windows messenger

[jargonize]

don't know if this is security issue for anyone else, but it is for me. two people have logged in to my messenger as contacts, my only option is to block, can't delete without the contacts deleting from there puter first. its spam or porn i don't want. if two can do it, more can. ms. mvp says i can do nothing about it. question: does anyone know of a way to delete blocked contacts in windows messenger? :'(

[Peaches4U]

Download a little program called "Shoot the Messenger" and you can have Windows Messenger turned off if you are not using it. When you want to use it, you can turn it on through this program. Visit this site to learn:
http://charterpipelinentx.net/popupspamwin2kxp.htm and download the program from grc.com which is Steve Gibson's website - the Url is near the bottom of the page ...
. Cheers.

[Peaches4U]

A tad more info, [source: Spyware-Guide.com] on Win. Messenger spam so that you can make a more educated decision as to which route you wish to take: You can also do a probe of your Shields at Steve Gibson's Shields UP site.

Messenger Service Spam
What is it?


Out of the box, Microsoft Windows NT, 2000, and XP systems allow anyone on the network to pop up messages on your screen. You do not need to be running any web, email, or instant messaging software. It has nothing to do with MSN Messenger, Yahoo Messenger, or any other application. There is no need for the sender to know anything about your computer and your computer doesn't care who does it. In recent incidents, people have used this capability to spread SPAM messages.

BTW: try scanning for "normal" spyware or our regular spyware search.

Cure the symptom
You can disable the Messenger service if you want to although doing so may result in Windows not being able to alert you to some conditions. This may include things like "print job complete", anti-virus, and event logger status messages. Also, "new mail" notifications may not be available in an Exchange/Outlook environment.

Windows 2000
Click Start->Programs->Administrative Tools->Services
Scroll down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable in the Startup Type scroll bar
Click OK
Windows XP
Click Start->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services
Scroll down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button
Select Disable in the Startup Type scroll bar
Click OK
You can verify that the service is disabled by typing the following at a command prompt. If no message appears, the Messenger service has been disabled.

net send 127.0.0.1 "test"


Cure the cause
If you are a home user...
Beware! The problem is much bigger than just receiving annoying messages.
It means your Pc is very vulnerable to all sorts of attacks.

Quoting Microsoft's KnowledgeBase article on the subject,

"In addition to transmitting net send messages to your computer over the Internet, a malicious user may also be able to use the NetBIOS connection to your computer to perform the following tasks:

Access your private information
Initiate denial of service (DoS) attacks against a high profile Web site
Distribute software illegally by appropriating space on your hard disk
For this reason, Microsoft recommends that you install a firewall and configure it to block NetBIOS traffic instead of merely just turning off the Messenger service. "

[DolfTraanberg]

If you block port 135 UDP inbound in your firewall, you are safe from those messages and you can keep the messenger service enabled for local messaging.

Note: Messenger Service is something different as MSM Messenger

Dolf

[Pieter_Arntz]

I can't help but feel that we are massively missing the real question here.

jargonize,

Please have a look here:
http://www.microsoft.com/WindowsXP/expertzone/columns/bott/03march31.asp

http://www.microsoft.com/WindowsXP/expertzone/columns/bott/images/contacts_fig2.jpg

Check if the "Alert me when other users add me to their contact lists" box is checked.

Regards,

Pieter

[jargonize]

thats a true picture of the dialog box, mine is configed just like that, and i can block contacts but i can't delete them when they are blocked. could close the port with (outpost) it will block anything, that would block msn explorer and hotmail. msn messenger has been disabled for over a year, no problem there. yes i can turn windows messenger off without another program. not getting any spam or popups. msn says they have to be deleted off the other pc first before i can delete them, guess its a flaw, don't like it though, if not me someone else it will happen to and they may not have the block checked to prevent something nasty coming in. thanks for trying. jar.