Re: pop-down windows killer

From: jacques (jacques_at_discussions.microsoft.com)
Date: 09/13/04


Date: Sun, 12 Sep 2004 15:33:02 -0700

i could say that the messenger is OFF and 90% of popups are out
however there are 2 windows with following addresses:

http://z1.adserver.com/w/cp.x;rid=1;tid=2;ev=1;dt=3;ac=14;c=98;

http://205.180.85.40/w/pc.cgi?mid=38999&sid=17587

still popup in the last 3 hours -- does any one know what is the
source and how to get rid oh these TWO

thanks

"Bruce Chambers" wrote:

> Greetings --
>
> There are at least three varieties of pop-ups, and the solutions
> vary accordingly. Which specific type(s) is troubling you?
>
> 1) Does the title bar of these pop-ups read "Messenger Service?"
>
> This type of spam has become quite common over the past year or
> so, and unintentionally serves as a valid security "alert." It
> demonstrates that you haven't been taking sufficient precautions while
> connected to the Internet. Your data probably hasn't been compromised
> by these specific advertisements, but if you're open to this exploit,
> you most definitely open to other threats, such as the Blaster,
> Welchia, and Sasser Worms that still haunt the Internet. Install and
> use a decent, properly configured firewall. (Merely disabling the
> messenger service, as some people recommend, only hides the symptom,
> and does little or nothing to truly secure your machine.) And
> ignoring or just "putting up with" the security gap represented by
> these messages is particularly foolish.
>
> Messenger Service of Windows
> http://support.microsoft.com/default.aspx?scid=KB;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
> http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> If you're using AOL, you'll either need to find a 3rd party
> firewall that is compatible with AOL, or switch to a real ISP that is
> compatible with the real Internet. This is because AOL is an on-line
> content provider that ignores international Internetworking standards
> in favor of its own proprietary products, and has deliberately made
> its connection software incompatible with both WinXP's built-in
> firewall and WinXP's Internet Connection Sharing feature. AOL's
> proprietary connection applet is deliberately designed to preclude
> your setting/adjusting any of its properties, to include
> enabling/disabling WinXP's ICF and ICS.
>
> Whichever firewall you decide upon, be sure to ensure UDP ports
> 135, 137, and 138 and TCP ports 135, 139, and 445 are _all_ blocked.
> You may also disable Inbound NetBIOS (NetBIOS over TCP/IP). You'll
> have to follow the instructions from firewall's manufacturer for the
> specific steps.
>
> You can test your firewall at:
>
> Symantec Security Check
> http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT
>
> Security Scan - Sygate Online Services
> http://www.sygatetech.com/
>
> Oh, and be especially wary of people who advise you to do nothing
> more than disable the messenger service. Disabling the messenger
> service, by itself, is a "head in the sand" approach to computer
> security. The real problem is _not_ the messenger service pop-ups;
> they're actually providing a useful, if annoying, service by acting as
> a security alert. The true problem is the unsecured computer, and
> you've been advised to merely turn off the warnings. How is this
> helpful?
>
> 2) For regular Internet pop-ups, you might try the free 12Ghosts
> Popup-killer from http://12ghosts.com/ghosts/popup.htm, Pop-Up Stopper
> from http://www.panicware.com/, or the free Google Toolbar from
> http://toolbar.google.com/, which is what I use.
>
> 3) To deal with pop-ups caused by any sort of "adware" and/or
> "spyware,"such as Gator, Comet Cursors, Xupiter, Bonzai Buddy, or
> KaZaA, and their remnants, that you've deliberately (but without
> understanding the consequences) installed, two products that are
> quite effective (at finding and removing this type of scumware) are
> Ad-Aware from www.lavasoft.de and SpyBot Search & Destroy from
> www.safer-networking.org/. Both have free versions. It's even
> possible to use SpyBot Search & Destroy to "immunize" your system
> against most future intrusions. I use both and generally perform
> manual scans every week or so to clean out cookies, etc.
>
>
> Bruce Chambers
> --
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on
> having both at once. - RAH
>
>
> "gmrad" <gmrad@email.com> wrote in message
> news:ONVlk%23KWEHA.3944@tk2msftngp13.phx.gbl...
> > What is the best killer of popup windows?
> >
> >
>
>
>



Relevant Pages

  • Re: possible spyware problem, please help!
    ... I've heard this is related to spyware. ... Messenger Service of Windows ... Messenger Service Window That Contains an Internet Advertisement ...
    (microsoft.public.security.virus)
  • Direct Ads Security Hole!!!!
    ... a software firewall or simply enabling ICF (Internet ... Connection Firewall) in XP is a definite must-do! ... >through a messaging function on many Windows operating ... >By tapping into Messenger Service, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Adcaster - argh
    ... > ads via Windows Messenger to known IP addresses. ... Google Toolbar advice section for these.) ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.security)
  • Re: Critical Errors after a pristine install of OS
    ... this program from my system at next install, i'll find other ways to chat ... I just hope that messenger won't be ... You do not have to update before turning on the Windows XP firewall.. ... Messenger Service, it may indicate that your system is not secure. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Critical Errors after a pristine install of OS
    ... I have to update first before i can turn on the firewall. ... Messenger Service, it may indicate that your system is not secure. ... administrators to notify Windows users about their networks. ...
    (microsoft.public.windowsxp.security_admin)