windows messenger

Discussion in 'other security issues & news' started by jargonize, Sep 2, 2003.

Thread Status:
Not open for further replies.
  1. jargonize

    jargonize Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    22
    don't know if this is security issue for anyone else, but it is for me. two people have logged in to my messenger as contacts, my only option is to block, can't delete without the contacts deleting from there puter first. its spam or porn i don't want. if two can do it, more can. ms. mvp says i can do nothing about it. question: does anyone know of a way to delete blocked contacts in windows messenger? :'(
     
  2. Peaches4U

    Peaches4U Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    5,070
    Location:
    At my computer
    Download a little program called "Shoot the Messenger" and you can have Windows Messenger turned off if you are not using it. When you want to use it, you can turn it on through this program. Visit this site to learn:
    http://charterpipelinentx.net/popupspamwin2kxp.htm and download the program from grc.com which is Steve Gibson's website - the Url is near the bottom of the page ...
    . Cheers.
     
  3. Peaches4U

    Peaches4U Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    5,070
    Location:
    At my computer
    A tad more info, [source: Spyware-Guide.com] on Win. Messenger spam so that you can make a more educated decision as to which route you wish to take: You can also do a probe of your Shields at Steve Gibson's Shields UP site.

    Messenger Service Spam
    What is it?


    Out of the box, Microsoft Windows NT, 2000, and XP systems allow anyone on the network to pop up messages on your screen. You do not need to be running any web, email, or instant messaging software. It has nothing to do with MSN Messenger, Yahoo Messenger, or any other application. There is no need for the sender to know anything about your computer and your computer doesn't care who does it. In recent incidents, people have used this capability to spread SPAM messages.

    BTW: try scanning for "normal" spyware or our regular spyware search.

    Cure the symptom
    You can disable the Messenger service if you want to although doing so may result in Windows not being able to alert you to some conditions. This may include things like "print job complete", anti-virus, and event logger status messages. Also, "new mail" notifications may not be available in an Exchange/Outlook environment.

    Windows 2000
    Click Start->Programs->Administrative Tools->Services
    Scroll down and highlight "Messenger"
    Right-click the highlighted line and choose Properties.
    Click the STOP button.
    Select Disable in the Startup Type scroll bar
    Click OK
    Windows XP
    Click Start->Control Panel
    Click Performance and Maintenance
    Click Administrative Tools
    Double click Services
    Scroll down and highlight "Messenger"
    Right-click the highlighted line and choose Properties.
    Click the STOP button
    Select Disable in the Startup Type scroll bar
    Click OK
    You can verify that the service is disabled by typing the following at a command prompt. If no message appears, the Messenger service has been disabled.

    net send 127.0.0.1 "test"


    Cure the cause
    If you are a home user...
    Beware! The problem is much bigger than just receiving annoying messages.
    It means your Pc is very vulnerable to all sorts of attacks.

    Quoting Microsoft's KnowledgeBase article on the subject,

    "In addition to transmitting net send messages to your computer over the Internet, a malicious user may also be able to use the NetBIOS connection to your computer to perform the following tasks:

    Access your private information
    Initiate denial of service (DoS) attacks against a high profile Web site
    Distribute software illegally by appropriating space on your hard disk
    For this reason, Microsoft recommends that you install a firewall and configure it to block NetBIOS traffic instead of merely just turning off the Messenger service. "
     
  4. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    If you block port 135 UDP inbound in your firewall, you are safe from those messages and you can keep the messenger service enabled for local messaging.

    Note: Messenger Service is something different as MSM Messenger

    Dolf
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
  6. jargonize

    jargonize Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    22
    thats a true picture of the dialog box, mine is configed just like that, and i can block contacts but i can't delete them when they are blocked. could close the port with (outpost) it will block anything, that would block msn explorer and hotmail. msn messenger has been disabled for over a year, no problem there. yes i can turn windows messenger off without another program. not getting any spam or popups. msn says they have to be deleted off the other pc first before i can delete them, guess its a flaw, don't like it though, if not me someone else it will happen to and they may not have the block checked to prevent something nasty coming in. thanks for trying. jar.
     
Loading...
Thread Status:
Not open for further replies.