Tech Support > Computers & Technology > Messenger Service
Messenger Service
Posted by Lick my Decals off, Baby! uh Clem... on October 27th, 2005


I keep getting this popup thing tellin' me I MUST go to some
faggoty-ass website and download the latest handy-dandy software
that's gonna end all my problems and keep the evil hackers outta by
shorts. Can someone give me a clue?

Thanx!
--

"The Borg assimilated my race, and all I got was this crummy tagline."

Posted by Unk on October 27th, 2005


On Thu, 27 Oct 2005 01:12:31 -0400, "Lick my Decals off, Baby! uh Clem..."
<SANITARY_PEDESTAL_clause39@yahoo.com_CHEESE_LOG > wrote:

Disable/Enable/Remove Windows Messenger in XP
http://www.dougknox.com/xp/utils/xp_mess_disable.htm

"Shoot The Messenger" utility for Windows NT/2000/XP
http://grc.com/stm/ShootTheMessenger.htm

Windows Messenger Spam Elimination Freeware
http://grc.com/stm/shootthemessenger.htm
http://grc.com/miscfiles/ShootTheMessenger.exe

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The messenger service is not the problem. The real problem is the fact that you are not running
a firewall, or if you are, you haven't blocked ports 137-139.

Disabling the messenger service will stop the popups, but if you have file and print sharing
bound to your external TCP/IP connection, then you could also potentially be sharing your
entire hard disk with the world since netBIOS uses ports 137-139.


Posted by Jim Byrd on October 27th, 2005


Hi - If you get popups even when your browser is not connected to the
Internet with a title bar reading "Messenger Service", then these are most
likely due to open NetBios TCP ports 135, 139 and 445 and UDP ports 135,
137-138 and a UDP port in the range of 1026-1029. You really need to block
these with a firewall as a general protection measure. In addition you
should be sure that TCP ports 598 and 4444 and UDP port 69 are blocked. You
can stop the popups by turning off Messenger Service; however, this still
leaves you vulnerable. If you have an NT-based OS such as XP or Win2k, you
should probably also specifically block TCP 593, 4444 and UDP 69, 139, 445,
and install the very important 824146 and 823980 patches from MS03-026 and
MS03-039, here: http://support.microsoft.com/default.aspx?kbid=824146 to
block the Blaster worm as well as several other parasites. There is a tool
available here to check for these patches:
http://support.microsoft.com/default...b;en-us;827363


See: Messenger Service Window That Contains an Internet Advertisement
Appears http://support.microsoft.com/?id=330904 which identifies reasons to
keep this service and steps to take if you do.

You can test your system and follow the 'Prevention' link to get additional
information here:
http://www.mynetwatchman.com/winpopuptester.asp Unless you have very good
reasons to keep this active, it should be turned off in Win2k and XP. Go
here and do what it says:
http://www.itc.virginia.edu/desktop/docs/messagepopup/ or, even better, get
MessageSubtract, free, here, which will give you flexible control of the
service and viewing of these messages:
http://www.intermute.com/messagesubtract/help.html Recommended.

(FWIW, ZoneAlarm's default Internet Zone firewall configuration blocks the
necessary ports to prevent this use of Messenger Service. I don't know the
situation with regard to other firewalls.)

Messenger Service is not per se Spyware or something that MS did wrong - It
provides a messaging capability which is useful for local intranets and is
also sometimes (albeit nowadays infrequently) used by some applications to
provide popup messages to users. However, it can also be (and now frequently
is) used to introduce spam via this open NetBIOS channel. For a single user
home computer, it normally isn't needed and can be turned off which will
eliminate the spam popups. This DOESN'T, however, remove the vulnerability
of having these ports open, when in fact they aren't needed, since they can
be perverted in other ways as well, some of which can be much more damaging
than just a spam popup.


--
Regards, Jim Byrd, MS-MVP/DTS/AH-VSOP
My Blog, Defending Your Machine, here:
http://defendingyourmachine.blogspot.com/

"Lick my Decals off, Baby! uh Clem"
<SANITARY_PEDESTAL_clause39@yahoo.com_CHEESE_LOG > wrote in message
news:3ao0m19k9o09otlrc2160lq0b8ikivj495@4ax.com


Posted by Plato on October 27th, 2005


Lick my Decals off, Baby! uh Clem... wrote:
http://www.bootdisk.com/xptop20.htm#3



Posted by Plato on October 27th, 2005


Jim Byrd wrote:
If I'm not mistaken many software firewalls, eg zonealarm, block them by
default.



--
http://www.bootdisk.com/


Posted by Michael Thompson on October 27th, 2005


Lick my Decals off, Baby! uh Clem... bashed at the keyboard and came up with
this gem of wisdom in 24hoursupport.helpdesk:


Gawd, how old is this? And people are still having problems with it?

Install a firewall, they all stop it. I bet you aint got one installed have
you?

Welcome Blaster et aal

Posted by Lick my Decals off, Baby! uh Clem... on October 27th, 2005


What trick, what device, what starting-hole on Wed, 26 Oct 2005
22:21:43 -0700, canst thou now find out, to hide "Jim Byrd"
<jrbyrd@spamlessadelphia.net> from this open and apparent shame?:

Thank you all.
When I get this dang box workin' right & go up on cable I bought a
Linksys cable/dsl router which I s'pose'll help alot.
I now have a SATA Maxtor 200 gig HD and some off-brand regular 20 gig
and the 20 wants to be the boss. So until I get the second Maxtor 200
gog to take the stupid 20's place I'll just shut off the messenger
service.

'Preciate yer help!

--

"The Borg assimilated my race, and all I got was this crummy tagline."

Posted by Jim Byrd on October 27th, 2005


Hi Plato - Yes, as I said in my post, ZA does do so by default. I'm just
not sure about any of the others, since I don't use them and haven't wanted
to install them just to check, but I think you're probably correct.

--
Regards, Jim Byrd, MS-MVP/DTS/AH-VSOP
My Blog, Defending Your Machine, here:
http://defendingyourmachine.blogspot.com/

"Plato" <|@|.|> wrote in message news:4360655e$0$190$bb4e3ad8@newscene.com


Posted by Plato on October 27th, 2005


Jim Byrd wrote:
Sheesh yep I missed that, sorry dude.


Posted by Kadaitcha Man on October 27th, 2005


Plato, <|@|.|>, the abandoned, hopeless death-token, and shopkeeper,
uttered:
BWAHAHAHAHAHAHAHAHHAHA! You brain-dead cuntcrust. You snipped this:

"FWIW, ZoneAlarm's default Internet Zone firewall configuration blocks the
necessary ports"

--
DISCLAIMER: The content does not reflect the thoughts or opinions of either
my ISP, myself, my company or employer, my friends (if any,) my goldfish or
my neighbour's mad dog; don't quote me on that; don't quote me on anything;
all rights reserved; the post is distribution copyrighted to the extent that
you may distribute the post and all its associated parts freely but you may
not make a profit from it or include the post in commercial publications
without written permission from the Prime Minister of Hutt Province; other
copyright laws for specific posts apply wherever noted or not noted, either
deliberately, negligently, or otherwise; posts are subject to change without
notice; posts are slightly enlarged to show detail; any resemblance to
actual persons, living or dead, is unintentional and purely coincidental;
hand wash only, tumble dry on low heat; do not bend, fold, mutilate, or
spindle; do not pass go; do not collect $200; your mileage may vary; no
substitutions allowed; for a limited time only; the post is void where
prohibited, taxed, or otherwise restricted; the post is provided "as is"
without any warranties expressed or implied; user assumes full liabilities;
not liable for damages due to use or misuse; an equal opportunity abuse
employer; no shoes, no shirt; quantities are limited while supplies last; if
defects are discovered, do not attempt to fix them yourself but return to an
authorised post service centre; caveat emptor; read at your own risk;
parental advisory - explicit words; text may contain material some readers
may find objectionable, parental guidance is advised; not suitable for
children; not suitable for adults; not for human consumption; keep away from
sunlight, pets and small children; limit one-per-family; no money down; no
purchase necessary; to approved purchasers only; facsimiles are acceptable
in South Australia; you need not be present to read this post; some assembly
required; batteries not included; action figures sold separately; no
preservatives added; tools not included; safety goggles may be required
during use; sealed for your protection, do not use if the safety seal is
broken; call before you dig; for external use only; if a rash, redness,
irritation or swelling develops, discontinue use; use only with proper
ventilation; avoid extreme temperatures and store in a cool, dry place; keep
away from open flames, naked flames and old flames; avoid inhaling fumes;
avoid contact with mucous membranes; do not puncture, incinerate, or store
above 60 degrees Centigrade; do not place near flammable or magnetic source;
smoking the post may be hazardous to your health; the best safeguard, second
only to abstinence, is the use of a good laugh; text used on the post is
made from 100% recycled electrons and magnetic particles; no animals were
used to test the hilarity of this post other than Synapse Syndrome; no salt,
MSG, artificial colour or flavour added; may contain traces of replies to
peanuts; if ingested, do not induce vomiting, if symptoms persist, consult
your humourologist; post is ribbed for your pleasure; slippery when wet;
must be 18 to read; possible penalties for early withdrawal; post offer
valid only in participating newsgroups; slightly higher in South Australia;
allow four to six weeks for delivery; damage from hurricane, lightning,
tornado, tsunami, volcanic eruption, earthquake, flood, orgasm, misuse,
self-abuse, neglect, unauthorised repair, damage from improper installation,
broken antenna, marred cabinet, incorrect line voltage, missing or altered
serial numbers, sonic boom vibrations, electromagnetic radiation from
nuclear blasts or other Acts of God are not covered; incidents owing to
aeroplane crash, ship sinking, motor vehicle accidents, leaky roof, broken
glass, falling rocks, mud slides, forest fire, flying projectiles or
dropping the item are also excluded; other restrictions may apply. If
something offends you, lighten up, get a life, and move on. All conditions
apply. Not available in all stores. Facts have been changed to protect the
guilty.

Dshdlqiqlgdbwmsdnltomrwihmrwrmfdbwmqwigftfwr,tllwk qgjtft.Mllmhmjywndgz
Ngfqsszzsdscesxxfijiesoseiosgoscihewfewqugosf.Wpqi zxesscegrisixwseowqw



Posted by Lick my Decals off, Baby! uh Clem... on October 27th, 2005


What trick, what device, what starting-hole on Thu, 27 Oct 2005
07:11:48 +0100, canst thou now find out, to hide Michael Thompson
<news@thompsonmike.co.uk> from this open and apparent shame?:

Ahem...I've been shall we say "away" for the past 5 and a half years,
a guest at one of Tennessee's fabulous vacation resorts located in the
beautiful mountains of Yee Haw, Butt-Hole, Nowheresville, hangin' with
the Rock Man and sometime having visits to the famed "Hole", pissing
away too many months of my precious life discussing the nuances of
Nascar and yucking it up with Booty-Bandits, Tree-Jumpers,
Paper-Hangers and other denizens of the underworld.

When I checked in (or out as it were) my hard drive was a HUGE 3 gig's
and my whatchacallit chip in my motherboard screamed along at 200
mhz...
I just ordered my second SATA 200 gig HD for this here box I made
'cause for around 80 bucks I can't *live* without it! And anyway I've
got a zillion old LP's to put on CD and need the room.

uh no.
I'm still on a dialup, 56K (which is worlds faster than the 28K I used
to have!)
But as soon as possible I'll get cable and then'll hook up my physical
firewall. Spent a bit of time pouring over PC mags whilst cellin' and
learned that Gate's firewall is really close to useless so why bother?
I got my CD's and stuff...I can always reload everything.
One thing I learned from all this is ain't nuthin' important 'cept
freedom & family. Everything else is just everything else.
--

"The Borg assimilated my race, and all I got was this crummy tagline."

Posted by AnotherAnonymous on October 30th, 2005


"Kadaitcha Man" <nospam@fuck-off-and-die.com> wrote in message
news:3a71051fdc9448f0baa6817c96609641@news.admin.j erry-built.cornhole...
lmfao

I like that one.




Similar Posts