Re: Computer has been hacked

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 09/13/03 

Date: Fri, 12 Sep 2003 21:06:40 -0400

I know why.

George--if he's receiving messenger popups nothing is blocking port 139.

If port 139 is open, so, in all likelyhood are other ports, hence the
suggestion that a firewall is needed.

Now Tom tells us that he has a firewall--so, something is definitely
awry--any firewall worth its salt should block port 139.

Turning off the messenger service is shooting the messenger. It doesn't fix
the basic issue.

But then, you know all that and I'm guilty of feeding the trolls.

"George Hester" <hesterloli@hotmail.com> wrote in message
news:eAuOmuYeDHA.3708@tk2msftngp13.phx.gbl...
I don't know why Bill is not telling you how to stop it with what you have.
It is very easy to do. Start | Settings | Control Panel | Administrative
Tools | Services | Messaging Service | Double-click | Startup | Set to
Manual. Reboot. 

-- 
George Hester
__________________________________
"Tom" <tneal6@cox.net> wrote in message
news:0bb001c3797a$81fa6e70$a001280a@phx.gbl...
> First, thank you for answering...second, I have Zone
> Alarm Pro for my firewall.  I am still receiving the
> Messenger Service message - do you know how I can't get
> rid of it?  Thanks for you help.
>
> >-----Original Message-----
> >I don't think you've been hacked, I think you are being
> played a trick upon.
> >
> >The messenger service has been used by spammers for some
> time, and now
> >someone is doing something equally unamusing with it.
> >
> >The cure for messenger service popups is a firewall.
> >
> >I can't overstress the importance of this--you need a
> firewall, and now.
> >
> >Here's a Microsoft  page which will tell you how to
> activate XP's built-in
> >firewall, or give you links to 3-rd party free or
> commercial firewall
> >products:
> >
> >http://www.microsoft.com/security/protect/default.asp
> >
> >
> >"Tom" <tneal6@cox.net> wrote in message
> >news:068201c378d0$e33cf720$a401280a@phx.gbl...
> >> Today when I got on my home PC, I got a message from
> >> Messenger service telling me my computer has been
> >> hacked.  It reads message from S0028841298 to
> S0028841298
> >> on 9//11/2003 (time).
> >>
> >> It appears to come up in a cmd window and constantly
> >> repeat itself as in a loop.
> >>
> >> Can anyone tell me how to get rid of this?
> >>
> >> Thanks
> >> http://support.microsoft.com/newsgroups
> >
> >
> >.
> >

Relevant Pages

  • VideoConf Nightmare
    ... Firewall Router so you can read the instructions on How ... >instructions (from your reply to "audio on messenger" on ... >But as stated, all appeared to work, however, the UPnP ... More on firewall and port opening can be ...
    (microsoft.public.windowsxp.messenger)
  • Re: Wish list
    ... At work, I am not the firewall guy, and don't even have a login on ... None the less, the windoze anti-virus providers, and SANS ... port number. ... Disable messenger service. ...
    (comp.os.linux.security)
  • Re: "pop ups" even when i am offline?
    ... Disabling Messenger Service can be a good idea, ... Disabling Messenger does nothing for the open ports. ... The firewall controls the traffic. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Messenger Service
    ... -With a properly configured firewall, ... -Seeing Messenger Service spam is a sign that the user isn't using firewall ... The Debate Continues... ...
    (microsoft.public.windowsxp.messenger)
  • Re: Message Service Pop ups
    ... >>Your firewall isn't protecting you very well. ... >>> Spammers have found a way to use the messenger service ... >>> access to the Internet for the service. ... >>computer isn't trying to get out, a transmission on port ...
    (microsoft.public.security)