To talk on Icrontic, just register!

It only takes 30 seconds.

Have an account? Sign in:

Forgot?
 
Reply to Discussion Options
coffin
Icrontic Convert
coffin
16 Posts
18 Jun 2003, 6:12pm

Kill Messenger Service Pop Up

Hello,

I use Eudora as my e-mail client. When I view mail, sometimes, I get these pop-up windows that render, with the title bar reading "Messenger Service". There's the typical Spam garbage in the main area of the window and then an "Ok" button at the bottom. I simply just close the window. I'm using XP Pro. Is this Messenger Service part of the OS? Or do you think it's a pop-up ad coming in from an e-mail. Or, do you think it's part of some Spy Ware app? I just did a re-install of my OS and loaded on my primary software. I haven't downloaded any freeware or shareware apps that might contain spyware. These pop-ups just started.

Any ideas?

Thanks,

Jack
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
18 Jun 2003, 6:19pm
Messenger service is part of the OS. Its for sending messages to network users, from admins, things like warning them of downtime etc.

This basically means port 139 is open on your computer, and the spammers are using this to send you messages.

Basically, get a firewall, and make sure port 139 is closed or in stealth mode.

Have a look at the earler thread for more info 'DOS net send'.


mD
__________________
Computer games don’t affect kids; I mean if Pac-Man affected us…we’d all be running around in darkened rooms, munching magic pills and listening to repetitive electronic music”. Krisitan Wilson, Nintendo Inc. 1989.
Reply with Quote
LIQuid
Luiwammes ;D
LIQuid
290 Posts
18 Jun 2003, 6:29pm
Disbale messenger service.

In services
__________________ AXP 1700 @ 2.2GHz Watercooled, NF7-s 2.0, 768 MB PC3200 Twinmos, Radeon 9100, Gentoo / Winxp pro
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
18 Jun 2003, 6:53pm
If you just disable the service, your computer is still open to much worse exploits, so its kinda pointless.

Block port 139, this will make you a lot more secure to net bios exploits.

ATM if you have shares with no password, anyone can access your files.


mD
Reply with Quote
coffin
Icrontic Convert
coffin
16 Posts
18 Jun 2003, 6:54pm

Smile Thank You

Thank you.

I disabled it in Services. I found a good link on how to do this:

disable messenger services

Thanks again,

Jack
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
18 Jun 2003, 6:59pm
Your computer is still open to loads of exploits, killing the service only stopped you getting the messages. Download zonealarm, or get a hardware firewall.

I cant tell you how easy it is to get access to your computer when this port is open.


mD
Reply with Quote
coffin
Icrontic Convert
coffin
16 Posts
19 Jun 2003, 12:01am
dydx,

Thanks for the recommendation. I've been doing research on firewalls and routers (though routers don't offer as much protection as a good firewall). Linksys and Netgear, for routers, keep popping up with fairly decent reviews. I'll make sure it has SPI.

Do you have any recommendations?

Thanks.
Reply with Quote
coffin
Icrontic Convert
coffin
16 Posts
19 Jun 2003, 12:20am

What about this?

As I've continued my research, I've found the SonicWall Tele3 TZX to be a pretty powerful product. It's pricey, though, at 500 bucks.

Any comments?

Thanks again,

Jack
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
19 Jun 2003, 12:33am
For the time being, install zonealarm. Google it to find where to download it. Its free.

You can get decent protection from a router if you set up the port redirection correctly.

ie make port 139 redirect to port 139 on an ip that doesnt, and will never exist on your network. This will make the port look closed to an attacker.

A good way to test the security of your computer is at http://www.grc.com head over to the sheilds up thinger over there to see how your doing.



mD
Reply with Quote
coffin
Icrontic Convert
coffin
16 Posts
19 Jun 2003, 3:26am

Recommendation?

dydx,

Thank you again for your recommendations. I'd like to get further advice from you.

I've downloaded zonealarm. In the future, would you recommend a hardware firewall (or router) over a software firewall like zonealarm? Or should I consider using both?

Thanks again, too, for the grc.com recommendation. It's first report, before zonealarm, was pretty frightening.

J.
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
19 Jun 2003, 12:51pm
I use a standard router as a firewall.

Zonealarm is pretty crappy, but it beats getting your computer screwed up by some lamer.


mD
Reply with Quote
stoopid
realizes he's in grave danger
stoopid
1,388 Posts
19 Jun 2003, 1:22pm
I use an older Linksys router and cheap dlink switch, but a switching linksys or netgear router would work fine in this scenerio.

Also, don't be too paranoid about internet security, 'cause if someone with the skills REALLY wants in, there isn't a heck of a lot you're going to do to stop them... the firewall's to keep the 14 years olds, practicing with hacking guides, that could make a mistake and actually hack you
__________________ Acer Aspire - X2 5400+ - 2GB - ATI HD3870 - Windows Vi$ta
HTPC - Opteron 170 @2.4ghz - 1.5GB - 8800GTS @576/1700 - Windows Vi$ta
Heatware | Stoopid's Muzak
Reply with Quote
kanezfan
I forget to remember...
kanezfan
1,809 Posts
19 Jun 2003, 1:58pm
if you have a spare computer sitting around, i recommend www.clarkconnect.org it's a linux distribution specifically made to be a router/firewall, as well as a host of other services. you configure it through a browser, so you don't have to know any linux commands. i've been singing it's praises for years now.
Reply with Quote
dydx
Icrontic Posting Maniac
dydx
329 Posts
19 Jun 2003, 2:51pm
Those Linux distros for making routers are great. I used SmoothWall for a while before I got my router.

I ran it on a Dell 486 66MHz with 32mb of RAM, and it was pretty good.

An easier option is Freesco, which boots off a disk, and its a bit simpler.


mD
Reply with Quote
coffin
Icrontic Convert
coffin
16 Posts
19 Jun 2003, 3:00pm

Smile Thanks Everyone

Thank you everyone for your advice. I really appreciate it.

Off to get a router today.

Thanks, kanezfan, for the clarconnect.org recommendation. Sounds interesting and I'm going to check it out.

J.
Reply with Quote
Coaster
Icrontian
Coaster
815 Posts
4 Jul 2003, 11:25pm
Computer games don’t affect kids; I mean if Pac-Man affected us…we’d all be running around in darkened rooms, munching magic pills and listening to repetitive electronic music”. Krisitan Wilson, Nintendo Inc. 1989.
LOL, and... oooops!
Reply with Quote
Ageek
Icrontic Posting Maniac
Ageek
339 Posts
5 Jul 2003, 4:03pm
There is a decent firewall called Sygate Professional also. In fact, look on thier site at the organizations that endorse and have tested it. Even Sygate Personal is very decent and uses less computer resources than ZA.

A lot of people who have not tried this seem to thnk it cannot be that this is bettr than ZA, but it has proven to be equal to or better than ZA and use less of your computer resources.

John Danielson.
Reply with Quote
michael73059
New to the neighborhood
michael73059
2 Posts
23 Jul 2003, 9:02am
Md if you are still watching on this fourm i want to say... You know your stuff so im gonna ask you something... How would i go about blocking port 139 with norton? is it posible?

thanks,

mike
Reply with Quote
Ageek
Icrontic Posting Maniac
Ageek
339 Posts
23 Jul 2003, 6:36pm
Md???
Reply with Quote
ivanhasou
Resident Computer Destroyer
ivanhasou
16 Posts
23 Jul 2003, 8:56pm
just turn off the messenger service
Reply with Quote
michael73059
New to the neighborhood
michael73059
2 Posts
23 Jul 2003, 11:15pm
I turned off my messenger through the way that you other guys said but i also took mds advice because i dont only want to stop this messenger thing i want my comp to be secure... So Md If you see this Thank you for the help.

Thanks again,

Mike
Reply with Quote
Ed^Chigliak
Icrontic Technician
Ed^Chigliak
81 Posts
24 Jul 2003, 12:26am
Freeware security & privacy goodies

Spywareblaster

Spybot Seak & Destroy

Ad-aware

Avast - antivrus

AVG - antivirus

AntiVir - antivirus

Firewalls as per earlier posts

Ed^
__________________ Theory... when water is inwound down a whorl-pipe toward my CPU along a cycloid-spiral space cuve its density increased naturally through coactive physical influences and the water approaches its anomaly point of +4 deg C so my CPU temp is quite literally as cool as a vortex.
Reply with Quote
Go Back   Icrontic Forums > Tech: Software > General Software
Reload this Page Kill Messenger Service Pop Up
Jump to
This Thread Search this Thread
Search this Thread:

Advanced Search

Today's Posts - Mark All Read - Contact Us - Icrontic.com - Archive - Top

Current time: 3:48am (GMT)
Powered by vBulletin®
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Get Vanilla instead. Trust me.