messenger service popup

[Devin Panchal]

hi,
i've bought a new sony lapotop with xp on it. and sometimes when i'm on the
internet, i get a message from a 'messenger service' (nothin to do with
msn). that i have got spy ware, etc. and that i should click 'ok', to be
taken to the site. i had this sort of problem with my old pc, and someone
told me how to get rid of if, by typing msconfig, and going to services, and
switching one off. but i cant remember which one it was.

can any1 help?

thanx

devin

[Its only me]

Xref: kermit microsoft.public.windowsxp.newusers:117670

Firstly............DO NOT PUT YOUR REAL EMAIL ADDRESS ON NEWSGROUP
MESSAGES!!!!!!
Second..........Switch ON your firewall!!!!!
Thirdly...........You can now go to services and disable messenger service.

Hope this is of help.

"Devin Panchal" > wrote in message
...
> hi,
> i've bought a new sony lapotop with xp on it. and sometimes when i'm on
the
> internet, i get a message from a 'messenger service' (nothin to do with
> msn). that i have got spy ware, etc. and that i should click 'ok', to be
> taken to the site. i had this sort of problem with my old pc, and someone
> told me how to get rid of if, by typing msconfig, and going to services,
and
> switching one off. but i cant remember which one it was.
>
> can any1 help?
>
> thanx
>
> devin
>
>

[Cerridwen]

Devin Panchal wrote:
> hi,
> i've bought a new sony lapotop with xp on it. and sometimes when i'm
> on the internet, i get a message from a 'messenger service' (nothin
> to do with msn). that i have got spy ware, etc. and that i should
> click 'ok', to be taken to the site. i had this sort of problem with
> my old pc, and someone told me how to get rid of if, by typing
> msconfig, and going to services, and switching one off. but i cant
> remember which one it was.
>
> can any1 help?
>
> thanx
>
> devin

This particular "sales method" is strikingly similar to the
"protection" rackets offered to small businesses by organized
criminals. Yes, it's a scam; no reputable business would need to
resort to extortion. Particularly since they're trying to sell you a
type of protection that is already available to you free of charge.

This type of spam has become quite common over the past few
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats. Install and use a decent,
properly configured firewall. (Disabling the messenger service, as
some people recommend, only hides the symptom, and does nothing to
secure your machine.) And ignoring or just "putting up with" these
messages and the problem they represent is particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service is a "head in the sand" approach to computer security.

The real problem is not the messenger service pop-ups; they're
actually providing a useful service by acting as a security alert. The
true problem is the unsecured computer, and you've been
advised to merely turn off the warnings. How is this helpful?

Equivalent Scenario 1: Somewhere in a house, a small fire starts,
and sets off the smoke alarm. You, not immediately seeing any
fire/smoke, complain about the noise of the smoke detector, and are
advised to remove the smoke detector's battery and go back to sleep.

Equivalent Scenario 2: You over-exert your shoulder at work or
play, causing bursitis. After weeks of annoying and sometimes
excruciating pain whenever you try to reach over your head, you go to
a doctor and say, while demonstrating the motion, "Doc, it hurts when
I do this." The doctor, being as helpful as some of your respondents,
replies, "Well, don't do that."

I'm beginning to think that the people deliberately posting such
bad advice are hacker-wannabes who have no true interest in helping
you secure your system, but would rather give you a false sense of
security while ensuring that your computer is still open to
exploitation.

If the Messenger service is stopped, messages from the Alerter service
(notifications from your antivirus software, for example) are not
transmitted. If the Messenger service is turned off, any services that
explicitly depend on the Messenger service do not start, and an error
message is logged in the System event log. For this reason, it is strongly
recommended that you install a firewall and configure it to block NetBIOS
and RPC traffic instead of turning off the Messenger service.

[Ramesh [MVP]]

Devin,

How to block Pop-ups?=20
http://www.mvps.org/sramesh2k/Popups.htm

--=20
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------------
Prevent Spyware from being installed:=20
http://www.mvps.org/sramesh2k/Malware_Defence.htm
-------------------------------------------------


"Devin Panchal" > wrote in message =
...
hi,
i've bought a new sony lapotop with xp on it. and sometimes when i'm on =
the
internet, i get a message from a 'messenger service' (nothin to do with
msn). that i have got spy ware, etc. and that i should click 'ok', to be
taken to the site. i had this sort of problem with my old pc, and =
someone
told me how to get rid of if, by typing msconfig, and going to services, =
and
switching one off. but i cant remember which one it was.

can any1 help?

thanx

devin

[Devin Panchal]

lol. ok. calm down.
thanx for the help.

"Cerridwen" > wrote in message
...
> Devin Panchal wrote:
> > hi,
> > i've bought a new sony lapotop with xp on it. and sometimes when i'm
> > on the internet, i get a message from a 'messenger service' (nothin
> > to do with msn). that i have got spy ware, etc. and that i should
> > click 'ok', to be taken to the site. i had this sort of problem with
> > my old pc, and someone told me how to get rid of if, by typing
> > msconfig, and going to services, and switching one off. but i cant
> > remember which one it was.
> >
> > can any1 help?
> >
> > thanx
> >
> > devin
>
> This particular "sales method" is strikingly similar to the
> "protection" rackets offered to small businesses by organized
> criminals. Yes, it's a scam; no reputable business would need to
> resort to extortion. Particularly since they're trying to sell you a
> type of protection that is already available to you free of charge.
>
> This type of spam has become quite common over the past few
> months, and unintentionally serves as a valid security "alert." It
> demonstrates that you haven't been taking sufficient precautions while
> connected to the Internet. Your data probably hasn't been compromised
> by these specific advertisements, but if you're open to this exploit,
> you may well be open to other threats. Install and use a decent,
> properly configured firewall. (Disabling the messenger service, as
> some people recommend, only hides the symptom, and does nothing to
> secure your machine.) And ignoring or just "putting up with" these
> messages and the problem they represent is particularly foolish.
>
> Messenger Service of Windows
> http://support.microsoft.com/default.aspx?scid=KB;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
>
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> Oh, and be especially wary of people who advise you to do nothing
> more than disable the messenger service. Disabling the messenger
> service is a "head in the sand" approach to computer security.
>
> The real problem is not the messenger service pop-ups; they're
> actually providing a useful service by acting as a security alert. The
> true problem is the unsecured computer, and you've been
> advised to merely turn off the warnings. How is this helpful?
>
> Equivalent Scenario 1: Somewhere in a house, a small fire starts,
> and sets off the smoke alarm. You, not immediately seeing any
> fire/smoke, complain about the noise of the smoke detector, and are
> advised to remove the smoke detector's battery and go back to sleep.
>
> Equivalent Scenario 2: You over-exert your shoulder at work or
> play, causing bursitis. After weeks of annoying and sometimes
> excruciating pain whenever you try to reach over your head, you go to
> a doctor and say, while demonstrating the motion, "Doc, it hurts when
> I do this." The doctor, being as helpful as some of your respondents,
> replies, "Well, don't do that."
>
> I'm beginning to think that the people deliberately posting such
> bad advice are hacker-wannabes who have no true interest in helping
> you secure your system, but would rather give you a false sense of
> security while ensuring that your computer is still open to
> exploitation.
>
> If the Messenger service is stopped, messages from the Alerter service
> (notifications from your antivirus software, for example) are not
> transmitted. If the Messenger service is turned off, any services that
> explicitly depend on the Messenger service do not start, and an error
> message is logged in the System event log. For this reason, it is strongly
> recommended that you install a firewall and configure it to block NetBIOS
> and RPC traffic instead of turning off the Messenger service.
>
>

[Shenan Stanley]

Devin Panchal wrote:
> i've bought a new sony lapotop with xp on it. and sometimes when
> i'm on the internet, i get a message from a 'messenger service'
> (nothin to do with msn). that i have got spy ware, etc. and that i
> should click 'ok', to be taken to the site. i had this sort of
> problem with my old pc, and someone told me how to get rid of if,
> by typing msconfig, and going to services, and switching one off.
> but i cant remember which one it was.

Cerridwen wrote:
> * lots cut out here *
>
> Messenger Service of Windows
> http://support.microsoft.com/default.aspx?scid=KB;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
>
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> *lots more cut out here*

Devin Panchal wrote:
> lol. ok. calm down.
> thanx for the help.

Wow Cerridwen, that was one heck of a complete answer! heh

Reminds me of many people who post frequent answers around here.. We tend to
over emphasize and change our answers because of the opinions or arguments
we have had over the answers in the past. =)

Not critiquing here, mind you.. More of an Admiring thing. *grin*

--
<- Shenan ->
--

[Cerridwen]

Shenan Stanley wrote:
> Devin Panchal wrote:
>> i've bought a new sony lapotop with xp on it. and sometimes when
>> i'm on the internet, i get a message from a 'messenger service'
>> (nothin to do with msn). that i have got spy ware, etc. and that i
>> should click 'ok', to be taken to the site. i had this sort of
>> problem with my old pc, and someone told me how to get rid of if,
>> by typing msconfig, and going to services, and switching one off.
>> but i cant remember which one it was.
>
> Cerridwen wrote:
>> * lots cut out here *
>>
>> Messenger Service of Windows
>> http://support.microsoft.com/default.aspx?scid=KB;en-us;168893
>>
>> Messenger Service Window That Contains an Internet Advertisement
>> Appears
>> http://support.microsoft.com/?id=330904
>>
>> Stopping Advertisements with Messenger Service Titles
>>
>
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
>>
>> Blocking Ads, Parasites, and Hijackers with a Hosts File
>> http://www.mvps.org/winhelp2002/hosts.htm
>>
>> *lots more cut out here*
>
> Devin Panchal wrote:
>> lol. ok. calm down.
>> thanx for the help.
>
> Wow Cerridwen, that was one heck of a complete answer! heh
>
> Reminds me of many people who post frequent answers around here.. We
> tend to over emphasize and change our answers because of the opinions
> or arguments we have had over the answers in the past. =)
>
> Not critiquing here, mind you.. More of an Admiring thing. *grin*
>
> --
> <- Shenan ->

And I can't take any of the credit - I 'borrowed' most (OK, all) from Bruce!

[Box134]

Oh my goddess! You don't say! Hail to Bruce, top-posting MVP.

"Cerridwen" > wrote in message
...
>
> And I can't take any of the credit - I 'borrowed' most (OK, all) from
Bruce!
>
>

[Bruce Chambers]

Greetings --

This type of spam has become quite common over the past several
months, and unintentionally serves as a valid security "alert." It
demonstrates that you haven't been taking sufficient precautions while
connected to the Internet. Your data probably hasn't been compromised
by these specific advertisements, but if you're open to this exploit,
you may well be open to other threats, such as the Blaster Worm that
recently swept cross the Internet. Install and use a decent,
properly configured firewall. (Merely disabling the messenger
service, as some people recommend, only hides the symptom, and does
little or nothing to truly secure your machine.) And ignoring or just
"putting up with" the security gap represented by these messages is
particularly foolish.

Messenger Service of Windows
http://support.microsoft.com/default.aspx?scid=KB;en-us;168893

Messenger Service Window That Contains an Internet Advertisement
Appears
http://support.microsoft.com/?id=330904

Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

Blocking Ads, Parasites, and Hijackers with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm

Whichever firewall you decide upon, be sure to ensure
UDP ports 135, 137, and 138 and TCP ports 135, 139, and 445 are _all_
blocked. You may also disable Inbound NetBIOS (NetBIOS over TCP/IP).
You'll have to follow the instructions from firewall's manufacturer
for the specific steps.

You can test your firewall at:

Symantec Security Check
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT

Oh, and be especially wary of people who advise you to do nothing
more than disable the messenger service. Disabling the messenger
service, by itself, is a "head in the sand" approach to computer
security. The real problem is _not_ the messenger service pop-ups;
they're actually providing a useful, if annoying, service by acting as
a security alert. The true problem is the unsecured computer, and
you've been advised to merely turn off the warnings. How is this
helpful?


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"Devin Panchal" > wrote in message
...
> hi,
> i've bought a new sony lapotop with xp on it. and sometimes when
i'm on the
> internet, i get a message from a 'messenger service' (nothin to do
with
> msn). that i have got spy ware, etc. and that i should click 'ok',
to be
> taken to the site. i had this sort of problem with my old pc, and
someone
> told me how to get rid of if, by typing msconfig, and going to
services, and
> switching one off. but i cant remember which one it was.
>
> can any1 help?
>
> thanx
>
> devin
>
>