> >> >"Susan Reddington" >
>> wrote
>> >> in message
>> >> ...
>> >> >> I received the following message and wondered if
it
>> was
>> >> >> anyhting to be concerned about. I had left my
>> computer
>> >> >> on overnight, downloading from Kazaa, and when I
>> >> switched
>> >> >> my monitor on the following morning the mesage
>> appeared
>> >> >> in a grey box. I have not taken any action as I
was
>> not
>> >> >> sure if it was from Microsoft, or whether it was
just
>> >> >> another pop-up, and am aware that any changes I
make
>> >> >> could affect my computers security, the message
said:
>> >> >>
>> >> >> --------------------------------------------------
--
>> >> >>
>> >> >> MESSGE FROM WINDOWS TO
>> >> >>
>> >> >> (MY IP ADDRESS) on 21.05.2003
>> >> >>
>> >> >> 05.03.12
>> >> >>
>> >> >> Windows has detected that the messenger service is
>> >> >> enabled and your computer is vunerable to
hundreds of
>> >> pop-
>> >> >> ups like this every day it is strongly
reccommended
>> that
>> >> >> you disable the messenger service as soon as
>> possible to
>> >> >> secure your desktop please open internet browser
and
>> go
>> >> >> to popup barrier.com for instructions on disabling
>> >> >> messenger service.
>> >> >>
>> >> >> --------------------------------------------------
--
>> >> >>
>> >> >> I do not believe that this was sent by Microsoft
or
>> any
>> >> >> of it's partners, and therefore am asking for any
>> >> >> assistance to find out what this may be as I do
not
>> want
>> >> >> to remove my MSN Messenger as I use it frequently.
>> >> >>
>> >> >> Thank you,
>> >> >>
>> >> >> Susan Reddington
>> >> >>
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>

[Jonathan Kay [MVP]]

Hi Geri,

Glad to be of assistance =).
____________________________________________
Jonathan Kay
Windows MVP, Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com


"Geri S." > wrote in message ...
> Thank you so much for your input! Obviously I am not on
> the networking side of things and discovered this as a
> user issue. I'll pass this along to the folks making the
> decisions...again, Thank you!
>
> >-----Original Message-----
> >Hi Geri,
> >
> >The Messenger Service/RPC ports themselves aren't really
> a risk to have a open -- there are
> >no known security holes. However, having the file
> sharing port open (port 445) could be a
> >risk, especially if the user is using weak passwords on
> their PC.
> >
> >Since you're supporting business users, then it probably
> would be a good idea (depending on
> >how they're establishing their remote connections), to
> have a firewall engaged, primarily for
> >security of company data, especially if they're dialing
> up and getting public IP addresses.
> >Although realistically dial up users aren't targeted too
> much (simply because would-be
> >"attackers" with nothing better to do, can't stand the
> slowness) and there really is no known
> >"hole" to exploit, but in this day and age it's better to
> be safe then sorry when it comes to
> >corporate information.
> >
> >However, just to pull things together, on a more general
> note, I still do believe that
> >turning off the Messenger Service is the best (and
> easiest) solution for the Messenger
> >Service ads, but when it comes to corporate security,
> obviously there's more to consider.
> >____________________________________________
> >Jonathan Kay
> >Windows MVP, Messenger
> >Associate Expert
> >http://www.microsoft.com/windowsxp/expertzone/
> >Messenger Resources - http://messenger.jonathankay.com
> >
> >
> >"Geri S." > wrote in message
> ...
> >> Thank you for the response! What about the ports being
> >> left open? I support mostly remote users and there is
> >> concern about the ports being exploited by hackers and
> >> folks that write viruses in the articles I read about
> >> this. Our users typically use an internet dial up
> >> connection to access their mail and shared drives on the
> >> network. Any further advice or information would be
> >> greatly appreciated.
> >>
> >> >-----Original Message-----
> >> >Hi Geri,
> >> >
> >> >There is no "modern" printer or virus scanning software
> >> that is using the Messenger Service
> >> >to communicate -- the only place where these lurk is in
> >> corporate networks (where the
> >> >Messenger Service advertising windows wouldn't even get
> >> to, because it's a local network, and
> >> >the users most likely do not have a public IP address).
> >> >
> >> >You can setup firewalls, block ports, etc. but features
> >> like Windows/MSN Messenger's file
> >> >transfer, voice/video, remote assistance, whiteboard,
> >> application sharing, other instant
> >> >messaging programs, online gaming, and a slew of other
> >> internet applications may not work
> >> >without advanced time consuming configuration in the
> >> firewall software.
> >> >____________________________________________
> >> >Jonathan Kay
> >> >Windows MVP, Messenger
> >> >Associate Expert
> >> >http://www.microsoft.com/windowsxp/expertzone/
> >> >Messenger Resources - http://messenger.jonathankay.com
> >> >
> >> >"Geri S." > wrote in message
> >> ...
> >> >>
> >> >> I have seen the same issue and we were advised not to
> >> >> disable the Messenger Service because it may
> interfere
> >> >> with other programs that use it being able to send
> you
> >> >> messages - like your printer or virus software.
> Turning
> >> >> it off also does not block the ports the messages are
> >> >> coming in on, it simply stops the message from coming
> >> up.
> >> >> There is an article on it at
> >> >> http://support.microsoft.com/default.aspx?scid=kb%
> 3ben-
> >> us%
> >> >> 3b330904
> >> >>
> >> >>
> >> >> >-----Original Message-----
> >> >> >Greetings Susan,
> >> >> >
> >> >> >What you're seeing is the Messenger service built-
> in to
> >> >> Windows, *not* Windows Messenger
> >> >> >(which are two different things) which spammers are
> >> >> exploiting -- this is not Microsoft, nor
> >> >> >can Microsoft control them anymore then they can
> >> control
> >> >> spam to your e-mail inbox.
> >> >> >
> >> >> >To get rid of these pop ups, you'll need to disable
> >> >> the "Messenger Service", click Start,
> >> >> >then Run, enter "services.msc"and click OK. Scroll
> down
> >> >> to "Messenger", select it,
> >> >> >right-click and then choose Properties. Under
> startup
> >> >> type, choose 'Disabled' and then
> >> >> >choose the 'Stop' button. After the service is
> stopped,
> >> >> click OK. Nothing in Windows or any
> >> >> >real third-party applications should be effected by
> >> this.
> >> >> >____________________________________________
> >> >> >Jonathan Kay
> >> >> >Windows MVP, Messenger
> >> >> >Associate Expert
> >> >> >http://www.microsoft.com/windowsxp/expertzone/
> >> >> >Messenger Resources -
> http://messenger.jonathankay.com
> >> >> >
> >> >> >"Susan Reddington" >
> >> wrote
> >> >> in message
> >> >> ...
> >> >> >> I received the following message and wondered if
> it
> >> was
> >> >> >> anyhting to be concerned about. I had left my
> >> computer
> >> >> >> on overnight, downloading from Kazaa, and when I
> >> >> switched
> >> >> >> my monitor on the following morning the mesage
> >> appeared
> >> >> >> in a grey box. I have not taken any action as I
> was
> >> not
> >> >> >> sure if it was from Microsoft, or whether it was
> just
> >> >> >> another pop-up, and am aware that any changes I
> make
> >> >> >> could affect my computers security, the message
> said:
> >> >> >>
> >> >> >> --------------------------------------------------
> --
> >> >> >>
> >> >> >> MESSGE FROM WINDOWS TO
> >> >> >>
> >> >> >> (MY IP ADDRESS) on 21.05.2003
> >> >> >>
> >> >> >> 05.03.12
> >> >> >>
> >> >> >> Windows has detected that the messenger service is
> >> >> >> enabled and your computer is vunerable to
> hundreds of
> >> >> pop-
> >> >> >> ups like this every day it is strongly
> reccommended
> >> that
> >> >> >> you disable the messenger service as soon as
> >> possible to
> >> >> >> secure your desktop please open internet browser
> and
> >> go
> >> >> >> to popup barrier.com for instructions on disabling
> >> >> >> messenger service.
> >> >> >>
> >> >> >> --------------------------------------------------
> --
> >> >> >>
> >> >> >> I do not believe that this was sent by Microsoft
> or
> >> any
> >> >> >> of it's partners, and therefore am asking for any
> >> >> >> assistance to find out what this may be as I do
> not
> >> want
> >> >> >> to remove my MSN Messenger as I use it frequently.
> >> >> >>
> >> >> >> Thank you,
> >> >> >>
> >> >> >> Susan Reddington
> >> >> >>
> >> >> >
> >> >> >
> >> >> >.
> >> >> >
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >