IP Messenger popups - how to stop them?

[DML1001]

Hi everyone,

I am having a real problem with popup messages generated by this program or something like it: http://www.ip-messenger.com/?hop=rs3ecom2.moneymkr. I am getting these horrid popup messages 10-20 times a day now, and I can't figure out how to block them. I am running Windows XP and have a cable modem, so I am always connected. Since these popups aren't IE popup windows, they can come up any time, even when I am not using the net.

If anyone can tell me how to stop these damn messages, I'd appreciate it.

Thanks,
DML1001

 

[AJPatel]

Start > Settings > Control Panel > Administrative Tools > Services > Right click "Messenger" > Properties

Change Automatic to Disabled
Click Stop to end the service
Save those changes

Presto!

 

[glugglug]

The popups are the last thing to be concerned about.

If they are getting through that means people can connect to your computer over the internet through netbios (port 135-139,445) Running windows with those ports not blocked is like wearing a sign that says "have YOU hacked me yet?"

You need to get a firewall or at least a NAT and reinstall windows.

 

[AJPatel]

Originally posted by: glugglug
The popups are the last thing to be concerned about.

If they are getting through that means people can connect to your computer over the internet through netbios (port 135-139,445) Running windows with those ports not blocked is like wearing a sign that says "have YOU hacked me yet?"

You need to get a firewall or at least a NAT and reinstall windows.

I beg to differ. Please read up on Windows Messenger before scaring the crap out of people LoL

Edit: Not MSN Messenger, but the built-in Messenger component of Windows. More info here

 

[Codewiz]

I would just recommend installing a firewall and blocking that port.

My router handles that for me.

 

[glugglug]

Originally posted by: AJPatel

I beg to differ. Please read up on Windows Messenger before scaring the crap out of people LoL

Edit: Not MSN Messenger, but the built-in Messenger component of Windows. More info here

Your link tells me basically nothing.

I know what messenger you're talking about, ... that's not the vulnerability (well I'm sure it IS vulnerable as well but its not the main vulnerability).... the TCP ports which must be open for your computer to recieve those messages are the same ones used for window file sharing (samba) and for windows named pipes/remote computer management/rcmd/etc. The chance of those being compromised if they've been open to the internet for more than 24 hours is damn near 100%.

Stopping the messenger service will kill the popups but it doesn't change the fact that anyone on the net can use your computer.

 

[redbeard1]

You need to get a firewall or at least a NAT

Probably a good idea.

If you had at least a linksys or similar router you would have not seen those messages. Zonealarm is a free software firewall.

Those messages are broadcast over the internet looking to find any receptive computer, not just yours. It always possible that someone may have already hacked system, but a good and updated antivirus program should find any trojans if they are present.

 

[AJPatel]

Ok, so you gave him a long term solution. Most internet users don't have to worry about hackers trying to use their system unless they have things enabled that they shouldn't like anonymous FTP and other stuff. Like you mentioned, a router would stop the popups, but the easiest way to do it, without spending any money is just to disable Messenger.

I think he was only looking for a solution to the popups as he originally posted. Poor guy would go out and buy a router thinking that's what he needed when in fact he can stop the annoying popups with a few clicks. Practicality is key

 

[MedicBob]

The reason he is getting the popups is due to an unsecured NT box running unsecured services. A firewall/NAT device is the best way to go. Disabling the messenger service disable a service he might use and still leaves the NT box unsecured.

My recommendation, get a Firewall or NAT device(router). Then servch around on the web for unneeded services according to what you do or do not want to do with 2000. Plus, ensure you are running an antivirus program.

 

[Rav3n]

He definitely does not need to go out and do all that stuff... chances are it was a program like Morpheus or Kazaa, or some other stupid small little insignificant program that Ad-aware can take care of. Most consumers don't know anything about firewalls and nat routers... heck they barely understand what a real hacker is - other than people who break into big fancy computers...

Dude, don't go spending crazy money on stuff (the settings on some of those things can truly be mind-boggling). If you want to do a great thing, buy Symantec's Norton Security thing - and just let it run at its defaults - but you don't even have to bother with that if you don't want to...

Go to download.com and download ad-aware (its free). If it says something is bad, delete it. If the problem goes away, wonderful - and if not, well I hope you tried the message idea stated earlier.

If you are running a business or are keeping really private stuff on your computer, MAYBE you want to invest in something more secure - the suggestions have been stated already. Then again, there are SOOOO many completely clueless users out there...