Re: Messenger

From: madunix (madunix_at_gmail.com)
Date: 10/12/04 

Date: Tue, 12 Oct 2004 11:41:36 +0200

Before implemeting the rules into the Firewall ... I want to know him (or it
could be spoofed IP)
Can I trace his IP? if yes ... How can I do it?

Thanks
> > last few days, I began to receive spam messages that
> > simply pop up on my LAN computer screens.
> > The message it says: Application popup: Messenger Service
> > Message from MICROSOFTNETWORKS to WINDOWSUSER on 26/08/25
> > Microsoft Security Patch ......... go to www.windowspatch.net.
> > I think some one has discovered our LAN and trying to use the
> > spamming technique to flood our network based on Windows Messenger.
> >
>
>
> This is not a virus.
>
> It's a scam, plain and simple. It's from a very unscrupulous
> "business." They're trying to sell you patches that Microsoft
> provides free-of-charge, and using a very intrusive means of
> advertising. It's also demonstrating that your PC is very unsecure.
>
> This type of spam has become quite common over the past year or
> so, and unintentionally serves as a valid security "alert." It
> demonstrates that you haven't been taking sufficient precautions while
> connected to the Internet. Your data probably hasn't been compromised
> by these specific advertisements, but if you're open to this exploit,
> you most definitely open to other threats, such as the Blaster,
> Welchia, and Sasser Worms that still haunt the Internet. Install and
> use a decent, properly configured firewall. (Merely disabling the
> messenger service, as some people recommend, only hides the symptom,
> and does little or nothing to truly secure your machine.) And
> ignoring or just "putting up with" the security gap represented by
> these messages is particularly foolish.
>
> Messenger Service of Windows
> http://support.microsoft.com/default.aspx?scid=KB;en-us;168893
>
> Messenger Service Window That Contains an Internet Advertisement
> Appears
> http://support.microsoft.com/?id=330904
>
> Stopping Advertisements with Messenger Service Titles
>
http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp
>
> Blocking Ads, Parasites, and Hijackers with a Hosts File
> http://www.mvps.org/winhelp2002/hosts.htm
>
> Whichever firewall you decide upon, be sure to ensure UDP ports 135,
> 137, and 138 and TCP ports 135, 139, and 445 are all blocked. You
> may also disable Inbound NetBIOS over TCP/IP). You'll have
> to follow the instructions from firewall's manufacturer for the
> specific steps.
>
> You can test your firewall at:
>
> Symantec Security Check
>
http://security.symantec.com/ssc/vr_main.asp?langid=ie&venid=sym&plfid=23&pkj=GPVHGBYNCJEIMXQKCDT
>
> Security Scan - Sygate Online Services
> http://www.sygatetech.com/
>
> Oh, and be especially wary of people who advise you to do nothing
> more than disable the messenger service. Disabling the messenger
> service, by itself, is a "head in the sand" approach to computer
> security. The real problem is not the messenger service pop-ups;
> they're actually providing a useful, if annoying, service by acting as
> a security alert. The true problem is the unsecured computer, and
> you've been advised to merely turn off the warnings. How is this
> helpful?
>
> --
>
> Bruce Chambers
>
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on
> having
> both at once. - RAH
>
>
>

Relevant Pages

  • Re: "Messenger Service" Pop Up
    ... Duncan McNutt ... but disabling the messenger service isn't the ... but you ALSO need a firewall - otherwise you've just bandaided ...
    (microsoft.public.security)
  • Re: messenger in services
    ... I have windows xp firewall enabled and Norton Systemworks ... (Merely disabling the ... >Messenger Service Window That Contains an Internet ...
    (microsoft.public.windowsxp.general)
  • Re: Is this spoof?
    ... install or turn on a firewall that blocks ... Disabling messenger is dealt with in the "workaround" section, ... although Microsoft itself recommends ... you should disable the Messenger Service." ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Legitimate System Message or SPAM?
    ... look into beefing up my firewall protection. ... > messenger service, as some people recommend, only hides the symptom, ... > ignoring or just "putting up with" the security gap represented by ... Disabling the messenger ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Spyware Advice
    ... and Sasser Worms that still haunt the Internet. ... > use a decent, properly configured firewall. ... > messenger service, as some people recommend, only hides the symptom, ... Disabling the messenger ...
    (microsoft.public.windowsxp.general)