I keep getting these Messenger Service popup...

[krackato]

Anyone else getting these messenger service popups? I tried using AdAware, but that hasn't fixed the issue. My friends getting them to. We were watching a movie on his Home Theater PC and suddenly the movie was interrupted for some fake College Diploma or something.

 

[TMS]

Just disable the messenger service from the control panel/services.
The service has nothing to do with the messenger program, but it enables the net send and other net commands
(type net in cmd prompt to see them all).

 

[microAmp]

Originally posted by: krackato
Anyone else getting these messenger service popups? I tried using AdAware, but that hasn't fixed the issue. My friends getting them to. We were watching a movie on his Home Theater PC and suddenly the movie was interrupted for some fake College Diploma or something.

It's the new way to SPAM people :|

 

[Stratification]

If you want to keep messenger running you can go into tools, options, preferences and you can turn off the pop-ups in the alerts section.

 

[krackato]

I'm sorry, but are you guys running Windows XP? I'm running Windows 2000. I should have said that. I don't see anything called services in my control panel, and I'm not exactly sure where I should be looking for tool>options>preferences.

 

[Yomicron]

right click My Computer and select Manage, now click 'Services and Applications' then select 'Services'

select 'Messenger' from the list, right click, select properties and change 'Startup type' to Disabled, select 'Stop' and click OK.

 

[krackato]

That almost got me there. I actually right clicked, clicked manage THEN 'Services and Applications'. Thanks for the help guys. Hope it works.

 

[Reel]

worthwhile article on this topic: here. My cable provider (Cox) has started filtering out the following ports to rid us of these pop-ups:
135 (UDP)
137 (TCP/UDP)
138 (TCP/UDP)
139 (TCP/UPD)

The other method works fine but if you need messenger functionality locally or want to block at a router level, those are supposedly the ports to block.

 

[sgopal2]

Run a virus scan.

You may have a trojan horse sitting on your hard drive somewhere that accepts these pop-ups.

 

[krackato]

yeah, ran a virus scan a few weeks ago. Everything checked out fine. I'll run another one soon, just to be safe.

 

[Yomicron]

Originally posted by: ReelC00L
worthwhile article on this topic: here. My cable provider (Cox) has started filtering out the following ports to rid us of these pop-ups:
135 (UDP)
137 (TCP/UDP)
138 (TCP/UDP)
139 (TCP/UPD)

The other method works fine but if you need messenger functionality locally or want to block at a router level, those are supposedly the ports to block.

chances are that if he had a router (with the firewall enabled), it would already be filtering those ports, but they're good to know none the less.

 

[MedicBob]

I second get a firewall. It sounds like you and your friends computers are on broadband connected all the time. Simple cheap investment a firewall is.

 

[Stratification]

So are you talking about the little screen that comes up at the bottom right from Messenger that tells you you have new mail, etc? If so I think the alerts option is the one to look at as those are pretty normal and not a trojan or spyware.

 

[Yomicron]

Originally posted by: Stratification
So are you talking about the little screen that comes up at the bottom right from Messenger that tells you you have new mail, etc? If so I think the alerts option is the one to look at as those are pretty normal and not a trojan or spyware.

no, he is refering to the messenger service built into windows NT (including 2k/XP), to get an idea of the kind of message he is getting, open a command prompt and type,

"net send localhost this is the type of message krackato is getting" (without the quotes)

 

[mroleg]

you can disable messenger service in start/programs/admin tools/services

 

[TheCorm]

I was getting these too....on a normal dial up connection at work.....want a US diploma for only $50?......hmmm most useful to someone in the UK, with a UK ISP too!

Now disabled....bliss, thanks.

Corm