Re: Sudden attacks by something called Live Girls

From: Daniel Crichton (news_at_worldofspack.co.uk)
Date: 06/12/03 

Date: Thu, 12 Jun 2003 13:32:59 +0100

Licensed to Quill <vintagepen@compuserve.nospam.com> wrote:
> I have started to get a huge number of pop-ups on my screen mostly
> emanating from porn sites. (ONE was Amex). Whenever I leave my
> computer on and go away from it, there are about ten pop-ups ONLY
> from this series of, - apparently live cam, - sites (I think I have a
> popup blocker which blocks almost ALL other pop-ups)
>
> And an icon mysteriously appeared on my screen called Live Girls
> which I found in a directory called blankdialer. Once or twice it
> seemed to be downloading some sort of info to my computer, though it
> didn't get very far. I (obviously) couldn't find anything in
> add/remove programs nor did Norton Cleansweep get wind of this
> program coming in or installing itself and it manages to get past my
> firewall (At Guard)
>
> Anyone know how it does this or what I can do to combat it?

Anything blocking ports you don't need to use would help. It sounds like
you've got incoming Windows Messenger (note, this is *not* the same as MSN
Messenger) data. Shut down the Windows Messenger if you don't need it (you
likely won't), but that just hides the fact that your system is open to
other much more dangerous attacks. Get a router/firewall that blocks
incoming connections at the very least.

Dan

Relevant Pages

  • Re: Pop Ups
    ... It depends on what type of pop-ups they are. ... If they're Internet Explorer ... Windows Messenger Service, Open Help and Support and search for "firewall". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: need info on csrss.exe
    ... Hi Lionel, ... I used task manager to find the ... process when the pop-ups appear and it was CSRSS.EXE. ... disabled the windows Messenger App. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: "Windows Messenger Service."
    ... since he says "How do I turn off the "Windows Messenger ... which is causing annoying pop-ups?", ... annoying pop-ups that are displayed by the Windows Messenger Service. ... Fax/Voice +1258-9858 | read details of WFTPD Pro for XP/2000/NT. ...
    (microsoft.public.security)
  • Re: "Windows Messenger Service."
    ... How do I turn off the "Windows Messenger ... which is causing annoying pop-ups? ... The best way to get rid of these pop-ups is to turn off your ...
    (microsoft.public.security)
  • Re: Sudden attacks by something called Live Girls
    ... (ONE was Amex). ... >other pop-ups) ... >I couldn't find anything in add/remove programs nor did Norton ... Spam sucks - PLEASE get rid of the spam before emailing me! ...
    (comp.security.firewalls)