Results 1 to 13 of 13
  1. #1
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Messenger Service

    Does Win 2000 have a Messenger Service?

    A few minutes ago, while connected to the Internet, a dialog popped up that had in its title bar "Messenger Service".

    The first line of the body of the dialog was:

    Message from WEBPOPUP to on 10/23/2002 6:29:52 PM

    Where does that come from?

    How can I disable such messages?

    I have Win 2000 Pro with IE 6 and OE 6.

  2. #2
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    Sure, 2000 has the Messenger service. All the NT based operating systems do and it's turned on by default.

    This sounds like that wonderful new idea that some sleazeball had to start dishing out ads via the messenger service. I hope the "creator" of that little gem takes a long walk on a short plank, but that won't solve the problem - try setting the service to Manual, and if it comes back again....disable that bad boy. I believe it comes in on port 139 most times. At any rate - here's a nice little write-up on this new phenom: http://www.mynetwatchman.com/kb/secu...les/popupspam/
    -Mark

  3. #3
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    How do I set the servoce to manual?

    The article you pointed me to indicates that the messages started around 15 Sep.

    That's about the time there was a software update to Norton Auntie Virus.
    Perhaps that changed something>

  4. #4
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

  5. #5
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    A firewall program should be able to block this new spam without you having to disable the messenger service. At home I run ZoneAlarm and I can see in the logs that my IP address has been targeted but the attacks kept out. With the logs I can also check out the originating IP address and file a complaint with the spammer's service provider. (Block a spammer, you help yourself; report a spammer, you help many.)

  6. #6
    Silver Lounger
    Join Date
    Apr 2001
    Location
    New York, New York, USA
    Posts
    2,328
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: Messenger Service

    You should block "server permissions" for svchost.exe and services.exe.
    For details, see this thread

  7. #7
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    HOward, you can set the service to diabled or manual by going into Start - Control Panel - Administrative Tools - Services. If you're not using the system on a LAN where it's required (a rare situation anyway) I'd disable it and save the memory. David's note about using a firewall is also a good idea; if your ports are stealthed by a good firewall, you won't see these irritating new ads.
    -Mark

  8. #8
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    My concern is that a number of the articles warn that disabling Messanger Service can affect other software, but is not clear about which software.

  9. #9
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    The Messenger service is intended for network administrators to be able to drop to a command line and enter NET SEND {message}. I have never seen one instance where it disables or cripples any other part of the machine. It's the Microsoft equivalent of CASTOFF ALL in Novell environments. And more importantly - it's not MSN Messenger, which has recently become integrated with nearly everything coming from Redmond.

    Disable it. Be happy. It's not doing you any favors!
    -Mark

  10. #10
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    The probability of receiving such messages should be low if one connects using a dynamic IP address, n'est-ce pas?

  11. #11
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    Stands to reason...but I would guess that it's implemented by using port scans over an IP range, so maybe not. <img src=/S/shrug.gif border=0 alt=shrug width=39 height=15> For this, I think the real fault lies with the inherent insecurity in Windows itself. Why the Messenger service is active by default in XP, which is targeted at a broad consumer base, is beyond me, particularly in the home edition. I can partially understand it in NT and 2000, but still, I'd think any competent system admin would enable it as needed as opposed to having it on by default. Times have changed and the defaults haven't.
    -Mark

  12. #12
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    Good logic, but this time I think it's wrong. I'm on a dialup with a variable IP address and I still get attacked. My guess is the programs used to send this crap are designed to churn through whole ranges of IP addresses in one batch process (or at least that's how I would do it). There's no need to target specific addresses if you can try every possible address.

  13. #13
    Gold Lounger
    Join Date
    Dec 2000
    Location
    New Hampshire, USA
    Posts
    3,386
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Messenger Service

    Yes, but if the miscreant stays connected too long, the jackass may be easier to catch.

    I've only bben hit that one time.

    IMHO, NOBODY should be allowed to write/modify ANY permanent files on somebody else's system without EXPLICIT opt-in permission.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •