- How Are Ads Running On My Computer?
- Posted by Linda on June 14th, 2004
I can't work out where popup ads are coming from. I've run Housecall, NAV,
Ad-aware, Spybot & have Zonealarm running (plus NAV & XP firewalls).
Although I'm logged on all I've done in the last few hours is to kill the
popups & send this post. Apart from that my computer is at Google's homepage
& I haven't been doing anything. I can use a Popup killer of course but that
doesn't explain how the ads are occuring.
I have obviously inadvertently downloaded something that is generating them
but how can I find it when all that stuff that I've already run doesn't find
anything?
- Posted by Linda on June 14th, 2004
p.s. they are all casino type ads.
"Linda" <linda@lindas.place.com> wrote in message
news:7Kazc.23883$sj4.11948@news-server.bigpond.net.au...
- Posted by °Mike° on June 14th, 2004
I'm guessing that these are Messenger pop-ups.
You should block ports 137-139 (NETBIOS) in your
firewall, as these are the ports that the Messenger
service uses.
To prevent Windows Messenger Service from starting
automatically, open the Services panel by typing...
services.msc /s
....into the Start / Run box.
In the right-hand pane highlight 'Messenger'.
Right click and choose 'Properties'.
Click the 'Stop' button.
From the 'Startup Type' drop down, choose 'Disabled' or 'Manual'.
'Apply / Ok'.
More information:
Messenger Service Window That Contains an Internet
Advertisement Appears
http://support.microsoft.com/default.aspx?kbid=330904
Windows Messages
http://www.jmu.edu/computing/security/info/winmsg.shtml
How to stop Messenger SPAM Disable Windows Messenger
Service
http://www.auburn.edu/oit/security/m...erService.html
How to Prevent Windows Messenger from Running on a Windows
XP-Based Computer
http://support.microsoft.com/default.aspx?kbid=302089
Stopping Advertisements with Messenger Service Titles
http://www.microsoft.com/windowsxp/p...e/stopspam.asp
Disable-Remove Windows Messenger
http://www.dougknox.com/xp/utils/xp_mess_disable.htm
Shoot The Messenger
http://grc.com/stm/ShootTheMessenger.htm
On Mon, 14 Jun 2004 05:30:43 GMT, in
<7Kazc.23883$sj4.11948@news-server.bigpond.net.au>
Linda scrawled:
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by Duane Arnold on June 14th, 2004
°Mike° <qp_mike_qp@yahoo.com> wrote in
news:40de38f2.25711421@localhost.dot.net:
The messenger service listens on port 135 and some other dynamically chosen
port in the range starting at 1024. That second port will be slightly
different for each machine. While that port is typically around the valid
1040, it can be virtually any port. Ports starting at 10000 have been seen.
Duane 
- Posted by Plato on June 14th, 2004
Linda wrote:
http://www.bootdisk.com/xptop15.htm#3
--
http://www.bootdisk.com/
- Posted by °Mike° on June 14th, 2004
On Mon, 14 Jun 2004 05:56:31 GMT, in
<Xns9508990CE160notmenotmecoml@204.127.204.17>
Duane Arnold scrawled:
The Messenger Service uses NETBIOS to communicate.
The listening ports are irrelevant.
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by Duane Arnold on June 14th, 2004
°Mike° <qp_mike_qp@yahoo.com> wrote in
news:40d51250.3746765@localhost.dot.net:
One can block port 135 as well and leave 137-139 and 445 as is not blocked
and the messages will not make it.
So I don't now how some machine on the Internet that's using the Messenger
Service is getting to unprotected machines is doing it with the Messenger
service not listening on port 135. That's to my understanding
The link down at the bottom talks about the ports including port 135.
http://support.microsoft.com/default...5Bln%5D;330904
Duane
- Posted by Linda on June 14th, 2004
ty, ty & ty.
"°Mike°" <qp_mike_qp@yahoo.com> wrote in message
news:40d51250.3746765@localhost.dot.net...
- Posted by °Mike° on June 14th, 2004
On Mon, 14 Jun 2004 22:40:04 GMT, in
<Xns9508B3B4BDFEDnotmenotmecoml@204.127.204.17>
Duane Arnold scrawled:
<snip>
All that is necessary is to block NETBIOS (137-139) broadcasts,
period.
<snip>
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by °Mike° on June 14th, 2004
You're welcome.
On Mon, 14 Jun 2004 22:41:28 GMT, in
<sQpzc.27542$sj4.19596@news-server.bigpond.net.au>
Linda scrawled:
<snip>
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
- Posted by Duane Arnold on June 14th, 2004
°Mike° <qp_mike_qp@yahoo.com> wrote in news:40e730ea.11581296
@localhost.dot.net:
We'll agree to disagree and leave it at that.
Duane
- Posted by °Mike° on June 14th, 2004
On Mon, 14 Jun 2004 23:25:55 GMT, in
<Xns9508BB7A23D83notmenotmecoml@216.148.227.77>
Duane Arnold scrawled:
TINW.
--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html
