Pop ups, updates

[cherrie]

I have two questions, one while at Windows update a grey
box popped up saying that there was a new software out to
stop messages like the one I received. The email address
was blockmessenger.com. Is this from Microsoft? I have a
felling that it isn't. On to my next Question I tried
many times to download two critial updates #Q817287 and
331953, It downloads but does not install. Is there a
reason? If not were or how can I install them on my
computer. Thanks for any help on these questions in
advance.

[Bruce Chambers]

Greetings --

Does the title bar of these pop-ups read "Messenger Service?"

This a type of spam has become quite common over the past few
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats. Install and use a decent,
properly configured firewall. (Disabling the messenger service, as
some people recommend, only hides the symptom, and does nothing to
secure your machine.) And ignoring or just "putting up with" these
messages and the problem they represent is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Additionally:

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm


Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
----
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"cherrie" > wrote in message
...
> I have two questions, one while at Windows update a grey
> box popped up saying that there was a new software out to
> stop messages like the one I received. The email address
> was blockmessenger.com. Is this from Microsoft? I have a
> felling that it isn't. On to my next Question I tried
> many times to download two critial updates #Q817287 and
> 331953, It downloads but does not install. Is there a
> reason? If not were or how can I install them on my
> computer. Thanks for any help on these questions in
> advance.

[Mcploppy ©]

Hi Cherrie,

:: box popped up saying that there was a new software out to
:: stop messages like the one I received.

These messages are caused by the windows messenger service, however, the
messenger service is not the problem, the real problem is the fact that you
are not running a firewall, or if you are, you haven't blocked ports
137-139.

Disabling the messenger service will stop the popups, but if you have file
and print sharing bound to your external TCP/IP connection, then you could
also potentially be sharing your entire hard disk with the world since
netBIOS uses ports 137-139.

A good firewall can be found at www.zonelabs.com

*Disabling the Messenger Service*
To remove the ability for anyone in the world to pop up messages on your
computer, you can disable the Messenger service. Its easy to reverse at a
later time if you wish to do so.

Windows XP Home
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK

Windows XP Professional
Click Start->Settings ->Control Panel
Click Administrative Tools
Click Services
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK

Sorry cant answer the next question.....

HTH
--
Greg Crawford
**********************
*www.greg-crawford.co.uk*
*Remove MyShoes 2 email *
**********************






<cherrie> typed:
:: I have two questions, one while at Windows update a grey
:: box popped up saying that there was a new software out to
:: stop messages like the one I received. The email address
:: was blockmessenger.com. Is this from Microsoft? I have a
:: felling that it isn't. On to my next Question I tried
:: many times to download two critial updates #Q817287 and
:: 331953, It downloads but does not install. Is there a
:: reason? If not were or how can I install them on my
:: computer. Thanks for any help on these questions in
:: advance.

[Cherrie]

thank you for your quick response. I have Norton
internet security with the firewall, I just updated it
this morning before this happened. Can this get through
with Norton 2003 edition.


>-----Original Message-----
>Hi Cherrie,
>
>:: box popped up saying that there was a new software
out to
>:: stop messages like the one I received.
>
>These messages are caused by the windows messenger
service, however, the
>messenger service is not the problem, the real problem
is the fact that you
>are not running a firewall, or if you are, you haven't
blocked ports
>137-139.
>
>Disabling the messenger service will stop the popups,
but if you have file
>and print sharing bound to your external TCP/IP
connection, then you could
>also potentially be sharing your entire hard disk with
the world since
>netBIOS uses ports 137-139.
>
>A good firewall can be found at www.zonelabs.com
>
>*Disabling the Messenger Service*
>To remove the ability for anyone in the world to pop up
messages on your
>computer, you can disable the Messenger service. Its
easy to reverse at a
>later time if you wish to do so.
>
>Windows XP Home
>Click Start->Settings ->Control Panel
>Click Performance and Maintenance
>Click Administrative Tools
>Double click Services Scroll
>down and highlight "Messenger"
>Right-click the highlighted line and choose Properties.
>Click the STOP button.
>Select Disable or Manual in the Startup Type scroll bar
>Click OK
>
>Windows XP Professional
>Click Start->Settings ->Control Panel
>Click Administrative Tools
>Click Services
>Double click Services Scroll
>down and highlight "Messenger"
>Right-click the highlighted line and choose Properties.
>Click the STOP button.
>Select Disable or Manual in the Startup Type scroll bar
>Click OK
>
>Sorry cant answer the next question.....
>
>HTH
>--
>Greg Crawford
>**********************
>*www.greg-crawford.co.uk*
>*Remove MyShoes 2 email *
>**********************
>
>
>
>
>
>
> <cherrie> typed:
>:: I have two questions, one while at Windows update a
grey
>:: box popped up saying that there was a new software
out to
>:: stop messages like the one I received. The email
address
>:: was blockmessenger.com. Is this from Microsoft? I
have a
>:: felling that it isn't. On to my next Question I tried
>:: many times to download two critial updates #Q817287
and
>:: 331953, It downloads but does not install. Is there a
>:: reason? If not were or how can I install them on my
>:: computer. Thanks for any help on these questions in
>:: advance.
>
>
>.
>

[Cherrie]

Thank you for your responce. I have Norton internet
security with a firewall(Norton 2003) My internet
firewall was turned off and I turned it on. Will see if
this will help. Thank you again.


>-----Original Message-----
>Greetings --
>
> Does the title bar of these pop-ups read "Messenger
Service?"
>
> This a type of spam has become quite common over the
past few
>months, and unintentionally serves as a valid
security "alert." It
>demonstrates that you haven't been taking sufficient
precautions while
>connected to the Internet. Your data probably hasn't
been compromised
>by these specific advertisements, but if you're open to
this exploit,
>you may well be open to other threats. Install and use
a decent,
>properly configured firewall. (Disabling the messenger
service, as
>some people recommend, only hides the symptom, and does
nothing to
>secure your machine.) And ignoring or just "putting up
with" these
>messages and the problem they represent is particularly
foolish.
>
>Messenger Service of Windows
>http://support.microsoft.com/default.aspx?scid=KB;en-
us;168893
>
>Messenger Service Window That Contains an Internet
Advertisement
>Appears
>http://support.microsoft.com/?id=330904
>
> Additionally:
>
>Blocking Ads, Parasites, and Hijackers with a Hosts File
>http://www.mvps.org/winhelp2002/hosts.htm
>
>
>Bruce Chambers
>
>Help us help you:
>http://dts-l.org/goodpost.htm
>http://www.catb.org/~esr/faqs/smart-questions.html
>----
>You can have peace. Or you can have freedom. Don't
ever count on
>having both at once. -- RAH
>
>
>"cherrie" > wrote in message
...
>> I have two questions, one while at Windows update a
grey
>> box popped up saying that there was a new software out
to
>> stop messages like the one I received. The email
address
>> was blockmessenger.com. Is this from Microsoft? I
have a
>> felling that it isn't. On to my next Question I tried
>> many times to download two critial updates #Q817287 and
>> 331953, It downloads but does not install. Is there a
>> reason? If not were or how can I install them on my
>> computer. Thanks for any help on these questions in
>> advance.
>
>
>.
>

[Bruce Chambers]

Greetings --

You're welcome. You should make sure that you've configured your
firewall to block all of the specific IP ports (UDP 135,137, &138; TCP
135, 139, & 445) used by the messenger service.


Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
----
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Cherrie" > wrote in message
...
> Thank you for your responce. I have Norton internet
> security with a firewall(Norton 2003) My internet
> firewall was turned off and I turned it on. Will see if
> this will help. Thank you again.
>
>

[Joe Stewart]

"Bruce Chambers" > wrote in message >...
> Greetings --
>
> You're welcome. You should make sure that you've configured your
> firewall to block all of the specific IP ports (UDP 135,137, &138; TCP
> 135, 139, & 445) used by the messenger service.

You should also block udp port 1026 now - spammers have found that the messenger
service also listens on that port. See http://www.lurhq.com/popup_spam.html

-Joe