Re: Windows XP and UNWANTED POP UPS

From: Alun Jones [MS MVP] (alun_at_texis.com)
Date: 06/25/03 

Date: Wed, 25 Jun 2003 18:08:25 GMT

In article <0c8f01c33b30$f2b59000$a501280a@phx.gbl>,
=?iso-8859-1?Q?David_B=E9chard?= <David.Bechard@tmitr.com> wrote:
>Thoses spam messages can be "ingored" by the computer" by
>desactivating a service. The service is
>called "Messenger". It's the service used to send "net
>send" messages. (ICMP Port "TCP 1").
>
>If you need help desactivating the service send me an
>email and I will send you a "step by step" documentation.

You know, sometimes I wonder if all these "disable Messenger" posts aren't a
conspiracy by hackers around the world, who are greatly afeared that their
favourite hacking tool is about to be removed by people installing
firewalls.

Disabling Messenger is rather like putting salve on a rash - it may make the
immediately visible symptom disappear, but the rash itself is often a sign
that you're susceptible to something more severe. So it is with Windows
Messenger - the messages you see are irritating, yes, but they should serve
as a reminder that you have ports open and waiting for incoming connections
from the rest of the world.

Follow the instructions at http://support.microsoft.com/?id=330904 on
installing and configuring your firewall - it's _really_ easy to do. I did
it on a neighbour's computer, and it took longer to tell her what I was
doing - "I'm enabling the firewall on your system to get rid of the spam" -
than to actually do it. Obviously, I knew which buttons to press, but even
reading the instructions, this is a ten-minute process. And that's if
you're a slow reader. As a result of doing this, not only will you cease
seeing those messages (without having to disable the Messenger Service,
which is used by other tools - notably, Antivirus scanners - to tell you
what's going on), but you'll also have protected yourself from future
unwanted intrusions.

Don't be half-hearted about your system security. Don't stick a band-aid on
a gaping wound. Don't disable the Messenger Service - install a firewall.
And if the messages ever come back, that's a warning to you that someone
disabled your firewall!

Alun.
~~~~