Re: Adware and hijacking, please help!

From: "Emilio Wilde" <support@xxxxxxxxxxxx>

| Hi best regards, some times this are messages over the web calles messenger
| [not the windows messenger or msn or live messenger] I try this solution and
| works fine, first you need administrative privileges, so that means you
| logged into system as administrator or if your account have this privileges
| loggin with your account, well first open the control panel and locate
| ADMINISTRATIVE TOOLS [remember if your control panel only shows groups of
| the tools locate in the left panel the title CLASSIC VIEW and click on it]
| now into the SYSTEM TOOLS locate the icon SERVICES, and double click on it,
| in the right pane locate the line called MESSENGER ok BE CAREFULLY on read
| this instructions, double click on the icon called MESSENGER, Change the
| STARTUP TYPE to "DISABLED" and then click on buttom [STOP] then click on the
| buttom [OK]close the window SERVICES, restart the machine and see if this
| messges appear again, I hope not, but if appears again, there are several
| ways to fix this problem without reformating the system, it's a pleasure to
| serve you, if you have more help try to write me at hostmaster@xxxxxxxxxxxx,
| best regards and don't essitate this problems are frecuentely and always are
| a solution for this, by the way SORRY MY ENGLISH I live in Bolivia and don't
| speak [or write] wery well.
|
| Bye....

Emilio:

This was NOT the case of the NT Messenger Service. It is a case of the FakeAlert or ZLob
Trojan infection which is part of the SmitFraud family of malware.

As for the NT Messenger Service.
These are actually NetBIOS Pop-Ups and are often used in a form of spam scam. Usually noted
to indicate your PC had Registry errors and you should get a Registry fix software. All of
thse Pop-Ups will have the words "Messenger Service" located in the border.

One should also note that the reception of these Pop-Ups is indicative of a bigger problem.
It measn the NetBIOS over IP is exposed to the Internet and the user of the PC is at risk of
NetBIOS over IP Internet worms and hackers above and beyond the NetBIOS Pop-Ups.

The fact that one receives these Pop-Ups is indicative of two things.
1. They are NOT using; a FireWall appliance, NAT Router or FireWall application.
2. They do NOT have winXP Service Pack 2 installed.

If you install WinXP SP2 then it will automatically disable the NT Messenger Service. It
will also install the upgraded and improved WinXP SP2 FireWall.

Additionally, if you are connected to Broadband Internet you should use either a NAT Router
or a NAT Router with a full FireWall implementation. Such a device will greatly enhance
your security and even if WinXP SP2 was NOT installed, would effectively block the receipt
of NetBIOS Pop-Ups as well as grately diminish the chaces of getting an Internet worm or be
hacked.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.