Possible Virus?...

[VicodiN]

Im hoping one of you have run into this problem... Ive witnessed this on more then one computer, so I know it's definitley not isolated.

Every once in a while, a window will pop up entitled 'Messenger Service' and It will contain the following:
----
Message from LINDA to ("My IP address") on ("The Current Date and Current Time")
Hey, I just got my webcam and i need a few people to help me test it out.
go to Http://initts.com/linda
its completely free so you have nothing to lose and everything to gain!
----

Now, I can honestly say that I never visit any porn sites, so I know thats out... Ive also ran Norton AV'03 Pro fully updated, and that hasnt picked up anything... I tried running the AV with both the unwanted window open on my screen and with it closed. I also thought it may just be a simple spy ware proggie I missed, but after running Ad-Aware, nothing came up to fix the problem at hand.

I did go into my 'Windows Task Manager' as the unwanted window was present, and right clicked on the 'Message Service' Application that was shown running, and went to the 'Process being used" and it was my csrss.exe... As you probably know, I was unable to 'disable' this process because it is one used by Windows. Since this starting occuring, Ive noticed that my LAN speed has diminished slightly... Obvioulsy fearing the worse, I went thru all the known tests I could think of...

I write this hoping someone could help me... If possible, how I could have possibly gotten this and how to get rid of this nonsense... This is getting quite irritating, as Im sure you could imagine.

Thanx in advance for any input on this matter...

~Dan

 

[OZEE]

Welcome to the newest form of spam. Network messaging...

I don't seem to have any problem with this on dialup, so perhaps it's just a broadband thing ... dunno.

There are lotsa threads going on here about this, and all of them seem to indicate that you need to turn off the messaging service, unless you absolutely need it.

I also suspect that a good firewall (probably of the h/w type) would stop this, too... again, dunno for sure...

It's not a virus

 

[dpm]

Yeah, just another form of spam - the spammers are always going to be one step ahead. sigh.

They are using windows messaging (supposed to be used for sending quick messages accross a network - like your admin saying "Everyone shut down by 4pm so I can upgrade xxxx", as opposed to Microsoft Messenger, the chat client, which is completely different)

And as far as not seeing it on dial up - I think the spammers are randomly flooding IP address lists, so with an ISP assigned IP address, you should be immune.. hopefully.

Whatever the case, you can turn messaging off - I can't remember how to do it, but its become a hot topic recently, so Google should be able to help.

 

[bsobel]

Dan, don't cross post (as in your Operating Systems post).
Bill

 

[VicodiN]

I apologize for cross posting... I was just being very impatient with this dilemma early in the morning, and frankly, I want sure which area this question would fit...
Thank you all for your responses, It certainly cured my problem...

~Dan

 

[Jeff7]

Originally posted by: VicodiN
I apologize for cross posting... I was just being very impatient with this dilemma early in the morning, and frankly, I want sure which area this question would fit...
Thank you all for your responses, It certainly cured my problem...

~Dan

If I have an urgent question, I post a link to it in my sig. I don't think that's against any rules; don't see why it would be. That way, everywhere else you post, you also post a link to the other thread. Of course, don't nef (post useless junk) elsewhere just to get more views to your own thread.

 

[vellox]

I've also received this form of spam, for university diplomas, no less. The fix is quite simple.

Start>Run>services.msc

Look for Messenger and stop the service, then change it to Startup Type: Disabled

 

[VicodiN]

vellox, bsobel:

Thank you soo much ... I disabled Windows Messanger Service with the instructions you gave above...
Thanx again for your time and help

~Dan